Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
File:                     DDA4FC5B8E458E28765A866099AD929BAF665339.mft (raw, json)
Hash identifier:          H0nc5n2mgfi7t2UdzmMGkyBG7MUIsitjykbRmk2/yFA=
Subject key identifier:   47:FB:09:4A:6E:36:92:BC:6B:0D:2A:9C:92:A4:28:97:D8:86:7B:2B
Authority key identifier: DD:A4:FC:5B:8E:45:8E:28:76:5A:86:60:99:AD:92:9B:AF:66:53:39
Certificate issuer:       /CN=DDA4FC5B8E458E28765A866099AD929BAF665339
Certificate serial:       7524D69C5AD81E2BDEBBC50396360B1E5FCC77CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
Manifest number:          022F
Signing time:             Mon 20 Oct 2025 05:39:45 +0000
Manifest this update:     Mon 20 Oct 2025 05:34:45 +0000
Manifest next update:     Tue 21 Oct 2025 07:31:45 +0000
Files and hashes:         1: 323830343a366432633a3a2f33322d313238203d3e20323730353137.roa (hash: FgEv7DHx8gpoUEHmCHDzneQcmOGaXyHJxKnB2umwj5Q=)
                          2: DDA4FC5B8E458E28765A866099AD929BAF665339.crl (hash: vMbhQg+eaDjorcfdXvcsWQfDJ3VFJzVmN+oe8FGNsJI=)
                          3: 3138372e37332e3138342e302f32322d3234203d3e20323730353137.roa (hash: nMQXkBs+poUjtuyc4CkiehDpQxelS0VJ1cjAIr/UgbA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.crl
                          rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:31:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:24:d6:9c:5a:d8:1e:2b:de:bb:c5:03:96:36:0b:1e:5f:cc:77:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDA4FC5B8E458E28765A866099AD929BAF665339
        Validity
            Not Before: Oct 20 05:34:45 2025 GMT
            Not After : Oct 21 07:31:45 2025 GMT
        Subject: CN=47FB094A6E3692BC6B0D2A9C92A42897D8867B2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9a:9e:51:05:85:97:26:70:af:1e:8a:a7:21:
                    52:62:e5:3c:62:58:4d:43:08:ff:2b:7d:b8:49:7d:
                    2d:38:84:52:64:a2:90:ea:26:7e:33:f7:63:0c:16:
                    c4:cc:0d:48:c0:d0:7b:ee:16:4c:35:fd:b1:81:56:
                    58:74:92:fe:8e:e9:e4:55:c3:a0:29:65:9e:01:4c:
                    cd:0d:55:02:0a:da:d8:28:c8:b2:db:41:0e:cd:6c:
                    a5:49:85:ea:a7:c5:07:83:22:0a:ac:da:6a:5e:ce:
                    fd:76:0b:a3:84:3f:7b:67:79:d1:fb:b8:c9:d7:aa:
                    ae:b8:08:fe:9a:c8:95:7f:47:2d:49:2d:b4:c4:c1:
                    46:84:7f:bd:ed:fd:61:cd:20:89:b5:24:55:f0:43:
                    8b:01:a9:79:06:7c:e9:22:21:bd:68:36:7e:b2:5f:
                    e6:3a:55:69:00:5f:22:59:ca:f6:d7:69:b2:a5:5f:
                    09:33:dc:bb:4d:1a:0e:ff:54:f1:59:12:7a:32:e1:
                    d7:f9:b1:d8:93:29:a0:23:0c:a0:6d:c9:0a:00:67:
                    c9:95:72:eb:42:fb:aa:31:75:a6:27:8b:3e:1a:7e:
                    21:08:6a:21:98:63:9b:5a:f5:33:e9:0c:e7:2b:4d:
                    51:2d:0d:b0:39:83:cf:6d:d3:ac:eb:45:f5:d0:58:
                    05:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FB:09:4A:6E:36:92:BC:6B:0D:2A:9C:92:A4:28:97:D8:86:7B:2B
            X509v3 Authority Key Identifier:
                keyid:DD:A4:FC:5B:8E:45:8E:28:76:5A:86:60:99:AD:92:9B:AF:66:53:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e8:b6:7a:38:f6:57:b5:f9:7a:86:a4:d6:5e:13:67:b7:ba:
         7e:b7:18:b8:b3:3f:93:72:9e:88:63:75:5a:01:df:2d:fb:5e:
         17:6e:0c:8b:98:42:93:4c:3c:4e:6c:33:43:f6:c8:db:3a:e4:
         f3:c0:48:c1:99:e3:a4:b0:aa:37:e6:1b:e4:eb:af:00:ea:52:
         c6:6a:ac:87:96:a1:f0:69:3d:7c:80:1a:eb:a2:da:fd:67:38:
         50:ef:71:57:52:74:2c:5c:7d:55:09:05:9c:94:ad:bd:50:6b:
         74:0f:ed:8c:ee:2c:59:c8:59:d1:9b:00:cb:e8:e4:a1:c4:bb:
         e9:1b:5f:d0:c5:46:0a:c6:e6:a6:64:b5:7b:96:6b:ad:84:f5:
         12:d1:25:cb:ff:18:73:ff:2f:94:67:30:e3:19:04:2e:48:2e:
         3b:f7:54:e5:2c:66:44:05:35:b9:a3:bd:6f:79:c3:20:b5:5d:
         94:12:4e:5e:b2:ff:b0:d9:67:af:5a:df:a2:39:51:75:7e:35:
         55:64:03:60:71:cd:f0:3f:99:55:15:f6:c3:a5:2c:5a:e1:37:
         f3:7c:ea:f2:4e:ee:29:ed:47:a3:bd:25:1d:18:8a:89:1d:d2:
         58:df:ce:65:77:49:e4:3d:bc:7f:b8:d1:a5:87:af:35:a7:e9:
         ac:43:c2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:34:51 2025 by rpki-client