Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.mft
File:                     701F7EBD5EE2152D4689A615D0F186D075EECD41.mft (raw, json)
Hash identifier:          svEbo+ESTXETFReFUf5WYRDoJj1Jyao6Vc+9QYxCREg=
Subject key identifier:   03:A4:B2:F5:5D:83:61:34:75:4B:F2:3A:F8:0B:D0:38:5A:E0:07:55
Authority key identifier: 70:1F:7E:BD:5E:E2:15:2D:46:89:A6:15:D0:F1:86:D0:75:EE:CD:41
Certificate issuer:       /CN=701F7EBD5EE2152D4689A615D0F186D075EECD41
Certificate serial:       5C75E6E3EF9FC63450C843762E4B70B710D20E84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.mft
Manifest number:          2D
Signing time:             Sun 02 Nov 2025 17:40:02 +0000
Manifest this update:     Sun 02 Nov 2025 17:35:02 +0000
Manifest next update:     Mon 03 Nov 2025 19:41:02 +0000
Files and hashes:         1: 34352e3136312e32302e302f32342d3234203d3e20323638343430.roa (hash: QXOWosaoZUnOff/366m5+VXqxvO9oKo3qAcNaj++9vs=)
                          2: 34352e3136312e32322e302f32332d3233203d3e20323638343430.roa (hash: M6krz/e6ZES22ESypEdU6b07Nh29rjcbX207CCLJmG0=)
                          3: 34352e3136312e32302e302f32332d3233203d3e20323638343430.roa (hash: ADh4CVwpL0Yv+Rq09yTFltLU+cq9uBqPwNE16rgyxiQ=)
                          4: 34352e3136312e32302e302f32322d3232203d3e20323638343430.roa (hash: xE2fRlN5dX60ZRAfgmHWPeQa5LWHn/7y2Wik31QJxSw=)
                          5: 34352e3136312e32322e302f32342d3234203d3e20323638343430.roa (hash: y2PpABc/Sg1TZ0UYoWQMJkfjOm+jHPlyiTpY2c2lreM=)
                          6: 34352e3136312e32312e302f32342d3234203d3e20323638343430.roa (hash: IQ41tqOgD7uD/PEIYH5h/oUTE5tnT9q42FfS6tEZMuU=)
                          7: 701F7EBD5EE2152D4689A615D0F186D075EECD41.crl (hash: emOEC4frvsjONKkpoXeG3feY2U6ZMnmHJiUhO4JjaNM=)
                          8: 323830343a353134303a3a2f33332d3333203d3e20323638343430.roa (hash: LeRqew8opsaem32EprvHblYNmhZFlfM2Lnc7VUAt0Ic=)
                          9: 323830343a353134303a3a2f33322d3332203d3e20323638343430.roa (hash: rb1GVHIGSODc5A+kSif6zWYICVt9SMW6ZwSJ9kxJhfA=)
                          10: 323830343a353134303a383030303a3a2f33332d3333203d3e20323638343430.roa (hash: hFhn5MBA6jIN2tEXivR9+TiaYDg5D9dFbXSRRyxTQw8=)
                          11: 34352e3136312e32332e302f32342d3234203d3e20323638343430.roa (hash: L+Qb68oKLljVQz7SdZNTQj4XlE9OAhJMPy9WKcpvPm0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.crl
                          rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Nov 2025 19:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:75:e6:e3:ef:9f:c6:34:50:c8:43:76:2e:4b:70:b7:10:d2:0e:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701F7EBD5EE2152D4689A615D0F186D075EECD41
        Validity
            Not Before: Nov  2 17:35:02 2025 GMT
            Not After : Nov  3 19:41:02 2025 GMT
        Subject: CN=03A4B2F55D836134754BF23AF80BD0385AE00755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:23:30:cb:d0:79:d4:5d:ba:ec:1f:08:3d:e7:
                    1a:76:f0:32:66:2d:fe:00:84:91:21:fb:55:40:ab:
                    7c:ab:96:25:a3:e2:20:75:01:ed:46:4e:36:6d:d0:
                    91:25:92:9d:88:b3:b5:2e:bd:ec:3f:4e:d3:79:16:
                    1d:e9:9f:16:91:a3:bd:1d:ca:a0:19:5a:78:c7:5b:
                    fa:68:24:52:9f:a4:a6:89:2a:15:a9:e3:bf:89:c6:
                    e5:b5:f6:61:99:f3:a9:20:8a:56:ac:d2:60:6a:bd:
                    8a:dd:19:97:b1:0b:d2:c8:72:2e:a4:de:6d:97:cc:
                    90:41:98:2e:af:8e:0e:91:ff:a8:ea:3d:be:8d:2a:
                    00:b8:96:06:8b:d3:46:01:0c:d8:d9:9f:30:03:f9:
                    bc:7f:00:6f:51:90:b9:a5:3a:a2:0b:66:ba:86:c1:
                    77:b2:c5:b0:66:d6:05:db:ca:58:4e:cb:9a:fa:52:
                    8d:5e:99:95:65:bf:e9:13:ef:83:4f:b9:9a:69:eb:
                    d2:cc:0a:31:b0:b6:82:17:35:aa:c3:77:a2:4e:f4:
                    a2:1e:ae:6a:79:eb:92:84:ec:ea:f4:47:ef:46:da:
                    55:7f:df:6b:06:2b:24:68:c8:4c:87:7e:69:24:3a:
                    5a:de:9e:63:1c:6a:e6:5d:66:78:1f:1e:5a:b7:ad:
                    01:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A4:B2:F5:5D:83:61:34:75:4B:F2:3A:F8:0B:D0:38:5A:E0:07:55
            X509v3 Authority Key Identifier:
                keyid:70:1F:7E:BD:5E:E2:15:2D:46:89:A6:15:D0:F1:86:D0:75:EE:CD:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:86:86:a2:1f:0b:82:2d:6e:22:e9:10:cd:fb:81:2d:06:a2:
         bb:67:5c:4d:5e:f7:33:e1:f5:eb:cf:cb:d3:84:d2:5d:30:33:
         d0:49:00:97:d7:cc:3d:fa:ab:a3:10:81:53:4c:02:9e:2e:05:
         49:69:59:32:5c:da:f2:ee:d3:e7:6d:86:9e:67:1e:cb:33:92:
         cb:2c:da:a0:00:e3:aa:2c:3e:db:0a:3d:82:8d:32:b9:96:7b:
         7d:d7:8e:8f:47:a7:28:c7:d3:38:73:4c:16:02:57:a6:f7:3e:
         0a:76:23:e7:16:42:6d:01:6a:18:db:52:00:7c:9d:5f:28:98:
         54:12:f0:3b:ee:6d:8a:f4:c1:a3:cf:df:27:0f:3f:46:4a:a9:
         f7:ed:17:27:ed:1e:ba:38:75:d4:31:fe:57:de:87:d7:2f:1f:
         6b:ca:15:53:38:cd:bf:ac:94:4b:38:6b:46:ec:19:65:c1:cd:
         b2:d6:7b:30:78:91:f8:9f:ee:0c:29:65:c8:fd:0d:41:7a:b2:
         d3:a2:58:ee:04:19:8d:17:15:94:e2:2d:a0:64:0e:13:f9:aa:
         74:c4:3b:84:c1:0c:48:b8:23:0b:95:3b:b6:28:d7:aa:7e:a8:
         4c:8f:be:e4:62:6f:14:c8:77:f4:32:13:89:33:56:07:5c:49:
         71:53:66:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXHXm4++fxjRQyEN2LktwtxDSDoQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzAxRjdFQkQ1RUUyMTUyRDQ2ODlBNjE1RDBGMTg2RDA3
NUVFQ0Q0MTAeFw0yNTExMDIxNzM1MDJaFw0yNTExMDMxOTQxMDJaMDMxMTAvBgNV
BAMTKDAzQTRCMkY1NUQ4MzYxMzQ3NTRCRjIzQUY4MEJEMDM4NUFFMDA3NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxIzDL0HnUXbrsHwg95xp28DJm
Lf4AhJEh+1VAq3yrliWj4iB1Ae1GTjZt0JElkp2Is7Uuvew/TtN5Fh3pnxaRo70d
yqAZWnjHW/poJFKfpKaJKhWp47+JxuW19mGZ86kgilas0mBqvYrdGZexC9LIci6k
3m2XzJBBmC6vjg6R/6jqPb6NKgC4lgaL00YBDNjZnzAD+bx/AG9RkLmlOqILZrqG
wXeyxbBm1gXbylhOy5r6Uo1emZVlv+kT74NPuZpp69LMCjGwtoIXNarDd6JO9KIe
rmp565KE7Or0R+9G2lV/32sGKyRoyEyHfmkkOlrenmMcauZdZngfHlq3rQELAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUA6Sy9V2DYTR1S/I6+AvQOFrgB1UwHwYDVR0j
BBgwFoAUcB9+vV7iFS1GiaYV0PGG0HXuzUEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGJNM0djRDl2YmhYdVh0NmN6SmRpbjVZQ3Y5MmFzZEVDbmVTc3JwMWRl
MlkvMC83MDFGN0VCRDVFRTIxNTJENDY4OUE2MTVEMEYxODZEMDc1RUVDRDQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwMUY3RUJENUVFMjE1MkQ0
Njg5QTYxNUQwRjE4NkQwNzVFRUNENDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SGJNM0djRDl2YmhYdVh0NmN6SmRpbjVZQ3Y5MmFzZEVDbmVTc3JwMWRlMlkvMC83
MDFGN0VCRDVFRTIxNTJENDY4OUE2MTVEMEYxODZEMDc1RUVDRDQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVYaGoh8Lgi1uIukQzfuBLQaiu2dcTV73M+H168/L04TSXTAz0EkAl9fMPfqr
oxCBU0wCni4FSWlZMlza8u7T522GnmceyzOSyyzaoADjqiw+2wo9go0yuZZ7fdeO
j0enKMfTOHNMFgJXpvc+CnYj5xZCbQFqGNtSAHydXyiYVBLwO+5tivTBo8/fJw8/
Rkqp9+0XJ+0eujh11DH+V96H1y8fa8oVUzjNv6yUSzhrRuwZZcHNstZ7MHiR+J/u
DCllyP0NQXqy06JY7gQZjRcVlOItoGQOE/mqdMQ7hMEMSLgjC5U7tijXqn6oTI++
5GJvFMh39DITiTNWB1xJcVNm3w==
-----END CERTIFICATE-----
Generated at Mon Nov 3 12:05:38 2025 by rpki-client