Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft
File:                     203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft (raw, json)
Hash identifier:          e0OG38n9R2mqdAcnnS6jleFtWsig8pjQzkPmf+Mubek=
Subject key identifier:   9E:86:64:4D:02:8C:0E:D4:50:34:E1:E7:32:63:C8:F8:E5:E2:B4:50
Authority key identifier: 20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7
Certificate issuer:       /CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7
Certificate serial:       6066B96B488B5D93D6961CEDCAB3BE19E74969C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft
Manifest number:          0304
Signing time:             Mon 03 Nov 2025 00:12:02 +0000
Manifest this update:     Mon 03 Nov 2025 00:07:02 +0000
Manifest next update:     Tue 04 Nov 2025 02:22:02 +0000
Files and hashes:         1: 203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl (hash: fyl+8VleXdxTfMi/WxvqnbWtkah8uKW10KGk5OHybKQ=)
                          2: 323830343a6138633a3a2f33322d3438203d3e20323632323939.roa (hash: EeO9rj+ZkVIkb2Nu0/KE+IFQ8hNAOE0eB+Vu/g/K8/8=)
                          3: 3137372e35342e3234382e302f32312d3234203d3e20323632323939.roa (hash: J9JKS/uOVSTf4lxE2/X712ak1j9CChp3U8mi1+Az2NM=)
                          4: 3230302e3130382e3136302e302f32322d3234203d3e20323632323939.roa (hash: hjkvUrLUUU0VQ67o4ucvyUwTiD+eK2nBuFfG35L4KVE=)
                          5: 3137372e35342e3234302e302f32312d3234203d3e20323632323939.roa (hash: zzuAYXVxZSPy90ckTABafh3wBDFSIA6yCF8t1bKcPTw=)
                          6: 3137372e35342e3234302e302f32302d3234203d3e20323632323939.roa (hash: sJuPnLliL5BAll/ob66pS6k5uH1gd8zUIA6VXGteRg4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl
                          rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 02:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:66:b9:6b:48:8b:5d:93:d6:96:1c:ed:ca:b3:be:19:e7:49:69:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7
        Validity
            Not Before: Nov  3 00:07:02 2025 GMT
            Not After : Nov  4 02:22:02 2025 GMT
        Subject: CN=9E86644D028C0ED45034E1E73263C8F8E5E2B450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:97:07:7b:1e:61:be:42:63:0d:89:61:52:f4:
                    30:91:3a:85:54:2e:13:b3:5f:58:d6:ae:e9:b2:fe:
                    f5:71:9a:67:ca:09:72:97:24:60:1a:53:be:98:c6:
                    1d:6b:63:59:03:d3:04:9e:e7:74:83:b8:7f:6a:29:
                    6a:cd:67:93:f2:c8:52:2c:d7:5a:a8:47:10:1f:93:
                    35:05:c7:86:01:75:8f:c0:84:78:a7:c0:cb:13:56:
                    bb:25:2b:b9:b1:ee:0a:9b:10:64:e2:97:06:aa:c0:
                    f2:fb:00:b5:71:46:de:a2:90:ff:88:1d:37:1b:4a:
                    8a:d9:9e:b7:7c:27:db:e3:c3:2a:61:c5:cd:44:fd:
                    9e:75:22:b1:c4:0d:24:99:99:42:e0:e9:36:fb:92:
                    05:0d:15:43:e3:51:b9:e5:ab:dc:d6:2c:cd:5b:e4:
                    94:bc:0a:3a:32:06:ca:36:2e:3a:ee:d1:35:25:d4:
                    86:c2:e8:a7:f8:c0:5a:c2:bc:bc:2d:bd:98:e7:79:
                    c4:c5:e2:76:61:57:93:22:f2:bf:ff:98:ef:88:ca:
                    53:72:a0:c7:7e:fb:35:4e:db:a9:c4:ff:4a:fe:d4:
                    65:12:33:9d:96:d6:a6:1d:77:d5:e5:54:0c:36:56:
                    4a:39:0b:63:9c:f0:0b:a2:f7:a3:cf:be:1b:28:45:
                    8f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:86:64:4D:02:8C:0E:D4:50:34:E1:E7:32:63:C8:F8:E5:E2:B4:50
            X509v3 Authority Key Identifier:
                keyid:20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ac:9c:2c:13:a9:45:68:35:0c:08:19:4a:2f:04:71:b0:f4:
         c6:4e:b8:c6:14:73:69:b7:ce:d6:1f:29:92:38:07:b7:5b:6b:
         aa:71:7c:6e:c1:4a:f4:ec:fb:b5:78:45:6a:cf:76:44:ce:d4:
         2e:9d:cb:3a:5e:71:a9:b5:24:22:9e:c4:5b:66:fd:c8:0e:21:
         3e:9c:64:f9:72:b1:5e:13:46:93:9c:9a:72:0b:c9:d6:6a:06:
         c0:cf:ed:9b:de:38:2c:25:52:cb:37:a1:64:1a:99:81:96:bb:
         8c:75:0d:ae:1e:5c:47:0e:02:1a:ee:9d:e3:aa:ad:37:90:ec:
         5b:ef:9a:2b:60:13:ae:ed:fd:9f:fe:c3:ff:23:b2:bd:9f:2e:
         ec:8f:96:60:a2:20:44:66:fb:77:dc:8b:b0:86:77:c6:fd:5a:
         03:43:2f:d9:a0:bf:6c:68:98:fd:33:69:e0:bb:74:8c:2e:12:
         03:18:32:ea:4e:08:7c:d7:a3:b7:ad:7a:7b:30:e1:ec:57:f9:
         46:a0:43:b2:15:04:58:c4:ff:b7:97:93:7c:9f:33:f2:b7:c2:
         38:22:30:ce:50:58:dc:ce:e9:82:e9:a0:da:fe:76:27:5f:84:
         9a:71:c2:a7:95:f4:e0:e4:77:7d:7f:06:84:58:6c:d4:69:ce:
         c7:0c:65:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:31:44 2025 by rpki-client