Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
File:                     CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft (raw, json)
Hash identifier:          Pk6mTKukd9mZKy+aVCHIfwHx/9HH8/XZ8/0WrKjrH1s=
Subject key identifier:   ED:B0:B7:6E:FA:07:67:99:28:21:05:83:4B:11:C5:AE:D4:96:54:74
Authority key identifier: CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE
Certificate issuer:       /CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
Certificate serial:       1127AB2136CDBF3F76DF02EB12B589375754F5D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
Manifest number:          D2
Signing time:             Thu 18 Sep 2025 08:12:31 +0000
Manifest this update:     Thu 18 Sep 2025 08:07:31 +0000
Manifest next update:     Fri 19 Sep 2025 12:06:31 +0000
Files and hashes:         1: 3137372e3132342e34382e302f32322d3234203d3e20323632333136.roa (hash: p5diy4Lfpp3uRqBtSPoACOQZG5XP892Xk7GyAi3svuU=)
                          2: CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl (hash: mMUF68/5b5J/VdG1RWJYWt7InQ98munHlSFs2aJ1+WE=)
                          3: 3136372e3235302e3135322e302f32322d3234203d3e20323632333136.roa (hash: sDn+4Uu4m4W5bslIPmCXR04C2X/8MTPWAS8yBpOzj8A=)
                          4: 3133382e3131372e3139322e302f32322d3234203d3e20323632333136.roa (hash: 3lrRZ88ALQ/YEae09+IqsEdagITWdjR3q3G5UsvfNxw=)
                          5: 323830343a3763303a3a2f33322d3438203d3e20323632333136.roa (hash: a6f42d45bxiLHIMWETpqkEcBoAgdph66Eltfz5OsBcc=)
                          6: 3137372e37342e36342e302f32302d3235203d3e20323632333136.roa (hash: jHEp77ey3eYInyX7NnipiftUAAgDp3GkFWmhML9L1Yg=)
                          7: 3133312e3232312e3230302e302f32322d3234203d3e20323632333136.roa (hash: o0sTCMwaYkCxWQEkq5SF4UjWyAqD9Ss8VEnXcbMp2O0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl
                          rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 12:06:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:27:ab:21:36:cd:bf:3f:76:df:02:eb:12:b5:89:37:57:54:f5:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
        Validity
            Not Before: Sep 18 08:07:31 2025 GMT
            Not After : Sep 19 12:06:31 2025 GMT
        Subject: CN=EDB0B76EFA076799282105834B11C5AED4965474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:73:8b:95:0c:2d:b5:6b:1b:3c:72:ae:84:65:
                    c1:d5:8f:76:ac:9a:11:bf:b1:fd:a0:90:45:7f:31:
                    88:84:62:c8:4f:2e:c0:5e:ca:12:38:c1:6d:d2:3a:
                    55:57:95:11:21:e8:47:53:ca:fb:cd:d8:ff:f3:8a:
                    23:ea:62:d3:30:93:9f:a3:9b:47:b6:e9:44:94:fc:
                    af:a7:41:b9:2e:56:2d:d6:e8:6e:d0:9d:8e:5c:b1:
                    e6:23:b8:0c:50:54:5e:7d:5b:b4:8e:2e:64:c9:5b:
                    3f:6e:03:20:3b:7c:36:dd:42:fd:12:1b:eb:d1:66:
                    31:44:a3:c0:3b:79:4f:d4:d8:02:b1:a6:14:c0:ba:
                    52:f5:a8:85:8b:25:0e:aa:13:be:02:b0:8f:d9:dc:
                    70:ad:a4:56:e2:2c:cb:42:e7:38:3f:ed:fe:4a:cd:
                    9e:7a:4d:85:d7:95:bf:c1:5c:77:ff:be:fe:94:84:
                    78:68:1f:dd:53:d4:b7:e2:e9:27:12:dc:44:49:2f:
                    c6:49:3e:39:63:cc:6d:85:f4:8f:04:b5:fa:53:8b:
                    7b:14:05:e5:32:09:07:f4:42:bc:b9:64:00:c8:52:
                    e8:4b:58:78:2e:33:c9:9e:12:3f:14:cb:07:a5:d9:
                    92:ac:1a:8e:4f:13:b8:13:6b:90:29:2c:15:71:31:
                    5b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B0:B7:6E:FA:07:67:99:28:21:05:83:4B:11:C5:AE:D4:96:54:74
            X509v3 Authority Key Identifier:
                keyid:CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e9:81:0d:95:8d:46:cb:aa:58:74:ae:6f:1c:b5:d3:47:78:
         fe:48:12:de:bd:57:16:f0:07:85:5c:95:46:19:23:96:76:03:
         d4:c3:87:a3:39:85:08:b3:d3:fe:cf:2c:20:62:b7:2e:da:f6:
         ad:0f:20:ff:ca:29:02:19:a4:45:58:75:d7:50:b1:65:60:32:
         66:f1:a3:94:44:c0:9d:25:56:87:d9:e7:5d:6f:4f:05:9a:6f:
         6a:ca:15:c0:59:f3:24:fb:41:b9:6d:01:e9:1f:7d:08:7b:7f:
         9b:bc:ab:4b:11:88:c7:98:6c:d1:39:7f:32:91:06:63:c8:52:
         7c:39:4c:27:92:80:1e:53:43:26:1e:10:5a:8b:23:c0:b9:88:
         dd:55:63:15:0b:fc:22:0b:51:fa:e3:fb:3b:05:5c:49:94:f8:
         d4:a9:a2:ff:bd:65:3f:30:93:53:e1:03:e7:38:e1:a3:87:4c:
         97:60:e0:14:6a:28:4e:7f:5c:76:f3:c6:93:ea:b4:7a:10:6f:
         34:45:4e:14:5f:33:f9:e4:a8:be:28:ef:b3:8b:49:6d:09:26:
         88:35:04:01:df:9f:05:50:d6:fc:51:ed:bd:c0:9c:38:9d:62:
         b6:47:90:43:19:ed:9e:b7:ca:df:53:d5:78:fe:a4:62:53:f9:
         0d:ba:56:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUESerITbNvz923wLrErWJN1dU9dIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I5MjYwQzdBQkNEN0M4OTExOUIwRjYxQzYwOUUzMTM4
OURFQjFERTAeFw0yNTA5MTgwODA3MzFaFw0yNTA5MTkxMjA2MzFaMDMxMTAvBgNV
BAMTKEVEQjBCNzZFRkEwNzY3OTkyODIxMDU4MzRCMTFDNUFFRDQ5NjU0NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtc4uVDC21axs8cq6EZcHVj3as
mhG/sf2gkEV/MYiEYshPLsBeyhI4wW3SOlVXlREh6EdTyvvN2P/ziiPqYtMwk5+j
m0e26USU/K+nQbkuVi3W6G7QnY5cseYjuAxQVF59W7SOLmTJWz9uAyA7fDbdQv0S
G+vRZjFEo8A7eU/U2AKxphTAulL1qIWLJQ6qE74CsI/Z3HCtpFbiLMtC5zg/7f5K
zZ56TYXXlb/BXHf/vv6UhHhoH91T1Lfi6ScS3ERJL8ZJPjljzG2F9I8EtfpTi3sU
BeUyCQf0Qry5ZADIUuhLWHguM8meEj8Uywel2ZKsGo5PE7gTa5ApLBVxMVudAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU7bC3bvoHZ5koIQWDSxHFrtSWVHQwHwYDVR0j
BBgwFoAUy5Jgx6vNfIkRmw9hxgnjE4nesd4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODhTcjZrNWc1bnkxdndkaXdoOHlmTURTMkVlclc0NXBaZERob1h1VXQy
S2EvMC9DQjkyNjBDN0FCQ0Q3Qzg5MTE5QjBGNjFDNjA5RTMxMzg5REVCMURFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCOTI2MEM3QUJDRDdDODkx
MTlCMEY2MUM2MDlFMzEzODlERUIxREUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
ODhTcjZrNWc1bnkxdndkaXdoOHlmTURTMkVlclc0NXBaZERob1h1VXQyS2EvMC9D
QjkyNjBDN0FCQ0Q3Qzg5MTE5QjBGNjFDNjA5RTMxMzg5REVCMURFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADOmBDZWNRsuqWHSubxy100d4/kgS3r1XFvAHhVyVRhkjlnYD1MOHozmFCLPT
/s8sIGK3Ltr2rQ8g/8opAhmkRVh111CxZWAyZvGjlETAnSVWh9nnXW9PBZpvasoV
wFnzJPtBuW0B6R99CHt/m7yrSxGIx5hs0Tl/MpEGY8hSfDlMJ5KAHlNDJh4QWosj
wLmI3VVjFQv8IgtR+uP7OwVcSZT41Kmi/71lPzCTU+ED5zjho4dMl2DgFGooTn9c
dvPGk+q0ehBvNEVOFF8z+eSovijvs4tJbQkmiDUEAd+fBVDW/FHtvcCcOJ1itkeQ
QxntnrfK31PVeP6kYlP5DbpWkA==
-----END CERTIFICATE-----
Generated at Thu Sep 18 17:31:46 2025 by rpki-client