Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
File:                     95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft (raw, json)
Hash identifier:          AeLGB22+2wPzJP9d7fCgQB6aTl57GjJd1b0YlByGTiQ=
Subject key identifier:   4D:00:D5:69:FA:7D:04:2E:23:E0:BA:B1:68:67:B4:83:FC:A1:60:64
Authority key identifier: 95:B2:CF:7C:56:35:CD:91:2B:BD:7A:8D:ED:18:4C:C3:98:CB:E3:07
Certificate issuer:       /CN=95B2CF7C5635CD912BBD7A8DED184CC398CBE307
Certificate serial:       45F69D0D2F421F7B59075EA14C464B00E7EC69DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
Manifest number:          0301
Signing time:             Mon 03 Nov 2025 18:54:22 +0000
Manifest this update:     Mon 03 Nov 2025 18:49:22 +0000
Manifest next update:     Tue 04 Nov 2025 21:21:22 +0000
Files and hashes:         1: 3134332e3133372e33362e302f32322d3232203d3e20323730393439.roa (hash: dv3QhcfGmiv5Vc3c4EjQIIZYAyNY0UMg4oALIsJplwI=)
                          2: 323830343a373366383a3a2f33322d3332203d3e20323730393439.roa (hash: q2vqiIMjq1wnH/CP3Dr+0H+LjsTPCNsiO+gCtC4Xm8c=)
                          3: 95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl (hash: aed/1otggGugQz0oFyQvryGKUXILNSTzoPc8LzmF1oQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl
                          rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:21:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f6:9d:0d:2f:42:1f:7b:59:07:5e:a1:4c:46:4b:00:e7:ec:69:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95B2CF7C5635CD912BBD7A8DED184CC398CBE307
        Validity
            Not Before: Nov  3 18:49:22 2025 GMT
            Not After : Nov  4 21:21:22 2025 GMT
        Subject: CN=4D00D569FA7D042E23E0BAB16867B483FCA16064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:65:b2:c9:67:9e:5c:3e:a3:1f:2b:dc:dc:44:
                    0a:e1:aa:ab:3b:0e:9d:e9:0f:6a:00:d0:2e:bf:2c:
                    be:84:0a:58:ee:c9:86:ee:a5:40:ab:68:f3:6f:73:
                    9d:01:36:28:a3:ae:98:e7:33:38:2f:39:27:78:76:
                    96:09:78:80:08:77:46:8a:4d:57:13:38:d1:6b:1b:
                    6f:19:a4:3e:a8:b6:86:2a:68:4d:a2:a0:57:2b:a8:
                    1d:9f:ad:15:67:87:0f:95:d8:15:44:66:1c:a6:43:
                    47:fe:9f:47:ff:fd:ae:f0:ce:a0:b0:08:4e:fb:08:
                    78:6b:bc:f2:30:f2:22:da:9e:b8:3d:4d:b8:f7:1d:
                    81:8a:31:af:e0:f8:92:5d:a8:1a:0f:16:51:92:32:
                    5c:bb:84:ea:94:03:dc:fe:6c:50:cc:b3:2a:20:0d:
                    aa:f5:f0:75:2c:a9:f2:45:c8:42:c1:bb:f2:4e:4d:
                    d3:c3:2d:0c:55:28:70:3e:5e:9b:a7:d7:33:fc:ce:
                    cf:ed:bb:4e:8a:a9:77:14:bd:3a:30:78:b0:71:fa:
                    bc:be:84:ec:56:7c:b4:dc:f2:3d:bc:c1:6e:38:68:
                    72:9c:47:63:59:77:ec:02:60:57:66:15:49:7d:f5:
                    9d:a9:e5:21:56:f0:90:6a:f1:11:e9:df:eb:82:cd:
                    56:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:00:D5:69:FA:7D:04:2E:23:E0:BA:B1:68:67:B4:83:FC:A1:60:64
            X509v3 Authority Key Identifier:
                keyid:95:B2:CF:7C:56:35:CD:91:2B:BD:7A:8D:ED:18:4C:C3:98:CB:E3:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:06:3a:d3:5a:04:09:ac:63:c0:cc:0c:20:3f:2b:cb:38:8b:
         47:9e:4d:5f:1f:2b:09:6e:96:dc:f1:6b:d0:ef:57:2e:76:7e:
         dd:f7:5d:c6:dc:60:a3:aa:b5:54:a9:3e:99:53:2c:1a:2e:5d:
         14:02:3e:b2:8c:d2:d5:4a:9e:ad:91:5f:c8:9c:00:d6:cc:ae:
         33:49:82:82:32:03:58:30:66:35:38:a5:c8:81:e7:72:8a:fe:
         5a:59:60:60:8f:6c:24:a6:d7:b7:86:89:f7:e8:21:3a:69:86:
         5e:b7:3d:a9:4f:93:7f:af:35:9f:7e:85:95:d3:63:a5:03:a1:
         38:60:e3:4c:84:bd:d0:ba:6b:b5:5d:01:21:9e:13:da:a3:e7:
         6e:2b:f5:de:dc:23:ca:7e:87:6f:9c:9d:f5:ad:09:13:0e:99:
         5d:56:f2:c6:83:8a:f4:4f:dd:d0:29:a5:16:01:62:be:d5:47:
         14:82:19:f2:62:25:21:76:43:f6:68:bf:e7:78:2f:c4:d4:a0:
         d5:20:a3:23:e8:4c:cd:5b:37:55:05:2e:28:db:c1:ef:da:5c:
         96:64:4b:46:aa:97:7a:21:e0:76:66:b5:ed:7c:cf:19:4d:00:
         e9:b9:2f:c9:73:5e:17:7e:a0:a1:c4:1b:5a:8c:ca:02:5d:db:
         5a:79:42:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:06:50 2025 by rpki-client