Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
File:                     4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft (raw, json)
Hash identifier:          j392MIukIWoQ3X0nwWpkh3Sl5FdlkYsBA9GxRUY83aM=
Subject key identifier:   00:51:5A:75:0E:AC:78:CB:1D:F1:F6:C6:6A:97:9F:72:F4:D6:03:73
Authority key identifier: 4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A
Certificate issuer:       /CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
Certificate serial:       6EF91C2F3CF6D07FFBE797BCCB0F843B9F362965
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
Manifest number:          033E
Signing time:             Mon 03 Nov 2025 09:00:00 +0000
Manifest this update:     Mon 03 Nov 2025 08:55:00 +0000
Manifest next update:     Tue 04 Nov 2025 09:00:00 +0000
Files and hashes:         1: 323830343a373131343a3a2f33322d3438203d3e20323730373635.roa (hash: e5+lboSeP7wRX2S+7kV/NMg3fIZ77X3rsllnhtzm6x0=)
                          2: 3138362e3139342e3136362e302f32332d3234203d3e20323730373635.roa (hash: M4n3WBZ85cIDAi2DlwuCjajPGJplflgk5JxusQKYXVk=)
                          3: 3138362e3139342e3136342e302f32322d3234203d3e20323730373635.roa (hash: WYv4Ld2DCVe6YHJc3QqWlwjyBfRe+8s44NvzSgBrKDs=)
                          4: 323830343a373131343a3136373a3a2f3438203d3e20323730373635.roa (hash: PEqddxWP0UwQjFUWTOEctj/kWBjXgV+ouzSyGaK99kI=)
                          5: 323830343a373131343a3136353a3a2f3438203d3e20323730373635.roa (hash: wWar2zLFazdvxtcXttabAzwTbUhLghXXyWV35gTV4AU=)
                          6: 323830343a373131343a3136343a3a2f3438203d3e20323730373635.roa (hash: Mo/X9tzCDrmFki02A1WCTk9a4T2l+eDUGX1jPqDh11o=)
                          7: 4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl (hash: L7c5ryYL4jp1zs7Jc6vqQK6fI2I10hpYtgonSAI5UnQ=)
                          8: 323830343a373131343a3136363a3a2f3438203d3e20323730373635.roa (hash: jj/DFtVSWkmoEDR9MMoDSC5fGS5/8QPrbd2PVIl6KtU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl
                          rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f9:1c:2f:3c:f6:d0:7f:fb:e7:97:bc:cb:0f:84:3b:9f:36:29:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
        Validity
            Not Before: Nov  3 08:55:00 2025 GMT
            Not After : Nov 10 09:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1a:5c:33:40:bc:19:64:f7:7a:d6:f8:8f:58:
                    a9:77:d1:3c:de:cb:c5:23:37:e1:03:33:1f:29:f4:
                    08:85:40:11:2b:e6:48:d8:f5:de:4d:97:4d:76:85:
                    2a:d9:0b:67:e0:ac:be:0a:9d:4a:d8:f0:21:90:86:
                    8f:77:9a:a4:90:98:fd:37:93:fc:d8:8f:81:b8:e3:
                    63:0d:10:7e:57:39:ca:b8:09:32:7a:ac:03:4a:0a:
                    24:a8:5c:d8:ea:29:0e:24:0d:a0:26:89:d9:ba:a4:
                    98:09:e6:b9:6f:8f:fd:32:62:a5:28:81:02:b4:c2:
                    67:6a:e4:3e:01:83:52:ac:8e:0c:af:a1:f6:05:b2:
                    a0:bc:d0:bc:33:ad:ac:72:50:88:f7:3a:7a:a3:d0:
                    b2:12:88:9c:30:f4:06:6b:14:af:44:34:85:35:db:
                    cc:84:1c:67:94:ba:28:07:fc:83:24:d5:ed:60:82:
                    5e:9f:37:97:4c:95:34:d5:5f:56:65:9c:74:eb:8d:
                    b6:ac:7b:f6:e9:93:28:0b:6f:85:01:c7:9a:a4:b8:
                    32:53:16:b1:ae:f1:24:c1:59:11:cc:23:ed:ec:31:
                    6c:a1:ba:47:76:dc:ed:0e:84:be:30:9d:da:0e:22:
                    e8:95:26:bd:cc:a1:56:bf:c4:88:03:23:b3:f2:4f:
                    77:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:51:5A:75:0E:AC:78:CB:1D:F1:F6:C6:6A:97:9F:72:F4:D6:03:73
            X509v3 Authority Key Identifier:
                keyid:4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:47:47:51:4b:90:5e:15:93:83:e0:8d:40:45:f0:e5:bd:a3:
         29:fa:3f:63:60:08:f9:23:b2:ec:14:2a:18:39:ce:0d:0b:9a:
         14:e9:0b:99:27:94:d3:9c:19:53:2f:55:21:c5:31:07:54:ff:
         be:5a:49:6c:f3:f3:60:f6:a3:9a:1b:39:61:bb:26:bf:93:69:
         e2:28:1b:34:15:59:d5:40:7a:97:65:ab:c7:59:e4:ba:24:59:
         e3:b7:73:3f:60:9a:3d:6d:36:14:1c:92:42:e3:6a:bc:ad:aa:
         73:11:2c:08:2e:5e:b6:40:3c:12:07:0a:2a:32:4d:37:39:7e:
         7b:cb:4a:5e:86:b9:ba:53:ca:48:17:17:83:58:af:7a:89:04:
         17:bb:8d:33:a5:ed:55:94:1a:47:f6:a2:23:37:1d:8e:56:15:
         7a:31:98:09:26:0d:81:56:ba:31:81:ea:12:d9:13:64:df:9d:
         6e:1c:e2:97:42:93:cf:97:03:3f:92:6d:91:9f:cc:f0:0b:17:
         c3:23:e3:6b:5e:6f:7c:cf:8e:c3:f8:00:3c:a5:9d:ce:ca:20:
         c3:a4:7e:e0:93:fa:88:83:b6:a8:e5:e0:74:a3:8e:0e:04:1d:
         21:8e:48:f9:63:c7:73:aa:ad:b4:69:a7:f8:f4:bf:af:c2:67:
         db:6c:5f:17
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUbvkcLzz20H/755e8yw+EO582KWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERBMjdFQjgzNEEyQjgzRjBCMkFDOEMwNERGRkFFOTY4
MzgxOTczQTAeFw0yNTExMDMwODU1MDBaFw0yNTExMTAwOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDgxQTVDMzM0MEJDMTk2NEY3
N0FENkY4OEY1OEE5NzdEMTNDREVDQkM1MjMzN0UxMDMzMzFGMjlGNDA4ODU0MDEx
MkJFNjQ4RDhGNURFNEQ5NzRENzY4NTJBRDkwQjY3RTBBQ0JFMEE5RDRBRDhGMDIx
OTA4NjhGNzc5QUE0OTA5OEZEMzc5M0ZDRDg4RjgxQjhFMzYzMEQxMDdFNTczOUNB
QjgwOTMyN0FBQzAzNEEwQTI0QTg1Q0Q4RUEyOTBFMjQwREEwMjY4OUQ5QkFBNDk4
MDlFNkI5NkY4RkZEMzI2MkE1Mjg4MTAyQjRDMjY3NkFFNDNFMDE4MzUyQUM4RTBD
QUZBMUY2MDVCMkEwQkNEMEJDMzNBREFDNzI1MDg4RjczQTdBQTNEMEIyMTI4ODlD
MzBGNDA2NkIxNEFGNDQzNDg1MzVEQkNDODQxQzY3OTRCQTI4MDdGQzgzMjRENUVE
NjA4MjVFOUYzNzk3NEM5NTM0RDU1RjU2NjU5Qzc0RUI4REI2QUM3QkY2RTk5MzI4
MEI2Rjg1MDFDNzlBQTRCODMyNTMxNkIxQUVGMTI0QzE1OTExQ0MyM0VERUMzMTZD
QTFCQTQ3NzZEQ0VEMEU4NEJFMzA5RERBMEUyMkU4OTUyNkJEQ0NBMTU2QkZDNDg4
MDMyM0IzRjI0Rjc3RjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2BpcM0C8GWT3etb4j1ipd9E83svFIzfhAzMfKfQIhUARK+ZI2PXe
TZdNdoUq2Qtn4Ky+Cp1K2PAhkIaPd5qkkJj9N5P82I+BuONjDRB+VznKuAkyeqwD
SgokqFzY6ikOJA2gJonZuqSYCea5b4/9MmKlKIECtMJnauQ+AYNSrI4Mr6H2BbKg
vNC8M62sclCI9zp6o9CyEoicMPQGaxSvRDSFNdvMhBxnlLooB/yDJNXtYIJenzeX
TJU01V9WZZx06422rHv26ZMoC2+FAceapLgyUxaxrvEkwVkRzCPt7DFsobpHdtzt
DoS+MJ3aDiLolSa9zKFWv8SIAyOz8k939QIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FABRWnUOrHjLHfH2xmqXn3L01gNzMB8GA1UdIwQYMBaAFE2ifrg0org/CyrIwE3/
rpaDgZc6MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z4azl2Y2d4MWI0ZERI
dVJWOE1yNWJMN1FOVGo1b2tWZ2VRUVM1UndZa0drLzEvNERBMjdFQjgzNEEyQjgz
RjBCMkFDOEMwNERGRkFFOTY4MzgxOTczQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80REEyN0VCODM0QTJCODNGMEIyQUM4QzA0REZGQUU5NjgzODE5
NzNBLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z4azl2Y2d4MWI0ZERIdVJWOE1y
NWJMN1FOVGo1b2tWZ2VRUVM1UndZa0drLzEvNERBMjdFQjgzNEEyQjgzRjBCMkFD
OEMwNERGRkFFOTY4MzgxOTczQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALRHR1FLkF4Vk4PgjUBF8OW9
oyn6P2NgCPkjsuwUKhg5zg0LmhTpC5knlNOcGVMvVSHFMQdU/75aSWzz82D2o5ob
OWG7Jr+TaeIoGzQVWdVAepdlq8dZ5LokWeO3cz9gmj1tNhQckkLjarytqnMRLAgu
XrZAPBIHCioyTTc5fnvLSl6GubpTykgXF4NYr3qJBBe7jTOl7VWUGkf2oiM3HY5W
FXoxmAkmDYFWujGB6hLZE2TfnW4c4pdCk8+XAz+SbZGfzPALF8Mj42teb3zPjsP4
ADylnc7KIMOkfuCT+oiDtqjl4HSjjg4EHSGOSPljx3OqrbRpp/j0v6/CZ9tsXxc=
-----END CERTIFICATE-----
Generated at Mon Nov 3 12:35:59 2025 by rpki-client