Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
File:                     8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft (raw, json)
Hash identifier:          57WdEL/oN4wZlsv+xP9OhKF6WSVFoaKqKsLpSyD+vJQ=
Subject key identifier:   F9:3B:1E:5B:8A:01:1C:74:51:0F:3A:EF:11:B1:CC:12:19:44:41:A0
Authority key identifier: 8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49
Certificate issuer:       /CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
Certificate serial:       59FD9C84B3423422D616BF21CAA1FC03CD885C77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
Manifest number:          0294
Signing time:             Mon 03 Nov 2025 17:32:33 +0000
Manifest this update:     Mon 03 Nov 2025 17:27:33 +0000
Manifest next update:     Tue 04 Nov 2025 19:34:33 +0000
Files and hashes:         1: 323830343a373762633a3a2f33322d313238203d3e20323731313936.roa (hash: 4yngCd7rMrm1N5h7XLUwcr/v6nWiYlH0k6Z0RNslBIQ=)
                          2: 8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl (hash: e20JpqsJIfM0UaFzawludxYhtgD9J4xCWU0rAiAsaCk=)
                          3: 3137392e34392e3133322e302f32322d3332203d3e20323731313936.roa (hash: /02W0MeQbHpyCAaZLSENooDm7Q6/cQG4TZ0qLVZ3ol0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl
                          rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 19:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:fd:9c:84:b3:42:34:22:d6:16:bf:21:ca:a1:fc:03:cd:88:5c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
        Validity
            Not Before: Nov  3 17:27:33 2025 GMT
            Not After : Nov  4 19:34:33 2025 GMT
        Subject: CN=F93B1E5B8A011C74510F3AEF11B1CC12194441A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:36:37:92:94:e2:38:d4:72:de:84:2f:b4:43:
                    7d:c7:90:fb:e8:fc:71:d7:6c:14:cc:1c:b6:7a:8f:
                    73:66:ef:6b:a2:64:41:5f:fe:2d:e1:33:4b:de:20:
                    d6:f2:ca:50:0a:f3:1a:4a:10:4b:02:06:3a:d0:f5:
                    35:3f:a6:cc:e1:4f:e4:52:dd:ed:66:fb:ef:05:1c:
                    b9:96:84:0d:3a:7b:8c:90:97:15:18:3f:4f:89:76:
                    a1:63:d2:cb:10:dd:c9:c6:f5:f8:70:45:31:7a:76:
                    8f:50:47:0b:bc:58:c2:01:9d:a2:d4:71:f3:bf:b3:
                    55:02:88:6b:68:fd:16:d1:50:73:25:37:92:77:ed:
                    97:62:d4:13:8d:17:a9:43:bd:21:36:f0:a6:ff:e0:
                    94:bb:d7:be:56:b3:2f:b4:0e:41:08:9e:8d:65:c3:
                    c4:ce:73:cf:04:bd:11:28:3e:7b:5d:1c:47:40:ce:
                    89:e2:c9:67:78:93:4f:6f:df:33:55:1a:c7:09:78:
                    76:04:dd:15:1d:3e:58:3f:2d:3a:47:b4:a9:c1:46:
                    b1:bd:26:7e:5a:b2:ae:b5:e9:ad:03:7b:0b:ce:82:
                    88:44:21:73:08:55:9e:4c:2e:03:cb:13:a6:68:cf:
                    97:8a:f2:d8:f8:c9:31:54:1d:39:34:3e:ee:7d:44:
                    85:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3B:1E:5B:8A:01:1C:74:51:0F:3A:EF:11:B1:CC:12:19:44:41:A0
            X509v3 Authority Key Identifier:
                keyid:8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:8b:fc:48:d7:63:ed:1d:b6:67:c3:a3:f2:17:82:2b:92:66:
         f0:98:6f:b7:d5:aa:b7:e7:77:73:3b:67:00:11:ce:b3:02:33:
         b1:88:c4:4b:b9:e8:a6:23:32:1c:b6:0c:e4:b3:6f:2e:4b:e2:
         71:a2:f4:2b:33:8e:3d:3b:e8:0f:91:68:f1:1e:fd:e7:4e:ff:
         14:52:1d:0b:4a:5a:2b:4c:21:34:e7:b6:db:73:15:d3:69:8d:
         0e:1b:67:2e:0f:87:af:9f:09:09:3c:06:a4:66:be:0a:5e:48:
         f5:25:a7:9a:b3:1f:e3:34:ad:5e:62:b3:04:0f:38:71:20:6d:
         34:0d:23:28:6e:b7:c7:3d:27:00:a0:09:08:56:c6:ac:5d:c3:
         21:36:4e:8a:71:a8:57:fe:96:67:c6:67:09:81:2b:46:8c:f4:
         e3:49:50:47:12:3d:f1:50:93:ec:13:55:43:78:13:dc:46:29:
         15:dd:ab:78:83:9e:9d:84:d3:bf:b1:97:85:43:a2:f6:9c:5e:
         68:49:29:52:0d:27:13:7c:11:e2:07:21:a8:1f:d9:9c:23:c2:
         84:3a:f9:f9:aa:99:6f:0c:35:65:87:80:63:a9:73:dc:8f:7c:
         4f:a9:76:16:e5:3a:dd:e3:8a:1e:0c:0c:7e:a8:b6:20:7a:29:
         bb:0f:1d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:25:15 2025 by rpki-client