Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft
File:                     F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft (raw, json)
Hash identifier:          zWng4O50t+sEFCGJIcvEFf5WkzECCR/m0d6y/P5cbbo=
Subject key identifier:   49:9B:68:A3:2A:B1:2E:FA:45:78:94:77:F6:B6:17:2B:20:C3:3C:94
Authority key identifier: F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E
Certificate issuer:       /CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E
Certificate serial:       44E6F798A13C1E38BBDD371AA59CC6952A10EC7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft
Manifest number:          0220
Signing time:             Mon 20 Oct 2025 07:05:39 +0000
Manifest this update:     Mon 20 Oct 2025 07:00:39 +0000
Manifest next update:     Tue 21 Oct 2025 10:12:39 +0000
Files and hashes:         1: AS262493.roa (hash: FZZph1veCrWf3+f7EyT142JwB+rOjscDJX1qLaBC1PI=)
                          2: AS65421.roa (hash: 7Vbeor9m6+dzt12Qpm3uCT7kahvrt4HBovBC5ZDDDd4=)
                          3: F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl (hash: 6QgExeOfUNBJ+XEKeeH6JKTU/X2MxU68FBhMhXX4gmc=)
                          4: AS53054.roa (hash: Y6B6tqmeor1HSK+pcqaGOBXYjMT3tQWmE05SxBZmC6o=)
                          5: AS53224.roa (hash: OJqA0lZpH+T3qq0CkGXdAQI1pCzajmI6h/xqXRgSt/Q=)
                          6: AS53059.roa (hash: M28GC4ofNnSo8QiMQZR6KO3DoqyaTk8W0zY82t6hjDk=)
                          7: AS28220.roa (hash: SS7VHSjYrCEEgx7W7nepJjHF/38ucZLU/K1i07FIkrI=)
                          8: AS264352.roa (hash: PNkz6krXGkO5/xDFMTb0JCPbyeLANaEk+g1yCS2a5oE=)
                          9: AS262726.roa (hash: qITL8Gn3VDSA6aoF+PRgXmMC9uKDklviECGzSSdOHrQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl
                          rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e6:f7:98:a1:3c:1e:38:bb:dd:37:1a:a5:9c:c6:95:2a:10:ec:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E
        Validity
            Not Before: Oct 20 07:00:39 2025 GMT
            Not After : Oct 21 10:12:39 2025 GMT
        Subject: CN=499B68A32AB12EFA45789477F6B6172B20C33C94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:aa:da:b3:f6:a2:f6:29:39:af:4c:e2:df:26:
                    ac:66:8c:59:c6:5c:62:59:f9:d9:ad:fa:2d:71:9f:
                    05:85:d4:28:b0:ae:e2:81:28:38:4e:f4:c9:9c:46:
                    46:23:d9:6f:e5:db:59:51:59:51:44:4a:f0:84:36:
                    0e:01:f6:20:fe:41:fa:0e:48:a8:e5:b8:de:ba:ed:
                    89:15:b4:40:8b:49:17:3d:6c:45:48:fa:bb:78:d9:
                    51:77:a7:bc:9a:35:4e:54:f4:ad:ac:3e:8c:44:6e:
                    cb:1e:b7:08:30:ba:cf:98:18:71:3e:8a:33:57:1b:
                    fe:1d:aa:38:30:29:08:cc:3c:67:a6:b6:0f:21:e8:
                    e1:d3:4c:48:c2:02:ae:e7:e9:9c:2b:0a:8c:14:f8:
                    5f:da:c3:01:2c:13:d7:93:16:e6:1b:1c:78:90:df:
                    d7:b0:b5:4b:a6:a4:6f:7c:a8:ea:1c:f6:60:ee:9f:
                    26:ad:e6:12:c8:cd:db:a2:ac:54:32:bc:2a:db:43:
                    fd:2b:88:3b:5d:08:fc:c0:89:d8:60:b9:64:19:a9:
                    b8:0e:0c:62:0a:b5:ac:b7:1e:bd:34:f0:ad:30:ee:
                    80:43:6a:62:1b:29:4e:62:25:ec:e9:b1:86:7a:80:
                    3b:81:77:ba:cd:64:6b:92:f7:c7:0a:7a:e7:80:e8:
                    e5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9B:68:A3:2A:B1:2E:FA:45:78:94:77:F6:B6:17:2B:20:C3:3C:94
            X509v3 Authority Key Identifier:
                keyid:F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:71:22:20:13:1b:d8:7d:ea:ce:4e:c9:b7:e5:56:cc:4c:93:
         96:8f:a9:9a:71:8f:14:2e:9d:24:20:0e:40:e4:28:77:15:42:
         b1:e0:75:87:f1:d0:e2:9a:c3:32:fd:d6:37:8d:09:62:eb:aa:
         c6:ee:13:e4:07:5f:1d:a6:a7:d1:fe:69:56:a1:19:61:5f:4a:
         d1:40:f7:49:cf:af:ba:c4:0a:53:f8:1e:55:f5:54:b7:ba:77:
         1d:76:a5:8a:40:1c:c8:75:c0:da:b3:9d:d4:d6:cf:ed:0a:ae:
         07:a9:5c:05:4c:5e:44:34:42:73:2f:be:43:f6:41:31:88:7d:
         db:72:7e:0e:31:f1:f8:c4:6d:86:c0:a3:e2:c4:fb:73:38:8e:
         3d:4e:36:e5:f5:14:a1:2a:c9:5c:ee:9b:03:d5:52:32:74:3f:
         88:04:44:a3:0d:e5:6d:56:c5:ec:97:c3:c9:16:35:f5:0c:28:
         2d:d8:36:b1:8c:e6:0e:58:ac:41:5e:21:84:90:a2:19:0e:68:
         a7:fc:26:86:87:51:f0:92:b9:c4:80:1f:46:0b:c3:8d:d3:9f:
         5c:d2:5c:f4:8b:ae:cb:cf:ab:80:62:9f:1e:5c:cc:a2:cd:52:
         94:6a:90:14:91:f8:03:4c:f7:11:26:b5:42:dd:20:5c:30:c9:
         07:1d:5a:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUROb3mKE8Hji73TcapZzGlSoQ7HwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYyRkE1NDBFNTlCODU3MDIwQzRCMjA5NTQyMzBFMEMw
QUU4Q0EwRTAeFw0yNTEwMjAwNzAwMzlaFw0yNTEwMjExMDEyMzlaMDMxMTAvBgNV
BAMTKDQ5OUI2OEEzMkFCMTJFRkE0NTc4OTQ3N0Y2QjYxNzJCMjBDMzNDOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrqtqz9qL2KTmvTOLfJqxmjFnG
XGJZ+dmt+i1xnwWF1CiwruKBKDhO9MmcRkYj2W/l21lRWVFESvCENg4B9iD+QfoO
SKjluN667YkVtECLSRc9bEVI+rt42VF3p7yaNU5U9K2sPoxEbssetwgwus+YGHE+
ijNXG/4dqjgwKQjMPGemtg8h6OHTTEjCAq7n6ZwrCowU+F/awwEsE9eTFuYbHHiQ
39ewtUumpG98qOoc9mDunyat5hLIzduirFQyvCrbQ/0riDtdCPzAidhguWQZqbgO
DGIKtay3Hr008K0w7oBDamIbKU5iJezpsYZ6gDuBd7rNZGuS98cKeueA6OX1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUSZtooyqxLvpFeJR39rYXKyDDPJQwHwYDVR0j
BBgwFoAU9i+lQOWbhXAgxLIJVCMODAroyg4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC9GNjJGQTU0MEU1OUI4NTcwMjBDNEIyMDk1NDIzMEUwQzBBRThDQTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y2MkZBNTQwRTU5Qjg1NzAy
MEM0QjIwOTU0MjMwRTBDMEFFOENBMEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhFZUIvMC9G
NjJGQTU0MEU1OUI4NTcwMjBDNEIyMDk1NDIzMEUwQzBBRThDQTBFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdnEiIBMb2H3qzk7Jt+VWzEyTlo+pmnGPFC6dJCAOQOQodxVCseB1h/HQ4prD
Mv3WN40JYuuqxu4T5AdfHaan0f5pVqEZYV9K0UD3Sc+vusQKU/geVfVUt7p3HXal
ikAcyHXA2rOd1NbP7QquB6lcBUxeRDRCcy++Q/ZBMYh923J+DjHx+MRthsCj4sT7
cziOPU425fUUoSrJXO6bA9VSMnQ/iAREow3lbVbF7JfDyRY19QwoLdg2sYzmDlis
QV4hhJCiGQ5op/wmhodR8JK5xIAfRgvDjdOfXNJc9Iuuy8+rgGKfHlzMos1SlGqQ
FJH4A0z3ESa1Qt0gXDDJBx1a/Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:27:40 2025 by rpki-client