Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
File:                     CEA74FF3945E7508599D54A721E47B3BA75706E3.mft (raw, json)
Hash identifier:          DU06g79qASbOqkrbDoXr8NvVuy5Nl0U5eBWwOhaoknI=
Subject key identifier:   4D:AB:F8:7E:E5:66:73:FB:DB:78:11:7B:9F:6C:39:08:A4:4D:31:08
Authority key identifier: CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3
Certificate issuer:       /CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
Certificate serial:       58DC8C11D6C686343786CF1C6E87662AC5BABD49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
Manifest number:          4C
Signing time:             Mon 03 Nov 2025 00:33:33 +0000
Manifest this update:     Mon 03 Nov 2025 00:28:33 +0000
Manifest next update:     Tue 04 Nov 2025 02:01:33 +0000
Files and hashes:         1: 34352e3136382e39332e302f32342d3234203d3e20323638303430.roa (hash: IUZPl3HABE+NbxOlmkkLFMZO5STQT9Ai+fogmJfb7iY=)
                          2: CEA74FF3945E7508599D54A721E47B3BA75706E3.crl (hash: otRzNSyHdNWh75YZvGEHooHR1CDF2MLXs1AAbuUhYY8=)
                          3: 323830343a353730633a313030303a3a2f33362d3336203d3e20323638303430.roa (hash: XX4RgqWrgK0cN07dELop4PmkV3SAb55I/eZ0jEmBII0=)
                          4: 323830343a353730633a393030303a3a2f33362d3336203d3e20323638303430.roa (hash: h+Y8VHW8KQwbGe6hDzwUUcFE6gQRTp4SniquNbqCvlw=)
                          5: 34352e3136382e39322e302f32342d3234203d3e20323638303430.roa (hash: K5wxrWM8xGNa7I2Y8rel/TySV+3C7EVkaRe9ditefw4=)
                          6: 323830343a353730633a353030303a3a2f33362d3336203d3e20323638303430.roa (hash: xKOZCLzFhIukCU7Ho1bE8l21fKx8oMJdRkB6RP4zOU0=)
                          7: 323830343a353730633a333030303a3a2f33362d3336203d3e20323638303430.roa (hash: tGy459mLNyebpYZY+MbMekDYPXcRxv1h1TrwkkoKkFk=)
                          8: 323830343a353730633a643030303a3a2f33362d3336203d3e20323638303430.roa (hash: 7tiAzH2T7BZpiBdZ7h8cWjCqszI1cAHqi1AKIdwI+Ns=)
                          9: 323830343a353730633a323030303a3a2f33362d3336203d3e20323638303430.roa (hash: Q6zbgVZ9/2xEzK0l0oVACRPG06HR5I8bst3e2ItEODc=)
                          10: 323830343a353730633a613030303a3a2f33362d3336203d3e20323638303430.roa (hash: T3V/Fz/+CDSWTRlwglp3HyVdgtedfBKa6uhVQvV4HZM=)
                          11: 323830343a353730633a623030303a3a2f33362d3336203d3e20323638303430.roa (hash: VbbGJ8kXVWVaWgkpRfTJcqYFKwhfCrLnwCzYQO9WjaY=)
                          12: 34352e3136382e39322e302f32332d3233203d3e20323638303430.roa (hash: vXL3rBnLSmw+J/CZGJUcyYkEUODj5iau3OEYJ2GWr1k=)
                          13: 323830343a353730633a343030303a3a2f33362d3336203d3e20323638303430.roa (hash: 9BWp1l5TIZv7ozJAknPOYmLX23z8eO7kjS9UJR1G2ac=)
                          14: 323830343a353730633a383030303a3a2f33362d3336203d3e20323638303430.roa (hash: NFU0jsGK6nSlrz0zk/uZrUWGBjONw0UGc1cZM4BbMUI=)
                          15: 323830343a353730633a3a2f33362d3336203d3e20323638303430.roa (hash: cX+NY4bOnb/vgPKQTr/m0/s7d+cdADKZKZxk5MIvTZE=)
                          16: 323830343a353730633a363030303a3a2f33362d3336203d3e20323638303430.roa (hash: K2v77Gt9NOI7lpPDfVMsT7/UdsiCfs7Bid43RGcyb+8=)
                          17: 323830343a353730633a633030303a3a2f33362d3336203d3e20323638303430.roa (hash: O7Oqr//PpcCqpzqFcZFT9boA2UaSvzJGXYDNBvE/tdI=)
                          18: 323830343a353730633a653030303a3a2f33362d3336203d3e20323638303430.roa (hash: t88Kw7BF7trQ4diDbERO9KwQHVsvIgc6sb+afFk1/oU=)
                          19: 323830343a353730633a663030303a3a2f33362d3336203d3e20323638303430.roa (hash: DDqiXH4DdttjGY2bJj8hMTSCzoazExdYreFMNjG5kNw=)
                          20: 323830343a353730633a373030303a3a2f33362d3336203d3e20323638303430.roa (hash: qEGTNLA+KBcnLwyZCSUh18M49As5kWTLHnJHsfSSMfE=)
                          21: 323830343a353730633a3a2f33322d3332203d3e20323638303430.roa (hash: NPJlZoapyXgbKp6nQrUGfGeQejkrs2Sgotm/M7pu97Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl
                          rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 02:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:dc:8c:11:d6:c6:86:34:37:86:cf:1c:6e:87:66:2a:c5:ba:bd:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
        Validity
            Not Before: Nov  3 00:28:33 2025 GMT
            Not After : Nov  4 02:01:33 2025 GMT
        Subject: CN=4DABF87EE56673FBDB78117B9F6C3908A44D3108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1e:84:7c:e6:cb:15:6c:11:0b:3e:07:d8:fe:
                    b2:15:3a:51:be:e0:50:0d:4d:d2:4d:73:6f:04:68:
                    9c:e3:56:29:33:12:f9:01:46:9c:cd:67:bc:82:6b:
                    2a:b7:5c:30:b2:a1:4b:33:2e:9a:0a:48:02:49:fc:
                    1d:a9:1e:8c:41:79:43:b5:31:05:ec:6b:ac:05:5c:
                    b7:b5:30:d3:a9:16:18:7c:1d:d8:2d:5c:06:86:e7:
                    51:a7:ef:49:8a:20:8c:4b:ce:d0:26:cc:a3:2e:f4:
                    bf:ad:f9:af:56:9d:88:80:17:2e:97:bb:67:5e:56:
                    81:07:5c:52:89:90:aa:11:4b:b7:16:9f:99:ce:d2:
                    1f:de:02:c2:20:84:92:26:7e:a5:84:86:63:1b:22:
                    66:be:86:78:c1:e0:22:62:ca:43:37:79:90:99:61:
                    c3:55:09:9e:11:cc:1e:34:27:8d:63:67:ca:9f:06:
                    a9:e0:29:c4:45:67:a1:4f:b3:19:e4:fc:a0:e3:62:
                    99:e4:9c:44:77:35:aa:8e:72:25:bd:d1:8b:ab:91:
                    e2:b8:a3:d7:e5:c0:0a:93:75:b9:8d:da:6d:27:5e:
                    3d:56:e7:66:e8:1d:8f:ee:cd:07:01:19:65:23:aa:
                    26:15:ae:6a:c2:db:30:84:59:78:04:4d:02:80:36:
                    e3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AB:F8:7E:E5:66:73:FB:DB:78:11:7B:9F:6C:39:08:A4:4D:31:08
            X509v3 Authority Key Identifier:
                keyid:CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:aa:0d:b0:0d:0f:46:0a:99:82:e9:61:56:5b:6d:1d:4d:ea:
         4c:8b:ac:97:cf:69:cf:43:dc:be:e0:f6:eb:02:82:32:7c:9b:
         ea:95:09:8a:a6:d7:7d:1b:71:dd:c2:d8:15:1a:6f:20:91:49:
         2b:71:cd:3b:a1:74:27:16:70:67:c8:f0:9c:ab:70:12:c2:9d:
         7d:d0:c5:9b:db:ea:59:43:e2:3c:1a:19:a0:76:2c:eb:ae:9e:
         34:36:18:ba:db:2a:22:4d:89:db:a3:e4:4b:ce:dd:0f:fb:7d:
         fd:d1:f7:34:9f:5b:da:54:e4:19:a9:0c:d3:bc:3d:65:e1:c3:
         a0:fc:f0:ac:da:f3:4a:9e:17:5f:62:3d:c2:3c:cf:ae:03:22:
         20:80:1f:8a:e8:f3:8d:83:67:6e:56:fa:29:11:d5:62:81:e6:
         7b:51:95:c5:06:40:7c:ed:3f:ce:f9:40:60:4f:9b:5c:36:81:
         f9:b6:80:1b:86:e6:f2:29:eb:69:7c:4a:88:d5:25:57:6c:4b:
         e0:e7:8a:07:cc:b3:d7:f8:6d:d2:94:f4:d2:56:eb:32:37:7a:
         d3:cc:eb:1a:da:4c:62:1c:4f:26:cd:2a:3f:83:68:5e:02:71:
         90:4e:1c:a6:68:20:8f:1f:5a:bd:dc:75:09:c6:c5:7c:e9:22:
         4e:39:e2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:33:57 2025 by rpki-client