Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/185E3F5FBA985F8EF7493AF5948C63D1510157C0.mft
File:                     185E3F5FBA985F8EF7493AF5948C63D1510157C0.mft (raw, json)
Hash identifier:          J0aCPJbEnjX/9x2AlO4bWzlV6UFI0g9Y/E3VRt3/4oo=
Subject key identifier:   71:FC:BD:B7:09:44:42:51:D8:D1:EC:A3:78:5B:1B:AF:B4:45:A2:4B
Authority key identifier: 18:5E:3F:5F:BA:98:5F:8E:F7:49:3A:F5:94:8C:63:D1:51:01:57:C0
Certificate issuer:       /CN=185E3F5FBA985F8EF7493AF5948C63D1510157C0
Certificate serial:       4A1A23B892872A56E34A7097039F99CA34441E78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/185E3F5FBA985F8EF7493AF5948C63D1510157C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/185E3F5FBA985F8EF7493AF5948C63D1510157C0.mft
Manifest number:          02C0
Signing time:             Mon 03 Nov 2025 19:10:41 +0000
Manifest this update:     Mon 03 Nov 2025 19:05:41 +0000
Manifest next update:     Tue 04 Nov 2025 22:54:41 +0000
Files and hashes:         1: 3139322e3134312e32362e302f32332d3233203d3e20323637343631.roa (hash: cxl0gDvfOJYeS8W0mxIoZ1bwetw+e7AZFnXJkuIZvyE=)
                          2: 185E3F5FBA985F8EF7493AF5948C63D1510157C0.crl (hash: MiwOctjuDookAwv/RY37TxA2WnJsyXRiTNAYG1AKpoc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/185E3F5FBA985F8EF7493AF5948C63D1510157C0.crl
                          rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/185E3F5FBA985F8EF7493AF5948C63D1510157C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/185E3F5FBA985F8EF7493AF5948C63D1510157C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 22:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1a:23:b8:92:87:2a:56:e3:4a:70:97:03:9f:99:ca:34:44:1e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185E3F5FBA985F8EF7493AF5948C63D1510157C0
        Validity
            Not Before: Nov  3 19:05:41 2025 GMT
            Not After : Nov  4 22:54:41 2025 GMT
        Subject: CN=71FCBDB709444251D8D1ECA3785B1BAFB445A24B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5a:16:47:72:06:2b:dd:1a:82:ae:d3:53:f7:
                    4c:c6:a3:de:3d:7b:02:75:f5:c2:fa:09:86:a3:de:
                    7b:d5:ab:7d:4e:3c:7e:85:50:1c:ac:27:a1:a8:3a:
                    40:56:f7:76:d6:ff:10:10:96:2e:ec:8a:eb:d3:14:
                    f4:f9:a8:98:a1:5f:a6:4d:f4:a3:01:e0:c1:a2:d8:
                    17:38:15:af:e0:12:be:3e:3e:db:b5:85:70:a1:1f:
                    14:db:06:95:d5:e4:ee:28:30:c7:73:8a:f5:bd:c1:
                    04:10:1a:37:80:f0:09:43:d7:ee:89:48:4c:ef:b5:
                    4f:b2:a1:99:70:91:82:dc:4d:0a:09:01:ea:7a:f4:
                    cd:01:62:eb:f3:6e:95:c1:3c:dd:0f:73:06:da:b5:
                    21:54:f9:bb:30:04:dd:83:36:02:f5:83:b8:e1:cc:
                    ad:f2:dc:68:63:c2:a6:62:20:94:e3:8b:b2:bb:65:
                    cc:c9:6f:31:b7:8f:3c:10:a1:b0:29:b5:5e:c1:e7:
                    3c:6f:4b:2f:4e:12:46:e8:9d:53:65:39:53:06:f3:
                    9e:1c:c1:ac:34:27:ee:15:da:61:5b:ee:23:3b:66:
                    e0:9a:d5:de:d3:a8:48:ef:08:75:37:3a:c7:9a:37:
                    86:ae:69:73:28:d7:ef:96:1d:5c:90:66:4f:14:8f:
                    97:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FC:BD:B7:09:44:42:51:D8:D1:EC:A3:78:5B:1B:AF:B4:45:A2:4B
            X509v3 Authority Key Identifier:
                keyid:18:5E:3F:5F:BA:98:5F:8E:F7:49:3A:F5:94:8C:63:D1:51:01:57:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/185E3F5FBA985F8EF7493AF5948C63D1510157C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/185E3F5FBA985F8EF7493AF5948C63D1510157C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/185E3F5FBA985F8EF7493AF5948C63D1510157C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:42:06:ad:e5:7a:37:61:4e:8d:6c:98:bd:4e:27:92:fd:3a:
         78:54:a8:33:f5:e4:44:f9:1b:08:16:f1:42:35:ef:09:b8:c0:
         c9:b3:df:f9:b1:5f:41:9a:15:1f:4f:5e:d2:b3:a8:70:f9:1b:
         64:6f:76:93:88:fe:0d:c7:72:df:04:d5:b7:26:0d:13:35:f5:
         ff:fb:d9:a3:7a:7c:47:ab:bd:f7:09:b5:fa:49:65:a1:d9:d1:
         6e:e5:04:e6:e8:17:63:20:b9:ef:06:51:4b:31:2f:49:b1:b7:
         f6:14:c7:4b:a1:e6:f8:59:c8:b1:4b:8b:be:36:04:4f:e2:a1:
         54:0a:0f:d2:46:4f:88:c6:80:42:fb:e7:80:67:04:44:8b:74:
         9d:24:51:e9:3a:bb:45:ab:9a:fa:ec:26:6b:05:50:49:a5:04:
         20:df:80:5a:fa:78:7d:cb:fe:c8:11:2b:84:0c:17:e2:8f:2e:
         f2:3c:a5:ca:47:c5:df:34:0a:4c:e0:34:f8:03:93:bd:c2:d5:
         b6:04:65:45:c2:56:ce:00:b5:c5:33:b6:1c:fe:04:a6:c0:d1:
         04:07:36:56:6f:9c:cd:c0:f9:e3:6d:54:50:b7:f3:33:47:a8:
         f8:98:15:13:d3:f1:76:bf:d9:a3:80:6f:e8:5f:8d:f8:5f:38:
         b0:39:53:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:47:46 2025 by rpki-client