Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
File:                     0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft (raw, json)
Hash identifier:          ZC1Z+GCxRRJToESdH3CDkpPhO6Ini8IiS3oJsdNXGn8=
Subject key identifier:   F8:0B:72:97:2E:B9:62:84:74:6F:65:DE:67:31:F9:46:C8:70:78:2B
Authority key identifier: 0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A
Certificate issuer:       /CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
Certificate serial:       3B51D37C0907C2ECAE09695F246CF38113E14867
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
Manifest number:          0300
Signing time:             Mon 03 Nov 2025 09:27:39 +0000
Manifest this update:     Mon 03 Nov 2025 09:22:39 +0000
Manifest next update:     Tue 04 Nov 2025 11:17:39 +0000
Files and hashes:         1: 3138392e39302e39362e302f32302d3332203d3e203238363334.roa (hash: o/aOBYWzoNM2ezTPVUmL9FfbjqSHXnYykvoAEekZKlg=)
                          2: 0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl (hash: /gT/S+4/liSh0NYZAp3LmDyg2zviCLawrOPpnEqljQg=)
                          3: 323830343a3132383a3a2f33322d313238203d3e203238363334.roa (hash: jhkpyCGOiFoaKho/F9VSBfkFrUgfmttqVKiUPpsPEuM=)
                          4: 3137372e3130352e3132382e302f32302d3332203d3e203238363334.roa (hash: CfOnRF4j6DfohH6BFHRKC5zu5+rSa0Rfv661CHSNmXE=)
                          5: 3230312e36322e36342e302f32302d3332203d3e203238363334.roa (hash: lpNTcJ76pZKRQrWXJmF+l/fSxgPsLSGCWHGhl98FSog=)
                          6: 3230312e36322e38302e302f32302d3332203d3e203238363334.roa (hash: VwGDp5qPyJtagqlMoefg79n3taB0a1j2IIyezyfSxfc=)
                          7: 3137392e39362e3132382e302f32302d3332203d3e203238363334.roa (hash: MszXxChKZIxqO1H76aI8EC2vVoyHxziN2kG99kubgms=)
                          8: 3137392e39362e3134342e302f32302d3332203d3e203238363334.roa (hash: rSPI8oEusC7WuxESqvOdBN/aubwtRxI6CeNya94CYSg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl
                          rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 11:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:51:d3:7c:09:07:c2:ec:ae:09:69:5f:24:6c:f3:81:13:e1:48:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
        Validity
            Not Before: Nov  3 09:22:39 2025 GMT
            Not After : Nov  4 11:17:39 2025 GMT
        Subject: CN=F80B72972EB96284746F65DE6731F946C870782B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6e:19:90:e1:26:91:47:76:c7:cb:37:b8:3b:
                    c5:95:9f:5c:01:ab:b7:1d:10:4e:d3:f9:2d:f0:a2:
                    2e:0b:97:d2:b6:b3:89:74:30:6c:88:ed:c2:67:7f:
                    15:15:4b:b9:98:ec:05:d4:e6:86:ee:93:7c:fe:6d:
                    f7:eb:7c:fa:c8:5e:f7:e1:67:fb:63:13:5e:e1:d8:
                    d1:c8:ae:55:3c:9a:79:50:d6:e5:21:a5:14:ec:ff:
                    4f:42:e7:00:d3:44:53:87:ba:80:16:35:d5:f8:31:
                    4e:ec:ce:29:7e:71:ce:f3:b3:81:0a:4f:18:5a:a4:
                    c1:03:b7:b8:83:e8:48:fc:31:56:7a:c1:29:1a:3c:
                    2c:b3:ce:e9:a3:49:38:6c:11:e9:b0:d1:73:80:19:
                    f0:c4:6d:bb:5f:87:5f:fc:5a:c7:d2:e7:cc:b7:d8:
                    cc:94:5d:1c:d0:4b:f5:d0:3b:1f:d0:5a:fe:1d:d8:
                    88:36:ad:0f:77:9a:62:1b:55:40:7c:d4:a3:c3:2b:
                    8c:b6:5b:c3:ab:85:48:81:dc:2e:b0:4d:bf:c8:fa:
                    6f:6d:c3:38:54:63:94:c9:6e:d9:df:2b:59:18:bb:
                    49:ce:bd:a7:b3:85:a5:30:a4:5c:d5:98:b2:98:92:
                    f0:fd:77:ab:8e:21:d0:95:7b:69:2d:a7:5a:b5:8a:
                    f7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0B:72:97:2E:B9:62:84:74:6F:65:DE:67:31:F9:46:C8:70:78:2B
            X509v3 Authority Key Identifier:
                keyid:0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a2:6a:65:ef:8f:c7:f0:ae:db:4d:e6:5f:1d:e9:55:20:75:
         70:20:e3:e5:6a:31:ef:0e:86:77:20:23:d0:2a:82:73:8b:4a:
         d3:33:f8:f6:35:7e:1f:dc:b7:ba:2d:bb:3f:69:67:f5:a7:08:
         2d:99:13:62:e5:03:de:76:88:d1:33:53:d6:3f:3a:6e:e2:e2:
         a3:07:bd:71:38:33:32:91:9c:d5:b9:59:e2:85:e7:2d:9f:b8:
         56:b1:01:77:08:3b:49:0c:52:b1:55:9c:b7:96:a0:27:fa:61:
         7e:bf:dc:0b:77:4c:2e:35:5f:e2:ba:e5:1c:49:97:d2:f4:30:
         71:0b:d2:55:59:55:d0:80:97:cb:45:41:d1:47:3b:46:bb:98:
         4e:8b:31:d8:fa:a0:e3:a3:f3:96:0a:9e:6b:fa:06:58:6f:e4:
         cc:c2:5b:36:0d:77:fb:d7:f5:04:dc:a7:44:4d:16:54:ca:bf:
         79:29:06:d7:d2:e6:f4:c6:2a:17:68:b5:9e:05:2f:b8:70:5d:
         fd:1c:02:34:d7:37:6f:cd:50:f7:78:e1:35:9a:71:81:4f:4f:
         77:51:af:c4:bf:67:4f:af:dd:56:72:c4:9b:39:31:0f:2b:e1:
         e7:40:ad:05:29:17:94:7d:20:11:2b:35:69:c1:6f:e1:7c:89:
         c4:46:29:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 00:25:50 2025 by rpki-client