Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/D55010182054388E254F328BAFF30FFD368EBB1A.mft
File:                     D55010182054388E254F328BAFF30FFD368EBB1A.mft (raw, json)
Hash identifier:          cSC/LFJDq3jS5XJtAzZwPA8EJaFv9OAEo2qIlaie1Po=
Subject key identifier:   41:EE:1E:90:A5:6F:7A:21:74:95:6D:55:D0:06:85:B0:69:E5:A3:E2
Authority key identifier: D5:50:10:18:20:54:38:8E:25:4F:32:8B:AF:F3:0F:FD:36:8E:BB:1A
Certificate issuer:       /CN=D55010182054388E254F328BAFF30FFD368EBB1A
Certificate serial:       1AB59D430537C15432D6617DCD384FAE43438510
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55010182054388E254F328BAFF30FFD368EBB1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/D55010182054388E254F328BAFF30FFD368EBB1A.mft
Manifest number:          E3
Signing time:             Sun 02 Nov 2025 18:46:23 +0000
Manifest this update:     Sun 02 Nov 2025 18:41:23 +0000
Manifest next update:     Mon 03 Nov 2025 21:56:23 +0000
Files and hashes:         1: 3138372e36332e3132362e302f32342d3234203d3e20323730373738.roa (hash: gkr3RmwHeCjlKAVaf2wQNNCFVMup6CzbpUTAOiiWRvs=)
                          2: 3138372e36332e3132372e302f32342d3234203d3e20323730373738.roa (hash: fCcAikJU6rG8ZMGak3QUnnBE+DswiYP7lPoqAnEVOqQ=)
                          3: D55010182054388E254F328BAFF30FFD368EBB1A.crl (hash: RcckldxWr8IszaSoe8oVnY33RnQupqCGiEQqP9VZo5g=)
                          4: 3138372e36332e3132352e302f32342d3234203d3e20323730373738.roa (hash: wLlRE/bBDRjOTpIbcKh7/kdsEFb30glXdL0nhGrH1m4=)
                          5: 323830343a373134343a3a2f33322d3332203d3e20323730373738.roa (hash: eUUAV/o89PUwXSfW88RtuJOloh0MdxVpC/960LuPnaE=)
                          6: 3138372e36332e3132342e302f32342d3234203d3e20323730373738.roa (hash: b9oXD4hcE42R6/YMwLvMoYaXYemQVR2uCQRjOrH/sSU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/D55010182054388E254F328BAFF30FFD368EBB1A.crl
                          rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/D55010182054388E254F328BAFF30FFD368EBB1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55010182054388E254F328BAFF30FFD368EBB1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Nov 2025 21:56:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b5:9d:43:05:37:c1:54:32:d6:61:7d:cd:38:4f:ae:43:43:85:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55010182054388E254F328BAFF30FFD368EBB1A
        Validity
            Not Before: Nov  2 18:41:23 2025 GMT
            Not After : Nov  3 21:56:23 2025 GMT
        Subject: CN=41EE1E90A56F7A2174956D55D00685B069E5A3E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:35:b0:fa:94:5d:a4:7c:e4:cc:b2:34:69:d3:
                    d3:72:08:a9:31:cb:90:1d:2d:7e:97:95:90:85:54:
                    c4:6b:74:10:2d:a8:04:a5:90:0d:a5:d5:31:9b:65:
                    ea:b5:d4:a5:64:df:b3:6e:59:d5:da:b5:e7:b9:17:
                    19:5e:fc:00:7b:1c:0b:66:0a:5a:04:53:46:c9:0d:
                    1b:69:4f:da:98:74:1e:62:67:1f:7e:41:14:03:be:
                    12:00:4f:cf:bd:c0:b9:23:7f:28:cb:23:cb:e3:02:
                    8b:87:5a:79:1f:a7:4e:76:4e:e1:eb:72:68:30:1a:
                    af:d8:b5:19:10:17:3a:e3:2b:1a:9d:c0:e1:06:dd:
                    77:b8:b1:34:44:2a:f2:85:9e:0b:88:50:5b:f2:2a:
                    b2:88:e3:60:b4:e9:80:49:e7:e7:5c:c4:91:90:61:
                    98:f2:c1:db:19:85:64:31:8b:74:9a:0d:d3:fa:2e:
                    71:35:64:95:9e:3b:91:4f:25:f2:cb:60:08:cd:17:
                    e2:33:16:f1:0b:94:c2:c5:06:02:72:d2:a5:48:86:
                    e7:c2:b2:e6:7b:df:0b:e5:65:c3:f3:7e:ee:a6:9c:
                    62:ce:65:49:2c:69:c8:6e:57:86:a5:f7:fc:00:69:
                    1b:48:b5:de:79:97:30:cf:e0:e3:4a:19:a5:6d:24:
                    a2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EE:1E:90:A5:6F:7A:21:74:95:6D:55:D0:06:85:B0:69:E5:A3:E2
            X509v3 Authority Key Identifier:
                keyid:D5:50:10:18:20:54:38:8E:25:4F:32:8B:AF:F3:0F:FD:36:8E:BB:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/D55010182054388E254F328BAFF30FFD368EBB1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55010182054388E254F328BAFF30FFD368EBB1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/D55010182054388E254F328BAFF30FFD368EBB1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7d:5f:67:7b:b5:f5:e9:0d:2e:23:a6:9c:0f:5a:4e:e0:00:
         e4:58:3d:60:5a:c7:77:7b:9e:ec:24:00:51:b0:3d:07:aa:39:
         5c:9f:b6:7f:33:41:ae:be:12:9f:39:e2:87:9b:19:bf:bb:8a:
         78:d4:ca:d9:b6:5d:37:bb:3a:88:5d:09:ad:38:d6:48:57:1f:
         e7:cc:22:05:a9:45:44:29:59:d3:40:a4:8e:7e:fd:d1:d9:9d:
         b8:a4:53:8d:59:2d:f5:65:71:8d:c2:eb:e3:b5:08:46:0c:7f:
         c5:8e:4d:e0:0a:1f:d8:80:c4:06:06:d5:ab:95:3b:5a:62:3e:
         62:21:98:55:e4:a6:cd:ca:eb:5c:75:29:9d:b3:52:3f:2d:65:
         71:95:51:d5:6c:9c:e9:31:a1:cf:63:0c:6e:83:f5:50:ec:fc:
         3d:89:76:c7:fb:d3:be:ca:5d:32:09:27:8c:39:b3:0c:b0:07:
         b9:18:77:ee:fe:f1:9c:5c:ce:59:a1:97:cb:71:bb:5e:30:2e:
         55:07:97:1a:f8:62:33:ab:9f:44:7c:25:72:30:bc:88:04:58:
         4b:d5:3e:0e:ce:5c:8a:55:10:3d:0b:6a:59:86:d4:b2:19:7b:
         d4:b0:16:67:9a:79:ca:bb:4b:44:a1:16:33:a4:10:71:6e:e4:
         3e:f5:74:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGrWdQwU3wVQy1mF9zThPrkNDhRAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU1MDEwMTgyMDU0Mzg4RTI1NEYzMjhCQUZGMzBGRkQz
NjhFQkIxQTAeFw0yNTExMDIxODQxMjNaFw0yNTExMDMyMTU2MjNaMDMxMTAvBgNV
BAMTKDQxRUUxRTkwQTU2RjdBMjE3NDk1NkQ1NUQwMDY4NUIwNjlFNUEzRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfNbD6lF2kfOTMsjRp09NyCKkx
y5AdLX6XlZCFVMRrdBAtqASlkA2l1TGbZeq11KVk37NuWdXatee5Fxle/AB7HAtm
CloEU0bJDRtpT9qYdB5iZx9+QRQDvhIAT8+9wLkjfyjLI8vjAouHWnkfp052TuHr
cmgwGq/YtRkQFzrjKxqdwOEG3Xe4sTREKvKFnguIUFvyKrKI42C06YBJ5+dcxJGQ
YZjywdsZhWQxi3SaDdP6LnE1ZJWeO5FPJfLLYAjNF+IzFvELlMLFBgJy0qVIhufC
suZ73wvlZcPzfu6mnGLOZUksachuV4al9/wAaRtItd55lzDP4ONKGaVtJKJ5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQe4ekKVveiF0lW1V0AaFsGnlo+IwHwYDVR0j
BBgwFoAU1VAQGCBUOI4lTzKLr/MP/TaOuxowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRE1mM0FvTEdteG9odVR1TnBTSkw1cVJXTFdZZ2dYNGV3RGRXUmZuc1ZC
Rm0vMC9ENTUwMTAxODIwNTQzODhFMjU0RjMyOEJBRkYzMEZGRDM2OEVCQjFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1NTAxMDE4MjA1NDM4OEUy
NTRGMzI4QkFGRjMwRkZEMzY4RUJCMUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RE1mM0FvTEdteG9odVR1TnBTSkw1cVJXTFdZZ2dYNGV3RGRXUmZuc1ZCRm0vMC9E
NTUwMTAxODIwNTQzODhFMjU0RjMyOEJBRkYzMEZGRDM2OEVCQjFBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOX1fZ3u19ekNLiOmnA9aTuAA5Fg9YFrHd3ue7CQAUbA9B6o5XJ+2fzNBrr4S
nznih5sZv7uKeNTK2bZdN7s6iF0JrTjWSFcf58wiBalFRClZ00Ckjn790dmduKRT
jVkt9WVxjcLr47UIRgx/xY5N4Aof2IDEBgbVq5U7WmI+YiGYVeSmzcrrXHUpnbNS
Py1lcZVR1Wyc6TGhz2MMboP1UOz8PYl2x/vTvspdMgknjDmzDLAHuRh37v7xnFzO
WaGXy3G7XjAuVQeXGvhiM6ufRHwlcjC8iARYS9U+Ds5cilUQPQtqWYbUshl71LAW
Z5p5yrtLRKEWM6QQcW7kPvV0Vg==
-----END CERTIFICATE-----
Generated at Mon Nov 3 12:31:39 2025 by rpki-client