Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
File:                     9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft (raw, json)
Hash identifier:          H+G+KiJK6e9alfgZEOt3jj5UDPWZF/2eRiIcMYlb54c=
Subject key identifier:   20:0C:6D:88:C7:4D:AB:5E:2B:FB:A3:5A:E6:C3:45:4D:FF:26:10:D3
Authority key identifier: 9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21
Certificate issuer:       /CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
Certificate serial:       0E09D779E79B4BC6D730D1D4557A5CAADA5987A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
Manifest number:          02A3
Signing time:             Wed 20 Aug 2025 06:31:23 +0000
Manifest this update:     Wed 20 Aug 2025 06:26:23 +0000
Manifest next update:     Thu 21 Aug 2025 08:57:23 +0000
Files and hashes:         1: 3137372e39312e3233312e302f32342d3234203d3e20323730383939.roa (hash: 4ahpbqrbVjoNhJ6suC152xt5nvpn2qTcWWJstS6xu/w=)
                          2: 323830343a373332383a323030303a3a2f33362d3336203d3e20323730383939.roa (hash: vkXUxHuNfUCti1NDkT/pFbATg8NcGqlxLavMso/cYt8=)
                          3: 323830343a373332383a3a2f33362d3336203d3e20323730383939.roa (hash: Hgb0YznLAEtDoYv49I8u6RBseazG2W8a4vF0eGCxlqM=)
                          4: 323830343a373332383a3a2f33322d3332203d3e20323730383939.roa (hash: 0og7mHAg1cs/CXfLP5YKWtxvT1kRb6ab0ut/ca04ON0=)
                          5: 323830343a373332383a313030303a3a2f33362d3336203d3e20323730383939.roa (hash: KaDD1B9L/1YgiBrcyRisFVWHKeCqMc0d/T1zrCbZrlk=)
                          6: 3137372e39312e3232382e302f32332d3233203d3e20323730383939.roa (hash: I/zMkl825iiNPzx7DySyScRiyB7PG+Sehcz9/ZpNoIo=)
                          7: 9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl (hash: /T49d5bfy0R4z4Fc9IKRTmffMlXZ9V/vDR4ip1vPZzE=)
                          8: 3137372e39312e3232382e302f32322d3232203d3e20323730383939.roa (hash: qblvyMsP/0q623/AR9T2qt6Q+iQZ5E9cP+jioV2MfYc=)
                          9: 3137372e39312e3232382e302f32342d3234203d3e20323730383939.roa (hash: 2PNhElcg7Mx6AzGTJNJzEeoiimZImJMyssS8EtLNr8M=)
                          10: 3137372e39312e3233302e302f32342d3234203d3e20323730383939.roa (hash: hITh7h70/ARvvMfkHTgRXHtN3zrRnC9UNIMEPc5H8nk=)
                          11: 3137372e39312e3232392e302f32342d3234203d3e20323730383939.roa (hash: UMqTK9reUzNNnwRwMXBy/vvN20ODpBYMLm+4Fschui4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl
                          rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 08:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:09:d7:79:e7:9b:4b:c6:d7:30:d1:d4:55:7a:5c:aa:da:59:87:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
        Validity
            Not Before: Aug 20 06:26:23 2025 GMT
            Not After : Aug 21 08:57:23 2025 GMT
        Subject: CN=200C6D88C74DAB5E2BFBA35AE6C3454DFF2610D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5b:37:fd:fb:eb:27:17:e0:fa:c5:5b:fb:47:
                    bf:14:26:4e:13:5f:42:d3:06:af:f2:6d:98:44:74:
                    91:fb:02:1c:0b:1e:cf:20:e6:77:ad:f8:3b:fc:26:
                    fc:f7:1f:5a:3f:f0:bc:b0:ba:d0:66:04:78:1b:78:
                    65:33:e3:49:80:a7:5d:91:d8:ba:fc:6c:1a:20:fc:
                    4a:af:61:51:ce:f8:6e:b0:21:82:a6:a0:4d:e1:ca:
                    d1:ec:1e:ca:89:03:e0:84:cd:d9:fb:6c:06:d6:18:
                    92:8a:b5:61:89:be:f4:00:af:34:07:fa:08:ce:ec:
                    a2:4a:16:31:fa:b5:71:59:c3:61:da:69:6c:1b:5f:
                    63:9e:8a:34:66:a9:e4:82:dc:85:6f:88:c4:b2:bc:
                    e6:2b:38:be:0c:82:ba:e2:3d:cc:b1:08:3b:e1:37:
                    38:9a:79:d2:a7:39:d6:db:53:57:8f:bf:cd:db:e0:
                    44:6f:bb:59:09:0a:22:aa:71:32:ad:67:d6:f8:ef:
                    e3:2d:93:9e:09:55:b6:94:b7:37:1c:8b:5b:f0:06:
                    13:b7:cf:4e:a4:ba:b1:92:a5:81:67:9d:ff:d7:40:
                    36:a6:8a:77:03:31:4c:f7:1a:6e:f7:56:9c:61:24:
                    8e:ce:92:59:8c:fe:31:d4:b1:83:f7:79:7f:b5:77:
                    ce:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0C:6D:88:C7:4D:AB:5E:2B:FB:A3:5A:E6:C3:45:4D:FF:26:10:D3
            X509v3 Authority Key Identifier:
                keyid:9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:4a:a0:3e:4f:ab:73:c8:54:e5:c5:3c:93:36:df:31:e0:c2:
         e1:59:8e:1f:a7:64:6f:ff:4f:40:99:e4:bc:24:45:7c:86:fc:
         54:05:63:11:38:6f:47:b2:8e:0f:b5:ff:da:22:e6:c3:49:76:
         d6:73:6b:aa:ef:f2:5e:fa:56:95:b1:30:5e:d0:f4:e3:e4:d8:
         13:f1:86:33:69:79:2f:8c:a5:a7:17:39:56:73:63:e1:b3:43:
         6e:be:f6:4f:f1:a0:f3:fc:74:1e:a5:25:db:85:e5:d3:c2:0d:
         bc:96:f0:24:10:30:d7:a0:1f:72:40:bb:d4:2f:eb:65:85:5d:
         ee:2c:57:83:df:d6:c0:92:a3:95:06:e7:0a:c6:56:62:07:b9:
         e3:2e:0d:e6:bd:ed:22:a3:65:bb:51:fc:6d:ad:f7:fc:4b:08:
         1a:7f:51:2a:0b:a7:36:91:9d:ca:f0:fa:4a:1a:ab:ff:b0:e3:
         3c:74:0b:68:d8:ec:fe:91:23:d8:f0:08:91:36:8e:78:03:79:
         5b:aa:ff:24:fc:9d:d1:a2:f1:af:9a:84:75:ba:68:fe:50:8b:
         2f:7e:f0:eb:ad:9c:43:e3:8c:43:93:12:5e:d0:00:1c:d2:b0:
         2f:3b:46:3f:c3:ae:60:a3:14:d1:5c:d3:74:fa:21:c7:e8:e2:
         19:57:19:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDgnXeeebS8bXMNHUVXpcqtpZh6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURCOTlCNEExQ0Q1NkIxQzdDMTA0RkEyNUVGREU1MTg1
OTZGRDIyMTAeFw0yNTA4MjAwNjI2MjNaFw0yNTA4MjEwODU3MjNaMDMxMTAvBgNV
BAMTKDIwMEM2RDg4Qzc0REFCNUUyQkZCQTM1QUU2QzM0NTRERkYyNjEwRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Wzf9++snF+D6xVv7R78UJk4T
X0LTBq/ybZhEdJH7AhwLHs8g5net+Dv8Jvz3H1o/8LywutBmBHgbeGUz40mAp12R
2Lr8bBog/EqvYVHO+G6wIYKmoE3hytHsHsqJA+CEzdn7bAbWGJKKtWGJvvQArzQH
+gjO7KJKFjH6tXFZw2HaaWwbX2OeijRmqeSC3IVviMSyvOYrOL4MgrriPcyxCDvh
NziaedKnOdbbU1ePv83b4ERvu1kJCiKqcTKtZ9b47+Mtk54JVbaUtzcci1vwBhO3
z06kurGSpYFnnf/XQDamincDMUz3Gm73VpxhJI7OklmM/jHUsYP3eX+1d85FAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUIAxtiMdNq14r+6Na5sNFTf8mENMwHwYDVR0j
BBgwFoAUnbmbShzVaxx8EE+iXv3lGFlv0iEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1Z3TUVwNUVuSlNLN1RhQ2pidTVEcUhZU1RaV2E4UndxYXI5QWNBQ0pq
N3MvMS85REI5OUI0QTFDRDU2QjFDN0MxMDRGQTI1RUZERTUxODU5NkZEMjIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEQjk5QjRBMUNENTZCMUM3
QzEwNEZBMjVFRkRFNTE4NTk2RkQyMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R1Z3TUVwNUVuSlNLN1RhQ2pidTVEcUhZU1RaV2E4UndxYXI5QWNBQ0pqN3MvMS85
REI5OUI0QTFDRDU2QjFDN0MxMDRGQTI1RUZERTUxODU5NkZEMjIxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqUqgPk+rc8hU5cU8kzbfMeDC4VmOH6dkb/9PQJnkvCRFfIb8VAVjEThvR7KO
D7X/2iLmw0l21nNrqu/yXvpWlbEwXtD04+TYE/GGM2l5L4ylpxc5VnNj4bNDbr72
T/Gg8/x0HqUl24Xl08INvJbwJBAw16AfckC71C/rZYVd7ixXg9/WwJKjlQbnCsZW
Yge54y4N5r3tIqNlu1H8ba33/EsIGn9RKgunNpGdyvD6Shqr/7DjPHQLaNjs/pEj
2PAIkTaOeAN5W6r/JPyd0aLxr5qEdbpo/lCLL37w662cQ+OMQ5MSXtAAHNKwLztG
P8OuYKMU0VzTdPohx+jiGVcZ5A==
-----END CERTIFICATE-----
Generated at Wed Aug 20 16:17:00 2025 by rpki-client