Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
File:                     D23AEA3BF9686D794967BECAC226FA9648876870.mft (raw, json)
Hash identifier:          JX/rTauWo4UGstKTttaWRzKG3lX+oB+vM/1wbTzuWQM=
Subject key identifier:   94:D4:A3:56:60:72:D6:A3:B1:21:95:81:D9:3B:0C:69:E6:05:80:BB
Authority key identifier: D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70
Certificate issuer:       /CN=D23AEA3BF9686D794967BECAC226FA9648876870
Certificate serial:       492B52C63862653B238E9385C0AAB3BC2127465B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
Manifest number:          0301
Signing time:             Mon 03 Nov 2025 03:15:04 +0000
Manifest this update:     Mon 03 Nov 2025 03:10:04 +0000
Manifest next update:     Tue 04 Nov 2025 06:05:04 +0000
Files and hashes:         1: 323830343a366266383a3a2f33322d3332203d3e20323730343337.roa (hash: N21bgywY1x4r1vLZaPh96X/eWqYiw39UYsCfaNuehUU=)
                          2: 3230302e31312e3130342e302f32332d3233203d3e20323730343337.roa (hash: qEv9QRFbUud8wjmrI7Mg7gB/+7PH00kn4BfGK/NSz1Y=)
                          3: 323830343a366266383a3a2f33332d3333203d3e20323730343337.roa (hash: kDbGCqNSUdmZakDCg1TiRYt/RRqjxxGDsDnwDF9XOCM=)
                          4: 3230302e31312e3130342e302f32322d3232203d3e20323730343337.roa (hash: mylTXmhuTTm2hr4D6b5vfiKs8MjHwQHS8CbX1aJ8+DQ=)
                          5: D23AEA3BF9686D794967BECAC226FA9648876870.crl (hash: LhHcE1pTNSa3i3P06u/Uvt6aiGrJL/krzBK9zyyOBy0=)
                          6: 323830343a366266383a383030303a3a2f33332d3333203d3e20323730343337.roa (hash: /CBOzGSo3loJCL4J+JUGeubAJr+11A+LVtEkvNlfqGw=)
                          7: 3230302e31312e3130362e302f32332d3233203d3e20323730343337.roa (hash: txjM31afppCmHo0SCDmaG63Ukdjv41N7lGDrF1rfe0Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.crl
                          rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 06:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:2b:52:c6:38:62:65:3b:23:8e:93:85:c0:aa:b3:bc:21:27:46:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D23AEA3BF9686D794967BECAC226FA9648876870
        Validity
            Not Before: Nov  3 03:10:04 2025 GMT
            Not After : Nov  4 06:05:04 2025 GMT
        Subject: CN=94D4A3566072D6A3B1219581D93B0C69E60580BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:30:ef:63:85:26:0b:63:a8:f5:06:67:3f:34:
                    27:37:00:ad:b8:c4:40:c9:6b:07:8e:d3:0d:0f:c7:
                    18:4a:88:95:4b:5d:52:2c:eb:4d:66:33:29:ef:2a:
                    a2:41:42:47:f5:af:f2:fc:af:d8:4a:b3:29:db:ff:
                    24:ed:b2:d7:8f:e3:4e:0b:e2:24:d9:56:65:6e:f4:
                    4c:8f:71:e5:97:24:1a:be:c7:af:23:a7:02:b9:29:
                    58:76:66:46:94:af:46:c6:1f:13:1a:67:21:76:4a:
                    54:25:1d:2f:c0:9d:9b:9b:ba:ac:c1:99:b0:08:ff:
                    68:50:0d:4c:28:b6:71:4f:9b:fe:bf:03:4b:15:fa:
                    7d:8a:8c:bb:71:6a:1f:27:8a:b3:b7:5b:87:45:c3:
                    8b:fd:17:2f:23:ca:e3:b7:18:f2:c5:0e:df:c9:9b:
                    ce:e4:34:10:0f:99:95:1f:8f:11:66:03:02:de:a8:
                    7f:b0:1e:bc:bb:72:ba:69:17:9f:6c:6c:44:d0:8a:
                    da:a7:ec:7b:0e:cf:1b:d2:cf:46:13:7b:93:bd:52:
                    b9:6b:c1:b8:ee:24:f1:f7:ab:dd:a0:bf:29:b8:9d:
                    6f:e5:f3:ac:91:08:35:b7:a9:90:71:9e:74:8f:e4:
                    2b:d7:37:2b:bc:14:bd:14:2d:77:b5:42:e4:58:71:
                    06:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D4:A3:56:60:72:D6:A3:B1:21:95:81:D9:3B:0C:69:E6:05:80:BB
            X509v3 Authority Key Identifier:
                keyid:D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:e0:65:95:da:70:5f:8d:ff:f4:8b:d9:c7:aa:5d:a8:36:56:
         2b:a2:e6:a2:48:b1:f9:b8:e7:16:9c:be:bb:ef:84:bb:8d:25:
         ab:04:42:04:e5:eb:12:00:aa:f2:b4:bd:00:a7:93:4e:43:95:
         dd:0b:9b:71:59:03:de:5a:68:75:86:af:a1:8f:c0:67:49:5e:
         f8:67:27:65:7d:7a:33:33:50:eb:1e:60:60:6f:fe:61:0a:19:
         c9:c7:ca:c4:fe:82:5e:ad:ee:36:df:b2:79:63:ba:dc:da:c2:
         1b:e5:7a:6e:2c:66:32:7d:9c:f4:71:b6:cc:4c:2c:23:99:a3:
         3a:eb:bd:08:43:fa:b3:cc:0f:21:08:26:6e:06:cb:53:15:e8:
         d9:d0:19:7c:27:a9:18:30:30:53:b2:84:2a:e0:6a:b8:c7:09:
         b1:59:5f:99:25:0d:e5:46:9c:8b:c4:02:91:8e:60:bc:e9:8e:
         9b:b9:05:a0:f2:12:4f:f7:f0:bd:80:c9:3a:2e:fc:fd:f2:60:
         3f:9e:d7:0b:06:2e:39:bc:73:0d:1b:44:37:b0:43:ed:99:50:
         b1:e5:dd:10:1f:92:42:2c:e1:54:0a:21:2e:4c:17:45:2f:cb:
         59:10:79:91:16:a1:89:38:1b:01:c9:20:62:dc:95:81:6f:c0:
         da:f3:d5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:35:06 2025 by rpki-client