Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/DC4760B481E70FA8E13E470458ED532F02330CBE.mft
File:                     DC4760B481E70FA8E13E470458ED532F02330CBE.mft (raw, json)
Hash identifier:          n0MkKLV/qBcXWJYCK0jkETnYl2/5sKku2TB8jUm2j44=
Subject key identifier:   D4:6D:49:37:DD:20:06:6B:A7:E9:DA:9D:5D:98:2F:B9:91:1C:DD:4F
Authority key identifier: DC:47:60:B4:81:E7:0F:A8:E1:3E:47:04:58:ED:53:2F:02:33:0C:BE
Certificate issuer:       /CN=DC4760B481E70FA8E13E470458ED532F02330CBE
Certificate serial:       6B9B9292EB59B4764730358C8B28008B59724CE1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4760B481E70FA8E13E470458ED532F02330CBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/DC4760B481E70FA8E13E470458ED532F02330CBE.mft
Manifest number:          0305
Signing time:             Mon 03 Nov 2025 02:17:27 +0000
Manifest this update:     Mon 03 Nov 2025 02:12:27 +0000
Manifest next update:     Tue 04 Nov 2025 05:00:27 +0000
Files and hashes:         1: 3137372e3135342e3136302e302f32302d3332203d3e20323632323838.roa (hash: I57LsSVEHhI8oBhmawCpgSi2sCz5azj8D3Zl2x77OHk=)
                          2: 3139312e362e33322e302f32302d3332203d3e20323632323838.roa (hash: us9ZguvM4l3pmy1t19x6kKXWcy4dhDEn1zT9piJyy9M=)
                          3: DC4760B481E70FA8E13E470458ED532F02330CBE.crl (hash: pfO8mS0msLq5IfWkGAwhIhOLuJp0Kqlf4R8cxGv45TE=)
                          4: 323830343a313362343a3a2f33322d3438203d3e20323632323838.roa (hash: zz/2G/yuKcEe++uJCtT5VTWBP2pHj58L4N7zbpBijI0=)
                          5: 3137372e3135342e3136302e302f32302d3234203d3e20313938393439.roa (hash: uNAkacRq27OSUXPhP2ETA/7h/ueP/OdqUT4i1VneAUc=)
                          6: 3139312e362e33322e302f32302d3234203d3e20313938393439.roa (hash: +haZXV9gu6P4JwxXrSswv2DXCntNK/lnzVnzViopEGE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/DC4760B481E70FA8E13E470458ED532F02330CBE.crl
                          rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/DC4760B481E70FA8E13E470458ED532F02330CBE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4760B481E70FA8E13E470458ED532F02330CBE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:9b:92:92:eb:59:b4:76:47:30:35:8c:8b:28:00:8b:59:72:4c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC4760B481E70FA8E13E470458ED532F02330CBE
        Validity
            Not Before: Nov  3 02:12:27 2025 GMT
            Not After : Nov  4 05:00:27 2025 GMT
        Subject: CN=D46D4937DD20066BA7E9DA9D5D982FB9911CDD4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:fb:39:c4:07:b9:8a:86:4e:50:bf:30:90:
                    63:8c:d7:db:28:bc:3f:12:90:9d:70:d9:d2:b4:c1:
                    b2:ea:63:3e:60:4b:e4:17:8a:99:2a:bc:b2:dd:40:
                    6a:47:09:5b:6b:2e:8d:cb:da:29:f7:47:3f:bc:6f:
                    b5:b1:eb:45:ac:2b:59:d1:c3:ab:63:40:59:0a:c6:
                    de:1c:46:f5:2b:c7:9f:f8:b9:bf:c4:bc:43:b4:ef:
                    c7:c2:f6:7c:a5:7e:33:fc:a0:0c:12:20:61:99:b3:
                    64:be:98:49:8c:4a:d9:77:57:88:0b:fd:33:f5:56:
                    3d:29:a6:45:7a:f3:5a:cb:46:c1:7b:36:6e:3b:1b:
                    56:4b:e1:d6:ea:a8:f8:7a:ea:f5:c7:25:13:97:31:
                    bd:b3:bb:e0:5c:ac:e5:18:90:39:af:cd:5b:f5:20:
                    92:bd:04:02:83:97:34:8a:1f:ee:64:6d:8f:62:ad:
                    1e:32:12:f3:f4:e6:6a:0a:37:d3:13:a1:08:13:f6:
                    5e:b5:d0:42:92:b8:91:83:ff:d8:1a:df:e3:83:a7:
                    d2:55:a7:6b:f8:54:3e:25:73:2e:84:59:9f:84:bc:
                    fe:e9:c4:e4:36:de:5b:e3:a2:da:92:38:93:cf:06:
                    f8:47:94:05:67:66:38:9f:c8:f7:b8:ac:a2:29:d2:
                    66:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6D:49:37:DD:20:06:6B:A7:E9:DA:9D:5D:98:2F:B9:91:1C:DD:4F
            X509v3 Authority Key Identifier:
                keyid:DC:47:60:B4:81:E7:0F:A8:E1:3E:47:04:58:ED:53:2F:02:33:0C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/DC4760B481E70FA8E13E470458ED532F02330CBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4760B481E70FA8E13E470458ED532F02330CBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/DC4760B481E70FA8E13E470458ED532F02330CBE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:c6:4c:23:4a:fe:7d:62:23:1d:53:af:5c:c0:fa:be:26:20:
         87:6d:26:7b:8b:15:c6:d9:7d:88:8b:a0:b0:c1:b5:67:b2:43:
         f4:4b:7b:72:a8:79:63:33:36:77:67:26:31:48:ea:2c:40:b2:
         fd:43:09:ce:7b:b2:cd:35:60:6f:0d:5d:5e:b0:83:28:f8:aa:
         65:0d:3c:36:31:71:36:33:57:55:25:6e:f6:72:82:05:c7:ea:
         b7:87:65:dc:f5:1c:82:72:48:69:cb:89:34:96:ba:10:c6:74:
         b6:6b:a7:0c:85:4d:37:ea:5c:a5:cd:84:11:6c:2b:9e:3b:2f:
         ff:21:8d:32:cc:56:e8:39:c6:fc:75:2c:ab:ce:86:e9:40:f6:
         be:c7:98:4b:70:f2:9b:27:8d:c1:cb:96:f8:be:3b:62:62:83:
         ba:c1:b4:7a:12:fd:6e:f6:6d:f8:f5:67:1e:ac:8b:ac:f3:2a:
         c6:a5:bd:76:71:72:3c:c1:fb:dc:88:86:32:8c:68:1e:e0:ca:
         dd:1d:d3:f5:9e:e9:bd:3b:86:72:07:93:24:59:46:7a:6c:d1:
         68:0a:1f:1a:b3:51:ec:43:b0:d3:39:6e:b4:78:0e:c1:d9:be:
         9b:24:a2:8f:30:e5:74:dc:cb:27:38:a6:49:12:47:80:9f:c1:
         90:ce:fa:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUa5uSkutZtHZHMDWMiygAi1lyTOEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREM0NzYwQjQ4MUU3MEZBOEUxM0U0NzA0NThFRDUzMkYw
MjMzMENCRTAeFw0yNTExMDMwMjEyMjdaFw0yNTExMDQwNTAwMjdaMDMxMTAvBgNV
BAMTKEQ0NkQ0OTM3REQyMDA2NkJBN0U5REE5RDVEOTgyRkI5OTExQ0RENEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2yPs5xAe5ioZOUL8wkGOM19so
vD8SkJ1w2dK0wbLqYz5gS+QXipkqvLLdQGpHCVtrLo3L2in3Rz+8b7Wx60WsK1nR
w6tjQFkKxt4cRvUrx5/4ub/EvEO078fC9nylfjP8oAwSIGGZs2S+mEmMStl3V4gL
/TP1Vj0ppkV681rLRsF7Nm47G1ZL4dbqqPh66vXHJROXMb2zu+BcrOUYkDmvzVv1
IJK9BAKDlzSKH+5kbY9irR4yEvP05moKN9MToQgT9l610EKSuJGD/9ga3+ODp9JV
p2v4VD4lcy6EWZ+EvP7pxOQ23lvjotqSOJPPBvhHlAVnZjifyPe4rKIp0mbfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1G1JN90gBmun6dqdXZgvuZEc3U8wHwYDVR0j
BBgwFoAU3EdgtIHnD6jhPkcEWO1TLwIzDL4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnM5dEJjOWRaRkFKY3BqSkJCNHpCREFIMXM5ZTZFYjE0TUVDQ1dhRFNk
aVAvMS9EQzQ3NjBCNDgxRTcwRkE4RTEzRTQ3MDQ1OEVENTMyRjAyMzMwQ0JFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDNDc2MEI0ODFFNzBGQThF
MTNFNDcwNDU4RUQ1MzJGMDIzMzBDQkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NnM5dEJjOWRaRkFKY3BqSkJCNHpCREFIMXM5ZTZFYjE0TUVDQ1dhRFNkaVAvMS9E
QzQ3NjBCNDgxRTcwRkE4RTEzRTQ3MDQ1OEVENTMyRjAyMzMwQ0JFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtcZMI0r+fWIjHVOvXMD6viYgh20me4sVxtl9iIugsMG1Z7JD9Et7cqh5YzM2
d2cmMUjqLECy/UMJznuyzTVgbw1dXrCDKPiqZQ08NjFxNjNXVSVu9nKCBcfqt4dl
3PUcgnJIacuJNJa6EMZ0tmunDIVNN+pcpc2EEWwrnjsv/yGNMsxW6DnG/HUsq86G
6UD2vseYS3DymyeNwcuW+L47YmKDusG0ehL9bvZt+PVnHqyLrPMqxqW9dnFyPMH7
3IiGMoxoHuDK3R3T9Z7pvTuGcgeTJFlGemzRaAofGrNR7EOw0zlutHgOwdm+mySi
jzDldNzLJzimSRJHgJ/BkM76Hg==
-----END CERTIFICATE-----
Generated at Mon Nov 3 19:08:55 2025 by rpki-client