Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
File:                     FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft (raw, json)
Hash identifier:          h/lkeJSbCgEiGxZ7Ml7oHt3G9mQ4jGRnmHswy6tl9yE=
Subject key identifier:   E3:B2:98:DE:8C:AA:EB:23:76:39:56:F2:EC:9C:32:A3:E8:14:1A:67
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Certificate issuer:       /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial:       048411D2B174F61901D5A2CDF460B1F55775BF8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
Manifest number:          02D4
Signing time:             Thu 18 Sep 2025 09:39:14 +0000
Manifest this update:     Thu 18 Sep 2025 09:34:14 +0000
Manifest next update:     Fri 19 Sep 2025 11:00:14 +0000
Files and hashes:         1: 3137302e3234362e33322e302f32322d3234203d3e203631383035.roa (hash: WnVJTcCQumCE9fQ7Vws90QAt2HsWCykqOp9Cx81XI8M=)
                          2: 3137302e3234372e38302e302f32322d3234203d3e203631383035.roa (hash: yCzuLmb/Tt6KFd57YY2nX7jQhrMJcLtBuCJAgEPyWp8=)
                          3: FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl (hash: xarbqd+S7SuJWabUvaDZoZbFOQiwzEPUSb3v59hnsAM=)
                          4: 3230302e3232392e3135362e302f32322d3234203d3e203631383035.roa (hash: FbA7Md3FlU43upzx21RM/HOPJeIXcMSZyumJsm6sz8E=)
                          5: 3133312e3136312e3135362e302f32322d3234203d3e203631383035.roa (hash: vICwpsDgzmHAq6d4aB9nm8j21S6Qzk2xwhEfVV+wbW0=)
                          6: 323830343a313939383a3a2f33322d3438203d3e203631383035.roa (hash: Qk7ja/D0UnEABlntWPvNXxeAnxQmmqTk79+LRpxGwiA=)
                          7: 34352e3233392e3232342e302f32322d3234203d3e203631383035.roa (hash: dCwgks9kz+PtKonoUYMuaJ/xBVsseEIveXSK48b+vek=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl
                          rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 10:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:84:11:d2:b1:74:f6:19:01:d5:a2:cd:f4:60:b1:f5:57:75:bf:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Validity
            Not Before: Sep 18 09:34:14 2025 GMT
            Not After : Sep 19 11:00:14 2025 GMT
        Subject: CN=E3B298DE8CAAEB23763956F2EC9C32A3E8141A67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4a:c1:57:ac:5b:45:26:c8:ae:12:5b:67:23:
                    fc:21:b0:ba:9e:e0:88:2a:a9:73:1c:e9:96:3e:2b:
                    96:9b:9a:e8:10:19:a8:58:ae:4a:f9:70:8b:bc:b0:
                    11:2a:44:4f:68:90:4a:20:5d:77:29:02:41:76:c5:
                    09:25:85:5e:71:b4:be:ab:7e:75:d5:99:04:1e:69:
                    f9:60:62:6f:8b:fc:9a:be:98:af:7c:08:79:11:e0:
                    73:90:2a:39:46:5b:21:e6:fb:f8:a4:f6:1f:e1:73:
                    37:66:02:68:f2:1f:e8:1b:bc:c4:f1:82:ec:08:aa:
                    1f:39:89:d0:14:34:f5:0b:79:69:66:d3:5e:a4:81:
                    86:54:a9:f7:86:5e:dd:9d:19:cf:d9:dc:94:41:7b:
                    89:bb:67:01:60:ef:8e:04:fe:21:6f:cb:b8:a6:d8:
                    74:67:59:bb:b7:cb:22:a2:18:6d:e9:88:2e:8e:83:
                    46:05:f3:88:ff:bf:82:7b:29:07:20:91:6d:5e:6e:
                    ee:4f:8f:d2:1e:a9:0f:60:d2:9b:21:b7:bc:45:fd:
                    8c:31:9e:26:8a:81:62:8d:e3:ac:5f:49:a9:48:2a:
                    c8:1b:68:15:5c:e1:f7:d7:56:bb:51:b6:9d:d5:ac:
                    ab:12:73:1f:b5:54:9e:4c:37:e3:63:e2:3a:bc:1c:
                    6d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B2:98:DE:8C:AA:EB:23:76:39:56:F2:EC:9C:32:A3:E8:14:1A:67
            X509v3 Authority Key Identifier:
                keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:4a:99:89:28:3b:9e:df:d6:7f:8e:d2:46:78:d5:66:4b:92:
         48:c0:75:81:e5:bb:03:ca:49:93:87:25:6d:fe:bb:d1:b0:cd:
         dc:7e:be:16:20:ea:24:98:7a:f8:19:93:4b:de:32:f0:56:f9:
         73:be:cf:1f:c9:97:f8:62:c1:89:d4:c5:0e:ce:28:e8:2f:ed:
         e6:f4:db:21:74:08:4b:e1:1b:fe:08:83:cd:fa:67:56:b0:b9:
         67:f3:34:96:ba:65:7f:9a:60:37:f7:00:8a:79:bb:42:c4:2b:
         4e:3b:99:42:44:9b:dc:06:51:6b:82:12:02:4f:6f:47:b5:9d:
         e4:e2:18:26:0f:44:46:4b:d6:e8:c4:9b:91:58:19:9c:6b:18:
         9f:d5:39:e0:6e:53:95:4a:44:a8:2e:2f:6f:f2:f9:6b:07:89:
         ef:1a:31:e4:e6:14:09:df:1c:1e:a6:1e:49:02:1e:17:2b:cb:
         0a:73:6e:5f:a6:3a:76:7f:a2:02:c0:fc:83:bc:ce:e1:19:e1:
         74:0f:d0:5c:76:85:06:ba:db:c8:3d:89:f0:d2:b4:22:e2:72:
         45:db:1d:b9:0e:16:0e:60:d5:5a:6e:ea:32:d3:ec:21:d8:75:
         b4:22:47:1a:c3:9d:77:ba:83:35:ee:b6:03:07:8c:c8:72:01:
         95:7e:f2:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBIQR0rF09hkB1aLN9GCx9Vd1v4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU3MEJGNDgyMUIyMURDNTkwNUZERDc0RUQwM0MxMzZB
MTZBMjgzMDAeFw0yNTA5MTgwOTM0MTRaFw0yNTA5MTkxMTAwMTRaMDMxMTAvBgNV
BAMTKEUzQjI5OERFOENBQUVCMjM3NjM5NTZGMkVDOUMzMkEzRTgxNDFBNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjSsFXrFtFJsiuEltnI/whsLqe
4IgqqXMc6ZY+K5abmugQGahYrkr5cIu8sBEqRE9okEogXXcpAkF2xQklhV5xtL6r
fnXVmQQeaflgYm+L/Jq+mK98CHkR4HOQKjlGWyHm+/ik9h/hczdmAmjyH+gbvMTx
guwIqh85idAUNPULeWlm016kgYZUqfeGXt2dGc/Z3JRBe4m7ZwFg744E/iFvy7im
2HRnWbu3yyKiGG3piC6Og0YF84j/v4J7KQcgkW1ebu5Pj9IeqQ9g0psht7xF/Ywx
niaKgWKN46xfSalIKsgbaBVc4ffXVrtRtp3VrKsScx+1VJ5MN+Nj4jq8HG2fAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU47KY3oyq6yN2OVby7Jwyo+gUGmcwHwYDVR0j
BBgwFoAU/nC/SCGyHcWQX9107QPBNqFqKDAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzREWnQ4cEdoOUZYTU5XTDhNd3V1QXBzQnNBZDNMSFZ2THpka0Fxc1FC
OUgvMC9GRTcwQkY0ODIxQjIxREM1OTA1RkRENzRFRDAzQzEzNkExNkEyODMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFNzBCRjQ4MjFCMjFEQzU5
MDVGREQ3NEVEMDNDMTM2QTE2QTI4MzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RzREWnQ4cEdoOUZYTU5XTDhNd3V1QXBzQnNBZDNMSFZ2THpka0Fxc1FCOUgvMC9G
RTcwQkY0ODIxQjIxREM1OTA1RkRENzRFRDAzQzEzNkExNkEyODMwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApkqZiSg7nt/Wf47SRnjVZkuSSMB1geW7A8pJk4clbf670bDN3H6+FiDqJJh6
+BmTS94y8Fb5c77PH8mX+GLBidTFDs4o6C/t5vTbIXQIS+Eb/giDzfpnVrC5Z/M0
lrplf5pgN/cAinm7QsQrTjuZQkSb3AZRa4ISAk9vR7Wd5OIYJg9ERkvW6MSbkVgZ
nGsYn9U54G5TlUpEqC4vb/L5aweJ7xox5OYUCd8cHqYeSQIeFyvLCnNuX6Y6dn+i
AsD8g7zO4RnhdA/QXHaFBrrbyD2J8NK0IuJyRdsduQ4WDmDVWm7qMtPsIdh1tCJH
GsOdd7qDNe62AweMyHIBlX7yYA==
-----END CERTIFICATE-----
Generated at Thu Sep 18 11:57:17 2025 by rpki-client