Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft
File:                     296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft (raw, json)
Hash identifier:          aezbt/lqjznfHKEMKNDPpVLDDSJePO09oGqi6WpkATw=
Subject key identifier:   77:79:2C:C1:70:AD:4C:98:93:DF:7B:BA:3C:66:BA:91:EA:0A:1E:C0
Authority key identifier: 29:69:92:94:1B:F1:0D:57:1C:BD:C8:A1:6F:88:FF:51:FA:D9:B5:2C
Certificate issuer:       /CN=296992941BF10D571CBDC8A16F88FF51FAD9B52C
Certificate serial:       F9AF2D69EB0912788DCB2AD46EFA753CB4433C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft
Manifest number:          2F
Signing time:             Mon 03 Nov 2025 02:15:02 +0000
Manifest this update:     Mon 03 Nov 2025 02:10:02 +0000
Manifest next update:     Tue 04 Nov 2025 03:31:02 +0000
Files and hashes:         1: 34352e3136372e33302e302f32342d3234203d3e20323637393832.roa (hash: frGYKa8SaoBTvjw98PkiUOVzVKuiSv3XydiaAkXkCzo=)
                          2: 323830343a353633303a3a2f33322d3332203d3e20323637393832.roa (hash: /7V5NdPBrVLXq/Ni3PZU5zqBLe7E2WqF6r8EsPREJcc=)
                          3: 323830343a353633303a383030303a3a2f33342d3334203d3e20323637393832.roa (hash: e2Pv5RMrLEWnZedVRmHvF3K76dksCIU3TDeqXumy11A=)
                          4: 323830343a353633303a343030303a3a2f33342d3334203d3e20323637393832.roa (hash: f9oD6suBN2i0icLEQlb7kKJnqSku0tyk+HCPKJWJ+js=)
                          5: 34352e3136372e32382e302f32322d3232203d3e20323637393832.roa (hash: 8F6avyfAtGRsXclQrkpjm5tfq/ubrZthAH7j+V6RYPk=)
                          6: 296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl (hash: 7kW2F4K3cNUHKCKyxHXqpNnR7/u3dCrkX9uX4usi/C0=)
                          7: 34352e3136372e32392e302f32342d3234203d3e20323637393832.roa (hash: SIbrx2B5742GrdoaylzjlpV8dfnFISkAsYh8SJnHtrY=)
                          8: 323830343a353633303a3a2f33342d3334203d3e20323637393832.roa (hash: ai66r+DzujauIIE3JHyH3QPR6xaWx0fDbGIYITmfag0=)
                          9: 34352e3136372e32382e302f32342d3234203d3e20323637393832.roa (hash: ucC5snWhg5qA4rU4vbaD94g5k/dGiPGR9drh36AdBfk=)
                          10: 323830343a353633303a633030303a3a2f33342d3334203d3e20323637393832.roa (hash: QSUi8Vt1LKIJgkkIiqtTxGUdWoSTA+GYlOfGbKnTE/Y=)
                          11: 34352e3136372e33312e302f32342d3234203d3e20323637393832.roa (hash: +OID8zmPwy3mT3bvb0BNuZ4L5qjoc2Ytnj/J/WbPfUg=)
                          12: 34352e3136372e32382e302f32322d3232203d3e20323730393330.roa (hash: ccsZ0NYjs+21pPs2m+lFpbFDcE/aeNoeXMBC189LKCw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl
                          rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 03:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f9:af:2d:69:eb:09:12:78:8d:cb:2a:d4:6e:fa:75:3c:b4:43:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296992941BF10D571CBDC8A16F88FF51FAD9B52C
        Validity
            Not Before: Nov  3 02:10:02 2025 GMT
            Not After : Nov  4 03:31:02 2025 GMT
        Subject: CN=77792CC170AD4C9893DF7BBA3C66BA91EA0A1EC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d2:99:cd:53:cd:c9:94:f0:f1:da:de:dc:b3:
                    07:a8:b7:1e:87:7e:a1:e6:7a:28:ab:8d:e1:5c:aa:
                    de:25:76:99:73:ba:89:e5:ae:34:90:24:a2:24:2c:
                    c3:b0:98:9f:14:c7:70:45:b9:1a:75:59:e2:19:e4:
                    73:1b:5b:0a:e1:9e:21:f6:04:11:30:e7:18:5e:99:
                    60:1a:99:ec:a2:3a:10:b6:1a:0f:34:a9:22:18:f4:
                    9c:e5:a6:08:9f:28:6e:e5:3d:c9:84:11:3c:73:a6:
                    7b:ea:50:59:81:e7:5f:b2:87:57:20:98:1c:b9:ac:
                    52:d8:9a:ac:a8:d1:0d:2b:90:86:4e:48:35:2d:ca:
                    17:f1:84:d2:c3:a9:85:6d:96:d9:3c:53:4f:e7:34:
                    85:8a:82:fb:a1:3c:05:68:5c:69:f9:14:8a:8c:9f:
                    92:da:f5:b0:ef:bb:d9:69:87:d9:65:73:ea:19:59:
                    bc:f0:2f:5a:62:6e:aa:90:79:fe:44:3f:15:61:c1:
                    e9:81:ae:68:82:05:f9:0d:07:35:6c:9c:e6:5a:fd:
                    33:63:34:a3:e6:f1:bd:8d:8d:55:f1:34:0b:62:1d:
                    8e:83:2f:ca:da:c7:83:18:79:74:61:4f:52:92:24:
                    5c:92:e7:b1:46:49:ee:9e:d4:9c:13:09:fd:cd:54:
                    8d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:79:2C:C1:70:AD:4C:98:93:DF:7B:BA:3C:66:BA:91:EA:0A:1E:C0
            X509v3 Authority Key Identifier:
                keyid:29:69:92:94:1B:F1:0D:57:1C:BD:C8:A1:6F:88:FF:51:FA:D9:B5:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f9:2a:7d:8f:6c:96:3c:32:65:a9:50:47:91:aa:18:84:29:
         98:2b:66:58:33:b5:b3:03:a8:b3:2b:4e:f1:48:28:c2:d7:77:
         eb:82:9a:49:c8:2e:8c:36:bb:4a:bc:90:aa:36:49:40:06:86:
         f7:f5:c3:e2:a4:82:86:60:47:19:f7:ef:15:8e:39:93:aa:49:
         9c:2e:0c:8c:92:58:32:d2:a2:67:fb:7b:ad:65:34:7d:fb:d7:
         c7:7d:26:51:b3:4f:22:88:45:fd:63:6f:94:ee:2b:0b:bc:22:
         6f:b5:a5:6b:0c:6c:b7:c9:60:c7:fc:8f:7e:7c:b7:9e:73:ab:
         ff:2a:4d:b6:8c:9d:92:bd:34:0f:51:6a:f8:9e:a4:1b:3c:f6:
         11:2c:30:ce:86:d8:57:d0:6b:80:78:14:ae:14:c4:65:dc:c5:
         1b:77:c7:fc:3b:72:15:b4:9f:1b:29:b8:17:12:81:ad:6c:67:
         6d:15:ed:b1:95:f3:63:b5:91:c2:f0:16:49:dc:f7:64:12:88:
         00:b8:cc:a5:30:85:14:52:4d:d7:2e:aa:4c:90:ba:34:f4:ac:
         ef:f1:16:c2:88:99:f4:43:2d:cd:83:58:19:4d:ff:cd:4e:b8:
         34:13:63:cd:91:46:e9:ca:77:e7:b1:7f:1c:24:43:4a:e3:b4:
         dc:3b:96:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:52:56 2025 by rpki-client