Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.mft
File:                     3D580FBC905909266C331DDA6416C18006A24750.mft (raw, json)
Hash identifier:          YA+je0FBLCxi0HIDIuBnamWA/dkle+MXz0jKq0h6NCI=
Subject key identifier:   85:32:74:31:DE:3D:81:69:44:F3:4D:50:4D:41:C1:C2:CF:50:30:79
Authority key identifier: 3D:58:0F:BC:90:59:09:26:6C:33:1D:DA:64:16:C1:80:06:A2:47:50
Certificate issuer:       /CN=3D580FBC905909266C331DDA6416C18006A24750
Certificate serial:       7B92EE7F9EB789487792D0EFB7E0422A0E26FED3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.mft
Manifest number:          71
Signing time:             Mon 03 Nov 2025 23:58:51 +0000
Manifest this update:     Mon 03 Nov 2025 23:53:51 +0000
Manifest next update:     Wed 05 Nov 2025 01:31:51 +0000
Files and hashes:         1: 34352e3138312e36312e302f32342d3234203d3e20323639313730.roa (hash: fF2ZZquNDjz4/ByXZ9+ZXR3mW/lSaKKc5Lqcj3VFpYE=)
                          2: 323830343a363037633a663030303a3a2f33362d3336203d3e20323639313730.roa (hash: xmrE/QmrByeWCyKDJ3nuQH8uo89qoFiJcNF/Gdx2zEo=)
                          3: 3D580FBC905909266C331DDA6416C18006A24750.crl (hash: wpIPu73NzUitJ5wmKpp/quMCX5U6c/mpJmItqSniDXU=)
                          4: 34352e3138312e36332e302f32342d3234203d3e20323639313730.roa (hash: AbId8ST2mc685olQVHsKVLlX+OYE7IVqpF7eDxTXeIY=)
                          5: 323830343a363037633a3a2f33322d3332203d3e20323639313730.roa (hash: bDMA0Rwtq0RjW/5LOo5tEukpRf+he8sVB8/de82kmvA=)
                          6: 34352e3138312e36302e302f32342d3234203d3e20323639313730.roa (hash: yysmFhfl6dWPBbezymnVgq+//1DbGUKn/Y2TVFwYDeg=)
                          7: 323830343a363037633a3130303a3a2f34302d3430203d3e20323639313730.roa (hash: 7aDVf8UKCkQ0go05Bbg1Mgd3eZLU+uMqGEfEXkmvvmQ=)
                          8: 34352e3138312e36322e302f32342d3234203d3e20323639313730.roa (hash: IonYoiapNcoWkoV7loCpJnBAQfRj9zi7/2jHi+OiHh8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.crl
                          rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 01:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:92:ee:7f:9e:b7:89:48:77:92:d0:ef:b7:e0:42:2a:0e:26:fe:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D580FBC905909266C331DDA6416C18006A24750
        Validity
            Not Before: Nov  3 23:53:51 2025 GMT
            Not After : Nov  5 01:31:51 2025 GMT
        Subject: CN=85327431DE3D816944F34D504D41C1C2CF503079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b9:40:55:9b:b7:f9:bd:49:55:fb:cc:4c:1f:
                    70:d2:4e:4f:c7:de:05:ab:13:1c:de:25:56:17:a1:
                    87:e7:a7:a3:99:87:6f:45:ba:de:ae:b1:9b:47:64:
                    cc:2b:bb:d4:23:b4:26:e5:a9:a2:8a:95:b0:49:e3:
                    62:0b:9a:f7:84:30:7c:e4:1f:ac:fb:bc:96:a7:75:
                    0b:8d:97:31:a7:0e:da:35:66:81:3e:af:1a:39:50:
                    fa:21:4e:f0:2c:21:45:80:c6:65:17:ae:23:7f:e8:
                    1f:be:f9:ec:94:59:bd:62:73:1d:37:99:a8:ae:2f:
                    07:72:99:92:a8:f1:a6:12:45:d3:bb:8d:1f:04:94:
                    2a:ad:0c:7b:71:0a:a6:f8:88:16:59:d0:9a:96:3f:
                    a1:cd:28:71:e2:13:78:1a:4f:2a:0a:73:04:29:1e:
                    58:5b:b8:3a:30:ed:66:fd:cf:0e:8a:b9:6e:18:ab:
                    78:19:a6:b8:b1:0e:a6:61:9c:88:9a:c0:69:96:58:
                    fb:86:43:dc:22:b6:8b:db:6c:c5:b8:96:c9:3c:ed:
                    98:d8:b5:8d:a6:21:37:f9:93:9f:2f:28:85:5d:e5:
                    16:de:a7:c4:de:bb:c9:78:2a:f1:69:95:78:18:0b:
                    96:00:28:ed:3d:45:69:6d:12:1e:7b:0d:14:d1:d0:
                    fb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:32:74:31:DE:3D:81:69:44:F3:4D:50:4D:41:C1:C2:CF:50:30:79
            X509v3 Authority Key Identifier:
                keyid:3D:58:0F:BC:90:59:09:26:6C:33:1D:DA:64:16:C1:80:06:A2:47:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:c7:34:c7:4f:12:d8:a6:bf:ef:81:1f:75:77:64:40:bb:32:
         21:86:53:06:d4:b4:0c:b3:64:97:3e:22:a0:59:f0:1f:35:46:
         87:6e:5e:2d:0c:74:d0:d9:40:9b:50:1f:3f:75:11:56:cf:f9:
         f3:c5:5c:32:69:8e:75:6c:8d:2f:57:23:9d:4c:e5:be:3e:6b:
         3d:71:3d:ca:49:07:8f:e0:62:6c:15:d4:3d:68:54:07:91:b2:
         83:19:fd:10:60:a0:40:89:f9:e6:37:b0:81:2d:72:b6:2a:ed:
         b5:8d:53:5a:aa:3d:9b:29:d4:03:d7:c5:05:46:10:30:b0:ba:
         4e:78:98:f5:85:7e:4e:dc:2c:02:27:6a:48:ef:bd:af:cb:92:
         36:90:3e:25:97:31:41:d1:3d:c6:a6:c6:b9:bb:ac:92:d5:8e:
         b4:e6:e4:c8:a0:ef:58:dd:49:dc:ce:aa:77:c3:9d:d4:4a:d7:
         ae:eb:1f:42:c1:d4:ba:ad:06:f4:3b:7e:5c:31:3e:2b:57:6c:
         28:cb:6c:c4:16:19:d1:94:ac:f4:7d:b9:6a:de:44:d1:47:60:
         8b:4f:9c:43:b7:76:b1:74:0c:8e:bf:4c:89:19:8b:13:a5:71:
         23:06:c2:1e:6b:3f:77:ef:3f:0d:a1:64:81:cf:aa:ed:19:1c:
         ef:0a:00:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:03:01 2025 by rpki-client