Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft
File:                     D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft (raw, json)
Hash identifier:          YwWYkQlMerZrSzq8z8yfjYCpz+t4qCVQ/Dp1NPfNm2I=
Subject key identifier:   80:5B:C8:81:58:3E:CE:0C:FE:38:6E:E2:07:18:DA:D0:64:2B:1F:A1
Authority key identifier: D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F
Certificate issuer:       /CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
Certificate serial:       1A97E341DA519B6F0B09E888C8F4E50FB8F32D3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft
Manifest number:          0291
Signing time:             Mon 03 Nov 2025 12:43:52 +0000
Manifest this update:     Mon 03 Nov 2025 12:38:52 +0000
Manifest next update:     Tue 04 Nov 2025 15:26:52 +0000
Files and hashes:         1: 34352e3233332e3233312e302f32342d3234203d3e20323637333530.roa (hash: Qd2D3y5pr4+0LQIHpmwfLMqhy3/c+GkvC9zwHOCrCmA=)
                          2: D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl (hash: cxXWTJpFRNdI294cI/qMkchuA+ojNTHikzbBC6m6/YM=)
                          3: 323830343a346331633a383030303a3a2f33342d3334203d3e20323637333530.roa (hash: MR9+C9Vbj4DW0fjbrhaHdxlM9MYBw8GvChkpXZQO0NQ=)
                          4: 34352e3233332e3233302e302f32342d3234203d3e20323637333530.roa (hash: 43+lZx6yNw3chQQ3rdDi6xVUZ10HWty/7VWRdAmFCbE=)
                          5: 323830343a346331633a3a2f33342d3334203d3e20323637333530.roa (hash: DGRUdUDDCZl4HidihTbYThwrnuoIe3p27meH73uZnqY=)
                          6: 34352e3233332e3232392e302f32342d3234203d3e20323637333530.roa (hash: KiVRpQW/Y+LL0uzJv77rQmbRpw245rFC96CRqItR2Mg=)
                          7: 34352e3233332e3232382e302f32322d3232203d3e20323637333530.roa (hash: KphRvq+dCCmDbBoP7ufV4MKiDXMdvSDN8C3wBkEp6PM=)
                          8: 323830343a346331633a383030303a3a2f33332d3333203d3e20323637333530.roa (hash: oJLoy2NZCiaqPT9x6QxmbYcpcBviV4fUZPCEvZlY+DQ=)
                          9: 323830343a346331633a3a2f33332d3333203d3e20323637333530.roa (hash: setdnDShPa42Ra+RXIZpHVG0CzWF+L5w7rUhm1wlW8k=)
                          10: 34352e3233332e3232382e302f32332d3233203d3e20323637333530.roa (hash: u0yBhdVDaevQliiP9KZynPBTVxkPOzeII4JFo6jbcps=)
                          11: 323830343a346331633a633030303a3a2f33342d3334203d3e20323637333530.roa (hash: buEzhxsd3JgTQkvixY100+A2Z281EJiftmIetEl7FQw=)
                          12: 34352e3233332e3233302e302f32332d3233203d3e20323637333530.roa (hash: kO8OLhHyjvxRm550hVdG/t9GWhhQJ4GEhEFGrZC4ASw=)
                          13: 34352e3233332e3232382e302f32342d3234203d3e20323637333530.roa (hash: cQgCm5AeQyHg8f9cKg4MaKk7kmavzWr0FzG/BiQmCtM=)
                          14: 323830343a346331633a343030303a3a2f33342d3334203d3e20323637333530.roa (hash: yypoDy5bSn77qxeuXVndQniHgm9nMysCWdFI9074rt0=)
                          15: 323830343a346331633a3a2f33322d3332203d3e20323637333530.roa (hash: obuvpg2KT9lbvxhrozHpb1Q8wEpCA+P8uCNmuLETzm4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl
                          rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 15:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:97:e3:41:da:51:9b:6f:0b:09:e8:88:c8:f4:e5:0f:b8:f3:2d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
        Validity
            Not Before: Nov  3 12:38:52 2025 GMT
            Not After : Nov  4 15:26:52 2025 GMT
        Subject: CN=805BC881583ECE0CFE386EE20718DAD0642B1FA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:db:71:60:3b:fb:45:39:c6:df:34:c8:31:b4:
                    8f:b5:05:2a:0b:cb:a9:e1:a0:31:5e:00:4b:15:87:
                    89:f4:3c:6b:81:2e:c4:fb:67:6d:45:c1:9b:37:47:
                    bb:f8:42:1d:08:e5:b8:b2:cd:ab:a8:84:24:28:27:
                    f3:ca:c5:53:c3:a6:7b:18:75:d5:7b:b4:9f:93:b4:
                    2c:76:43:eb:22:6b:24:23:86:fe:0e:41:fa:54:d0:
                    90:a1:7f:b6:09:e2:f6:9a:5e:27:97:1c:2f:ec:98:
                    63:55:93:8f:81:0e:cf:98:62:29:dc:1d:ad:b6:6d:
                    6f:c4:2e:52:b4:cc:c0:8e:3b:6b:99:53:6f:9e:ee:
                    06:ec:b6:48:be:6b:38:09:dc:a2:d8:ce:91:7f:37:
                    f5:d9:b0:f2:db:36:86:42:c4:cd:f0:be:59:2a:37:
                    d1:52:66:6d:57:d3:68:95:c4:8f:06:17:bc:a5:5f:
                    bb:f0:3e:41:50:b6:6d:5b:30:02:cf:56:dd:b1:8b:
                    60:c2:1c:3f:50:2b:91:1e:c6:24:3d:91:22:65:8f:
                    a1:16:5a:4b:4f:cc:12:aa:48:69:0a:b4:34:e1:a0:
                    67:46:af:c6:38:73:eb:35:b0:e8:78:40:3a:59:3b:
                    bf:82:9f:ed:ba:6a:f9:9c:d0:a5:12:ce:74:83:ca:
                    65:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5B:C8:81:58:3E:CE:0C:FE:38:6E:E2:07:18:DA:D0:64:2B:1F:A1
            X509v3 Authority Key Identifier:
                keyid:D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d1:17:6f:66:89:b1:11:4c:3b:39:36:3d:92:c8:0a:e2:ce:
         b9:c4:7e:08:19:e6:61:fe:03:ec:b1:57:d1:26:84:22:9e:65:
         35:fd:3f:96:70:f3:cd:fd:3a:5c:4d:7f:94:2c:04:87:dc:80:
         a9:0c:59:4c:b4:16:cc:d5:3f:bb:9c:15:02:91:ec:24:e5:52:
         2d:17:c3:4c:1a:5e:6b:e4:85:ef:58:82:f7:c6:56:71:0f:fb:
         c8:52:95:66:49:63:a2:c1:6d:fe:bd:84:9b:c3:2d:27:ac:0e:
         4b:f1:7d:80:4b:47:fd:e4:65:82:b3:68:0a:9e:61:43:f3:70:
         e3:67:62:87:4c:ec:6b:dd:19:a3:6f:d5:70:b7:60:46:0e:a3:
         97:c0:d1:f2:d9:25:e5:5b:2d:15:38:02:ef:3f:2f:aa:2a:15:
         06:d6:84:6d:82:01:a9:c1:6d:27:17:9c:f3:b6:2a:da:6f:be:
         4b:7f:ff:ab:e8:72:71:75:0f:35:ac:e5:c9:63:30:84:da:8f:
         2e:6a:4f:c1:3c:fd:db:54:f8:89:9f:2a:62:4f:bc:7b:d8:e4:
         49:22:04:b4:ab:96:a3:7d:a1:d7:89:4f:ed:92:e0:94:cb:0a:
         b8:79:c9:d6:86:a5:a8:33:d4:e2:ab:fa:6f:d2:f1:b7:d9:aa:
         09:29:c9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 00:10:18 2025 by rpki-client