Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.mft
File:                     561575F60242E48030BC35A771871EB47C6EFF55.mft (raw, json)
Hash identifier:          5imxk8UYXo/UHcvVo1N6Pvu2MuYbCi9pUJ86rlhqCXU=
Subject key identifier:   CA:F8:95:6C:9E:8F:8F:E0:2D:5D:31:96:A5:A3:24:46:6E:95:25:AA
Authority key identifier: 56:15:75:F6:02:42:E4:80:30:BC:35:A7:71:87:1E:B4:7C:6E:FF:55
Certificate issuer:       /CN=561575F60242E48030BC35A771871EB47C6EFF55
Certificate serial:       677AB79AA80135D4BCFDC5606E08C0FBC14DF441
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.mft
Manifest number:          0166
Signing time:             Sun 19 Oct 2025 20:52:01 +0000
Manifest this update:     Sun 19 Oct 2025 20:47:01 +0000
Manifest next update:     Mon 20 Oct 2025 22:48:01 +0000
Files and hashes:         1: 561575F60242E48030BC35A771871EB47C6EFF55.crl (hash: Rc6H9Z9BpYZahs8rYdrpTHZUaD4zYKHwkMKY5U+p+tc=)
                          2: 323830343a6664343a3a2f33322d3332203d3e20323633363036.roa (hash: YcVgO/TqLV2RVsEcY5YxfTDDibwjME6ohrDzPZUeqZ0=)
                          3: 3137372e3133362e37332e302f32342d3234203d3e20323633363036.roa (hash: yWg25YSIGn5ne4PsmFkjzr0N6QT/q6srY2+ahn/2xK0=)
                          4: 3137372e3133362e37342e302f32342d3234203d3e20323633363036.roa (hash: qe7r9EMBuA8PVM6G5o8rjU41GVgMR7iCARGYFxajE9Q=)
                          5: 3137372e3133362e37322e302f32342d3234203d3e20323633363036.roa (hash: wIV2/wL6lihesQ313z2vEBTVMqAU+CX0lMkYkyWVI0Q=)
                          6: 3137372e3133362e37322e302f32332d3233203d3e20323633363036.roa (hash: t7S2i81KcyrcoANm5d4BsvS471/FI2YRHfNUeMgGLe4=)
                          7: 3137372e3133362e37352e302f32342d3234203d3e20323633363036.roa (hash: zky2j5e+djgNdAtqIowX31+SvrgWF85lsebPB8Oi+3s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.crl
                          rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 22:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:7a:b7:9a:a8:01:35:d4:bc:fd:c5:60:6e:08:c0:fb:c1:4d:f4:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=561575F60242E48030BC35A771871EB47C6EFF55
        Validity
            Not Before: Oct 19 20:47:01 2025 GMT
            Not After : Oct 20 22:48:01 2025 GMT
        Subject: CN=CAF8956C9E8F8FE02D5D3196A5A324466E9525AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:48:ec:36:5a:43:e5:7a:b9:57:c8:2a:b2:85:
                    27:08:71:8f:31:15:a1:42:31:55:0c:0d:1c:35:c4:
                    71:92:d0:ff:18:4f:16:35:97:57:f8:50:a7:4b:8a:
                    b7:bc:52:d0:64:37:bc:03:e9:ef:2a:94:e6:f5:8e:
                    a9:f7:8b:48:36:87:77:45:6a:eb:5a:8c:89:91:46:
                    ad:5b:f5:a6:6f:42:ec:bd:48:8f:68:ee:21:ad:aa:
                    65:21:0d:b6:04:2e:59:a3:e9:de:9c:29:e2:6f:3f:
                    10:b1:9c:28:1b:39:81:f8:2d:f3:f3:0c:ad:0b:5c:
                    51:ea:d8:77:20:65:de:e7:a7:09:8b:c7:ff:f2:7e:
                    ff:4c:9e:37:10:93:9f:ae:70:c5:63:37:46:53:18:
                    9f:89:ce:81:3b:7b:52:df:d2:94:7a:61:2e:02:06:
                    79:e4:71:7a:e0:e7:7a:7a:44:16:23:10:5b:af:6e:
                    73:86:40:cb:b4:7b:de:e2:01:69:2d:1f:c0:41:d8:
                    6f:09:1a:4e:cc:fc:91:f9:02:84:79:5f:55:37:cd:
                    46:70:98:db:cf:db:d5:16:06:bc:b8:d1:cd:73:8e:
                    14:a9:e9:f8:15:98:65:e1:ad:0c:8d:ad:3f:a5:ca:
                    9b:e5:4f:0f:50:92:8b:f6:40:7a:0f:3d:d7:13:a1:
                    da:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F8:95:6C:9E:8F:8F:E0:2D:5D:31:96:A5:A3:24:46:6E:95:25:AA
            X509v3 Authority Key Identifier:
                keyid:56:15:75:F6:02:42:E4:80:30:BC:35:A7:71:87:1E:B4:7C:6E:FF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:86:26:44:f4:33:53:fa:a6:16:59:ab:08:47:e9:52:aa:b5:
         f4:9c:13:8c:23:d6:a7:8e:cf:b2:8d:0a:3f:b0:14:89:43:26:
         0b:99:16:d3:9c:15:45:bc:db:3a:f1:de:80:f0:6d:f5:51:72:
         c9:da:a1:07:0c:89:8a:06:c4:d9:3a:bd:5e:fa:dc:d8:07:5f:
         78:df:c6:74:ff:d8:37:b1:06:98:9a:75:3d:d8:15:43:fc:be:
         73:f8:53:d0:c9:1d:83:3d:8f:e1:a6:ca:98:4a:0a:46:0a:e6:
         5b:d4:5d:19:bb:29:3f:21:6f:01:1a:81:32:4c:63:c9:e5:02:
         77:78:e5:f3:51:bf:10:46:9d:df:a3:b0:25:a2:06:e3:63:42:
         ab:cf:ae:cf:c1:a2:77:d7:54:79:c7:ce:a1:ed:95:d0:a1:67:
         ff:d8:02:25:06:93:20:5e:d9:cd:fd:6f:26:3f:fb:7f:17:12:
         ad:64:48:c6:2a:f4:9b:93:8b:6d:27:67:15:2f:39:76:dd:6b:
         4a:22:09:f5:75:37:0c:19:8b:99:72:8f:d8:c1:88:c6:3b:ad:
         9d:60:55:d0:ca:ff:63:3b:d3:cf:2b:b9:a0:4a:52:5e:ce:f2:
         e3:18:9a:73:23:67:76:61:6b:79:84:9c:1d:ae:5e:f2:14:a9:
         a9:f8:f5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:16:30 2025 by rpki-client