Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.mft
File:                     8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.mft (raw, json)
Hash identifier:          Zsx0BUA1P4pZ8euWYuHCWHblKkftad4l9GJLdIt2OtM=
Subject key identifier:   8F:53:AA:38:58:46:AD:EB:CC:DD:62:14:47:A2:17:50:5C:CB:9E:5F
Authority key identifier: 8B:AF:9C:21:1E:3C:B7:4E:1F:16:81:A9:00:A7:4E:3A:F8:1D:71:5E
Certificate issuer:       /CN=8BAF9C211E3CB74E1F1681A900A74E3AF81D715E
Certificate serial:       66477B2DA356A64681903C1D826E7FCA5ACDC324
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.mft
Manifest number:          015F
Signing time:             Mon 03 Nov 2025 17:34:29 +0000
Manifest this update:     Mon 03 Nov 2025 17:29:29 +0000
Manifest next update:     Tue 04 Nov 2025 17:36:29 +0000
Files and hashes:         1: 323830343a373864303a3a2f33322d313238203d3e20323731323637.roa (hash: 200k2U6xETPUXwy7eSmBurBZpN5pAdzzvml9hy+hpYE=)
                          2: 3136382e3139372e3138322e302f32342d3332203d3e20323731323637.roa (hash: oRHIQDMMtF+6qCZ9MwanXbBxIwzaAF4Xvhw9MIhCqy8=)
                          3: 3136382e3139372e3138302e302f32332d3233203d3e20323731323637.roa (hash: ErJC7rrC72xAfCJYtaFbQZjemC++rLdpFmo07qy+FlQ=)
                          4: 8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.crl (hash: zoLJLhiCOq7sLqe6WLucoXEikkFbXWU3C+LFFqD7XR8=)
                          5: 3136382e3139372e3138332e302f32342d3234203d3e20323731323637.roa (hash: Wb+WuvHROnn98V+DXmZg5GpY86IRJxhSib+jCecdO8k=)
                          6: 3136382e3139372e3138302e302f32342d3234203d3e20323731323637.roa (hash: ANkhM7kd0YYJopgeylhIk1/HBd/BR/CZz2x9WOtYdZ8=)
                          7: 3136382e3139372e3138312e302f32342d3234203d3e20323731323637.roa (hash: NbdPGvGkRht/UKZlmwsQ7vzJTbNQVNg78BauKV8Ezlg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.crl
                          rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 17:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:47:7b:2d:a3:56:a6:46:81:90:3c:1d:82:6e:7f:ca:5a:cd:c3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BAF9C211E3CB74E1F1681A900A74E3AF81D715E
        Validity
            Not Before: Nov  3 17:29:29 2025 GMT
            Not After : Nov  4 17:36:29 2025 GMT
        Subject: CN=8F53AA385846ADEBCCDD621447A217505CCB9E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e0:4a:80:8a:95:e0:8e:cb:7d:77:64:ff:3b:
                    f9:8e:8d:34:9c:ad:2a:ec:b1:b3:e4:f0:a0:c6:2b:
                    7d:76:2d:56:31:a5:99:45:6b:f7:8d:b5:5a:4b:63:
                    8e:fd:14:67:db:db:7d:f0:4c:e5:f8:77:91:b0:17:
                    c5:7e:98:42:6f:08:db:a9:c2:7b:58:7e:5b:9a:9d:
                    48:15:11:91:cb:79:91:9a:e3:9b:3b:02:95:54:77:
                    e4:c8:c2:38:01:67:b0:d8:94:5b:9e:c4:33:9a:43:
                    95:5d:77:8f:62:7e:0a:95:37:fc:ed:48:03:96:01:
                    0e:60:c3:ee:6a:eb:ae:c2:6d:81:af:b2:ac:d4:19:
                    89:8d:dd:16:ce:96:e4:62:e6:3c:e8:28:f4:8a:b0:
                    27:e5:f1:c5:d1:69:d2:15:4b:cd:ff:31:9a:a4:26:
                    4e:f8:2d:4e:bc:a7:1f:1d:dd:50:7a:d6:bd:27:e3:
                    6a:5c:cc:c4:98:b6:fc:8a:b9:93:27:be:d4:33:c5:
                    de:20:17:27:d7:35:e0:06:ce:1d:ca:63:87:94:b7:
                    10:51:97:e8:51:4d:06:0e:ce:f2:09:1b:b1:d1:00:
                    e8:02:48:4a:ab:4b:0e:4f:47:31:8c:1e:cf:14:c4:
                    c2:e6:56:7d:27:0f:4c:50:e7:3b:25:15:dc:e0:df:
                    c1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:53:AA:38:58:46:AD:EB:CC:DD:62:14:47:A2:17:50:5C:CB:9E:5F
            X509v3 Authority Key Identifier:
                keyid:8B:AF:9C:21:1E:3C:B7:4E:1F:16:81:A9:00:A7:4E:3A:F8:1D:71:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ef:8c:ea:40:dd:f5:6d:a4:c1:06:02:3e:2d:71:f1:85:1f:
         78:01:1b:fb:06:73:3d:11:49:8f:4a:58:c0:ad:ac:3d:03:08:
         76:ab:e7:b4:e5:28:ac:52:cc:d1:75:16:ab:cc:39:ad:80:91:
         16:f8:09:be:99:1e:d7:0c:a5:a4:8f:6c:a4:16:f3:72:45:7f:
         43:f2:ea:ea:92:c8:39:9d:fc:66:33:e1:81:aa:e8:db:2d:a0:
         52:31:41:a2:c1:2e:62:89:e1:6a:2e:ec:90:96:2c:94:a2:76:
         2d:cc:c0:59:3d:a1:1c:48:c9:e6:0c:4d:4c:91:3e:bd:2c:49:
         87:41:11:85:bf:20:16:5a:60:a2:5d:df:82:9a:1d:92:f2:ad:
         5f:c6:f9:86:94:63:28:4e:f3:69:1e:2b:0b:d9:cc:36:52:96:
         a2:29:bc:f5:e8:6a:d2:f5:60:2f:d3:d0:3f:f2:4d:90:35:b2:
         87:b6:f4:68:63:3d:20:fd:42:e2:ae:ef:12:cc:4c:d3:66:c1:
         ed:34:f8:b9:7d:d0:fb:5f:23:39:8f:f6:e4:d0:3c:7d:78:f5:
         3c:a6:df:d0:b1:28:9d:f4:9c:ce:2a:79:c4:89:5a:48:00:8c:
         95:8a:39:f6:b3:55:4a:8e:b0:2c:71:b2:97:dd:a2:41:6c:2e:
         68:78:0d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:30:45 2025 by rpki-client