Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft
File:                     7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft (raw, json)
Hash identifier:          CMEYYcLAZuGJ/IxLhzCSgwvELi5EVcBjNoQBjiy1pRI=
Subject key identifier:   97:8C:F0:43:A5:6B:58:9D:76:2A:FA:D2:1E:03:BD:A7:F6:70:05:AD
Authority key identifier: 7C:A0:4A:87:EA:A3:58:34:E1:17:2C:5B:B9:6D:5D:B0:D0:B2:3D:C0
Certificate issuer:       /CN=7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0
Certificate serial:       4952F3549F214145B4D1610B933D029C6430A0FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft
Manifest number:          017A
Signing time:             Sun 19 Oct 2025 22:28:56 +0000
Manifest this update:     Sun 19 Oct 2025 22:23:56 +0000
Manifest next update:     Tue 21 Oct 2025 01:48:56 +0000
Files and hashes:         1: 323830343a373639303a3a2f33322d3334203d3e20323731313230.roa (hash: 35WEcEG3QWk/zVJzYYzvfaiposzmcV1hcfKo2NLYw2E=)
                          2: 3137392e34382e3139322e302f32322d3234203d3e20323731313230.roa (hash: dnueVLcMDgoZGxfW5fVwhKVaVsjCcpgjMDDR39mpiEg=)
                          3: 7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.crl (hash: om7KQ2EbkkMoKKR1rHqKxmDVJaKNhOeGLP02fMCtUJ8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.crl
                          rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 01:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:52:f3:54:9f:21:41:45:b4:d1:61:0b:93:3d:02:9c:64:30:a0:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0
        Validity
            Not Before: Oct 19 22:23:56 2025 GMT
            Not After : Oct 21 01:48:56 2025 GMT
        Subject: CN=978CF043A56B589D762AFAD21E03BDA7F67005AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0b:bc:dd:94:d9:8c:57:1d:c1:77:8c:98:42:
                    09:1d:f8:44:84:89:89:5e:2f:24:f4:fb:7b:ac:98:
                    21:14:17:52:98:cf:f8:0e:01:32:43:23:a5:6e:c3:
                    7a:4c:ea:7a:01:f0:25:07:09:1d:92:6d:a4:be:6d:
                    3e:dd:e7:86:80:e8:86:9b:92:fc:10:8a:a8:17:8e:
                    5d:87:7b:f4:89:88:64:85:0e:5f:2b:3a:5e:01:c0:
                    25:79:99:aa:96:42:40:16:f2:9e:29:3f:95:cf:ac:
                    fc:9b:cf:b9:a9:d1:40:46:93:08:5f:55:32:5b:63:
                    b1:97:25:92:b6:10:7e:de:8c:c4:46:18:fe:d4:21:
                    2d:2c:50:0f:31:74:e0:64:bd:87:aa:ed:25:2e:60:
                    33:30:6f:bd:62:d0:d9:a8:da:a3:17:36:26:9a:18:
                    a7:10:c7:71:99:e7:7a:a5:86:a0:a1:41:1a:9f:80:
                    4f:2f:ca:eb:98:93:e0:9e:4e:52:46:a2:e2:14:d3:
                    a9:c2:5d:21:b0:01:93:10:33:0d:97:65:ef:52:32:
                    16:4e:35:32:27:c9:2e:f7:fe:c1:7a:17:11:91:68:
                    04:51:76:35:e9:06:bc:2c:73:76:b1:68:78:cf:e4:
                    29:61:a5:8b:75:e8:49:cc:92:2e:b7:f3:d7:61:8d:
                    ac:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8C:F0:43:A5:6B:58:9D:76:2A:FA:D2:1E:03:BD:A7:F6:70:05:AD
            X509v3 Authority Key Identifier:
                keyid:7C:A0:4A:87:EA:A3:58:34:E1:17:2C:5B:B9:6D:5D:B0:D0:B2:3D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:8b:55:c0:f9:e2:56:5c:fa:b3:35:72:d6:45:c5:63:ef:87:
         bd:50:69:e8:6d:e9:35:f6:a9:7d:22:72:4f:e9:ef:91:52:75:
         07:67:6d:06:f3:44:f3:d5:69:9f:ad:18:d9:08:40:ff:40:2b:
         93:90:be:aa:f7:b8:b1:43:e2:70:93:30:fa:28:f3:d4:64:1a:
         76:ca:ae:49:a0:50:43:dc:0c:d5:65:70:89:4e:00:29:fe:e3:
         d6:75:a5:6d:d7:11:c0:9f:cc:3e:21:b3:14:e5:d3:bb:66:7a:
         7d:61:ec:f3:54:f3:1a:6d:bf:d5:d0:bf:4f:8c:b8:fe:b3:3c:
         c8:54:74:af:15:45:f9:62:7d:f2:00:92:b9:95:98:cc:64:ee:
         30:d8:cb:97:c9:17:8d:97:44:4b:3c:8c:ba:eb:7d:e1:b3:da:
         d3:d1:38:30:bd:6c:32:76:ae:89:fa:d6:4a:3a:e6:e5:d7:9f:
         4d:f3:ba:de:b2:0d:0f:b0:47:c6:21:bb:ce:e0:ea:68:83:86:
         13:b5:6d:15:6b:4a:68:03:4b:ac:25:98:8f:19:84:aa:37:0a:
         a6:59:bf:82:69:9c:c7:b4:32:79:e7:e8:cc:ec:78:12:71:fa:
         eb:f4:78:fd:be:62:12:8e:7f:58:61:6a:de:3e:ed:ad:f8:69:
         64:ea:75:85
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSVLzVJ8hQUW00WELkz0CnGQwoPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NBMDRBODdFQUEzNTgzNEUxMTcyQzVCQjk2RDVEQjBE
MEIyM0RDMDAeFw0yNTEwMTkyMjIzNTZaFw0yNTEwMjEwMTQ4NTZaMDMxMTAvBgNV
BAMTKDk3OENGMDQzQTU2QjU4OUQ3NjJBRkFEMjFFMDNCREE3RjY3MDA1QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCC7zdlNmMVx3Bd4yYQgkd+ESE
iYleLyT0+3usmCEUF1KYz/gOATJDI6Vuw3pM6noB8CUHCR2SbaS+bT7d54aA6Iab
kvwQiqgXjl2He/SJiGSFDl8rOl4BwCV5maqWQkAW8p4pP5XPrPybz7mp0UBGkwhf
VTJbY7GXJZK2EH7ejMRGGP7UIS0sUA8xdOBkvYeq7SUuYDMwb71i0Nmo2qMXNiaa
GKcQx3GZ53qlhqChQRqfgE8vyuuYk+CeTlJGouIU06nCXSGwAZMQMw2XZe9SMhZO
NTInyS73/sF6FxGRaARRdjXpBrwsc3axaHjP5ClhpYt16EnMki6389dhjawlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUl4zwQ6VrWJ12KvrSHgO9p/ZwBa0wHwYDVR0j
BBgwFoAUfKBKh+qjWDThFyxbuW1dsNCyPcAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjN4cEFQOHBOeVN0VEFBVEZrck11SjhVZ01zZkVhbnRNVFN0alFrQWhH
ekIvMC83Q0EwNEE4N0VBQTM1ODM0RTExNzJDNUJCOTZENURCMEQwQjIzREMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQTA0QTg3RUFBMzU4MzRF
MTE3MkM1QkI5NkQ1REIwRDBCMjNEQzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MjN4cEFQOHBOeVN0VEFBVEZrck11SjhVZ01zZkVhbnRNVFN0alFrQWhHekIvMC83
Q0EwNEE4N0VBQTM1ODM0RTExNzJDNUJCOTZENURCMEQwQjIzREMwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPItVwPniVlz6szVy1kXFY++HvVBp6G3pNfapfSJyT+nvkVJ1B2dtBvNE89Vp
n60Y2QhA/0Ark5C+qve4sUPicJMw+ijz1GQadsquSaBQQ9wM1WVwiU4AKf7j1nWl
bdcRwJ/MPiGzFOXTu2Z6fWHs81TzGm2/1dC/T4y4/rM8yFR0rxVF+WJ98gCSuZWY
zGTuMNjLl8kXjZdESzyMuut94bPa09E4ML1sMnauifrWSjrm5defTfO63rIND7BH
xiG7zuDqaIOGE7VtFWtKaANLrCWYjxmEqjcKplm/gmmcx7QyeefozOx4EnH66/R4
/b5iEo5/WGFq3j7trfhpZOp1hQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:41:44 2025 by rpki-client