Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.mft
File:                     312317E584CD5A10D2CB04D6FC1E40518B4C26C5.mft (raw, json)
Hash identifier:          wAR2mskAzBAOcGl4Q+HVwKAe5wU4TxsYsUNi/koEweo=
Subject key identifier:   11:AA:AD:9A:C3:6B:5B:55:FC:E7:EC:40:6C:73:B4:82:F6:D2:AC:63
Authority key identifier: 31:23:17:E5:84:CD:5A:10:D2:CB:04:D6:FC:1E:40:51:8B:4C:26:C5
Certificate issuer:       /CN=312317E584CD5A10D2CB04D6FC1E40518B4C26C5
Certificate serial:       70C12366DCAC83876759D8B17FE71F2DEFE51FBE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.mft
Manifest number:          D9
Signing time:             Sun 02 Nov 2025 22:15:43 +0000
Manifest this update:     Sun 02 Nov 2025 22:10:43 +0000
Manifest next update:     Mon 03 Nov 2025 23:17:43 +0000
Files and hashes:         1: 312317E584CD5A10D2CB04D6FC1E40518B4C26C5.crl (hash: BiYyQoAf/yHYlO7Y3W3nGqSUg1cHWcrA1mHQ5j7NXhk=)
                          2: 3230302e37352e3137362e302f32312d3332203d3e203631393339.roa (hash: AcgGAlvaKXbUxC9kB4j399ZgseBmCmyzLXIybiYAVlE=)
                          3: 323830343a313838633a3a2f33322d313238203d3e203631393339.roa (hash: HcOGsAPSHvkeaRLUa88kfrvHyXD3Izj/1JBiGMJkKhs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.crl
                          rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Nov 2025 23:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c1:23:66:dc:ac:83:87:67:59:d8:b1:7f:e7:1f:2d:ef:e5:1f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=312317E584CD5A10D2CB04D6FC1E40518B4C26C5
        Validity
            Not Before: Nov  2 22:10:43 2025 GMT
            Not After : Nov  3 23:17:43 2025 GMT
        Subject: CN=11AAAD9AC36B5B55FCE7EC406C73B482F6D2AC63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:19:4e:9f:c1:c3:81:cf:a8:f9:e2:3a:17:c4:
                    9a:d1:7e:54:5d:a4:a1:6c:8f:3c:4a:40:26:00:fe:
                    3d:53:ab:04:cf:2a:52:f4:68:bf:c4:16:08:2b:fa:
                    8a:ec:33:bf:b0:ef:20:0e:55:4f:4d:1b:40:1e:ed:
                    22:61:8f:ae:a2:0f:4e:7f:0b:df:28:92:92:34:00:
                    e5:95:30:b2:e9:72:5a:7d:c4:25:b0:b3:b5:00:30:
                    9b:3d:35:48:00:40:f0:4c:69:32:16:c6:ef:d9:02:
                    df:74:21:71:db:28:af:9a:af:a1:73:d2:ae:19:e2:
                    75:8f:68:df:5f:c4:dc:f2:04:66:9b:57:72:b1:b5:
                    ac:27:55:8b:2f:3b:fb:93:14:41:68:e1:3c:7d:ac:
                    7f:b4:d5:c8:45:4d:8a:9b:a3:ab:87:14:8c:c9:8c:
                    91:64:23:78:34:af:14:2f:b0:5d:c8:ed:0b:09:69:
                    05:23:74:67:67:99:48:c8:54:6f:2b:96:f0:df:65:
                    58:f6:78:31:5a:1e:31:be:fa:49:3f:39:33:f1:70:
                    3c:f8:cc:e1:a5:fd:4a:d2:8e:35:13:f3:75:26:a9:
                    49:19:98:cb:c0:f3:ae:7b:c3:61:10:c0:3d:dd:80:
                    c1:96:d7:39:d3:a2:c8:a1:dc:14:22:6c:2b:97:03:
                    7a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AA:AD:9A:C3:6B:5B:55:FC:E7:EC:40:6C:73:B4:82:F6:D2:AC:63
            X509v3 Authority Key Identifier:
                keyid:31:23:17:E5:84:CD:5A:10:D2:CB:04:D6:FC:1E:40:51:8B:4C:26:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6a:f9:80:e1:9e:66:0d:96:93:13:85:18:be:e3:0b:72:02:
         d3:7f:e3:ef:41:c2:6a:02:83:7d:b4:ac:7d:00:43:f0:56:0f:
         50:0a:8b:ac:1e:31:cb:a7:29:40:f2:7a:20:57:2b:f0:f2:3d:
         15:e5:1f:80:37:d8:2d:c0:9d:7d:59:30:95:90:41:98:aa:54:
         7b:c3:19:b6:ad:f5:5f:ca:b8:05:f7:c6:e7:48:94:d6:9d:cf:
         7b:60:e2:f5:61:c1:f4:98:d9:df:29:a3:c9:d3:9c:6b:66:f5:
         27:72:96:1f:95:a8:48:76:a3:56:10:8b:af:45:76:e7:ad:f6:
         4d:d7:62:c6:4f:86:f6:5c:a5:df:25:24:e4:51:a3:dd:f4:f2:
         b7:02:ba:35:5c:e5:57:14:0e:58:d3:fd:4f:86:d1:9d:be:d7:
         ed:7a:c0:30:67:d0:7f:71:bc:31:72:c4:c8:77:76:6a:0f:a8:
         b2:55:36:1f:84:6b:89:85:54:1c:21:58:06:3c:63:05:f1:1b:
         3a:60:8a:47:5d:18:83:9f:70:dc:00:96:cd:02:2f:90:32:7a:
         8d:50:04:63:58:dd:26:b8:9c:cb:2d:26:b4:62:17:a2:0b:72:
         0e:9b:0a:7d:7b:c0:9e:ee:ed:68:42:25:85:97:08:eb:7e:20:
         52:db:41:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:33:53 2025 by rpki-client