Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.mft
File:                     0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.mft (raw, json)
Hash identifier:          oTcL1+VhcgapdV5b8EoMNKGh9IDJUe8n9sjRftKXd04=
Subject key identifier:   AA:B3:EA:E9:57:24:6A:FA:B8:DB:23:3C:9A:58:2E:D7:EF:0C:10:B3
Authority key identifier: 0B:C5:ED:59:B8:AA:DF:14:81:0D:51:CD:1C:2D:6B:AC:0A:8D:AC:A9
Certificate issuer:       /CN=0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9
Certificate serial:       1AD2FA40D046BFCEA8B338F536368A3501DF0324
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.mft
Manifest number:          0309
Signing time:             Mon 03 Nov 2025 00:45:29 +0000
Manifest this update:     Mon 03 Nov 2025 00:40:29 +0000
Manifest next update:     Tue 04 Nov 2025 02:42:29 +0000
Files and hashes:         1: 34352e3233362e35362e302f32322d3332203d3e20323638323332.roa (hash: 83pmP1NiQ9bshT6TraCylQNsbi5J/gTr+jF/B7cK1OI=)
                          2: 0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.crl (hash: rwUuWZEjIvXuRFCpc0cFpSMsScDbD4AzFCoRFxEBBsY=)
                          3: 323830343a346466633a3a2f33322d313238203d3e20323638323332.roa (hash: 2N1c4KvkoXcMDUuYZo3jKapQOqKL02/qVdsDDVwmyzY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.crl
                          rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 02:42:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d2:fa:40:d0:46:bf:ce:a8:b3:38:f5:36:36:8a:35:01:df:03:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9
        Validity
            Not Before: Nov  3 00:40:29 2025 GMT
            Not After : Nov  4 02:42:29 2025 GMT
        Subject: CN=AAB3EAE957246AFAB8DB233C9A582ED7EF0C10B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5f:45:38:b3:20:11:d9:05:97:79:37:bb:2c:
                    68:0b:ca:2a:a5:13:a1:3a:d0:e4:93:e6:5d:f6:93:
                    2a:8f:d6:a2:03:a7:a6:3b:06:64:20:89:10:b6:f1:
                    e8:c0:50:09:0d:92:1c:34:4b:49:f1:a9:ad:fd:19:
                    97:ab:cc:97:dd:28:0c:db:49:1a:68:23:2c:b9:69:
                    bc:ad:2e:78:9d:fa:01:f8:1e:e5:aa:8f:15:6d:58:
                    1a:9d:4e:a9:ec:94:fd:33:2c:db:3e:ff:e8:f6:ba:
                    a2:c3:77:60:54:84:e8:9e:b3:6c:64:23:72:45:b0:
                    84:34:f6:e9:62:ae:77:fe:ee:66:c4:0b:ad:ce:06:
                    b8:ad:c9:ae:c1:f5:62:cf:2f:65:92:3b:55:22:7b:
                    ce:a9:fb:1b:11:b4:c1:88:00:99:1e:06:95:3d:84:
                    9a:6d:73:f9:9b:0b:07:f3:cb:d1:50:ce:9f:20:42:
                    b3:a1:f9:fd:43:f2:c9:03:a6:c5:e6:b0:f5:c4:2a:
                    48:48:14:4a:c3:96:b8:02:92:e1:ab:4c:3d:22:47:
                    6a:1a:36:65:c1:22:fa:86:6c:f8:08:53:c0:d3:b1:
                    38:5a:de:1f:b2:e9:03:8f:55:2a:7f:96:dc:e2:9c:
                    6f:1f:fb:bb:d4:bf:77:4b:8a:54:5d:70:7c:a9:33:
                    9c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B3:EA:E9:57:24:6A:FA:B8:DB:23:3C:9A:58:2E:D7:EF:0C:10:B3
            X509v3 Authority Key Identifier:
                keyid:0B:C5:ED:59:B8:AA:DF:14:81:0D:51:CD:1C:2D:6B:AC:0A:8D:AC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/1/0BC5ED59B8AADF14810D51CD1C2D6BAC0A8DACA9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:57:f4:7f:73:22:3a:c4:10:f6:76:99:7b:04:47:19:a1:4c:
         b5:fc:3d:a1:51:ea:e4:cb:b2:c6:9a:c0:82:23:d6:ba:9c:bc:
         0a:31:55:5c:fe:64:5a:02:fe:5f:7a:c0:e9:c2:56:09:1f:9b:
         39:60:df:e9:9d:54:14:9e:23:0f:8e:19:6d:71:bc:91:5a:8b:
         c6:dd:70:cb:77:19:b8:04:5f:ea:27:65:47:47:61:d3:46:4b:
         5a:fb:26:e0:be:c9:e8:6d:93:bc:61:ec:e5:41:40:18:3e:bf:
         4a:8e:61:1b:76:17:31:2d:b6:57:11:f7:75:92:ad:60:29:4e:
         2f:00:d0:8d:d7:2f:ac:ee:3e:8a:ae:3e:dc:46:aa:96:2b:a2:
         c7:7e:07:ae:e7:bb:d8:77:2e:05:a0:1a:0e:0d:72:b2:a4:db:
         73:71:80:07:3f:3d:03:5e:e2:a9:2a:32:c5:3c:d4:89:1f:08:
         05:f5:85:43:7b:a1:94:53:81:a2:dc:e4:e9:9c:49:18:5d:ac:
         d0:63:f0:5c:2f:e4:3d:ff:21:f8:27:5a:15:9f:05:9f:f6:b2:
         18:c8:0d:ef:a5:82:13:c3:ef:6b:87:df:55:7a:a0:a9:e0:a1:
         8a:35:4b:36:ef:48:25:03:5f:d8:c5:df:c1:b4:d5:f2:aa:78:
         f4:6c:28:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:13:16 2025 by rpki-client