Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.mft
File:                     0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.mft (raw, json)
Hash identifier:          YaJKDbzMjJqgaTGioursLMk358q+NNAiQnDmhsWqRF0=
Subject key identifier:   A0:F4:DD:3E:5A:47:8B:2B:D1:AF:E3:ED:F7:87:72:D3:7C:40:6D:2E
Authority key identifier: 0E:A5:8A:AB:56:6A:B7:47:E7:DD:6A:0E:CB:4C:77:5E:67:07:D6:E1
Certificate issuer:       /CN=0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1
Certificate serial:       3221D5CA976111EE851C0315B879C9D80ACE43B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.mft
Manifest number:          B1
Signing time:             Mon 20 Oct 2025 13:49:35 +0000
Manifest this update:     Mon 20 Oct 2025 13:44:35 +0000
Manifest next update:     Tue 21 Oct 2025 14:21:35 +0000
Files and hashes:         1: 323830343a386535303a383030303a3a2f33342d3334203d3e20323733343137.roa (hash: 6v2j7LwLIKQ0eJnpIDIuaoQf8ECL/I0FIP3MWge9yHg=)
                          2: 323830343a386535303a3a2f33342d3334203d3e20323733343137.roa (hash: gJTFM0QrGA3UWoYbF8fvbQmPmeMopgKgjLe1FjetpSo=)
                          3: 0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.crl (hash: Nr4rWI6sqsmohEB06stM1BQ/kwXwa2gG6fmLyX2XUdM=)
                          4: 323830343a386535303a343030303a3a2f33342d3334203d3e20323733343137.roa (hash: JG9QxupPHof9x09IrcAafnIV9CHPJravr9NNkOjGGME=)
                          5: 323830343a386535303a633030303a3a2f33342d3334203d3e20323733343137.roa (hash: MU+0iw6K6aPAY0rmSUuUrjCZmzAlACuj7uCgGlYNpPQ=)
                          6: 323830343a386535303a3a2f33322d3332203d3e20323733343137.roa (hash: H8XROUAWLnf9NxtSQE6Eqltm6zBi7aFHwJDPb3JmGHY=)
                          7: 3138372e38362e3136332e302f32342d3234203d3e20323733343137.roa (hash: kruYGS29lju9ll0IFDKjfYckNozZ3ZclInv6bYJ2mU4=)
                          8: 323830343a386535303a3a2f33332d3333203d3e20323733343137.roa (hash: oa39zwk+DOlFtKxgGEDMTAys54WdC9OthVvLXeD9ByE=)
                          9: 323830343a386535303a383030303a3a2f33332d3333203d3e20323733343137.roa (hash: WjB7OZybW8Gb6Q+xZW2Bc9+q+Ho6AV3vsScswHdMxgU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.crl
                          rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:21:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:21:d5:ca:97:61:11:ee:85:1c:03:15:b8:79:c9:d8:0a:ce:43:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1
        Validity
            Not Before: Oct 20 13:44:35 2025 GMT
            Not After : Oct 21 14:21:35 2025 GMT
        Subject: CN=A0F4DD3E5A478B2BD1AFE3EDF78772D37C406D2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9d:04:b2:9e:2c:29:b5:38:08:18:83:a8:f7:
                    ce:5f:1e:59:8a:bc:4b:bb:30:07:f2:f7:1c:bd:90:
                    a9:ad:a8:32:82:8d:6f:94:32:b1:22:4a:ed:f2:50:
                    68:f6:9a:26:f8:d9:a7:1b:05:f4:b8:a8:02:5b:1e:
                    46:f4:c0:f9:6a:7a:37:42:5d:e4:ca:eb:28:2c:ad:
                    12:39:c0:6a:03:2d:e6:92:66:ce:f4:c9:5b:6c:aa:
                    77:11:8b:c5:54:62:0b:62:de:68:32:7b:5f:5a:03:
                    44:4f:e2:aa:6d:31:d5:b2:3c:f4:0b:92:13:0e:3d:
                    81:ab:26:7b:c4:7a:0c:fb:e0:62:5c:03:1a:f9:07:
                    ec:ef:12:5c:a7:f5:53:36:39:12:82:31:d9:4d:07:
                    2c:de:2f:58:be:83:10:7d:d4:42:67:46:36:9f:20:
                    7d:a7:d4:3f:4b:99:50:0e:65:dd:b1:e2:c0:c5:7b:
                    7c:c6:96:cc:3e:4f:08:1f:4a:06:1a:d4:a9:db:d5:
                    12:fd:ea:0f:cf:6b:af:87:eb:76:d3:94:3e:90:26:
                    3b:9b:3c:19:17:0c:c7:49:ed:99:dd:6a:d3:23:06:
                    af:34:96:ec:8e:5b:13:28:b6:6f:64:4b:cc:e0:13:
                    45:ba:9f:b5:ee:6c:87:c1:4e:16:93:15:59:44:d8:
                    ea:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F4:DD:3E:5A:47:8B:2B:D1:AF:E3:ED:F7:87:72:D3:7C:40:6D:2E
            X509v3 Authority Key Identifier:
                keyid:0E:A5:8A:AB:56:6A:B7:47:E7:DD:6A:0E:CB:4C:77:5E:67:07:D6:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:44:95:46:73:f9:41:24:8b:3e:82:6a:f6:70:f1:c2:d1:a1:
         f1:26:7f:76:b0:d0:85:0c:e0:53:19:13:f5:54:e7:72:b6:84:
         94:48:c3:c4:ea:8d:f6:c6:b2:8b:7f:7b:b6:23:b2:87:47:ea:
         91:8e:33:b9:15:f1:81:9e:43:ed:e4:d8:e7:b7:50:7b:7c:4d:
         ca:a4:42:82:80:ab:9a:a4:49:7e:ef:83:63:f5:3d:cf:bb:1c:
         39:35:42:51:47:2e:13:93:82:64:0d:b4:06:40:f1:1e:36:1a:
         0e:b9:50:51:69:e1:36:ca:96:47:cf:ec:da:0e:35:f2:a0:2f:
         ac:1e:a7:ea:ab:b1:90:83:45:19:2c:be:ad:78:05:32:91:4f:
         78:f5:e9:96:3d:8d:49:4e:55:4a:33:62:ad:0b:d4:b9:e7:96:
         a9:17:85:89:1d:93:c6:d1:10:c1:94:87:4e:ff:b4:86:c6:c8:
         88:bf:59:11:3f:fb:b8:d8:bb:22:d5:e5:91:f0:24:3d:1f:59:
         41:e6:2d:8e:f6:15:b8:6c:89:d9:34:f0:1a:81:21:db:b0:63:
         66:0c:e8:9c:24:d2:81:a0:d8:bf:cc:81:3b:70:32:56:5f:8a:
         6c:4b:68:6a:28:83:4f:2a:74:45:72:44:72:50:06:0c:e6:67:
         8c:a0:bc:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMiHVypdhEe6FHAMVuHnJ2ArOQ7IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEVBNThBQUI1NjZBQjc0N0U3REQ2QTBFQ0I0Qzc3NUU2
NzA3RDZFMTAeFw0yNTEwMjAxMzQ0MzVaFw0yNTEwMjExNDIxMzVaMDMxMTAvBgNV
BAMTKEEwRjRERDNFNUE0NzhCMkJEMUFGRTNFREY3ODc3MkQzN0M0MDZEMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1nQSyniwptTgIGIOo985fHlmK
vEu7MAfy9xy9kKmtqDKCjW+UMrEiSu3yUGj2mib42acbBfS4qAJbHkb0wPlqejdC
XeTK6ygsrRI5wGoDLeaSZs70yVtsqncRi8VUYgti3mgye19aA0RP4qptMdWyPPQL
khMOPYGrJnvEegz74GJcAxr5B+zvElyn9VM2ORKCMdlNByzeL1i+gxB91EJnRjaf
IH2n1D9LmVAOZd2x4sDFe3zGlsw+TwgfSgYa1Knb1RL96g/Pa6+H63bTlD6QJjub
PBkXDMdJ7ZndatMjBq80luyOWxMotm9kS8zgE0W6n7XubIfBThaTFVlE2OrvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUoPTdPlpHiyvRr+Pt94dy03xAbS4wHwYDVR0j
BBgwFoAUDqWKq1Zqt0fn3WoOy0x3XmcH1uEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5lcGtwc3NYZnZZY0s1SzFIY2ppM1gzZ3JzUkFNcFA5WU00YXZtcEJZ
eFcvMC8wRUE1OEFBQjU2NkFCNzQ3RTdERDZBMEVDQjRDNzc1RTY3MDdENkUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFQTU4QUFCNTY2QUI3NDdF
N0RENkEwRUNCNEM3NzVFNjcwN0Q2RTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Mm5lcGtwc3NYZnZZY0s1SzFIY2ppM1gzZ3JzUkFNcFA5WU00YXZtcEJZeFcvMC8w
RUE1OEFBQjU2NkFCNzQ3RTdERDZBMEVDQjRDNzc1RTY3MDdENkUxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAv0SVRnP5QSSLPoJq9nDxwtGh8SZ/drDQhQzgUxkT9VTncraElEjDxOqN9say
i397tiOyh0fqkY4zuRXxgZ5D7eTY57dQe3xNyqRCgoCrmqRJfu+DY/U9z7scOTVC
UUcuE5OCZA20BkDxHjYaDrlQUWnhNsqWR8/s2g418qAvrB6n6quxkINFGSy+rXgF
MpFPePXplj2NSU5VSjNirQvUueeWqReFiR2TxtEQwZSHTv+0hsbIiL9ZET/7uNi7
ItXlkfAkPR9ZQeYtjvYVuGyJ2TTwGoEh27BjZgzonCTSgaDYv8yBO3AyVl+KbEto
aiiDTyp0RXJEclAGDOZnjKC8xQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:37:12 2025 by rpki-client