Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.mft
File:                     2DC0F242ADDA7136D95141422051D1361143E486.mft (raw, json)
Hash identifier:          k1cboO2JzOo/skXzYSqwi4PyCf+yhIDzb2MXwJTpwcA=
Subject key identifier:   3A:71:AC:AE:D2:D3:70:09:3F:9D:CC:1B:42:7A:73:80:3F:FD:B9:1A
Authority key identifier: 2D:C0:F2:42:AD:DA:71:36:D9:51:41:42:20:51:D1:36:11:43:E4:86
Certificate issuer:       /CN=2DC0F242ADDA7136D95141422051D1361143E486
Certificate serial:       6C8652F85F5C09EB2727FE36187F893A6C79D1A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.mft
Manifest number:          4F
Signing time:             Mon 03 Nov 2025 09:54:38 +0000
Manifest this update:     Mon 03 Nov 2025 09:49:38 +0000
Manifest next update:     Tue 04 Nov 2025 11:11:38 +0000
Files and hashes:         1: 323830343a336437343a3430303a3a2f34302d313238203d3e20323632363137.roa (hash: +ObNk1En759gkb006BFhDoR0YjDG9cLJkyIcgwn//5M=)
                          2: 323830343a336437343a623a3a2f34382d313238203d3e20323636353332.roa (hash: WLyTnYz818OmVCR4LGkt5xnsHkOXvCJsoJLXeS27Jkk=)
                          3: 323830343a336437343a333a3a2f34382d313238203d3e20323632363137.roa (hash: KebVC4AnpFiaebunPQVuMMxvsk81mCZI+Qx8qGNxz6k=)
                          4: 2DC0F242ADDA7136D95141422051D1361143E486.crl (hash: 5YBeRCB+gZUKL5WPxz28grMQKpna6AJLHzGfR55DnDo=)
                          5: 323830343a336437343a3130303a3a2f34382d313238203d3e20323636353332.roa (hash: OurFGdWzBTMjaeL+fT/NQy5HChPORqd9dIs6UVijoRg=)
                          6: 323830343a336437343a613a3a2f34382d313238203d3e20323636353332.roa (hash: us2DcMOTb2Z9kbSNUL9Ss4wzGf7K1g/iVqm9aLZFCZg=)
                          7: 34352e36352e3232382e302f32322d3332203d3e20323632363137.roa (hash: 5HeZ+G7UtKi7z2I/TmttbRr8/iN4w9Sq+eCJUKY/UX0=)
                          8: 323830343a336437343a3130313a3a2f34382d313238203d3e20323636353332.roa (hash: HpNxeqVwHu+L9vMBuFNRH62MOdFSsngKjYq1T5wh3ko=)
                          9: 323830343a336437343a3130323a3a2f34382d313238203d3e20323636353332.roa (hash: i4pEqSh+MlJiMFtrrQMyV1crIrkk9RMd+fBrv2rnLrM=)
                          10: 323830343a336437343a383a3a2f34382d313238203d3e20323632363137.roa (hash: Ld7qHXuPS91pdHxwloAo7FA70+JcJi+eAtEA9lfI+k0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.crl
                          rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 11:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:86:52:f8:5f:5c:09:eb:27:27:fe:36:18:7f:89:3a:6c:79:d1:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DC0F242ADDA7136D95141422051D1361143E486
        Validity
            Not Before: Nov  3 09:49:38 2025 GMT
            Not After : Nov  4 11:11:38 2025 GMT
        Subject: CN=3A71ACAED2D370093F9DCC1B427A73803FFDB91A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0a:61:16:08:c3:d6:53:b7:a1:19:51:0c:67:
                    01:21:48:97:c7:26:7e:c7:7b:37:00:aa:82:85:ea:
                    ca:e0:e2:99:3b:80:31:ff:d6:38:1a:b3:44:06:ec:
                    b3:19:ce:fa:b9:02:25:da:70:df:45:46:ac:a4:25:
                    c9:0d:51:dc:8e:ca:1a:78:2e:b5:da:e4:c5:92:4b:
                    ea:3c:d5:45:ba:df:33:48:57:93:14:99:2a:db:db:
                    10:9b:8c:86:ed:9e:ca:b8:5c:63:6d:de:2c:e5:8c:
                    b3:a8:59:3e:85:aa:23:95:50:a6:3e:6b:28:31:ad:
                    bb:ba:1e:db:fc:b9:b2:a6:58:a6:63:30:37:4f:8d:
                    ce:e9:dc:38:09:9d:a5:37:df:33:64:4a:9f:d4:b9:
                    c6:de:2c:14:66:83:fa:a2:2e:37:94:3a:a1:87:8e:
                    40:67:74:a6:0f:f3:9a:08:58:17:dc:c1:f7:ef:b9:
                    91:c0:17:60:65:dd:2d:aa:21:24:d7:96:50:e1:78:
                    68:99:75:8f:7a:b2:e8:d4:d3:dd:9f:41:e0:bc:b5:
                    e9:8c:4c:42:42:6a:51:a1:3f:1f:d0:0c:53:a4:1b:
                    39:a3:26:9b:a0:33:83:e3:cf:da:8a:f4:80:f9:2d:
                    50:81:d4:3a:6c:67:fd:c3:95:8c:e5:00:cd:4b:f3:
                    02:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:71:AC:AE:D2:D3:70:09:3F:9D:CC:1B:42:7A:73:80:3F:FD:B9:1A
            X509v3 Authority Key Identifier:
                keyid:2D:C0:F2:42:AD:DA:71:36:D9:51:41:42:20:51:D1:36:11:43:E4:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:f6:6a:c5:77:73:d4:5e:49:04:8e:48:42:48:5c:c9:b0:e8:
         8e:4d:17:ca:e2:da:15:93:4d:0e:3e:8c:1d:de:8b:52:02:be:
         d5:3e:e0:b4:e4:ee:ba:97:ff:d4:dc:56:f5:a3:90:fa:52:3f:
         e2:35:d8:d5:7c:fa:f6:dc:b6:4f:3d:3c:63:16:47:18:43:eb:
         3e:88:78:a7:92:10:01:c4:6a:e2:bd:5a:90:11:ab:0d:66:30:
         8b:67:df:c2:4c:ec:81:c2:4c:ed:9b:04:aa:c5:c4:f7:2e:6b:
         37:ba:05:ee:51:df:5f:30:9d:44:5b:f7:13:9b:66:9e:05:75:
         1f:c6:95:8e:92:9c:1e:6f:7b:5b:f0:f6:11:1a:a1:1d:56:1e:
         ba:a8:b1:85:1a:0e:23:9a:bb:ff:94:63:59:7a:c0:18:46:a9:
         36:d8:6e:cd:fa:c5:e7:9c:0b:c6:2a:78:0c:4c:83:b8:4c:cc:
         b1:63:8b:ea:3f:a2:fa:36:32:ab:b2:a9:0b:3b:9e:e4:c7:63:
         5a:dc:91:0c:9e:fa:f0:30:5e:b5:f2:08:77:41:34:96:0e:fe:
         00:53:35:10:a5:90:05:51:89:b7:18:2b:8c:41:ea:ea:99:fa:
         94:28:da:ed:cc:da:49:f8:46:43:e1:86:3e:5d:51:14:4b:48:
         51:f8:59:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:05:45 2025 by rpki-client