Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.mft
File:                     832871127BCACF2B8301B7D52E8D2FBE066B8056.mft (raw, json)
Hash identifier:          SK0z5YVmZzi0DMJaDVqiM3574MGZ8glkcnB9FtoSt70=
Subject key identifier:   2C:40:A7:93:63:40:C9:9E:24:3F:DD:7C:81:46:35:9C:EC:36:10:12
Authority key identifier: 83:28:71:12:7B:CA:CF:2B:83:01:B7:D5:2E:8D:2F:BE:06:6B:80:56
Certificate issuer:       /CN=832871127BCACF2B8301B7D52E8D2FBE066B8056
Certificate serial:       12B75231B29427D9C299212C79905E7ABF462A8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832871127BCACF2B8301B7D52E8D2FBE066B8056.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.mft
Manifest number:          021F
Signing time:             Sun 19 Oct 2025 23:31:34 +0000
Manifest this update:     Sun 19 Oct 2025 23:26:34 +0000
Manifest next update:     Tue 21 Oct 2025 01:13:34 +0000
Files and hashes:         1: 832871127BCACF2B8301B7D52E8D2FBE066B8056.crl (hash: d+YeLacMtkwTA7ZwgpxjCCGx8UIRrRXwZe1c5YlPmew=)
                          2: 323830343a383566343a3a2f33322d313238203d3e20323732363130.roa (hash: 5MD0hhTl+FiLV0nD1XfSSFpuLiOjyxCZEof41eyrC1c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.crl
                          rsync://rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832871127BCACF2B8301B7D52E8D2FBE066B8056.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 01:13:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b7:52:31:b2:94:27:d9:c2:99:21:2c:79:90:5e:7a:bf:46:2a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832871127BCACF2B8301B7D52E8D2FBE066B8056
        Validity
            Not Before: Oct 19 23:26:34 2025 GMT
            Not After : Oct 21 01:13:34 2025 GMT
        Subject: CN=2C40A7936340C99E243FDD7C8146359CEC361012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:36:21:c8:53:15:7e:57:e3:b8:5e:fd:29:
                    38:64:3f:8d:34:78:1f:2b:16:3b:f3:40:25:0a:e8:
                    b6:95:f6:fe:f4:1a:32:08:30:ea:5b:b1:45:ca:c8:
                    6a:df:ce:4d:07:3f:0b:1b:4e:44:78:5e:f5:4a:7f:
                    41:5e:2f:ba:ae:3f:c0:28:da:c3:5e:5d:af:86:9a:
                    3e:3b:58:8e:6b:5e:d9:18:5d:47:aa:50:09:2a:11:
                    a4:6e:5b:26:c2:e5:4b:7e:5a:bc:3f:5f:b1:e3:2f:
                    78:85:e8:2c:4c:e0:38:15:ed:08:cd:58:d2:a5:fe:
                    13:2c:b4:74:c2:2e:62:d1:6f:e2:e7:4e:57:29:02:
                    63:0d:27:58:54:cf:64:65:4d:4b:e5:95:40:86:1f:
                    8e:39:e3:c5:e5:a6:b4:7d:5d:6c:b8:26:1b:af:6a:
                    7a:ec:ea:c7:aa:66:00:f2:51:21:1c:54:27:12:db:
                    d3:50:c1:23:1f:e5:88:11:f9:ee:8f:96:b0:7d:c2:
                    19:8e:8e:a6:6d:a2:f4:c9:62:d2:5c:c8:6d:1c:95:
                    f6:68:d2:6f:0b:27:f7:ab:60:24:c4:47:82:11:2e:
                    ae:d2:c4:b0:35:52:47:52:c7:55:58:56:0c:a9:61:
                    ac:ba:cc:eb:3f:29:fc:05:77:98:a1:65:44:f5:09:
                    4c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:40:A7:93:63:40:C9:9E:24:3F:DD:7C:81:46:35:9C:EC:36:10:12
            X509v3 Authority Key Identifier:
                keyid:83:28:71:12:7B:CA:CF:2B:83:01:B7:D5:2E:8D:2F:BE:06:6B:80:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832871127BCACF2B8301B7D52E8D2FBE066B8056.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:86:84:e3:e6:75:0e:3a:09:ee:43:de:b5:b5:db:d5:61:ac:
         e9:c8:aa:b8:6d:e0:54:52:d7:02:2b:25:9c:07:99:c6:da:38:
         dd:49:e1:21:1d:59:61:9e:e0:8e:4b:e7:f7:2b:77:4e:d9:13:
         52:aa:34:93:89:57:e6:e2:77:b2:ed:56:0d:b9:ec:ca:be:05:
         b9:14:14:04:c4:0b:bc:df:5c:a2:3f:60:86:d6:88:50:59:64:
         26:ed:13:86:98:55:49:bf:55:3e:65:0c:40:a6:78:b3:31:b1:
         83:5d:6f:6b:d3:d3:6b:8f:b5:3b:42:4b:fe:d9:96:3c:a9:38:
         44:ab:df:6d:51:8f:5e:7f:9e:67:56:17:61:7d:3f:c5:d0:0e:
         20:70:c1:9d:49:3a:ac:4d:7b:79:85:4f:fa:4c:4e:56:9c:28:
         8a:52:ea:ff:ec:b9:69:bb:0a:86:37:6d:e9:67:e6:74:65:8d:
         92:85:19:3a:de:ab:76:af:42:e9:f8:bd:1c:1c:ae:00:b7:88:
         f5:05:50:39:75:a0:83:00:87:50:d1:78:24:eb:68:ce:f7:8f:
         d9:df:1d:94:53:04:58:f8:4c:23:74:2c:85:dd:3c:df:f1:69:
         42:8f:d3:25:3a:cb:59:99:91:fb:90:d3:10:ca:09:70:08:28:
         73:1f:8a:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUErdSMbKUJ9nCmSEseZBeer9GKo8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMyODcxMTI3QkNBQ0YyQjgzMDFCN0Q1MkU4RDJGQkUw
NjZCODA1NjAeFw0yNTEwMTkyMzI2MzRaFw0yNTEwMjEwMTEzMzRaMDMxMTAvBgNV
BAMTKDJDNDBBNzkzNjM0MEM5OUUyNDNGREQ3QzgxNDYzNTlDRUMzNjEwMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2SjYhyFMVflfjuF79KThkP400
eB8rFjvzQCUK6LaV9v70GjIIMOpbsUXKyGrfzk0HPwsbTkR4XvVKf0FeL7quP8Ao
2sNeXa+Gmj47WI5rXtkYXUeqUAkqEaRuWybC5Ut+Wrw/X7HjL3iF6CxM4DgV7QjN
WNKl/hMstHTCLmLRb+LnTlcpAmMNJ1hUz2RlTUvllUCGH44548XlprR9XWy4Jhuv
anrs6seqZgDyUSEcVCcS29NQwSMf5YgR+e6PlrB9whmOjqZtovTJYtJcyG0clfZo
0m8LJ/erYCTER4IRLq7SxLA1UkdSx1VYVgypYay6zOs/KfwFd5ihZUT1CUyFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULECnk2NAyZ4kP918gUY1nOw2EBIwHwYDVR0j
BBgwFoAUgyhxEnvKzyuDAbfVLo0vvgZrgFYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkY5dHRueE43VFZValJZSk0zYnVrNEIxU3VMVm1QaFVvWmF0a2pYNlE4
aHYvMC84MzI4NzExMjdCQ0FDRjJCODMwMUI3RDUyRThEMkZCRTA2NkI4MDU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgzMjg3MTEyN0JDQUNGMkI4
MzAxQjdENTJFOEQyRkJFMDY2QjgwNTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkY5dHRueE43VFZValJZSk0zYnVrNEIxU3VMVm1QaFVvWmF0a2pYNlE4aHYvMC84
MzI4NzExMjdCQ0FDRjJCODMwMUI3RDUyRThEMkZCRTA2NkI4MDU2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABIaE4+Z1DjoJ7kPetbXb1WGs6ciquG3gVFLXAislnAeZxto43UnhIR1ZYZ7g
jkvn9yt3TtkTUqo0k4lX5uJ3su1WDbnsyr4FuRQUBMQLvN9coj9ghtaIUFlkJu0T
hphVSb9VPmUMQKZ4szGxg11va9PTa4+1O0JL/tmWPKk4RKvfbVGPXn+eZ1YXYX0/
xdAOIHDBnUk6rE17eYVP+kxOVpwoilLq/+y5absKhjdt6WfmdGWNkoUZOt6rdq9C
6fi9HByuALeI9QVQOXWggwCHUNF4JOtozveP2d8dlFMEWPhMI3Qshd083/FpQo/T
JTrLWZmR+5DTEMoJcAgocx+KGQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:27:05 2025 by rpki-client