Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.mft
File:                     4F13601ED15DE77633F89012A7D2AD0E725C8891.mft (raw, json)
Hash identifier:          HqltKwREXqKBbWHDlocxzEqWZ9Qp3b1UGlu38HoFb9k=
Subject key identifier:   B5:14:D1:C5:16:AB:1E:48:EA:63:39:5A:4F:FB:08:00:07:7F:87:51
Authority key identifier: 4F:13:60:1E:D1:5D:E7:76:33:F8:90:12:A7:D2:AD:0E:72:5C:88:91
Certificate issuer:       /CN=4F13601ED15DE77633F89012A7D2AD0E725C8891
Certificate serial:       0398E814B297AA9BE151CD6A3AD347138BCC5B69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F13601ED15DE77633F89012A7D2AD0E725C8891.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.mft
Manifest number:          029A
Signing time:             Mon 03 Nov 2025 06:08:03 +0000
Manifest this update:     Mon 03 Nov 2025 06:03:03 +0000
Manifest next update:     Tue 04 Nov 2025 06:47:03 +0000
Files and hashes:         1: 323830343a386662633a3a2f33322d313238203d3e20323733353038.roa (hash: PgnAjQjtCXsOdg7BLRWirXsf07CcpSkOYKeceD7ZWuo=)
                          2: 4F13601ED15DE77633F89012A7D2AD0E725C8891.crl (hash: i+lm4clu1mS1HemWN+QFOzu/hUwP906EhNHzKjxMw1k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.crl
                          rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F13601ED15DE77633F89012A7D2AD0E725C8891.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 06:47:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:98:e8:14:b2:97:aa:9b:e1:51:cd:6a:3a:d3:47:13:8b:cc:5b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F13601ED15DE77633F89012A7D2AD0E725C8891
        Validity
            Not Before: Nov  3 06:03:03 2025 GMT
            Not After : Nov  4 06:47:03 2025 GMT
        Subject: CN=B514D1C516AB1E48EA63395A4FFB0800077F8751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a5:3d:21:35:ed:65:a4:6a:0a:e9:fc:d7:9f:
                    c7:8e:5b:55:73:32:58:ca:90:10:fb:6b:8f:65:83:
                    85:96:d1:4e:81:1e:a2:96:4b:e9:70:09:24:01:94:
                    f4:10:3d:81:99:b6:88:95:ca:df:91:c7:28:eb:c9:
                    29:6d:77:88:df:f9:b8:95:8b:e1:7a:e9:e1:e9:4b:
                    07:5e:a9:bb:d8:fa:a6:02:16:ba:18:d8:dd:ee:77:
                    ae:b2:94:e2:e1:61:19:63:e7:fd:5c:78:d6:c3:83:
                    2e:8d:84:3b:24:8d:01:56:05:ef:80:2c:3f:29:ca:
                    08:11:10:1b:3e:5b:fc:9a:8f:0e:c5:e6:31:a3:87:
                    59:e6:78:fe:ad:b8:03:34:09:66:52:15:98:9a:30:
                    6d:9b:3b:39:63:bf:62:a4:94:d3:73:99:59:15:81:
                    24:2a:3d:da:5a:ff:0b:08:77:87:9a:a7:28:d3:e8:
                    bb:fb:c1:10:9c:97:ec:3f:bb:6b:6d:d6:a3:3d:67:
                    d0:2d:08:db:43:7e:33:c3:ea:7f:be:a7:59:29:ce:
                    6a:71:01:2f:87:9d:24:4a:d2:ac:23:f4:3e:b5:e0:
                    b0:eb:4f:77:64:cd:d8:f5:f4:81:2a:99:43:39:e5:
                    76:61:d9:83:c5:80:40:a3:20:8d:39:e2:f1:67:2f:
                    f4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:14:D1:C5:16:AB:1E:48:EA:63:39:5A:4F:FB:08:00:07:7F:87:51
            X509v3 Authority Key Identifier:
                keyid:4F:13:60:1E:D1:5D:E7:76:33:F8:90:12:A7:D2:AD:0E:72:5C:88:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F13601ED15DE77633F89012A7D2AD0E725C8891.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:78:73:cc:33:67:83:69:94:7e:92:dc:e0:b3:02:05:78:9a:
         40:ff:f7:64:dc:ab:89:5a:31:51:33:78:22:7e:ad:74:89:2c:
         b2:3d:ed:82:51:d6:e4:5a:df:4c:c0:3c:16:53:f7:06:46:38:
         08:73:77:fd:8d:e5:8f:40:09:1f:6a:a7:77:aa:b0:60:79:52:
         45:5a:ed:59:1c:62:0e:19:0a:79:0d:07:81:9c:7c:1a:43:86:
         ca:97:b8:10:08:2c:aa:09:65:0a:35:91:51:3d:0c:a1:ff:8b:
         3c:b7:a6:af:97:00:9f:71:2c:45:00:4d:97:f6:04:01:7c:e6:
         92:ea:ca:7a:21:e8:d1:5f:60:11:49:a4:d7:43:92:5e:1a:b8:
         82:a2:a0:f6:95:43:71:89:be:c4:1d:d5:0e:dc:0c:d7:c9:36:
         7a:aa:01:bd:79:e2:43:c4:2c:6d:45:23:4c:7d:b0:57:ff:b5:
         c5:c3:40:24:a4:91:aa:dd:92:96:40:2e:92:51:1c:08:1f:59:
         42:ca:40:02:69:80:3a:77:b5:45:dd:2b:dc:56:94:f3:65:e0:
         a9:d1:7f:ad:16:28:89:9d:75:7d:94:48:95:65:97:6e:c2:f0:
         36:e2:87:87:1b:a0:96:bd:4f:11:d7:1c:4c:b0:60:6b:4e:b8:
         ad:26:d2:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUA5joFLKXqpvhUc1qOtNHE4vMW2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEYxMzYwMUVEMTVERTc3NjMzRjg5MDEyQTdEMkFEMEU3
MjVDODg5MTAeFw0yNTExMDMwNjAzMDNaFw0yNTExMDQwNjQ3MDNaMDMxMTAvBgNV
BAMTKEI1MTREMUM1MTZBQjFFNDhFQTYzMzk1QTRGRkIwODAwMDc3Rjg3NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBpT0hNe1lpGoK6fzXn8eOW1Vz
MljKkBD7a49lg4WW0U6BHqKWS+lwCSQBlPQQPYGZtoiVyt+RxyjrySltd4jf+biV
i+F66eHpSwdeqbvY+qYCFroY2N3ud66ylOLhYRlj5/1ceNbDgy6NhDskjQFWBe+A
LD8pyggREBs+W/yajw7F5jGjh1nmeP6tuAM0CWZSFZiaMG2bOzljv2KklNNzmVkV
gSQqPdpa/wsId4eapyjT6Lv7wRCcl+w/u2tt1qM9Z9AtCNtDfjPD6n++p1kpzmpx
AS+HnSRK0qwj9D614LDrT3dkzdj19IEqmUM55XZh2YPFgECjII054vFnL/TVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtRTRxRarHkjqYzlaT/sIAAd/h1EwHwYDVR0j
BBgwFoAUTxNgHtFd53Yz+JASp9KtDnJciJEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlpVVUZ2dmZ6THJOblpuTjFNaGVOMkJwemtiWVhKOThtYnVnWmpFR2pC
Z1IvMC80RjEzNjAxRUQxNURFNzc2MzNGODkwMTJBN0QyQUQwRTcyNUM4ODkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGMTM2MDFFRDE1REU3NzYz
M0Y4OTAxMkE3RDJBRDBFNzI1Qzg4OTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QlpVVUZ2dmZ6THJOblpuTjFNaGVOMkJwemtiWVhKOThtYnVnWmpFR2pCZ1IvMC80
RjEzNjAxRUQxNURFNzc2MzNGODkwMTJBN0QyQUQwRTcyNUM4ODkxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABHhzzDNng2mUfpLc4LMCBXiaQP/3ZNyriVoxUTN4In6tdIkssj3tglHW5Frf
TMA8FlP3BkY4CHN3/Y3lj0AJH2qnd6qwYHlSRVrtWRxiDhkKeQ0HgZx8GkOGype4
EAgsqgllCjWRUT0Mof+LPLemr5cAn3EsRQBNl/YEAXzmkurKeiHo0V9gEUmk10OS
Xhq4gqKg9pVDcYm+xB3VDtwM18k2eqoBvXniQ8QsbUUjTH2wV/+1xcNAJKSRqt2S
lkAuklEcCB9ZQspAAmmAOne1Rd0r3FaU82XgqdF/rRYoiZ11fZRIlWWXbsLwNuKH
hxuglr1PEdccTLBga064rSbSsw==
-----END CERTIFICATE-----
Generated at Mon Nov 3 12:34:42 2025 by rpki-client