Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.mft
File:                     25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.mft (raw, json)
Hash identifier:          LRTR5oG9FNLHiDFvgIH/klV68YC2aCZkuvCjFP0oPLE=
Subject key identifier:   41:01:B4:72:05:5C:0F:79:D8:FB:3B:01:C8:31:A1:98:A2:E5:93:6E
Authority key identifier: 25:B6:4C:4B:D8:E8:30:CE:14:7F:6E:BC:47:19:9B:EA:E7:E6:3B:B4
Certificate issuer:       /CN=25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4
Certificate serial:       2959A82D7281CAA5FA2A6AD525D63DCDB3CD6C44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.mft
Manifest number:          0125
Signing time:             Wed 28 Oct 2026 15:17:59 +0000
Manifest this update:     Wed 28 Oct 2026 15:12:59 +0000
Manifest next update:     Thu 29 Oct 2026 15:40:59 +0000
Files and hashes:         1: 25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.crl (hash: ZZx/ZF4fULRv+U6+m5u3hi1ZEk5BE8uIO/o42lennrs=)
                          2: 34352e3136322e38372e302f32342d3234203d3e20323732343336.roa (hash: zHMEVhb4HbCNFMWdGJ/1rB/njvFJL1tkTjCK1hCP9QM=)
                          3: 34352e3136392e39362e302f32342d3234203d3e20323732343336.roa (hash: R9X+snJairB7bVsyitDxDi6+enAiIXl1nUD8Has2P04=)
                          4: 323830343a383132383a383030303a3a2f33332d3333203d3e20323732343336.roa (hash: jsbdrkUIjnV9BjmAurKSVUYnCq+mndjZHWR9jwwkQeM=)
                          5: 34352e3137342e382e302f32342d3234203d3e20323732343336.roa (hash: P+Aw4cSx/4jmUpiDAjw4ZEGgusRevru3/rnF12C/fu8=)
                          6: 323830343a383132383a3a2f33322d3332203d3e20323732343336.roa (hash: YTsa0XtsuhsYnA6zgq0FitJSomm7ZSqmWMOTnvcZOEU=)
                          7: 323830343a383132383a3a2f33332d3333203d3e20323732343336.roa (hash: DskG1jBPsG8Mbhj/qjZgPmLI/4847y+Q4chDi3sUTL0=)
                          8: 34352e3137372e35352e302f32342d3234203d3e20323732343336.roa (hash: dKOsmZa4z9qSIgo8yLYx4RqB1oom+RD/Jq0WtEUcQLs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.crl
                          rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 15:40:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:59:a8:2d:72:81:ca:a5:fa:2a:6a:d5:25:d6:3d:cd:b3:cd:6c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4
        Validity
            Not Before: Oct 28 15:12:59 2026 GMT
            Not After : Oct 29 15:40:59 2026 GMT
        Subject: CN=4101B472055C0F79D8FB3B01C831A198A2E5936E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f7:6f:99:c3:61:9d:0c:4d:b9:6b:c4:84:42:
                    1b:39:51:9b:2d:30:e7:20:24:a4:cc:ed:17:fb:a1:
                    d6:bb:d0:94:92:11:f3:77:27:04:30:e4:4c:64:6c:
                    d3:af:da:31:3f:e3:4a:54:de:96:d9:03:84:a4:9e:
                    35:ae:23:b9:e2:50:8e:4f:00:bc:9e:36:4f:ee:21:
                    e2:f4:6e:60:43:ca:35:07:ac:69:bf:e3:06:aa:d4:
                    b6:11:f2:66:d8:07:7f:ce:ef:71:1e:f0:8e:cd:52:
                    6e:17:c6:9b:5d:1d:7c:67:18:2d:83:ad:6d:c4:2a:
                    e2:c1:79:3f:07:ba:00:76:a8:cc:1f:92:5c:0e:f6:
                    ca:7b:24:b8:1a:1a:11:f4:b6:5f:fa:27:b3:58:d5:
                    1e:18:a9:bd:0b:d6:06:bb:55:7d:3c:bd:ab:0e:0f:
                    bc:b7:7e:75:cb:37:23:dd:b7:16:e5:69:e1:92:6c:
                    60:aa:24:44:44:28:15:3c:02:64:93:14:72:69:bf:
                    03:b1:39:9d:80:a0:90:4e:c2:43:92:9f:a9:06:fc:
                    45:05:65:e9:a0:4c:3b:78:9c:1d:b5:e7:6c:73:5e:
                    c4:73:42:69:06:50:58:c2:c3:ab:db:70:dd:0f:7f:
                    15:81:e8:51:bd:91:af:27:f9:65:9a:8f:c8:5c:80:
                    e4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:01:B4:72:05:5C:0F:79:D8:FB:3B:01:C8:31:A1:98:A2:E5:93:6E
            X509v3 Authority Key Identifier:
                keyid:25:B6:4C:4B:D8:E8:30:CE:14:7F:6E:BC:47:19:9B:EA:E7:E6:3B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:26:f7:0f:ad:1f:3c:2c:fa:df:3d:0f:05:8f:a9:9e:b6:71:
         bf:68:37:69:e0:d3:e1:e6:d1:d4:f4:be:46:c8:7b:af:9d:1a:
         ff:33:66:66:19:df:2a:b8:79:f2:2b:e9:bf:cc:28:b3:a7:5a:
         1d:cb:ad:b9:8b:2c:8c:df:9a:9c:fd:11:df:26:6e:cc:8a:ae:
         f3:03:e2:22:62:8c:1e:eb:13:aa:b5:28:fc:80:4a:c2:06:b5:
         d8:be:c6:ba:9a:b1:64:21:66:38:ac:cf:a6:88:bc:0c:90:92:
         eb:6b:a0:46:5f:c4:4d:d9:6c:98:30:64:2d:24:35:e2:fa:91:
         61:2b:7c:2f:d7:3a:26:15:ea:d0:75:83:83:a9:2b:7f:8d:5e:
         2b:70:55:a6:94:3f:e4:9d:96:fc:ec:d4:7a:22:e4:b4:5c:23:
         3e:62:3f:e9:09:7b:41:20:b3:1f:33:50:fb:9e:85:b9:20:4b:
         31:9f:82:f5:7c:b5:d8:7a:e9:97:b9:96:06:24:1a:be:f5:fc:
         31:4c:9b:ca:ca:c1:ad:5b:07:76:3b:37:99:a5:a4:7f:b2:c1:
         74:1c:6f:3f:19:f7:17:59:e5:2a:1c:91:d8:0f:7c:c6:40:87:
         77:85:78:67:1e:f8:84:46:05:87:23:fd:39:79:ea:b6:c4:d5:
         7e:1d:6e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 20:35:44 2026 by rpki-client