Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.mft
File:                     1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.mft (raw, json)
Hash identifier:          XELB0y0s1r38ht3ZAd8TlxasJCFZdAL2qEcDSe9z3X4=
Subject key identifier:   E4:B8:14:8B:C3:F2:90:15:E7:67:D9:8B:FF:D9:E7:FF:11:6F:DE:DB
Authority key identifier: 17:71:F2:F1:D3:DC:9A:42:A4:0D:80:A5:3E:AB:BA:06:2A:2A:10:77
Certificate issuer:       /CN=1771F2F1D3DC9A42A40D80A53EABBA062A2A1077
Certificate serial:       44707578569A6BD40D78E257A313B13EF0258041
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.mft
Manifest number:          02FE
Signing time:             Sun 02 Nov 2025 23:16:32 +0000
Manifest this update:     Sun 02 Nov 2025 23:11:32 +0000
Manifest next update:     Tue 04 Nov 2025 01:34:32 +0000
Files and hashes:         1: 34352e3136392e3130382e302f32322d3232203d3e20323638313036.roa (hash: HRIFIXR+Odn0MUafWH8W47f/3XMmPXutomNcd7lndD4=)
                          2: 323830343a353831383a3a2f33332d3334203d3e20323638313036.roa (hash: 9Qd0HCvUJwRFtv8BW7GOfuskXH0ApKQ6nwZGuKnI7WQ=)
                          3: 323830343a353831383a3a2f33322d3332203d3e20323638313036.roa (hash: Gs3Skx23xQtoewrG1jwmU087tXunvOCPLG6s00k0+Rg=)
                          4: 34352e3136392e3131302e302f32332d3234203d3e20323638313036.roa (hash: aZaNiAdEzVoVrsAv+0YVnLNk0KBhZ7WZpiXCAzZMDOo=)
                          5: 34352e3136392e3130382e302f32332d3234203d3e20323638313036.roa (hash: qAEx6F+2KODCey+Ohju8E+Lpf3m8tuS3Va6XNAbuYIU=)
                          6: 323830343a353831383a383030303a3a2f33332d3334203d3e20323638313036.roa (hash: vNjuQwwKUL+izxlCLRsfIJ/mNXJFuAJrwBuffk2Ue3g=)
                          7: 1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.crl (hash: snPkvA6zGymGO3tyEz+Op0+r1Ov098O5zNgHfYnxjec=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.crl
                          rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 01:34:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:70:75:78:56:9a:6b:d4:0d:78:e2:57:a3:13:b1:3e:f0:25:80:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1771F2F1D3DC9A42A40D80A53EABBA062A2A1077
        Validity
            Not Before: Nov  2 23:11:32 2025 GMT
            Not After : Nov  4 01:34:32 2025 GMT
        Subject: CN=E4B8148BC3F29015E767D98BFFD9E7FF116FDEDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f8:bc:7d:12:f7:2a:09:bd:d7:45:9e:ce:78:
                    13:79:0c:de:66:bc:4f:c0:e8:91:5b:47:23:90:01:
                    cc:01:92:be:66:a2:0d:3e:8b:d3:bb:b5:51:35:7f:
                    19:a3:5e:ed:3c:84:44:0e:13:a6:70:26:7f:59:41:
                    e5:80:74:b2:b0:1d:4f:35:f3:75:a9:d8:c6:dc:b1:
                    f1:96:76:d1:3f:40:f6:e1:6f:e9:b5:3e:7d:78:11:
                    cf:7b:0b:05:02:83:75:68:c9:6c:55:8f:f0:ab:10:
                    69:2e:19:05:79:67:3a:c5:ed:9b:d3:b5:54:eb:7e:
                    98:ff:6f:65:31:0e:dc:56:24:e5:1f:23:ed:45:3c:
                    36:05:ef:04:e6:57:04:cb:9c:c0:aa:26:d5:92:78:
                    4d:f6:a4:19:05:c2:e4:43:9c:85:1d:88:30:4b:4a:
                    8b:0d:19:57:f2:02:cd:0f:d1:cf:91:d1:75:c3:72:
                    62:0e:a0:db:11:0f:0a:30:e8:54:90:fd:16:3a:b3:
                    37:4d:ce:1c:be:32:75:e3:56:8f:c9:cd:45:fe:05:
                    1a:21:d7:c6:95:05:40:05:32:3e:c5:a0:14:6e:a8:
                    d3:04:6d:7a:fb:ad:6c:0f:83:b1:3e:c2:e1:83:29:
                    88:e9:01:c1:b8:97:4c:51:1c:51:64:9e:0d:40:9d:
                    78:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B8:14:8B:C3:F2:90:15:E7:67:D9:8B:FF:D9:E7:FF:11:6F:DE:DB
            X509v3 Authority Key Identifier:
                keyid:17:71:F2:F1:D3:DC:9A:42:A4:0D:80:A5:3E:AB:BA:06:2A:2A:10:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/1/1771F2F1D3DC9A42A40D80A53EABBA062A2A1077.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:01:2b:4d:c0:82:54:20:18:59:d6:16:03:8b:2d:04:03:ce:
         71:f8:05:4d:54:69:a7:56:62:9a:9c:15:a7:26:fe:93:28:cb:
         2d:43:ac:ba:89:24:41:11:be:c9:05:da:7e:4e:67:52:26:51:
         a6:d1:ec:22:ea:fe:74:9a:91:df:f6:d9:50:d3:6e:06:cf:76:
         d9:c7:0d:79:a6:5c:ac:12:29:91:4a:93:32:37:ec:3a:27:1d:
         b9:06:f2:17:0e:17:3e:69:1c:b6:cb:e8:3e:50:82:a7:28:90:
         3b:9d:bf:36:ab:84:21:16:bf:20:3d:67:6e:30:77:44:fd:87:
         c8:fe:8e:b4:e5:69:5d:fc:df:b4:8b:f2:63:38:5f:a0:1b:22:
         1f:23:31:86:43:68:42:92:5c:4b:25:10:9f:ea:0f:0a:99:48:
         cb:34:3f:f3:1e:65:a7:4a:60:35:64:e0:ae:dd:5d:23:33:5d:
         84:06:80:58:05:bd:b4:5d:38:ed:34:3a:3e:07:87:92:62:ea:
         fc:8a:79:85:05:c1:92:41:e4:0e:bd:4a:3b:e9:66:35:e5:0e:
         51:b9:f5:66:28:11:97:92:7f:fa:cb:bb:cc:dc:26:1b:fa:d0:
         bf:ed:7c:b4:c1:dc:e4:94:b2:7c:23:56:0c:a6:4c:99:dc:4c:
         c8:95:3e:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURHB1eFaaa9QNeOJXoxOxPvAlgEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc3MUYyRjFEM0RDOUE0MkE0MEQ4MEE1M0VBQkJBMDYy
QTJBMTA3NzAeFw0yNTExMDIyMzExMzJaFw0yNTExMDQwMTM0MzJaMDMxMTAvBgNV
BAMTKEU0QjgxNDhCQzNGMjkwMTVFNzY3RDk4QkZGRDlFN0ZGMTE2RkRFREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx+Lx9EvcqCb3XRZ7OeBN5DN5m
vE/A6JFbRyOQAcwBkr5mog0+i9O7tVE1fxmjXu08hEQOE6ZwJn9ZQeWAdLKwHU81
83Wp2MbcsfGWdtE/QPbhb+m1Pn14Ec97CwUCg3VoyWxVj/CrEGkuGQV5ZzrF7ZvT
tVTrfpj/b2UxDtxWJOUfI+1FPDYF7wTmVwTLnMCqJtWSeE32pBkFwuRDnIUdiDBL
SosNGVfyAs0P0c+R0XXDcmIOoNsRDwow6FSQ/RY6szdNzhy+MnXjVo/JzUX+BRoh
18aVBUAFMj7FoBRuqNMEbXr7rWwPg7E+wuGDKYjpAcG4l0xRHFFkng1AnXgZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU5LgUi8PykBXnZ9mL/9nn/xFv3tswHwYDVR0j
BBgwFoAUF3Hy8dPcmkKkDYClPqu6BioqEHcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlJaZHBUMWpxVWtxVm5Qdld1V2ZlWXVReGdTUzYzdkNSRjJFZjg2b2Y4
bncvMS8xNzcxRjJGMUQzREM5QTQyQTQwRDgwQTUzRUFCQkEwNjJBMkExMDc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3NzFGMkYxRDNEQzlBNDJB
NDBEODBBNTNFQUJCQTA2MkEyQTEwNzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QlJaZHBUMWpxVWtxVm5Qdld1V2ZlWXVReGdTUzYzdkNSRjJFZjg2b2Y4bncvMS8x
NzcxRjJGMUQzREM5QTQyQTQwRDgwQTUzRUFCQkEwNjJBMkExMDc3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWAErTcCCVCAYWdYWA4stBAPOcfgFTVRpp1ZimpwVpyb+kyjLLUOsuokkQRG+
yQXafk5nUiZRptHsIur+dJqR3/bZUNNuBs922ccNeaZcrBIpkUqTMjfsOicduQby
Fw4XPmkctsvoPlCCpyiQO52/NquEIRa/ID1nbjB3RP2HyP6OtOVpXfzftIvyYzhf
oBsiHyMxhkNoQpJcSyUQn+oPCplIyzQ/8x5lp0pgNWTgrt1dIzNdhAaAWAW9tF04
7TQ6PgeHkmLq/Ip5hQXBkkHkDr1KO+lmNeUOUbn1ZigRl5J/+su7zNwmG/rQv+18
tMHc5JSyfCNWDKZMmdxMyJU+CQ==
-----END CERTIFICATE-----
Generated at Mon Nov 3 12:33:59 2025 by rpki-client