Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.mft
File:                     443681E3ADAB56666689B0FFC0971A173CEEB409.mft (raw, json)
Hash identifier:          T3Q6CtWFZRg8xjVlaMkKc7dwaQ3vSv5C6DjuQjA+a84=
Subject key identifier:   D6:06:6A:BE:8B:84:0F:84:DB:7A:40:4A:E5:C4:EE:19:7C:89:C0:9A
Authority key identifier: 44:36:81:E3:AD:AB:56:66:66:89:B0:FF:C0:97:1A:17:3C:EE:B4:09
Certificate issuer:       /CN=443681E3ADAB56666689B0FFC0971A173CEEB409
Certificate serial:       364D9C1F22C010131658133282022AD502E16C58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443681E3ADAB56666689B0FFC0971A173CEEB409.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.mft
Manifest number:          B8
Signing time:             Mon 03 Nov 2025 00:29:19 +0000
Manifest this update:     Mon 03 Nov 2025 00:24:19 +0000
Manifest next update:     Tue 04 Nov 2025 02:46:19 +0000
Files and hashes:         1: 323830343a346630633a3a2f33322d3332203d3e20323638333030.roa (hash: EbRGHiIXHLUPcSEdZkQT/86iiMTD+cnlvz/LYKeoPmg=)
                          2: 443681E3ADAB56666689B0FFC0971A173CEEB409.crl (hash: KfJ2jQ7ox4FEDeq0D3LLuQ+R0xOtRCHYWez/6Kb6GpY=)
                          3: 34352e3233372e35362e302f32322d3232203d3e20323638333030.roa (hash: OinFQz5i7bUq78AzmRsKPMudIpZwbmvJKyLlKafvvsw=)
                          4: 34352e3233372e35372e302f32342d3234203d3e20323638333030.roa (hash: 0G6Rc9933/qHstSZKBeJRFPJUt45FqB9MIGYMGctzpo=)
                          5: 34352e3233372e35382e302f32342d3234203d3e20323638333030.roa (hash: NFdrJXfBIAdJQ/CLlhTevouBgAM1BU4guMA3EdM48Bs=)
                          6: 323830343a346630633a666530303a3a2f34302d3430203d3e20323638333030.roa (hash: jUt5QzrAK2ErJdIV3fcOyXqdu1t+hX80/yu/yYbj3Ik=)
                          7: 34352e3233372e35392e302f32342d3234203d3e20323638333030.roa (hash: //K1OM8xv53BQK8huoaT/HPkhNDTtz9aVFeeRQvzUiI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.crl
                          rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443681E3ADAB56666689B0FFC0971A173CEEB409.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 02:46:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:4d:9c:1f:22:c0:10:13:16:58:13:32:82:02:2a:d5:02:e1:6c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443681E3ADAB56666689B0FFC0971A173CEEB409
        Validity
            Not Before: Nov  3 00:24:19 2025 GMT
            Not After : Nov  4 02:46:19 2025 GMT
        Subject: CN=D6066ABE8B840F84DB7A404AE5C4EE197C89C09A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:57:8d:64:e3:9f:fb:27:61:f0:a0:51:cc:
                    ed:66:d9:24:78:b2:6c:61:e6:28:02:50:f8:d6:dd:
                    71:50:05:dd:87:f4:81:c3:2d:1a:02:b2:2a:94:ef:
                    99:97:6e:d5:2a:9f:52:c2:03:db:15:1a:9d:ad:ba:
                    e1:fb:0f:ac:4d:02:3e:86:e5:76:41:4c:36:47:42:
                    cc:81:12:5f:98:5e:e3:0e:48:f5:2f:a1:9e:00:8c:
                    6c:74:46:a6:94:99:23:86:0d:ff:8e:ca:5f:5e:ec:
                    58:91:dc:6a:9f:8f:b3:0e:3c:0c:ea:6c:c3:9d:ee:
                    49:59:14:61:04:48:9d:c8:5c:61:03:e4:5c:72:8e:
                    b1:a1:0c:da:68:15:66:75:45:2d:ce:be:09:23:fa:
                    74:0e:46:45:fb:89:a6:b4:08:54:53:8d:db:b3:13:
                    f8:a7:51:b7:24:7b:c5:47:1b:63:d8:76:4a:3f:23:
                    4e:2d:f7:61:74:8c:2a:8f:e8:58:80:43:02:6e:56:
                    79:a5:d7:e0:9b:8f:7f:bd:d4:3b:d9:64:76:c6:28:
                    67:e5:74:8f:86:99:00:46:be:f3:20:93:cf:83:19:
                    57:92:76:dd:bb:52:90:e4:83:80:18:a6:e7:0d:1f:
                    02:b4:5e:3b:8c:77:b0:6f:af:42:f8:33:c5:5c:fe:
                    50:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:06:6A:BE:8B:84:0F:84:DB:7A:40:4A:E5:C4:EE:19:7C:89:C0:9A
            X509v3 Authority Key Identifier:
                keyid:44:36:81:E3:AD:AB:56:66:66:89:B0:FF:C0:97:1A:17:3C:EE:B4:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443681E3ADAB56666689B0FFC0971A173CEEB409.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:4e:7e:49:ba:4f:9a:5d:71:0f:3f:07:aa:5d:2e:2b:19:cb:
         b2:0a:f7:4f:5a:4f:0c:3c:c5:be:30:ef:3e:12:72:57:51:97:
         ab:c8:ac:10:67:4c:0e:09:49:92:68:89:64:66:f2:e4:db:c9:
         2f:c4:dd:b9:1f:a6:49:da:d6:48:25:66:41:98:88:79:03:47:
         17:1b:e7:6a:c7:8d:66:af:17:06:d9:e3:fb:08:ff:be:6a:83:
         a2:8a:e1:52:7d:9c:41:7f:0e:4f:91:7e:b6:b9:d3:42:a3:8a:
         43:30:93:e0:24:31:38:79:ad:2c:11:0d:ab:50:72:71:f5:82:
         3c:84:bd:20:5a:65:d5:45:6a:e5:3e:8e:a4:0f:c8:a2:f3:bf:
         a5:58:8e:6c:e4:54:74:ad:a1:54:a9:a2:07:94:0f:ea:ac:82:
         f6:c0:0a:8e:96:63:a2:89:b2:5b:c2:e5:1d:56:fa:c0:7b:33:
         73:ea:1d:7e:b0:02:33:84:be:7d:10:c7:3e:ff:b3:cc:d0:d8:
         0b:1d:b9:e9:83:ab:08:eb:32:c4:51:ae:6f:2f:39:b4:b4:52:
         7c:83:08:bd:d2:d7:2c:02:6b:31:05:cd:af:e9:74:24:7e:46:
         96:b6:a4:b1:2a:31:b0:02:d6:de:7f:97:c4:65:4a:7f:10:ba:
         4c:21:d4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:33:58 2025 by rpki-client