Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft
File:                     D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft (raw, json)
Hash identifier:          W7EJpkXZ5R449fWIvp5hf8LRafhssm9H74DZuQsFeuk=
Subject key identifier:   78:A4:3E:85:0B:2E:37:09:05:FB:CA:0E:0B:08:BD:B8:F6:EE:E9:5F
Authority key identifier: D7:31:01:88:F9:E2:12:C8:3E:92:DE:1C:5E:BB:FE:55:EB:88:CE:9B
Certificate issuer:       /CN=D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B
Certificate serial:       39E91572185D5FE6D1FA5835292FBD7748EEFCD6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft
Manifest number:          87
Signing time:             Mon 03 Nov 2025 02:20:25 +0000
Manifest this update:     Mon 03 Nov 2025 02:15:25 +0000
Manifest next update:     Tue 04 Nov 2025 03:14:25 +0000
Files and hashes:         1: 34352e3138322e33322e302f32322d3232203d3e20323639323635.roa (hash: pCzDonosnG1M/FMYP6mGKnR9D//kOSapxlVj/nSW3nk=)
                          2: 34352e3138322e33322e302f32342d3234203d3e20323639323635.roa (hash: gDKF4Wwnv8nYlZMHxKheOOJRwPHFzRP2IDSa3GY2Mi4=)
                          3: 34352e3138322e33342e302f32342d3234203d3e20323639323635.roa (hash: xOoERlEhSi9M48UCfsW4Jh3De+JMGZNiha1TchGUW94=)
                          4: 34352e3138322e33352e302f32342d3234203d3e20323639323635.roa (hash: mySaU6fwlINwOm8Fs2UnMlGXQ421idH9Xpz0cducaT4=)
                          5: D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl (hash: m/hfCGLWxANLZDGlFVY2gSNmvFzFdTCrvUIO4l47+eg=)
                          6: 34352e3138322e33332e302f32342d3234203d3e20323639323635.roa (hash: mOXkqMNclDJ7PmlNw0yxQWbMww+lvOI6qELEBEEMLH0=)
                          7: 323830343a363165633a3a2f33322d3332203d3e20323639323635.roa (hash: G5uYp0ecuOs4MuZb+A34zoxhoZ/nOHhZNf5CuuFyumo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl
                          rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 03:14:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e9:15:72:18:5d:5f:e6:d1:fa:58:35:29:2f:bd:77:48:ee:fc:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B
        Validity
            Not Before: Nov  3 02:15:25 2025 GMT
            Not After : Nov  4 03:14:25 2025 GMT
        Subject: CN=78A43E850B2E370905FBCA0E0B08BDB8F6EEE95F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:78:91:80:bc:88:75:c6:e6:4d:b1:64:11:b0:
                    cc:b0:95:72:98:51:a1:53:2a:18:7a:27:87:0f:30:
                    43:cd:9d:fa:ab:b2:43:e5:d4:6f:a3:3c:e9:76:26:
                    29:76:16:13:e4:c4:a2:21:2c:6d:a5:e5:ff:54:c1:
                    71:a5:db:e7:16:83:ec:5e:c5:0c:6f:7e:8b:79:95:
                    7b:1e:7d:21:46:48:ec:58:77:3d:ef:9f:a1:a9:4f:
                    fd:ce:09:2c:8a:7b:7e:07:4b:dc:bf:a8:6f:33:a9:
                    91:63:89:ab:81:1d:b9:42:c1:a3:36:9c:65:09:14:
                    9b:a3:81:34:09:63:64:8f:d3:bf:31:f4:0d:f8:13:
                    18:5f:b3:dd:10:90:ed:0c:ce:1e:40:25:76:d6:15:
                    5c:4b:84:9d:6d:d8:0d:1b:3c:ed:ca:2f:95:fc:8a:
                    4f:3f:3d:2b:35:6b:60:ff:b1:90:81:1f:57:29:a3:
                    b4:94:20:2e:de:ff:2b:05:a8:c7:e3:4a:9e:40:34:
                    c5:00:23:10:d4:6e:35:8d:64:0d:ce:47:4b:60:21:
                    8e:db:85:42:b8:67:f0:f0:df:08:fd:e4:c9:09:f1:
                    f7:40:3c:7d:03:4a:87:4c:cf:7f:10:34:8b:c6:47:
                    fd:3e:af:13:6b:33:8f:c6:8a:f2:39:bc:fc:51:b7:
                    da:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A4:3E:85:0B:2E:37:09:05:FB:CA:0E:0B:08:BD:B8:F6:EE:E9:5F
            X509v3 Authority Key Identifier:
                keyid:D7:31:01:88:F9:E2:12:C8:3E:92:DE:1C:5E:BB:FE:55:EB:88:CE:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:7c:1f:bf:64:66:6a:1e:ca:3b:00:7d:38:6c:e8:48:d2:15:
         71:8d:fa:59:aa:43:b9:05:a9:75:63:29:68:c4:cf:7e:06:e8:
         1c:d4:55:71:a7:8e:05:2b:1f:c2:02:fa:02:8a:dd:4c:1d:19:
         96:ab:40:9e:b2:8d:ee:5c:08:bd:f0:44:2d:a2:06:a0:55:62:
         77:0a:27:5d:e3:c8:c8:39:bd:43:53:4e:5e:da:2a:96:c0:c7:
         38:73:a1:cd:4c:d0:62:4d:fd:61:f8:40:02:35:3e:08:13:3e:
         95:d6:0c:13:55:f6:5c:52:0c:8a:6d:06:38:41:e4:83:64:1f:
         8a:ae:2e:0e:1f:45:b2:3e:51:ea:65:9d:42:b2:98:9e:d9:3b:
         bd:d6:a5:a9:3f:6d:82:42:f0:c5:5e:8e:59:95:8d:77:4b:b1:
         f6:66:6b:0f:b0:3c:fe:e2:00:f8:b8:9d:3e:0c:76:a2:99:ac:
         16:ca:55:0b:0e:01:63:19:2e:ff:19:16:24:d0:2b:39:02:52:
         93:a6:f7:c8:3c:f8:35:98:80:28:02:17:92:1f:0b:a1:2b:79:
         f4:75:a4:f3:08:a8:a3:34:c1:ba:47:5a:91:40:5f:bd:a8:fa:
         20:c9:03:47:c3:bd:40:f0:f4:f2:b9:5d:a0:63:97:84:a2:d3:
         5d:5f:da:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:34:32 2025 by rpki-client