Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
File:                     BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft (raw, json)
Hash identifier:          soXqPJajm3mtbz0MAUsW/KsaY+FKW2pz+syH8QbQKR4=
Subject key identifier:   74:A3:4F:79:2B:2C:6A:92:35:5F:B7:ED:D2:A2:4A:87:6B:EE:93:D2
Authority key identifier: BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Certificate issuer:       /CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Certificate serial:       5E5001BF40DF976F6BA653575AF1F09C3C25DAD0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
Manifest number:          02EB
Signing time:             Mon 03 Nov 2025 14:37:41 +0000
Manifest this update:     Mon 03 Nov 2025 14:32:41 +0000
Manifest next update:     Tue 04 Nov 2025 15:16:41 +0000
Files and hashes:         1: BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl (hash: 5V3iVzGhFsZ7ezai8cJnTOl9EcOriQUUogoRdn8M+5o=)
                          2: 323830343a6131383a3a2f33322d3332203d3e20323633303232.roa (hash: hHzj/1U34Hb14mhLSmOaJOe36Adh6w5jMwEAPr+/2MQ=)
                          3: 3138362e3234392e31362e302f32342d3234203d3e20323633303232.roa (hash: GeyNCbjwHtUpBR6klMW5y+En6erMiDhQoHKtrTXi4ks=)
                          4: 3138362e3234392e32332e302f32342d3234203d3e20323633303232.roa (hash: ZHcSsPHwL5ZX7qruQ3rXf/tt9lu5yYVniAqvmX8xZM0=)
                          5: 3138362e3234392e32302e302f32332d3233203d3e20323633303232.roa (hash: bmC09WGeYdDECssoZBHMb30dnaKneoeEZK+KTVFyCK0=)
                          6: 3138362e3234392e31382e302f32342d3234203d3e20323633303232.roa (hash: rhoRwF1DZnMq+9MVwzQYS3vjlpOW+9eG0VEG5yrjyoQ=)
                          7: 3138362e3234392e31372e302f32342d3234203d3e20323633303232.roa (hash: nliz8bkWo89jMooZGiGzjKoy3zjd2X0NGPdmcI9Nq0w=)
                          8: 3138362e3234392e32312e302f32342d3234203d3e20323633303232.roa (hash: l1nivRzlBo9bjUzkklnYy0ZvLj7Dj8FJipPWaCP2Ibs=)
                          9: 3138362e3234392e31392e302f32342d3234203d3e20323633303232.roa (hash: VmmewN/hs3aMe3B9Cbi+288tLf1OvDbNTuMDGywb5bQ=)
                          10: 3138362e3234392e32322e302f32342d3234203d3e20323633303232.roa (hash: IYIcKGpOayUCrfEWbxoXzG+EBYba8iIAKTOr82oSggI=)
                          11: 323830343a6131383a3a2f33332d3334203d3e20323633303232.roa (hash: QGn1e741uH3SxLWvJiXHqYPk6n/umppkhESLNY0qUs8=)
                          12: 3138362e3234392e31382e302f32332d3233203d3e20323633303232.roa (hash: loRifbaEiE0t81ck7mBypgpiHRitrR/IadRIzPn7m+Q=)
                          13: 3138362e3234392e31362e302f32332d3233203d3e20323633303232.roa (hash: 23O6JYPEmUAOy+JqpCN+UO5DD1jtlLi18ehB1exk55g=)
                          14: 3138362e3234392e32322e302f32332d3233203d3e20323633303232.roa (hash: hRxGZ4Jal3c/Na8Cz3p5NhOihShNL3T7sJasYUPCz5w=)
                          15: 323830343a6131383a383030303a3a2f33332d3334203d3e20323633303232.roa (hash: g2G67ufeop6TzLj8bz5NkpBU2ApyMKCoqz/NfsR154w=)
                          16: 3138362e3234392e32302e302f32342d3234203d3e20323633303232.roa (hash: Lki/YcWXISBtZp8m0hT/WmTW3o3tgiELa8GnHsFTWUA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 15:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:50:01:bf:40:df:97:6f:6b:a6:53:57:5a:f1:f0:9c:3c:25:da:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
        Validity
            Not Before: Nov  3 14:32:41 2025 GMT
            Not After : Nov  4 15:16:41 2025 GMT
        Subject: CN=74A34F792B2C6A92355FB7EDD2A24A876BEE93D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ea:6f:bf:ab:8f:db:5a:7a:62:6f:57:7f:36:
                    39:87:dd:b0:7d:ed:41:70:38:e7:cf:08:88:70:3c:
                    28:0d:2d:b1:ab:ff:49:4e:a3:b9:35:db:df:4e:5b:
                    51:b1:75:f5:7f:26:c9:a3:71:d5:98:f2:c8:c1:4a:
                    ae:9c:1f:41:e1:47:c9:bf:55:b3:7d:92:3d:c2:e7:
                    0f:9f:c7:af:a6:ae:4a:76:8a:df:18:0d:88:f2:c2:
                    ca:c2:64:cd:dc:9c:46:2d:46:08:c0:ac:44:a6:ed:
                    4e:63:5e:79:a3:55:ad:26:42:97:b5:32:34:2c:94:
                    9f:20:76:4e:16:03:df:fe:fc:a9:6c:1c:61:13:fe:
                    28:49:6e:29:5b:d9:9f:86:dd:64:ac:a4:a5:3d:ef:
                    c8:54:ab:85:36:34:99:8c:ed:f2:43:ea:bb:1d:bb:
                    e8:61:90:ab:9b:de:a5:a9:33:fa:7f:f4:92:77:33:
                    e3:d0:b3:10:fd:f4:ed:a7:32:4d:19:0e:f1:21:a9:
                    5b:28:5a:db:a2:d5:dc:26:d7:04:08:da:26:9f:5c:
                    e6:e8:29:37:5a:02:0b:0b:88:84:10:4b:0a:a0:68:
                    5e:a0:b6:fa:b7:43:62:d3:94:01:fd:1a:bc:3c:4b:
                    f5:04:06:fb:6a:9e:0e:47:79:37:fa:92:5f:97:b5:
                    0e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A3:4F:79:2B:2C:6A:92:35:5F:B7:ED:D2:A2:4A:87:6B:EE:93:D2
            X509v3 Authority Key Identifier:
                keyid:BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d1:ea:64:36:be:b4:0b:ab:d7:b5:d7:34:5b:34:90:37:60:
         dc:69:02:0d:7a:16:d6:3f:a0:d6:2f:bf:e4:ea:bd:18:6d:1c:
         39:03:18:3e:34:fe:db:56:73:69:78:e8:34:f6:91:70:79:29:
         25:2b:a3:28:44:92:d9:ac:9a:08:e2:3a:57:f0:2b:65:42:89:
         73:be:86:de:31:44:0f:4e:3f:a1:80:20:88:c1:b5:65:68:30:
         47:64:f6:ca:87:18:bd:66:37:b0:c2:1e:ae:65:26:5e:e3:3c:
         e8:42:d0:b8:be:a4:dc:b0:67:14:6d:6a:47:68:5e:81:41:ad:
         fe:7f:72:64:ed:02:48:c7:95:52:24:55:3b:de:87:d9:84:e3:
         a4:9f:2e:08:43:51:90:26:d1:5d:be:b9:c9:f6:90:b1:52:19:
         f6:cd:79:56:70:90:e9:bc:15:6c:5b:25:d6:06:3a:76:b6:71:
         40:10:66:bd:79:e7:74:28:4a:26:5e:e4:73:a3:bf:c7:89:96:
         d7:54:47:ff:60:e3:6f:d4:9a:e3:61:57:74:a0:24:df:1b:e1:
         60:ce:12:6d:66:7b:50:16:85:fb:2f:a4:0b:3c:bd:24:d0:10:
         6d:02:b1:a8:60:b3:02:44:3f:76:5e:65:aa:3d:4e:66:3e:46:
         72:72:27:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:25:39 2025 by rpki-client