Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.mft
File:                     65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.mft (raw, json)
Hash identifier:          tn6O0nlMDE/sW0pXselNjBzLHGjeEhMGT/LzJ1cF5eQ=
Subject key identifier:   BF:5E:A9:9E:19:51:1C:A4:A3:A5:7F:5E:42:34:D7:FA:F5:F2:DC:71
Authority key identifier: 65:FC:8F:A4:0D:3E:39:54:41:DF:BE:E4:E9:E6:75:EA:56:5A:B9:F6
Certificate issuer:       /CN=65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6
Certificate serial:       01CE5D027E0BD2EF32B4C51E65CBB0ED7D2EEE06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.mft
Manifest number:          01B3
Signing time:             Mon 03 Nov 2025 21:14:52 +0000
Manifest this update:     Mon 03 Nov 2025 21:09:52 +0000
Manifest next update:     Tue 04 Nov 2025 23:49:52 +0000
Files and hashes:         1: 34352e3233392e3134382e302f32332d3233203d3e20323638333732.roa (hash: 3xwGbQP2DKhTMFND5cfmPOHaLnlEwcXwqS0SJ84D7FE=)
                          2: 34352e3233392e3134382e302f32342d3234203d3e20323638333732.roa (hash: mVkRDgSnWKtm/hqkpkCLFhY72dpcWzmFAwSKzxnX5B4=)
                          3: 323830343a353032383a633030303a3a2f33342d3334203d3e20323638333732.roa (hash: uCQTi3NrgC2h4UnyuGz4Iy/4Y17mHeUlajzhqXz5VBI=)
                          4: 65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.crl (hash: lHjIBgD2MSC8MlKr4YASn5O9oyGWOJwSDH53k8eAZ6I=)
                          5: 323830343a353032383a383030303a3a2f33342d3334203d3e20323638333732.roa (hash: aaVKBXr03U5KF+WgyWq44gSKWq28iYuEyJiWTzAz4FA=)
                          6: 34352e3233392e3135312e302f32342d3234203d3e20323638333732.roa (hash: d8oM2a79Jfdff+b+DlgiZ7Lst1sn31/RMsdGKkRKlu4=)
                          7: 323830343a353032383a3a2f33342d3334203d3e20323638333732.roa (hash: GDAU7SZ59r0fsqG4PF7u/XbPLXbO8ZGracHXDqN4AzE=)
                          8: 34352e3233392e3135302e302f32342d3234203d3e20323638333732.roa (hash: OhU1A7+EX1raaLd2ChqkywrQ89BOw3RgyF8hOBvqiMk=)
                          9: 323830343a353032383a3a2f33322d3332203d3e20323638333732.roa (hash: 8ZRE27iSFC+6JVnLPfgwZcdgTMnfn2Uk0d8Z02Zj4v4=)
                          10: 34352e3233392e3134392e302f32342d3234203d3e20323638333732.roa (hash: nNCq9LKRkswGNt38HRgiq4tgFB2/+4p57qe3C0QLodc=)
                          11: 323830343a353032383a343030303a3a2f33342d3334203d3e20323638333732.roa (hash: q3NhN7FpQJC4A5ClB+mqsW9AcTKn1CfsT1ze+/GIGLc=)
                          12: 34352e3233392e3135302e302f32332d3233203d3e20323638333732.roa (hash: tOAXzFlx9YfB/jhwYT+Wz9hf2mvkimk0tZesiHHJhYo=)
                          13: 34352e3233392e3134382e302f32322d3232203d3e20323638333732.roa (hash: pjZNVmMNTa5Q7A99h4ZP2R7KUkUfB2h0m9xxNBnfL9s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.crl
                          rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ce:5d:02:7e:0b:d2:ef:32:b4:c5:1e:65:cb:b0:ed:7d:2e:ee:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6
        Validity
            Not Before: Nov  3 21:09:52 2025 GMT
            Not After : Nov  4 23:49:52 2025 GMT
        Subject: CN=BF5EA99E19511CA4A3A57F5E4234D7FAF5F2DC71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3e:f2:19:61:26:5a:30:d4:53:60:b7:e1:8f:
                    2b:4e:05:94:08:5d:42:da:84:ba:ac:3d:a1:ce:31:
                    08:ee:08:d9:d9:88:a2:62:1f:2e:56:ac:ca:b5:11:
                    3d:6d:bc:ca:80:2d:9a:54:c6:7f:47:28:c5:b4:cf:
                    12:bc:73:d1:74:d6:37:19:96:f2:f6:78:6e:a0:a6:
                    9c:09:58:3d:b2:e0:ec:c0:15:5b:4d:11:df:c2:34:
                    b9:1d:9c:4a:39:1b:70:ea:08:5f:ec:8b:48:3e:1f:
                    3c:09:a4:52:ec:91:e4:43:62:55:93:c7:e8:f9:b5:
                    2d:87:a2:ab:76:f1:db:0f:d5:17:0e:0e:96:4f:8e:
                    8c:22:b8:24:65:ef:c7:4b:84:a9:9b:79:82:be:c5:
                    2f:44:80:39:5f:0c:f1:59:81:f4:d9:af:08:93:74:
                    e6:0c:6d:4e:43:80:0f:42:4b:fb:12:92:af:d2:98:
                    ad:06:2a:7b:1c:10:cc:b4:1e:ea:72:31:bc:41:33:
                    4b:27:4f:60:31:c1:d2:2f:4d:27:18:d9:56:d0:23:
                    4f:81:47:59:a4:69:a3:55:4c:f4:53:20:54:2e:44:
                    3a:37:bf:a8:ce:6d:58:f2:fe:e2:5c:8b:6f:3f:f9:
                    76:10:da:28:5d:87:94:53:e7:61:50:71:f6:d9:5d:
                    07:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5E:A9:9E:19:51:1C:A4:A3:A5:7F:5E:42:34:D7:FA:F5:F2:DC:71
            X509v3 Authority Key Identifier:
                keyid:65:FC:8F:A4:0D:3E:39:54:41:DF:BE:E4:E9:E6:75:EA:56:5A:B9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:32:28:b6:87:43:52:a0:59:d4:a3:58:4d:8f:ff:57:95:15:
         79:0a:fc:93:01:6a:9b:d9:35:d5:6e:f7:21:31:76:ba:4c:93:
         5a:b7:e9:10:be:a1:1a:4f:a0:0f:2c:f4:27:8e:09:b1:8d:36:
         1b:24:25:8d:b3:fd:11:3f:33:1b:46:08:72:c3:a4:49:43:49:
         8e:83:8d:98:1f:d2:9e:e1:6b:76:c9:d1:1f:be:f7:d6:de:9b:
         b8:c0:c3:bf:a7:b2:92:95:86:e9:be:aa:c0:fc:3a:b9:78:a5:
         cc:00:ba:76:92:df:42:60:cc:8e:45:0f:4f:d5:06:d1:65:74:
         7c:ab:5e:b7:63:e8:e0:bb:5b:f5:c3:2b:c8:e2:7c:b5:9b:83:
         90:1f:78:b7:0d:2a:7f:fe:8c:ed:fa:9d:e9:5e:0a:79:52:a1:
         02:f2:16:d8:93:3c:7b:8d:56:c5:f2:64:aa:74:87:8b:2c:22:
         46:fc:0c:87:72:5e:3c:07:b3:50:12:33:da:1f:f4:dc:09:9d:
         a1:03:16:2f:81:a5:f5:22:6c:78:76:67:fa:40:62:ba:84:a7:
         49:8f:d1:35:10:cd:29:c0:c1:6b:05:00:d2:2f:ad:3b:b1:91:
         c8:8c:c8:ac:e0:8b:cd:5e:e4:2c:6d:b3:0a:fb:ff:eb:9f:03:
         be:4c:dd:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAc5dAn4L0u8ytMUeZcuw7X0u7gYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVGQzhGQTQwRDNFMzk1NDQxREZCRUU0RTlFNjc1RUE1
NjVBQjlGNjAeFw0yNTExMDMyMTA5NTJaFw0yNTExMDQyMzQ5NTJaMDMxMTAvBgNV
BAMTKEJGNUVBOTlFMTk1MTFDQTRBM0E1N0Y1RTQyMzREN0ZBRjVGMkRDNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOPvIZYSZaMNRTYLfhjytOBZQI
XULahLqsPaHOMQjuCNnZiKJiHy5WrMq1ET1tvMqALZpUxn9HKMW0zxK8c9F01jcZ
lvL2eG6gppwJWD2y4OzAFVtNEd/CNLkdnEo5G3DqCF/si0g+HzwJpFLskeRDYlWT
x+j5tS2Hoqt28dsP1RcODpZPjowiuCRl78dLhKmbeYK+xS9EgDlfDPFZgfTZrwiT
dOYMbU5DgA9CS/sSkq/SmK0GKnscEMy0HupyMbxBM0snT2AxwdIvTScY2VbQI0+B
R1mkaaNVTPRTIFQuRDo3v6jObVjy/uJci28/+XYQ2ihdh5RT52FQcfbZXQcvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUv16pnhlRHKSjpX9eQjTX+vXy3HEwHwYDVR0j
BBgwFoAUZfyPpA0+OVRB377k6eZ16lZaufYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnRyaU5hcWVGcWVDcHN1bTNnYzJzbWtlNHpHOTVpRzhSeUdjWXJrcEta
UEIvMC82NUZDOEZBNDBEM0UzOTU0NDFERkJFRTRFOUU2NzVFQTU2NUFCOUY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1RkM4RkE0MEQzRTM5NTQ0
MURGQkVFNEU5RTY3NUVBNTY1QUI5RjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RnRyaU5hcWVGcWVDcHN1bTNnYzJzbWtlNHpHOTVpRzhSeUdjWXJrcEtaUEIvMC82
NUZDOEZBNDBEM0UzOTU0NDFERkJFRTRFOUU2NzVFQTU2NUFCOUY2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQzIotodDUqBZ1KNYTY//V5UVeQr8kwFqm9k11W73ITF2ukyTWrfpEL6hGk+g
Dyz0J44JsY02GyQljbP9ET8zG0YIcsOkSUNJjoONmB/SnuFrdsnRH7731t6buMDD
v6eykpWG6b6qwPw6uXilzAC6dpLfQmDMjkUPT9UG0WV0fKtet2Po4Ltb9cMryOJ8
tZuDkB94tw0qf/6M7fqd6V4KeVKhAvIW2JM8e41WxfJkqnSHiywiRvwMh3JePAez
UBIz2h/03AmdoQMWL4Gl9SJseHZn+kBiuoSnSY/RNRDNKcDBawUA0i+tO7GRyIzI
rOCLzV7kLG2zCvv/658Dvkzd3Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 00:26:26 2025 by rpki-client