Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.mft
File:                     99448BDECD83ABA3D08AD5929B682374FE13BE98.mft (raw, json)
Hash identifier:          Hf5RW3F7wKBMbIQTqGE7d3V7hcvfy2R5s+Ru9w1vUQk=
Subject key identifier:   34:20:1C:A0:09:9D:70:3C:70:E1:02:AD:14:53:B9:6B:3F:FC:B5:4A
Authority key identifier: 99:44:8B:DE:CD:83:AB:A3:D0:8A:D5:92:9B:68:23:74:FE:13:BE:98
Certificate issuer:       /CN=99448BDECD83ABA3D08AD5929B682374FE13BE98
Certificate serial:       2BE6BE69302C36A1DF80AF5D86050DF1E391958A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.mft
Manifest number:          0304
Signing time:             Sun 02 Nov 2025 21:47:24 +0000
Manifest this update:     Sun 02 Nov 2025 21:42:24 +0000
Manifest next update:     Mon 03 Nov 2025 23:34:24 +0000
Files and hashes:         1: 3136382e3139352e36302e302f32322d3234203d3e20323634343434.roa (hash: ibCUXtSWWhziVaLjSCQJdyNmOoSQ2+Gl3UNg0SOFvR4=)
                          2: 3133312e3232312e3232342e302f32322d3234203d3e20323634343434.roa (hash: GE+6Mfv78ypvI0QBvVuUpZ/Q526mmTuCMknY3Xmj0Ow=)
                          3: 323830343a316562303a3a2f33322d3438203d3e20323634343434.roa (hash: rbjYgSymgqrMaINQFLjjRvbJHQYNsGQUp9cUYv1uMko=)
                          4: 99448BDECD83ABA3D08AD5929B682374FE13BE98.crl (hash: iLwa8pZKHeWhb+LwpDtBUgaig3AKwPqz+pv1eAsHDb0=)
                          5: 3136382e3139342e3233362e302f32322d3234203d3e20323634343434.roa (hash: VuUgS33qTOrIsq5wAWpqxn08XlXuIieNDQyftKD9Dp4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.crl
                          rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Nov 2025 23:34:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e6:be:69:30:2c:36:a1:df:80:af:5d:86:05:0d:f1:e3:91:95:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99448BDECD83ABA3D08AD5929B682374FE13BE98
        Validity
            Not Before: Nov  2 21:42:24 2025 GMT
            Not After : Nov  3 23:34:24 2025 GMT
        Subject: CN=34201CA0099D703C70E102AD1453B96B3FFCB54A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:48:b7:6c:3a:0a:1d:c6:de:a5:32:ea:49:6a:
                    50:b4:d1:ba:4d:cf:08:c8:24:a7:4c:fd:8c:e9:bc:
                    ce:ba:2c:02:ef:f9:35:fd:be:41:d0:fe:66:af:95:
                    bf:56:aa:12:fd:1b:fd:1e:c2:63:67:e1:90:58:24:
                    fc:68:42:2c:03:29:f8:59:d8:46:dc:3f:d7:00:d0:
                    55:8e:84:54:49:f1:b1:3e:bc:a3:15:c2:1d:ba:c5:
                    f5:4c:46:11:70:d5:de:42:a2:5b:6b:b4:1b:dd:2a:
                    4b:c0:c9:a8:00:69:7f:23:28:7a:1d:c9:c4:e8:29:
                    4d:07:13:7c:5f:be:67:ce:64:df:8b:9f:ae:dd:21:
                    15:fe:5d:71:36:6c:53:d5:64:b4:88:60:dc:eb:bb:
                    d9:c3:03:a4:65:f3:43:c1:39:b8:89:e3:6f:7a:63:
                    8f:d3:fb:81:89:4d:f6:17:b0:0d:57:be:70:03:9f:
                    2b:d1:db:72:ff:c5:55:7d:d3:6b:ff:5e:31:26:56:
                    56:ad:8f:e3:4b:f4:3c:c9:38:ca:b1:aa:86:c8:17:
                    e5:83:b6:92:9d:41:9f:dd:4d:52:52:37:50:55:3b:
                    b4:6f:90:8b:1a:08:cd:1d:cc:8c:ee:35:62:26:ea:
                    08:53:bc:3f:71:b3:ad:94:4d:c4:a8:21:5e:d6:f0:
                    c5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:20:1C:A0:09:9D:70:3C:70:E1:02:AD:14:53:B9:6B:3F:FC:B5:4A
            X509v3 Authority Key Identifier:
                keyid:99:44:8B:DE:CD:83:AB:A3:D0:8A:D5:92:9B:68:23:74:FE:13:BE:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:fe:4e:39:e4:2e:52:a6:98:b0:b3:97:72:41:97:aa:c8:0b:
         69:90:3e:d1:5b:01:a8:97:ed:25:02:dd:61:91:34:54:9e:45:
         ae:36:5c:ea:b0:bc:89:c7:12:7f:3d:f2:17:35:59:25:1d:ab:
         f7:59:94:69:ab:31:a9:44:e1:a5:3f:ce:78:72:99:20:ca:3b:
         28:6f:9c:25:d0:46:ed:a2:25:f4:3f:fe:51:9d:0a:63:77:77:
         71:2e:7c:bc:31:51:c7:c2:47:34:a6:a0:21:3f:9f:03:82:64:
         03:2c:54:5d:66:ab:f2:85:50:6f:30:38:b4:45:2a:d4:90:6b:
         57:81:ca:8f:f6:92:df:8b:db:0f:74:8a:4a:b6:74:39:8c:a4:
         ca:d8:a9:7c:8d:8b:fc:60:4e:c1:52:6c:28:83:74:98:03:f2:
         b1:70:f8:5a:fa:fc:f8:1c:28:44:e1:a8:6f:45:50:06:a4:fe:
         6c:c8:20:67:b8:72:b8:9d:1e:43:36:28:7c:4a:fc:9f:de:b7:
         14:18:bc:98:c4:8b:2c:66:28:c1:ff:48:e2:c6:d8:fa:cf:29:
         dc:a9:3d:81:1d:f5:65:b8:c0:8d:c7:5b:b4:aa:97:8a:e1:f1:
         56:ac:df:b5:4b:25:10:85:43:b5:0e:1f:fb:cf:ef:9a:1c:8c:
         32:e8:08:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUK+a+aTAsNqHfgK9dhgUN8eORlYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk0NDhCREVDRDgzQUJBM0QwOEFENTkyOUI2ODIzNzRG
RTEzQkU5ODAeFw0yNTExMDIyMTQyMjRaFw0yNTExMDMyMzM0MjRaMDMxMTAvBgNV
BAMTKDM0MjAxQ0EwMDk5RDcwM0M3MEUxMDJBRDE0NTNCOTZCM0ZGQ0I1NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTSLdsOgodxt6lMupJalC00bpN
zwjIJKdM/YzpvM66LALv+TX9vkHQ/mavlb9WqhL9G/0ewmNn4ZBYJPxoQiwDKfhZ
2EbcP9cA0FWOhFRJ8bE+vKMVwh26xfVMRhFw1d5ColtrtBvdKkvAyagAaX8jKHod
ycToKU0HE3xfvmfOZN+Ln67dIRX+XXE2bFPVZLSIYNzru9nDA6Rl80PBObiJ4296
Y4/T+4GJTfYXsA1XvnADnyvR23L/xVV902v/XjEmVlatj+NL9DzJOMqxqobIF+WD
tpKdQZ/dTVJSN1BVO7RvkIsaCM0dzIzuNWIm6ghTvD9xs62UTcSoIV7W8MWfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNCAcoAmdcDxw4QKtFFO5az/8tUowHwYDVR0j
BBgwFoAUmUSL3s2Dq6PQitWSm2gjdP4TvpgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHhFNVp1eHFqSmtXdzloZjRnOXMxUnYyNHc0WDROeXBBREozRHBnb2dB
cXIvMS85OTQ0OEJERUNEODNBQkEzRDA4QUQ1OTI5QjY4MjM3NEZFMTNCRTk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5NDQ4QkRFQ0Q4M0FCQTNE
MDhBRDU5MjlCNjgyMzc0RkUxM0JFOTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SHhFNVp1eHFqSmtXdzloZjRnOXMxUnYyNHc0WDROeXBBREozRHBnb2dBcXIvMS85
OTQ0OEJERUNEODNBQkEzRDA4QUQ1OTI5QjY4MjM3NEZFMTNCRTk4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHP5OOeQuUqaYsLOXckGXqsgLaZA+0VsBqJftJQLdYZE0VJ5FrjZc6rC8iccS
fz3yFzVZJR2r91mUaasxqUThpT/OeHKZIMo7KG+cJdBG7aIl9D/+UZ0KY3d3cS58
vDFRx8JHNKagIT+fA4JkAyxUXWar8oVQbzA4tEUq1JBrV4HKj/aS34vbD3SKSrZ0
OYykytipfI2L/GBOwVJsKIN0mAPysXD4Wvr8+BwoROGob0VQBqT+bMggZ7hyuJ0e
QzYofEr8n963FBi8mMSLLGYowf9I4sbY+s8p3Kk9gR31ZbjAjcdbtKqXiuHxVqzf
tUslEIVDtQ4f+8/vmhyMMugIaA==
-----END CERTIFICATE-----
Generated at Mon Nov 3 12:30:25 2025 by rpki-client