Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.mft
File:                     D478C8921C1F9837BE0DD110D7EC974DA1766D1D.mft (raw, json)
Hash identifier:          uA4JZ+Gp34jCMRzxG+wQ/i8+O/NKicIe+cuK7MA2pUk=
Subject key identifier:   8E:F2:FC:BB:37:95:15:1C:3E:C6:C3:CD:CD:EA:AE:66:5A:E6:C5:52
Authority key identifier: D4:78:C8:92:1C:1F:98:37:BE:0D:D1:10:D7:EC:97:4D:A1:76:6D:1D
Certificate issuer:       /CN=D478C8921C1F9837BE0DD110D7EC974DA1766D1D
Certificate serial:       4EC33714594B328B67F8EA7F42309A54457CECB9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.mft
Manifest number:          37
Signing time:             Mon 03 Nov 2025 22:47:50 +0000
Manifest this update:     Mon 03 Nov 2025 22:42:50 +0000
Manifest next update:     Wed 05 Nov 2025 01:21:50 +0000
Files and hashes:         1: 323830343a373636303a3a2f33332d3333203d3e20323731313038.roa (hash: V9b7q9gECkaWuu23rVc5V0kKpVe+wQoD70LNjbbovrk=)
                          2: 34352e3232382e3230312e302f32342d3234203d3e20323731313038.roa (hash: 8dtrpBI/POxiVdW0xIrftHdRpTo6NQcBQcgG3PgxzMY=)
                          3: 323830343a373636303a383030303a3a2f33332d3333203d3e20323731313038.roa (hash: Tq2w23tqhH8NlzWdagW7yRpqVM6rEwmtngKPgWdEvwE=)
                          4: 34352e3232382e3230302e302f32342d3234203d3e20323731313038.roa (hash: zMSIQdOiom0FPUB0OvDinl32jCLKMWbLd2xkaWW2Fj8=)
                          5: D478C8921C1F9837BE0DD110D7EC974DA1766D1D.crl (hash: X/7upl7FtL9aKLYWBl9SbYMMfi6Mrha1dvfkZaDcTnc=)
                          6: 323830343a373636303a3a2f33322d3332203d3e20323731313038.roa (hash: btT0wr3nqBs1vGKDX21iK7zeOzmlLlMSisg42lvKamw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.crl
                          rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 01:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c3:37:14:59:4b:32:8b:67:f8:ea:7f:42:30:9a:54:45:7c:ec:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D478C8921C1F9837BE0DD110D7EC974DA1766D1D
        Validity
            Not Before: Nov  3 22:42:50 2025 GMT
            Not After : Nov  5 01:21:50 2025 GMT
        Subject: CN=8EF2FCBB3795151C3EC6C3CDCDEAAE665AE6C552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:de:9d:c8:c2:ca:a2:0f:ea:29:ff:f1:73:
                    5e:d5:88:a8:41:77:ab:6e:87:75:96:6f:b8:b5:0f:
                    35:9c:b0:9e:4b:b3:41:ff:95:1d:b3:79:26:12:56:
                    db:3d:87:82:c4:27:c8:7f:11:85:3e:ce:25:46:17:
                    aa:78:d5:12:1d:3d:17:26:ee:41:ca:7d:8f:60:4c:
                    35:cd:0c:87:5d:0f:cc:91:ed:d2:48:21:48:57:b9:
                    35:ac:ec:47:4c:f6:04:bf:17:3d:bb:de:1a:5a:5d:
                    4f:29:ff:a9:a1:db:a9:ff:4b:2d:de:56:f2:57:88:
                    68:d2:33:49:be:e1:45:e4:2e:18:47:d7:f4:6a:63:
                    c0:87:77:c1:0b:9d:4a:17:5e:a4:78:58:3c:24:4a:
                    29:e7:48:86:46:ab:ac:1a:58:f9:b7:ab:5b:64:2a:
                    bb:58:66:19:d6:f6:08:ed:1e:33:03:cf:58:17:73:
                    6f:5f:ff:b7:d3:b3:73:6d:0f:98:61:c6:49:bb:4a:
                    69:b4:e3:8d:53:1a:0a:44:d3:e8:9b:d1:f0:16:91:
                    2a:fd:88:8e:27:bc:4a:a7:82:5f:c4:01:4c:d6:56:
                    4c:67:d3:6a:f0:b3:9d:5f:0c:b1:1b:6a:b8:0b:79:
                    b3:01:b9:ef:4a:2a:1d:b9:c0:c3:94:b1:79:f6:39:
                    8c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F2:FC:BB:37:95:15:1C:3E:C6:C3:CD:CD:EA:AE:66:5A:E6:C5:52
            X509v3 Authority Key Identifier:
                keyid:D4:78:C8:92:1C:1F:98:37:BE:0D:D1:10:D7:EC:97:4D:A1:76:6D:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:b9:57:4a:97:58:d6:bc:a1:f7:6e:f0:7b:4c:9b:f4:a6:83:
         bf:bd:94:b1:1b:3e:ab:75:af:64:f4:7c:46:64:e9:60:f4:4d:
         05:d2:bb:4d:8c:c8:d5:90:8d:83:b1:3c:6b:63:67:81:77:24:
         81:0b:1a:a8:f6:53:75:c1:55:92:60:da:4c:4f:22:49:d5:be:
         38:c9:f4:aa:c3:18:9a:b1:af:79:57:c7:10:62:dc:73:ef:b6:
         a8:7e:e9:5f:f8:d6:6d:38:28:e8:a3:21:c0:c7:81:be:f0:5d:
         7a:bf:81:93:21:c7:66:0d:c7:81:69:8a:07:9a:d8:df:d0:6a:
         f2:c0:ab:32:23:e7:61:3c:40:0d:c7:88:ef:90:f3:34:a5:08:
         42:43:42:75:c5:25:a4:23:84:52:47:15:2f:1c:e7:35:6f:00:
         42:ac:6c:0e:60:88:7f:dc:fe:b3:e4:a1:cc:e5:df:dd:2e:07:
         62:e4:21:f4:c2:c7:40:fe:d9:cd:ba:9a:10:af:91:0e:2c:b2:
         10:44:16:ac:8c:d3:2e:49:58:82:72:9a:35:b9:c6:c5:71:7d:
         3c:64:92:0e:70:7e:fe:59:30:4a:28:0f:08:b9:e3:c1:62:4c:
         c4:72:b5:73:b8:15:cc:2d:30:e5:9c:44:16:0f:e2:08:5f:b7:
         37:a4:ed:b0
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUTsM3FFlLMotn+Op/QjCaVEV87LkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ3OEM4OTIxQzFGOTgzN0JFMEREMTEwRDdFQzk3NERB
MTc2NkQxRDAeFw0yNTExMDMyMjQyNTBaFw0yNTExMDUwMTIxNTBaMDMxMTAvBgNV
BAMTKDhFRjJGQ0JCMzc5NTE1MUMzRUM2QzNDRENERUFBRTY2NUFFNkM1NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hN6dyMLKog/qKf/xc17ViKhB
d6tuh3WWb7i1DzWcsJ5Ls0H/lR2zeSYSVts9h4LEJ8h/EYU+ziVGF6p41RIdPRcm
7kHKfY9gTDXNDIddD8yR7dJIIUhXuTWs7EdM9gS/Fz273hpaXU8p/6mh26n/Sy3e
VvJXiGjSM0m+4UXkLhhH1/RqY8CHd8ELnUoXXqR4WDwkSinnSIZGq6waWPm3q1tk
KrtYZhnW9gjtHjMDz1gXc29f/7fTs3NtD5hhxkm7Smm0441TGgpE0+ib0fAWkSr9
iI4nvEqngl/EAUzWVkxn02rws51fDLEbargLebMBue9KKh25wMOUsXn2OYx3AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUjvL8uzeVFRw+xsPNzequZlrmxVIwHwYDVR0j
BBgwFoAU1HjIkhwfmDe+DdEQ1+yXTaF2bR0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9VdllWUFl5bnY2QURhN3JadUtKa1VNOHNwVmpETXNUSmlucDM4VlR0QmZ2
LzAvRDQ3OEM4OTIxQzFGOTgzN0JFMEREMTEwRDdFQzk3NERBMTc2NkQxRC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9ENDc4Qzg5MjFDMUY5ODM3QkUw
REQxMTBEN0VDOTc0REExNzY2RDFELmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1V2
WVZQWXludjZBRGE3clp1S0prVU04c3BWakRNc1RKaW5wMzhWVHRCZnYvMC9ENDc4
Qzg5MjFDMUY5ODM3QkUwREQxMTBEN0VDOTc0REExNzY2RDFELm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
oblXSpdY1ryh927we0yb9KaDv72UsRs+q3WvZPR8RmTpYPRNBdK7TYzI1ZCNg7E8
a2NngXckgQsaqPZTdcFVkmDaTE8iSdW+OMn0qsMYmrGveVfHEGLcc++2qH7pX/jW
bTgo6KMhwMeBvvBder+BkyHHZg3HgWmKB5rY39Bq8sCrMiPnYTxADceI75DzNKUI
QkNCdcUlpCOEUkcVLxznNW8AQqxsDmCIf9z+s+ShzOXf3S4HYuQh9MLHQP7Zzbqa
EK+RDiyyEEQWrIzTLklYgnKaNbnGxXF9PGSSDnB+/lkwSigPCLnjwWJMxHK1c7gV
zC0w5ZxEFg/iCF+3N6TtsA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:05:45 2025 by rpki-client