Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
File:                     BD1E87C8514998E362292741C70F693178FDD20E.mft (raw, json)
Hash identifier:          oTpnEBrMufZHLBgImtvacPBQ1mNh7OXvOKqAXC5l4Wg=
Subject key identifier:   38:75:28:93:0C:3D:78:B9:86:57:92:6A:AC:35:7F:C3:3A:94:CE:1E
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       6F4489B097CEB14A3D31E77BFC78C3B9A3169CFA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
Manifest number:          02AE
Signing time:             Wed 17 Sep 2025 15:57:31 +0000
Manifest this update:     Wed 17 Sep 2025 15:52:31 +0000
Manifest next update:     Thu 18 Sep 2025 16:51:31 +0000
Files and hashes:         1: 3138392e33382e32332e302f32342d3234203d3e203238353736.roa (hash: iDiBK8NTkbtRL7U/OZtW+8qVOgszskWsluwRUbWnJF4=)
                          2: 3138372e37332e3132382e302f32312d3234203d3e203238353736.roa (hash: HuB09cfszCsfmkCsh3C7BCcNRk+N9m1fpgjiDsgZbJM=)
                          3: 3230302e3232302e3134382e302f32332d3234203d3e203238353736.roa (hash: 8xz0wUV96UX241nbfOSxSTuVkOxDRhfVaaIHtY1FXMc=)
                          4: 323830343a33633a3a2f33322d3438203d3e203238353736.roa (hash: Ek8RXQJbKxROtKs+a8Thh/QEC8HAKuAWj17RCr4ZA68=)
                          5: 3138392e33382e32302e302f32332d3234203d3e203238353736.roa (hash: kt+UKqaPU6+Zq6BX5nMmq4dibFG1yjQgDqqYyBEN/S4=)
                          6: 3230302e3232302e3135362e302f32342d3234203d3e203238353736.roa (hash: acD1pCz4UQgoqcBng67U1yyBEm+Wp93gwu1F33wDA5g=)
                          7: 3230302e3232302e3135322e302f32312d3234203d3e203238353736.roa (hash: PZqck0FmSPeeei58AgyPvBpA4pqGr5DrJNlHOuGlAxU=)
                          8: 3230302e3232302e3134342e302f32302d3234203d3e203238353736.roa (hash: JY5FX1CWciQUTb3/AM3zbDQPzow5bvSE9Aq9CtQje7A=)
                          9: 3230302e3232302e3134362e302f32342d3234203d3e203238353736.roa (hash: cjqsrhOwLKMdPLxcLUvVtBb/Dhspjmo/jIK2TlkeYbU=)
                          10: 3138392e33382e31362e302f32322d3232203d3e203238353736.roa (hash: TSCQiGqQY3zf4kmFXwvxpmNuz5sJuKSpQP3grRPl2VQ=)
                          11: BD1E87C8514998E362292741C70F693178FDD20E.crl (hash: UkWpr586E0BJ1ExECmxo92wM1Krxf/kX2AoGpJx2sDM=)
                          12: 3138392e33382e31362e302f32322d3234203d3e203238353736.roa (hash: dbNCkMmUz+V5xS+dq+WO8J173B1V6mOprMapJNQvIhQ=)
                          13: 3230302e3232302e3134342e302f32322d3234203d3e203238353736.roa (hash: 5jpw84eDZm3ONo+5RkljuVhClFgk9Yd238psfrnZgzc=)
                          14: 3230302e3232302e3135372e302f32342d3234203d3e203238353736.roa (hash: 3mgGxqreyqiNTo2aJj4IPoMojo1f1Ga1WwXbt+YSq88=)
                          15: 3138392e33382e32322e302f32342d3234203d3e20323733343336.roa (hash: kk7Lj9puUiVC7dSSvNsMblY/LQsHNVo0cKyVF6l70JU=)
                          16: 3138372e37332e3133362e302f32312d3234203d3e20323732383531.roa (hash: 9EeOa4ab0NQV0/1tk76tItDNEfe+CvMpiJaZQB+aKhI=)
                          17: 3230302e3232302e3135302e302f32332d3233203d3e203238353736.roa (hash: tLMhZhi9C91L4CZXa3ha84Q4FggjLZSkAxRYe8xMAYs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 16:51:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:44:89:b0:97:ce:b1:4a:3d:31:e7:7b:fc:78:c3:b9:a3:16:9c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: Sep 17 15:52:31 2025 GMT
            Not After : Sep 18 16:51:31 2025 GMT
        Subject: CN=387528930C3D78B98657926AAC357FC33A94CE1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:33:9c:dd:39:b1:ca:70:d3:7d:53:95:e9:
                    80:71:17:5e:30:c6:ac:06:76:91:1f:3d:65:30:4a:
                    18:53:73:1b:98:3c:80:ce:60:9a:42:87:f7:80:d0:
                    65:97:b0:0d:fc:a3:e4:b3:d2:2c:7d:e2:a1:ea:c0:
                    5c:67:65:b4:45:7d:8d:3c:17:63:1a:d0:a8:f6:35:
                    57:10:34:c7:ab:dc:b1:94:fd:c9:1d:86:3c:f0:86:
                    58:2e:98:b1:0b:a3:0a:07:6e:49:e5:d5:9e:3b:a7:
                    c7:dd:8d:59:91:e4:b4:6d:f4:22:49:c8:88:95:d5:
                    83:a2:d9:93:2c:cf:c3:19:20:d4:d9:79:c9:41:0e:
                    e4:87:aa:16:4b:e8:64:8b:8a:6c:f8:f4:64:c1:24:
                    55:af:87:0d:53:73:8e:e1:d0:31:63:65:95:da:e4:
                    24:a1:a3:0f:d4:ef:8f:f4:39:5b:61:fe:cc:56:b1:
                    b7:66:09:92:2a:f0:87:a5:60:b6:10:75:58:3c:7c:
                    c3:30:f5:95:d4:b0:75:c4:be:17:be:b1:0e:a9:ce:
                    5a:60:63:fc:09:1d:7f:ea:88:8f:cb:ca:0b:6c:79:
                    0d:1f:d4:9b:42:e4:8d:a8:4f:87:ef:3f:06:5d:51:
                    15:42:b1:8e:b6:93:27:b3:fc:9f:00:c9:71:ab:a1:
                    4b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:75:28:93:0C:3D:78:B9:86:57:92:6A:AC:35:7F:C3:3A:94:CE:1E
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:2b:7d:3d:ed:6f:f3:3a:81:8a:2c:ea:26:5b:c8:bc:33:4e:
         ce:b2:cc:08:20:eb:43:4b:2b:a0:46:25:9e:83:9e:ad:5e:08:
         dc:a6:ab:0a:9c:c7:25:43:8c:86:e6:ea:62:4b:04:b8:22:a5:
         0a:f7:65:96:23:92:3b:02:40:c0:dd:95:11:44:5a:72:ec:7c:
         30:c9:e5:a7:58:c4:b9:9e:2e:05:5a:e7:b5:da:06:c9:b3:76:
         b7:38:b0:36:8a:26:99:3f:aa:05:df:d5:6f:95:66:a2:9b:bb:
         7f:5a:eb:d6:9b:e3:ad:9b:86:87:cc:a3:4f:2b:cd:f1:20:62:
         80:c3:16:0e:eb:52:97:0c:6a:bc:fa:a4:43:9c:f0:0e:6e:26:
         17:db:32:6c:48:8f:04:4d:0a:a9:82:ac:e5:76:74:4b:60:83:
         ab:3d:b4:9d:d1:33:34:d4:0d:07:94:ac:90:3f:40:30:84:dd:
         80:b7:8e:4a:e7:66:f7:ed:10:46:dc:9d:3b:e3:3c:d5:99:d9:
         c2:21:12:91:aa:8e:7a:22:ae:e9:11:a0:b8:53:4c:68:ea:6f:
         ec:da:9b:bf:87:57:a8:8f:a1:aa:60:ac:08:08:c4:27:86:dc:
         2a:1b:5c:55:eb:3c:7d:9d:26:46:81:02:4e:b6:0a:d0:fd:64:
         c3:31:c3:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUb0SJsJfOsUo9Med7/HjDuaMWnPowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQxRTg3Qzg1MTQ5OThFMzYyMjkyNzQxQzcwRjY5MzE3
OEZERDIwRTAeFw0yNTA5MTcxNTUyMzFaFw0yNTA5MTgxNjUxMzFaMDMxMTAvBgNV
BAMTKDM4NzUyODkzMEMzRDc4Qjk4NjU3OTI2QUFDMzU3RkMzM0E5NENFMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPzTOc3TmxynDTfVOV6YBxF14w
xqwGdpEfPWUwShhTcxuYPIDOYJpCh/eA0GWXsA38o+Sz0ix94qHqwFxnZbRFfY08
F2Ma0Kj2NVcQNMer3LGU/ckdhjzwhlgumLELowoHbknl1Z47p8fdjVmR5LRt9CJJ
yIiV1YOi2ZMsz8MZINTZeclBDuSHqhZL6GSLimz49GTBJFWvhw1Tc47h0DFjZZXa
5CShow/U74/0OVth/sxWsbdmCZIq8IelYLYQdVg8fMMw9ZXUsHXEvhe+sQ6pzlpg
Y/wJHX/qiI/LygtseQ0f1JtC5I2oT4fvPwZdURVCsY62kyez/J8AyXGroUstAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUOHUokww9eLmGV5JqrDV/wzqUzh4wHwYDVR0j
BBgwFoAUvR6HyFFJmONiKSdBxw9pMXj90g4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0NHV0x1YW1XQlJTWnJ6eUFWZzZyd1BhOGQ2NWhvN2FnNEY5Wnl4WkJj
NU4vMC9CRDFFODdDODUxNDk5OEUzNjIyOTI3NDFDNzBGNjkzMTc4RkREMjBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEMUU4N0M4NTE0OTk4RTM2
MjI5Mjc0MUM3MEY2OTMxNzhGREQyMEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N0NHV0x1YW1XQlJTWnJ6eUFWZzZyd1BhOGQ2NWhvN2FnNEY5Wnl4WkJjNU4vMC9C
RDFFODdDODUxNDk5OEUzNjIyOTI3NDFDNzBGNjkzMTc4RkREMjBFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOSt9Pe1v8zqBiizqJlvIvDNOzrLMCCDrQ0sroEYlnoOerV4I3KarCpzHJUOM
hubqYksEuCKlCvdlliOSOwJAwN2VEURacux8MMnlp1jEuZ4uBVrntdoGybN2tziw
NoommT+qBd/Vb5Vmopu7f1rr1pvjrZuGh8yjTyvN8SBigMMWDutSlwxqvPqkQ5zw
Dm4mF9sybEiPBE0KqYKs5XZ0S2CDqz20ndEzNNQNB5SskD9AMITdgLeOSudm9+0Q
RtydO+M81ZnZwiESkaqOeiKu6RGguFNMaOpv7Nqbv4dXqI+hqmCsCAjEJ4bcKhtc
Ves8fZ0mRoECTrYK0P1kwzHDUw==
-----END CERTIFICATE-----
Generated at Thu Sep 18 07:49:48 2025 by rpki-client