Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
File:                     F221C31BD2AD9D051303E1E7DE991DC00987A722.mft (raw, json)
Hash identifier:          7W43ZDJujmt7wnoADJEWbQwvgaCEdjocGl3a1Hb/dAw=
Subject key identifier:   3E:22:7F:19:B9:7B:62:A2:CC:ED:C5:58:F9:A9:57:BD:DF:EC:CE:00
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Certificate issuer:       /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial:       65FE1E115CD4DF9C969303B27ED78973485FE420
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
Manifest number:          0302
Signing time:             Mon 03 Nov 2025 05:22:07 +0000
Manifest this update:     Mon 03 Nov 2025 05:17:07 +0000
Manifest next update:     Tue 04 Nov 2025 08:20:07 +0000
Files and hashes:         1: F221C31BD2AD9D051303E1E7DE991DC00987A722.crl (hash: Rm6aXxR3JWrTNrGt5LK+oRIT2McoWvCbK0piJBKrefY=)
                          2: 34352e3139312e382e302f32322d3232203d3e20323639363938.roa (hash: uvXqkE0gwe4H6gFGVvKXequ8DorR1C0j+SMI/N7Y91A=)
                          3: 34352e3139312e31302e302f32332d3233203d3e20323639363938.roa (hash: i1LFjDleQqoAGjz6MvN6wpPw4uQ4dlQvDkJaxBKU9BU=)
                          4: 323830343a363838343a3a2f33342d3334203d3e20323639363938.roa (hash: pq/Dj3qQG871olBeTjHvGD64gaeJgGewfEclCvL6KP0=)
                          5: 323830343a363838343a633030303a3a2f33342d3334203d3e20323639363938.roa (hash: LaTW7wYzQrWTUAjdKHM0NQG0MQ2uFqWnWI8sXHDQxUM=)
                          6: 34352e3139312e382e302f32342d3234203d3e20323639363938.roa (hash: ry0344gAUCjdhJMFogX38/1QuRL2KeHt0TTjQQP+iYw=)
                          7: 323830343a363838343a343030303a3a2f33342d3334203d3e20323639363938.roa (hash: 14M8s28ZKRux3r9gT/i2ifhbKy7V9ZcynUOfsoA0QgM=)
                          8: 34352e3139312e382e302f32332d3233203d3e20323639363938.roa (hash: ACYJnNXuyfFW5y7pVi5pNsk5eUXawdUn0WyMxla+Hog=)
                          9: 323830343a363838343a3a2f33332d3333203d3e20323639363938.roa (hash: q8hGSLy7IL+Q+YHLVMEYU1ATp8vBK1bXozLB27nzA4A=)
                          10: 323830343a363838343a3a2f33322d3332203d3e20323639363938.roa (hash: 7suffMdyFJwcc+5h4rkXUGwPZEd1HFBkhrJUGXc2kj8=)
                          11: 34352e3139312e31302e302f32342d3234203d3e20323639363938.roa (hash: 5mzCBNX6a9NVDLpUIT21SX0dR/4GsRHXc9dgTV86uNk=)
                          12: 34352e3139312e31312e302f32342d3234203d3e20323639363938.roa (hash: SPpnWnitvIvfgXmOebaXaI2xG2GoXFJsORzMxoxoQTU=)
                          13: 323830343a363838343a383030303a3a2f33342d3334203d3e20323639363938.roa (hash: t6Luok4IsDWv0drOmD5TkaphJd39YB+gx0AQRMvB9dA=)
                          14: 34352e3139312e392e302f32342d3234203d3e20323639363938.roa (hash: VgiTruskHH6wRxOLPabZH7yFedsjHA3FL/GcXt0Objw=)
                          15: 323830343a363838343a33303a3a2f34342d3434203d3e20323639363938.roa (hash: K1dP7ftXpuFZydue+YSpBP8lpuEw7F3hZQo24A2h2eg=)
                          16: 323830343a363838343a383030303a3a2f33332d3333203d3e20323639363938.roa (hash: tTtfJXv3O/MaTM5tF0x2FLFUYralK3kEvTp1Lj+Eaoo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
                          rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 08:20:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:fe:1e:11:5c:d4:df:9c:96:93:03:b2:7e:d7:89:73:48:5f:e4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
        Validity
            Not Before: Nov  3 05:17:07 2025 GMT
            Not After : Nov  4 08:20:07 2025 GMT
        Subject: CN=3E227F19B97B62A2CCEDC558F9A957BDDFECCE00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c2:92:70:ad:87:e8:0d:5f:28:d6:4b:94:6a:
                    9d:5d:d6:0d:a1:d3:95:b9:55:fa:16:d3:d6:e8:45:
                    8f:42:5c:6b:6e:43:e5:e8:02:1e:fb:a0:ef:12:ca:
                    9e:52:d1:bf:48:73:43:ba:f4:5a:6d:4e:1d:a1:91:
                    82:b9:dc:7f:e3:39:30:a2:93:5d:99:d5:bd:08:81:
                    a8:b3:7b:6d:4a:9c:b4:66:65:45:8a:82:be:c6:3b:
                    02:26:f5:1d:e5:69:36:69:77:a5:fd:49:3e:3f:7d:
                    b3:0f:11:42:3f:af:65:70:46:ef:cc:98:ab:03:8e:
                    6f:28:7e:eb:e6:05:48:a0:c8:74:fe:2d:ac:40:07:
                    c6:e7:9e:ed:e2:f5:5e:44:81:d5:d5:7e:cb:3c:d5:
                    64:97:ae:95:64:78:72:34:d8:32:6c:9c:7a:56:d7:
                    79:68:dc:2c:9e:6e:03:db:e8:71:d3:5a:0a:f5:fe:
                    31:5a:93:9a:a9:16:dd:67:91:9c:1f:ad:f5:1b:0a:
                    00:0e:dc:45:2e:dd:c5:0a:7a:5f:3e:9e:ad:1d:f7:
                    24:c1:8a:72:0c:6c:27:83:88:96:54:08:21:c5:4b:
                    ab:41:9f:67:96:70:e3:d2:be:3a:ec:df:2e:61:11:
                    d2:35:49:b3:0f:2a:67:93:ef:6d:7d:c7:fb:e2:07:
                    92:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:22:7F:19:B9:7B:62:A2:CC:ED:C5:58:F9:A9:57:BD:DF:EC:CE:00
            X509v3 Authority Key Identifier:
                keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:6b:e5:f8:bd:a2:51:9a:0b:4d:fc:c9:29:43:5b:9e:ac:0d:
         6e:23:c3:b1:ff:e2:de:0e:bd:0c:d4:5d:17:cf:96:d8:72:4e:
         26:4d:d2:e2:26:05:40:68:4f:68:4a:d7:a7:60:72:d9:b5:9e:
         d3:f2:9c:f3:6b:e9:45:21:a9:b9:d5:75:98:d1:34:d4:a1:ee:
         e5:8a:be:96:b6:0c:02:0b:80:31:59:39:2d:f1:42:3a:c1:bc:
         cb:4f:3e:ef:02:4e:74:6f:48:a7:c9:a9:45:ef:cb:8c:cb:71:
         55:89:8f:eb:83:f3:da:ae:ac:a0:6a:02:89:44:db:3f:2e:1f:
         9c:78:13:82:78:9d:28:6a:01:b3:f8:32:df:7e:fe:27:c5:86:
         27:55:58:85:b8:76:d9:7e:d0:fa:23:ab:4d:19:34:2b:50:0a:
         00:0d:ce:4d:3e:d7:02:6c:1c:bb:92:50:33:01:1e:f4:3f:2f:
         53:b6:21:55:09:7d:4f:d0:8c:db:29:17:aa:0d:60:ae:86:85:
         d9:79:d9:26:85:cb:42:0d:96:86:a6:48:d7:c6:38:b1:21:b6:
         ae:f8:ea:bc:fb:8b:a8:9e:fe:20:47:60:3e:2e:8c:0e:d8:fc:
         0b:6c:b6:05:55:9e:57:d0:e4:5f:09:11:e8:56:9a:11:dd:e1:
         0b:13:3a:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZf4eEVzU35yWkwOyfteJc0hf5CAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjIyMUMzMUJEMkFEOUQwNTEzMDNFMUU3REU5OTFEQzAw
OTg3QTcyMjAeFw0yNTExMDMwNTE3MDdaFw0yNTExMDQwODIwMDdaMDMxMTAvBgNV
BAMTKDNFMjI3RjE5Qjk3QjYyQTJDQ0VEQzU1OEY5QTk1N0JEREZFQ0NFMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3wpJwrYfoDV8o1kuUap1d1g2h
05W5VfoW09boRY9CXGtuQ+XoAh77oO8Syp5S0b9Ic0O69FptTh2hkYK53H/jOTCi
k12Z1b0Igaize21KnLRmZUWKgr7GOwIm9R3laTZpd6X9ST4/fbMPEUI/r2VwRu/M
mKsDjm8ofuvmBUigyHT+LaxAB8bnnu3i9V5EgdXVfss81WSXrpVkeHI02DJsnHpW
13lo3CyebgPb6HHTWgr1/jFak5qpFt1nkZwfrfUbCgAO3EUu3cUKel8+nq0d9yTB
inIMbCeDiJZUCCHFS6tBn2eWcOPSvjrs3y5hEdI1SbMPKmeT7219x/viB5KdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUPiJ/Gbl7YqLM7cVY+alXvd/szgAwHwYDVR0j
BBgwFoAU8iHDG9KtnQUTA+Hn3pkdwAmHpyIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGhiUGt2RERrNkFrQVA4a2dkYU51VDZXdWhpYkYxUExRUWg0RGRTNXdx
VEsvMS9GMjIxQzMxQkQyQUQ5RDA1MTMwM0UxRTdERTk5MURDMDA5ODdBNzIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyMjFDMzFCRDJBRDlEMDUx
MzAzRTFFN0RFOTkxREMwMDk4N0E3MjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SGhiUGt2RERrNkFrQVA4a2dkYU51VDZXdWhpYkYxUExRUWg0RGRTNXdxVEsvMS9G
MjIxQzMxQkQyQUQ5RDA1MTMwM0UxRTdERTk5MURDMDA5ODdBNzIyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQmvl+L2iUZoLTfzJKUNbnqwNbiPDsf/i3g69DNRdF8+W2HJOJk3S4iYFQGhP
aErXp2By2bWe0/Kc82vpRSGpudV1mNE01KHu5Yq+lrYMAguAMVk5LfFCOsG8y08+
7wJOdG9Ip8mpRe/LjMtxVYmP64Pz2q6soGoCiUTbPy4fnHgTgnidKGoBs/gy337+
J8WGJ1VYhbh22X7Q+iOrTRk0K1AKAA3OTT7XAmwcu5JQMwEe9D8vU7YhVQl9T9CM
2ykXqg1groaF2XnZJoXLQg2WhqZI18Y4sSG2rvjqvPuLqJ7+IEdgPi6MDtj8C2y2
BVWeV9DkXwkR6FaaEd3hCxM6OQ==
-----END CERTIFICATE-----
Generated at Mon Nov 3 12:32:11 2025 by rpki-client