Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft
File:                     A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft (raw, json)
Hash identifier:          2n2rgTw+NFb3ENIpFAFH8Mxp3sPgjtj7dGSUt+b4aKw=
Subject key identifier:   4F:CA:D2:46:57:C8:10:DB:BB:15:2D:5B:6C:39:B9:65:5E:20:3F:6E
Authority key identifier: A4:C0:BA:3A:9F:F0:5A:01:E2:EA:16:AB:06:1A:D9:9A:D6:AA:0D:15
Certificate issuer:       /CN=A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15
Certificate serial:       2BD3CE7E04CA62FA2A3313D780C6DB97F33F6318
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft
Manifest number:          E2
Signing time:             Mon 03 Nov 2025 20:18:56 +0000
Manifest this update:     Mon 03 Nov 2025 20:13:56 +0000
Manifest next update:     Tue 04 Nov 2025 21:04:56 +0000
Files and hashes:         1: 3230302e302e34382e302f32312d3234203d3e20323632343334.roa (hash: HclPkReG2zDh8+BAPtYLpfT+vvHecYOSWWZEdOxxmMA=)
                          2: 3137372e34342e3136302e302f32302d3234203d3e20323632343334.roa (hash: l6glcDirqUkV9kT+UKpXjY11Eew42e+6+ebYq8xKQRw=)
                          3: 323830343a313762383a3a2f33322d3438203d3e20323632343334.roa (hash: uYS1aO3/xsk1lGHaoKa2baH+NIprgqZUS8Z1Ir0oies=)
                          4: A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.crl (hash: sM5R9qGK82qK23g2VL+3s/NZinFXEmiSAtrafmSMC2k=)
                          5: 3138362e3233352e31362e302f32302d3233203d3e20323632343334.roa (hash: 9fM53yCb9jOW8WbWE27fKnFkJRycFAdO2RryZJPbgWs=)
                          6: 3138362e3233352e33312e302f32342d3234203d3e20323632343334.roa (hash: 51fzVoQ1zVy4SSYy6ehKq52OVPnkfTk9v5R7Sj54s9w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.crl
                          rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:04:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d3:ce:7e:04:ca:62:fa:2a:33:13:d7:80:c6:db:97:f3:3f:63:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15
        Validity
            Not Before: Nov  3 20:13:56 2025 GMT
            Not After : Nov  4 21:04:56 2025 GMT
        Subject: CN=4FCAD24657C810DBBB152D5B6C39B9655E203F6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:13:26:f5:8c:e8:ff:ca:bc:08:d7:44:20:da:
                    eb:76:89:93:b9:db:1b:fb:9c:48:5a:8f:8a:96:46:
                    d8:b5:48:17:2c:6e:f7:e6:66:66:b0:8d:e2:8e:19:
                    4d:eb:66:34:7b:17:ba:4c:88:da:25:7d:cc:be:a7:
                    9f:55:f8:0f:5d:52:d9:ce:10:7f:c2:21:cf:06:31:
                    9c:e4:dd:ed:87:35:c3:d8:d0:f9:ba:5b:5e:26:1c:
                    e3:f7:2d:10:ee:ad:c0:ee:7e:fc:16:89:39:95:60:
                    63:e8:64:4a:5c:d2:1a:6c:9a:1c:f8:e9:3d:f1:27:
                    db:de:92:51:96:a8:47:58:84:51:54:04:7b:3e:78:
                    7f:b4:b1:ad:eb:0a:03:dc:92:30:5b:95:a9:93:13:
                    2f:b8:91:73:8c:d4:a7:27:d1:64:6f:10:37:9d:0a:
                    25:c3:45:99:f1:14:90:e8:87:9e:c2:6f:07:c5:92:
                    44:7e:f0:08:01:0d:b0:2d:e3:2c:fb:aa:fb:07:21:
                    1d:08:1c:93:37:49:a8:07:6c:0c:4f:20:07:28:92:
                    0c:de:27:5a:ed:0e:ee:96:2d:17:ad:e0:f8:5b:fb:
                    f0:78:cf:9f:0f:33:c2:63:22:81:2f:7d:c4:a1:24:
                    17:e1:19:8d:9a:e1:15:02:c1:7d:d5:c5:57:96:2a:
                    4f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CA:D2:46:57:C8:10:DB:BB:15:2D:5B:6C:39:B9:65:5E:20:3F:6E
            X509v3 Authority Key Identifier:
                keyid:A4:C0:BA:3A:9F:F0:5A:01:E2:EA:16:AB:06:1A:D9:9A:D6:AA:0D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:71:a4:42:8e:2c:2a:00:de:2b:f7:63:c8:36:b9:58:78:66:
         c3:6f:45:3d:82:53:f1:b0:97:49:6a:45:41:44:2d:3d:c4:29:
         61:26:e8:78:97:6e:f3:2f:fe:e1:b1:e2:78:c9:21:ef:c8:a1:
         0d:6e:1d:7d:63:18:81:fd:35:03:10:96:b0:23:6e:0e:82:bb:
         c8:9a:78:a2:3d:6d:ec:42:0e:7a:f0:4c:ce:e3:32:c3:89:cf:
         5d:37:b7:71:77:64:49:a9:e3:e9:54:df:3d:1f:b3:9d:6b:72:
         3e:08:93:53:9f:2a:f9:f7:36:ec:74:72:b4:f2:f2:be:58:e5:
         9f:27:02:1d:1b:dd:5a:65:f3:e2:d0:1e:9b:7c:df:a1:b6:54:
         0a:10:08:da:fd:61:19:ba:45:00:6c:67:eb:cb:41:57:81:3d:
         20:d2:32:54:52:a7:ad:a5:a4:51:0f:8c:79:c9:5a:b8:9b:2b:
         4c:1a:58:4b:58:7c:eb:34:59:a7:3e:fa:18:5b:71:87:ab:8f:
         cf:9f:2b:02:66:fa:ea:f7:0f:f1:a3:e1:a7:7b:f8:dd:bf:79:
         77:cd:b3:4b:57:a7:82:91:78:51:2d:3d:f4:1f:6f:2e:e1:a6:
         c1:b1:30:63:6f:c6:57:3e:08:04:5c:8e:61:12:6d:e6:83:25:
         df:84:82:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUK9POfgTKYvoqMxPXgMbbl/M/YxgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRDMEJBM0E5RkYwNUEwMUUyRUExNkFCMDYxQUQ5OUFE
NkFBMEQxNTAeFw0yNTExMDMyMDEzNTZaFw0yNTExMDQyMTA0NTZaMDMxMTAvBgNV
BAMTKDRGQ0FEMjQ2NTdDODEwREJCQjE1MkQ1QjZDMzlCOTY1NUUyMDNGNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjEyb1jOj/yrwI10Qg2ut2iZO5
2xv7nEhaj4qWRti1SBcsbvfmZmawjeKOGU3rZjR7F7pMiNolfcy+p59V+A9dUtnO
EH/CIc8GMZzk3e2HNcPY0Pm6W14mHOP3LRDurcDufvwWiTmVYGPoZEpc0hpsmhz4
6T3xJ9veklGWqEdYhFFUBHs+eH+0sa3rCgPckjBblamTEy+4kXOM1Kcn0WRvEDed
CiXDRZnxFJDoh57CbwfFkkR+8AgBDbAt4yz7qvsHIR0IHJM3SagHbAxPIAcokgze
J1rtDu6WLRet4Phb+/B4z58PM8JjIoEvfcShJBfhGY2a4RUCwX3VxVeWKk/BAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUT8rSRlfIENu7FS1bbDm5ZV4gP24wHwYDVR0j
BBgwFoAUpMC6Op/wWgHi6harBhrZmtaqDRUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWVncGtVZEhWTWc0bW1kZlJnUzNRelBSRmVlOVdwVWhGUzFoTDFzdTNU
cVcvMC9BNEMwQkEzQTlGRjA1QTAxRTJFQTE2QUIwNjFBRDk5QUQ2QUEwRDE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0QzBCQTNBOUZGMDVBMDFF
MkVBMTZBQjA2MUFEOTlBRDZBQTBEMTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QWVncGtVZEhWTWc0bW1kZlJnUzNRelBSRmVlOVdwVWhGUzFoTDFzdTNUcVcvMC9B
NEMwQkEzQTlGRjA1QTAxRTJFQTE2QUIwNjFBRDk5QUQ2QUEwRDE1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALHGkQo4sKgDeK/djyDa5WHhmw29FPYJT8bCXSWpFQUQtPcQpYSboeJdu8y/+
4bHieMkh78ihDW4dfWMYgf01AxCWsCNuDoK7yJp4oj1t7EIOevBMzuMyw4nPXTe3
cXdkSanj6VTfPR+znWtyPgiTU58q+fc27HRytPLyvljlnycCHRvdWmXz4tAem3zf
obZUChAI2v1hGbpFAGxn68tBV4E9INIyVFKnraWkUQ+MeclauJsrTBpYS1h86zRZ
pz76GFtxh6uPz58rAmb66vcP8aPhp3v43b95d82zS1engpF4US099B9vLuGmwbEw
Y2/GVz4IBFyOYRJt5oMl34SC7A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 00:12:41 2025 by rpki-client