Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.mft
File:                     BDF780A1AD20031A92186F4B5C02F049FB8A7D26.mft (raw, json)
Hash identifier:          3bwymO3deiPHSQ7Bl2AGPaCZJCCg+mKaoTA0xOLP0nw=
Subject key identifier:   5A:B9:C6:C8:B4:A7:16:97:10:9F:4A:C2:41:BE:56:07:4E:FE:CC:89
Authority key identifier: BD:F7:80:A1:AD:20:03:1A:92:18:6F:4B:5C:02:F0:49:FB:8A:7D:26
Certificate issuer:       /CN=BDF780A1AD20031A92186F4B5C02F049FB8A7D26
Certificate serial:       2DA5F3F0CC9558AA39D742A4A6512CF943FEEF3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.mft
Manifest number:          02BD
Signing time:             Mon 20 Oct 2025 00:30:17 +0000
Manifest this update:     Mon 20 Oct 2025 00:25:17 +0000
Manifest next update:     Tue 21 Oct 2025 04:21:17 +0000
Files and hashes:         1: BDF780A1AD20031A92186F4B5C02F049FB8A7D26.crl (hash: qPWLhLQKZt6sUNvncMKzdIcaZBiqh0RVH8c6J2ssJkQ=)
                          2: 323830343a363237343a3a2f33322d3438203d3e20323639323938.roa (hash: i3cBezF8IApSQaQqjUBcgOAnsqNsV9UdV/mGucW8iO4=)
                          3: 34352e3138332e3138382e302f32322d3234203d3e20323639323938.roa (hash: XUloOVfsOzPPxyik/iHPBmw4bQxk/7eIdcUdi8kEcuc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.crl
                          rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:21:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a5:f3:f0:cc:95:58:aa:39:d7:42:a4:a6:51:2c:f9:43:fe:ef:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF780A1AD20031A92186F4B5C02F049FB8A7D26
        Validity
            Not Before: Oct 20 00:25:17 2025 GMT
            Not After : Oct 21 04:21:17 2025 GMT
        Subject: CN=5AB9C6C8B4A71697109F4AC241BE56074EFECC89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3a:16:f0:39:0b:92:2c:97:06:b4:a5:aa:cd:
                    e2:9e:62:e4:78:be:ea:26:5d:0b:09:11:63:36:4d:
                    bc:25:44:32:9b:12:f1:f5:35:fa:aa:df:16:22:48:
                    25:98:90:99:42:1b:a6:49:e0:87:1a:b2:c2:38:04:
                    a7:a3:60:58:32:df:84:d8:f6:b7:b5:c0:d1:10:7e:
                    bf:35:01:e4:2a:8c:24:64:4c:4c:93:43:bf:2c:10:
                    df:4f:fe:ab:85:f7:3e:42:79:1d:63:64:4b:21:50:
                    e4:f6:a0:c8:d0:c3:eb:84:4c:7d:10:22:e4:5a:a9:
                    39:9d:31:72:58:e7:40:1c:07:b1:ec:dc:8a:c9:28:
                    33:38:4d:fc:01:dd:f9:d9:a0:1c:c9:ac:c2:a2:39:
                    86:64:22:7a:b5:10:38:23:20:a4:4e:a2:1d:d7:a9:
                    c5:c8:35:24:60:de:1a:bf:83:45:22:07:88:6f:be:
                    76:ac:be:2c:11:01:72:e4:7b:60:5c:c2:8a:d2:c3:
                    dd:3e:1c:71:97:95:ef:0c:1e:9a:6c:26:65:1b:f4:
                    d3:52:7b:5a:e6:86:9e:c1:92:f9:3b:ac:ca:83:a2:
                    d2:8f:78:58:63:01:b6:67:31:82:30:16:f3:ba:80:
                    b0:3e:af:6c:7e:2f:be:e8:53:c9:5c:3d:8e:07:2f:
                    24:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B9:C6:C8:B4:A7:16:97:10:9F:4A:C2:41:BE:56:07:4E:FE:CC:89
            X509v3 Authority Key Identifier:
                keyid:BD:F7:80:A1:AD:20:03:1A:92:18:6F:4B:5C:02:F0:49:FB:8A:7D:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:0a:85:68:16:2b:1b:8d:cc:c8:55:e6:d8:d7:f4:57:4b:63:
         cd:3b:6a:97:7a:b6:f0:58:77:e3:9c:40:6c:7b:31:6b:d2:50:
         69:72:57:2b:55:4e:16:07:e7:1e:09:59:0b:8a:26:c4:f3:9c:
         9e:50:e6:0c:74:ad:87:d9:2c:06:2f:3b:6a:16:4a:e7:88:b8:
         d9:9f:ba:ed:a5:3f:de:bd:8c:85:ec:0f:bb:f8:55:41:96:06:
         55:03:f8:fb:dc:ec:2c:45:0c:ed:f3:3d:fe:94:b2:ec:5f:eb:
         3d:73:10:b5:44:55:42:60:f5:32:c5:59:a5:14:f0:74:f4:53:
         8c:4b:96:96:99:4c:df:2f:4b:dc:fb:cd:8a:d5:b8:1e:ff:38:
         51:89:b1:95:f8:e1:1b:27:c4:4d:8c:4e:b8:f7:10:55:1b:ab:
         f6:7d:55:2b:4f:f8:a0:8f:bd:af:a9:6d:ba:29:71:43:80:ad:
         77:a9:7b:07:20:f2:a3:b7:2b:a5:fd:8b:35:d2:cf:fd:b7:a6:
         97:c5:18:4f:52:c8:09:ee:87:9a:49:34:c3:f4:dd:fe:f4:26:
         d7:8e:4d:c9:ae:dc:83:fc:d7:4f:cd:c3:e9:b8:50:0f:f9:dd:
         a7:bb:3b:b1:49:b9:2c:cf:2b:d1:3e:7f:56:1b:e9:64:88:93:
         be:39:c8:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULaXz8MyVWKo510KkplEs+UP+7z0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRGNzgwQTFBRDIwMDMxQTkyMTg2RjRCNUMwMkYwNDlG
QjhBN0QyNjAeFw0yNTEwMjAwMDI1MTdaFw0yNTEwMjEwNDIxMTdaMDMxMTAvBgNV
BAMTKDVBQjlDNkM4QjRBNzE2OTcxMDlGNEFDMjQxQkU1NjA3NEVGRUNDODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLOhbwOQuSLJcGtKWqzeKeYuR4
vuomXQsJEWM2TbwlRDKbEvH1Nfqq3xYiSCWYkJlCG6ZJ4IcassI4BKejYFgy34TY
9re1wNEQfr81AeQqjCRkTEyTQ78sEN9P/quF9z5CeR1jZEshUOT2oMjQw+uETH0Q
IuRaqTmdMXJY50AcB7Hs3IrJKDM4TfwB3fnZoBzJrMKiOYZkInq1EDgjIKROoh3X
qcXINSRg3hq/g0UiB4hvvnasviwRAXLke2BcworSw90+HHGXle8MHppsJmUb9NNS
e1rmhp7Bkvk7rMqDotKPeFhjAbZnMYIwFvO6gLA+r2x+L77oU8lcPY4HLyStAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUWrnGyLSnFpcQn0rCQb5WB07+zIkwHwYDVR0j
BBgwFoAUvfeAoa0gAxqSGG9LXALwSfuKfSYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkZkWW9Db2tnbXBGdERUb2loRm9zRm5hOEZDdmRiQ2U4bm84UlF1Nmll
RzgvMC9CREY3ODBBMUFEMjAwMzFBOTIxODZGNEI1QzAyRjA0OUZCOEE3RDI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERjc4MEExQUQyMDAzMUE5
MjE4NkY0QjVDMDJGMDQ5RkI4QTdEMjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkZkWW9Db2tnbXBGdERUb2loRm9zRm5hOEZDdmRiQ2U4bm84UlF1NmllRzgvMC9C
REY3ODBBMUFEMjAwMzFBOTIxODZGNEI1QzAyRjA0OUZCOEE3RDI2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJQqFaBYrG43MyFXm2Nf0V0tjzTtql3q28Fh345xAbHsxa9JQaXJXK1VOFgfn
HglZC4omxPOcnlDmDHSth9ksBi87ahZK54i42Z+67aU/3r2MhewPu/hVQZYGVQP4
+9zsLEUM7fM9/pSy7F/rPXMQtURVQmD1MsVZpRTwdPRTjEuWlplM3y9L3PvNitW4
Hv84UYmxlfjhGyfETYxOuPcQVRur9n1VK0/4oI+9r6ltuilxQ4Ctd6l7ByDyo7cr
pf2LNdLP/beml8UYT1LICe6Hmkk0w/Td/vQm145Nya7cg/zXT83D6bhQD/ndp7s7
sUm5LM8r0T5/VhvpZIiTvjnITw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:22:26 2025 by rpki-client