Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft
File:                     BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft (raw, json)
Hash identifier:          nc6nt7gjawtwpa2ONH34viyq1w01JCp+fcpnKbOWbSE=
Subject key identifier:   FA:3C:F2:36:C6:60:6B:82:71:B5:83:5B:DC:E3:6B:F3:D9:39:58:7C
Authority key identifier: BD:3A:86:10:EB:89:85:A3:AA:9F:38:7E:DE:09:73:0A:AE:F0:6F:4E
Certificate issuer:       /CN=BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E
Certificate serial:       57E53B75B1669DAA357A3EF9088A6505BCCE5444
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft
Manifest number:          03
Signing time:             Wed 05 Nov 2025 14:20:26 +0000
Manifest this update:     Wed 05 Nov 2025 14:15:26 +0000
Manifest next update:     Thu 06 Nov 2025 16:11:26 +0000
Files and hashes:         1: 323830343a333237383a3a2f33322d3332203d3e20323635303830.roa (hash: 5B/+vfFGdF3IJoTrS9TeBsQvxm7kgyg44LTsGmD5N98=)
                          2: 3137302e3233332e3132332e302f32342d3234203d3e20323635303830.roa (hash: QaEwq9CjYPQg9XB/xC9mJEcrxzexB7rgdQeR7cGgREo=)
                          3: 323830343a333237383a383030303a3a2f33332d3333203d3e20323635303830.roa (hash: k+owxz3l68cprZCV0+3obZmXyYo5ofrM4/CRu+pOcko=)
                          4: 3137302e3233332e3132322e302f32342d3234203d3e20323635303830.roa (hash: J+2cGeedQSkQuUMX8IRAr/pw89GMZTOHvWopcXCptdg=)
                          5: BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.crl (hash: TaRDlufGnb/Cd11pcyaTv4bO1YRxdCIw+emso+iO6U8=)
                          6: 323830343a333237383a3a2f34382d3438203d3e20323635303830.roa (hash: 3c35Sa1vs4KaYssZIcwRB2/bFofdsYxoZj9drQm8oag=)
                          7: 3137302e3233332e3132302e302f32322d3232203d3e20323635303830.roa (hash: /a2y4aWHo28lvVRWC/abKo7CnvEkblWEARGoZ2mTN+4=)
                          8: 323830343a333237383a3a2f33342d3334203d3e20323635303830.roa (hash: NSak5ER7+MAC0xU7nbH0pQGj8bMe+2muo5Do/DYaqX8=)
                          9: 323830343a333237383a383030303a3a2f33342d3334203d3e20323635303830.roa (hash: WrF8hQYEh/sGsppfpPesov8ngoxD0nE/e0IKlgdOawQ=)
                          10: 323830343a333237383a343030303a3a2f34382d3438203d3e20323635303830.roa (hash: pQdsswWDxVePBoPmNKpkVs2XaQl3ZUuXa6gWuMdedDU=)
                          11: 323830343a333237383a633030303a3a2f33342d3334203d3e20323635303830.roa (hash: QAGx0Yj4jJ2xXyr2rLQE4GAUGzzvVbqpP4lyFevhLng=)
                          12: 323830343a333237383a343030303a3a2f33342d3334203d3e20323635303830.roa (hash: ytq9/JXR5mL09eUGCEFYeLztJqnlsf79ZDVOTj0Nt+A=)
                          13: 3137302e3233332e3132302e302f32332d3233203d3e20323635303830.roa (hash: kgMnQvFQZ41NmFQiiTfB9er4UvYH9awM9HsX7+MBHPU=)
                          14: 3137302e3233332e3132322e302f32332d3233203d3e20323635303830.roa (hash: P0h7l+SiWRbWxbwbdGayBtSVOA3PqofNYXoBFXjyF2Y=)
                          15: 323830343a333237383a3a2f33332d3333203d3e20323635303830.roa (hash: bujYDSW3nhUTEnjiY26vATKpg4+iqTkcy30ORRNiXhM=)
                          16: 3137302e3233332e3132302e302f32342d3234203d3e20323635303830.roa (hash: UQXu2hQXHRN2je3euhZZyn9PUypsZVOOhjs5UK8A/bM=)
                          17: 3137302e3233332e3132312e302f32342d3234203d3e20323635303830.roa (hash: y1QhIZbdYepzcdoxIZqGNBMxC53wsudaiKNsqEV9cH0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.crl
                          rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 16:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e5:3b:75:b1:66:9d:aa:35:7a:3e:f9:08:8a:65:05:bc:ce:54:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E
        Validity
            Not Before: Nov  5 14:15:26 2025 GMT
            Not After : Nov  6 16:11:26 2025 GMT
        Subject: CN=FA3CF236C6606B8271B5835BDCE36BF3D939587C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2a:11:e7:2e:96:27:74:b9:16:61:e8:6d:4d:
                    6e:81:a7:24:3d:a2:8f:cc:9e:69:28:19:aa:55:b3:
                    97:fd:6a:7b:07:1c:06:61:a6:b8:60:3e:83:0f:b8:
                    26:69:e2:2c:74:4e:fc:86:01:5f:08:6f:1f:d7:2c:
                    6f:17:84:c8:40:b0:54:5e:a4:5a:88:2b:79:08:89:
                    dd:51:cd:ff:ff:88:8e:01:09:0a:26:38:5e:1d:8b:
                    20:c4:f6:cf:24:4c:61:60:68:5a:a6:b8:40:8f:cf:
                    23:60:05:63:07:5c:43:b5:2c:28:03:e0:d8:aa:93:
                    fa:a8:4c:f1:b1:66:a4:1a:7b:90:fc:3c:a5:02:42:
                    fb:1e:f6:5d:91:1b:74:94:c2:25:62:eb:45:8b:10:
                    8c:00:b8:97:97:ff:16:05:3c:f8:7d:7f:43:27:cd:
                    6a:41:b0:ec:70:24:9b:da:99:b4:ed:ea:b2:19:1d:
                    77:81:ec:37:a4:d1:25:f9:21:c9:06:70:5d:be:23:
                    66:0e:6f:a9:f7:e5:fd:9e:ec:a8:73:45:31:0e:6a:
                    04:34:be:88:7f:13:3e:a9:65:aa:c0:d1:04:77:85:
                    9f:50:b1:7e:50:77:6e:62:6f:d5:34:f2:cf:55:19:
                    4e:76:05:6c:7f:45:49:ed:e5:39:ac:75:eb:be:c1:
                    78:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3C:F2:36:C6:60:6B:82:71:B5:83:5B:DC:E3:6B:F3:D9:39:58:7C
            X509v3 Authority Key Identifier:
                keyid:BD:3A:86:10:EB:89:85:A3:AA:9F:38:7E:DE:09:73:0A:AE:F0:6F:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:26:6f:d2:f1:8f:72:c4:d3:c8:93:7d:19:7b:ab:f0:6c:ff:
         93:b2:ee:4a:1d:04:fb:0c:bd:a2:b7:78:8b:1c:cd:f4:4b:ef:
         a5:c4:5c:d2:74:0a:e8:28:b0:5b:56:26:ea:94:40:83:bc:dd:
         07:85:e8:53:ad:55:78:ed:47:30:39:ba:b9:31:60:46:a2:06:
         7f:29:08:b8:88:18:4d:89:22:50:4c:33:e5:31:7f:c7:e0:89:
         44:56:3a:5d:58:70:4d:ba:5d:a7:4d:12:2d:61:6e:0d:b8:92:
         78:18:72:56:72:eb:f9:70:d4:a3:a9:a1:87:e3:f3:53:df:af:
         06:55:ec:f1:b8:cd:32:d3:ce:ff:d1:e2:db:c9:82:c8:ce:94:
         8c:ca:a5:20:9c:b0:eb:45:e6:62:ab:f9:c5:53:d8:1b:fa:a7:
         74:cf:3f:15:b1:74:39:2c:46:73:0b:88:06:41:6e:75:d1:e3:
         5d:bd:c6:23:56:9a:19:ae:00:1e:04:ef:2e:68:e5:fa:b0:3e:
         c1:1d:c2:b1:39:a0:26:35:8d:58:9d:89:7a:af:dd:4b:00:79:
         4a:21:3e:65:b0:d8:39:b2:f8:54:86:a6:f1:bc:74:ba:56:f6:
         56:06:56:31:1c:b5:41:a5:0f:18:b4:6f:83:94:8b:dc:e4:e2:
         d8:08:50:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 04:40:43 2025 by rpki-client