Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft
File:                     72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft (raw, json)
Hash identifier:          xvLaB8ARa+mwvP8Tv0gQ3Jlvyr0Fpokfh9prtqBWYbE=
Subject key identifier:   32:88:FF:E0:8F:5E:C5:6C:32:79:8B:E9:18:B9:C2:D6:45:59:A1:7C
Authority key identifier: 72:CB:F8:70:1C:7C:0A:ED:63:F7:B6:95:5F:D6:EA:C6:5C:E3:2E:C5
Certificate issuer:       /CN=72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5
Certificate serial:       1A1459E85DD8E438C6E21D6E81F54E93BDC18AD5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft
Manifest number:          0124
Signing time:             Wed 17 Sep 2025 20:44:46 +0000
Manifest this update:     Wed 17 Sep 2025 20:39:46 +0000
Manifest next update:     Thu 18 Sep 2025 21:05:46 +0000
Files and hashes:         1: 323830343a393264633a3a2f33322d3336203d3e20323734373337.roa (hash: rKtywLS1zxT4+jk+4qBxZeJh+sNRpKnf9wjGS48HysM=)
                          2: 72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.crl (hash: 6Dooa8Y63cd9NPtiitQKVpDb4fxjfu87V4/mO+zXhfI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.crl
                          rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 21:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:14:59:e8:5d:d8:e4:38:c6:e2:1d:6e:81:f5:4e:93:bd:c1:8a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5
        Validity
            Not Before: Sep 17 20:39:46 2025 GMT
            Not After : Sep 18 21:05:46 2025 GMT
        Subject: CN=3288FFE08F5EC56C32798BE918B9C2D64559A17C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:27:1a:db:31:b3:d9:a2:84:2d:75:dd:ed:3c:
                    48:c4:31:c1:93:8d:8b:fd:d0:c4:4c:29:40:01:07:
                    35:93:23:b3:8b:90:15:50:18:00:4e:10:01:bb:33:
                    e6:72:2c:ad:0d:61:c6:4e:51:30:39:b7:c6:13:d2:
                    fa:f1:41:0b:c8:fe:48:6b:86:03:13:ef:5e:49:2d:
                    03:84:e2:12:fb:70:de:1e:bc:4e:4f:58:5b:10:ce:
                    a6:a3:8b:a9:97:6c:fc:d8:c9:91:01:0e:ab:25:5a:
                    45:57:ba:6d:2c:90:09:40:32:70:ea:d6:06:d7:16:
                    4f:0d:15:a5:b9:77:6c:e2:53:2f:05:af:0b:8e:0a:
                    13:b7:3e:76:53:f4:eb:d3:35:4e:9c:a4:d5:ee:0b:
                    90:5c:7b:02:21:e2:45:25:c2:f8:41:08:2f:ca:55:
                    b2:48:83:76:e7:a7:ae:a1:d3:70:be:f2:02:d7:76:
                    a9:71:d7:9c:c9:c4:95:4d:a5:48:89:85:95:23:51:
                    a9:68:a1:ab:b7:39:27:67:d9:2c:93:e6:7d:6a:2b:
                    8a:f2:5e:b3:4c:f0:2b:28:6f:66:50:be:0d:25:80:
                    73:c2:3d:e1:f9:1f:53:27:7a:6f:8a:10:b8:01:f5:
                    59:06:d6:2e:d5:2e:3c:76:f8:26:8b:ba:25:b1:cf:
                    8f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:88:FF:E0:8F:5E:C5:6C:32:79:8B:E9:18:B9:C2:D6:45:59:A1:7C
            X509v3 Authority Key Identifier:
                keyid:72:CB:F8:70:1C:7C:0A:ED:63:F7:B6:95:5F:D6:EA:C6:5C:E3:2E:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:ef:b8:90:fb:a1:85:33:1c:6a:51:d2:3f:88:a5:9a:87:3b:
         55:d4:80:37:d7:5a:a9:7a:c0:9a:97:3e:5b:d5:a0:5f:3a:90:
         e2:6b:78:f7:3a:6a:7c:3a:83:9b:8a:88:23:9b:69:44:80:e6:
         80:f9:cd:a9:e7:17:50:8e:ba:ab:08:66:66:c6:e0:3c:90:61:
         54:92:6a:66:7c:20:14:58:83:bc:34:9b:5b:05:af:ec:1b:90:
         66:9c:8a:1a:7f:a4:39:46:7a:0a:05:79:c1:27:7c:42:81:33:
         ee:43:f4:72:3b:27:16:01:44:f5:f6:bb:44:c6:d6:ad:32:6a:
         f0:2d:4a:fd:df:aa:f1:ce:34:24:60:5d:62:0e:40:26:73:05:
         cb:e4:ba:35:2d:61:41:c2:9f:7d:43:0b:ac:5a:3a:eb:2b:04:
         59:e3:c4:13:ac:65:18:85:76:aa:c9:6e:0e:80:ad:01:5d:91:
         3a:41:a7:84:8d:cd:a7:6a:ad:6c:3e:9d:22:fe:03:8b:91:ca:
         ab:f2:d4:7f:5b:76:fc:1d:f6:fd:77:11:c0:45:35:6c:1f:f3:
         95:1d:88:6f:4e:eb:4d:5b:98:3d:c3:fe:75:73:e1:c9:79:57:
         82:f3:f8:05:53:9f:4f:67:ef:66:74:ea:2b:11:c5:7e:21:69:
         6c:dd:b8:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGhRZ6F3Y5DjG4h1ugfVOk73BitUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJDQkY4NzAxQzdDMEFFRDYzRjdCNjk1NUZENkVBQzY1
Q0UzMkVDNTAeFw0yNTA5MTcyMDM5NDZaFw0yNTA5MTgyMTA1NDZaMDMxMTAvBgNV
BAMTKDMyODhGRkUwOEY1RUM1NkMzMjc5OEJFOTE4QjlDMkQ2NDU1OUExN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtJxrbMbPZooQtdd3tPEjEMcGT
jYv90MRMKUABBzWTI7OLkBVQGABOEAG7M+ZyLK0NYcZOUTA5t8YT0vrxQQvI/khr
hgMT715JLQOE4hL7cN4evE5PWFsQzqaji6mXbPzYyZEBDqslWkVXum0skAlAMnDq
1gbXFk8NFaW5d2ziUy8FrwuOChO3PnZT9OvTNU6cpNXuC5BcewIh4kUlwvhBCC/K
VbJIg3bnp66h03C+8gLXdqlx15zJxJVNpUiJhZUjUalooau3OSdn2SyT5n1qK4ry
XrNM8Csob2ZQvg0lgHPCPeH5H1Mnem+KELgB9VkG1i7VLjx2+CaLuiWxz4+pAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUMoj/4I9exWwyeYvpGLnC1kVZoXwwHwYDVR0j
BBgwFoAUcsv4cBx8Cu1j97aVX9bqxlzjLsUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREFObkQzVkhvYWlOWkx5dWNpS3NHQzc4S05KZzNpTVh3QTZCdk56bW4y
dkYvMC83MkNCRjg3MDFDN0MwQUVENjNGN0I2OTU1RkQ2RUFDNjVDRTMyRUM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyQ0JGODcwMUM3QzBBRUQ2
M0Y3QjY5NTVGRDZFQUM2NUNFMzJFQzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
REFObkQzVkhvYWlOWkx5dWNpS3NHQzc4S05KZzNpTVh3QTZCdk56bW4ydkYvMC83
MkNCRjg3MDFDN0MwQUVENjNGN0I2OTU1RkQ2RUFDNjVDRTMyRUM1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAue+4kPuhhTMcalHSP4ilmoc7VdSAN9daqXrAmpc+W9WgXzqQ4mt49zpqfDqD
m4qII5tpRIDmgPnNqecXUI66qwhmZsbgPJBhVJJqZnwgFFiDvDSbWwWv7BuQZpyK
Gn+kOUZ6CgV5wSd8QoEz7kP0cjsnFgFE9fa7RMbWrTJq8C1K/d+q8c40JGBdYg5A
JnMFy+S6NS1hQcKffUMLrFo66ysEWePEE6xlGIV2qsluDoCtAV2ROkGnhI3Np2qt
bD6dIv4Di5HKq/LUf1t2/B32/XcRwEU1bB/zlR2Ib07rTVuYPcP+dXPhyXlXgvP4
BVOfT2fvZnTqKxHFfiFpbN24uQ==
-----END CERTIFICATE-----
Generated at Thu Sep 18 06:27:32 2025 by rpki-client