Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
File:                     67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft (raw, json)
Hash identifier:          J9XiHHTFtQihwXaVofbfiVlmScnFESZZ3+/AnyLYKDE=
Subject key identifier:   F0:D7:94:C8:D3:1F:74:9D:53:24:F0:CB:55:C9:60:A3:D5:C4:97:3C
Authority key identifier: 67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
Certificate issuer:       /CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Certificate serial:       6C425BD6F0314E32E14FCB48134B62734E9CE116
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
Manifest number:          F9
Signing time:             Mon 20 Oct 2025 07:46:40 +0000
Manifest this update:     Mon 20 Oct 2025 07:41:40 +0000
Manifest next update:     Tue 21 Oct 2025 10:08:40 +0000
Files and hashes:         1: 34352e3233342e3231322e302f32332d3233203d3e20323637333733.roa (hash: F+mot+FSQP0fE+UXpORQq/D2rcEErdSMSnaWMURftDk=)
                          2: 34352e3233342e3231322e302f32342d3234203d3e20323637333733.roa (hash: pVYTDtKIwEPErOqEGAxTC17UiiZyOr8zRm73AdHH6KE=)
                          3: 34352e3233342e3231352e302f32342d3234203d3e20323637333733.roa (hash: lUtz7MKekr+hul63UNYZ6gl3ng1S5V5Tq0UmFue47Dc=)
                          4: 323830343a346337633a3a2f33322d3332203d3e20323637333733.roa (hash: 7pFJZg33ygAxlXjIYUNjCPDcdVIiaggt4kaSJ8atORw=)
                          5: 34352e3233342e3231342e302f32332d3233203d3e20323637333733.roa (hash: Fgdb2V1ajEjSs5A7+TBCGITRfBcAfDTtdOenlLw9X2g=)
                          6: 34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa (hash: nPvlApQHq682NNJsbh8dkSCIG7wF3PneEPHVSQXHVHs=)
                          7: 34352e3233342e3231342e302f32342d3234203d3e20323637333733.roa (hash: kH3S536BXFFRY3Ukkc9PPKI4LEkvpGJ3fV00M/ofsag=)
                          8: 323830343a346337633a383030303a3a2f33332d3333203d3e20323637333733.roa (hash: SalagO4BMzv1/knGQHz2yAYQVYHEcDvMZE/ItLwvu20=)
                          9: 67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl (hash: pSeH+H+kQ4d1Na3Zep3J10oLFWRNoaQ+bFiBWlY/6TU=)
                          10: 34352e3233342e3231322e302f32322d3232203d3e20323637333733.roa (hash: 19y9suZg81aWvWRGbanLF5MDE0/A6R29ASgcaolBFdk=)
                          11: 323830343a346337633a3a2f33332d3333203d3e20323637333733.roa (hash: z12jWJsYAgf4Q8uXIp9romFVhEVrF2GPUQ954Q/vCIg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
                          rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:08:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:42:5b:d6:f0:31:4e:32:e1:4f:cb:48:13:4b:62:73:4e:9c:e1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
        Validity
            Not Before: Oct 20 07:41:40 2025 GMT
            Not After : Oct 21 10:08:40 2025 GMT
        Subject: CN=F0D794C8D31F749D5324F0CB55C960A3D5C4973C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:83:92:7f:fc:2b:26:44:03:d7:bd:b4:cc:15:
                    0d:c7:6e:6d:6f:ce:10:67:f3:c7:e5:7b:f4:f9:2c:
                    fc:54:48:cc:20:d3:57:10:87:1b:7f:63:68:ab:35:
                    b7:f0:47:ec:40:57:a0:1a:65:7d:04:20:09:63:f9:
                    de:ab:33:f1:4c:fa:7f:52:f7:e8:fc:c3:de:5e:a7:
                    ad:9a:a5:01:8a:83:ba:47:92:30:8c:cc:9b:45:d0:
                    f3:bc:41:1f:a9:fa:3c:c9:f8:37:9b:cc:89:77:00:
                    46:65:bd:25:5d:02:fd:36:97:51:aa:d3:2f:d3:0f:
                    9b:06:3b:12:7a:47:eb:33:5c:58:2c:ac:80:a8:e2:
                    bb:af:1c:82:61:56:97:b4:57:38:cd:9e:f7:9f:79:
                    1c:97:17:eb:56:04:c2:9e:01:c1:83:ff:19:0a:ae:
                    89:22:a2:b2:f3:cf:35:e7:27:08:9c:14:42:14:16:
                    78:eb:3a:9d:84:ad:50:53:9a:5d:28:bf:5c:d7:38:
                    ba:dc:f4:c9:5b:0e:c4:77:e7:24:d0:1e:7b:b9:95:
                    b5:e5:33:36:af:0c:60:f4:26:9d:74:d9:44:74:c4:
                    a4:9b:f3:db:85:64:5b:4d:6d:b8:44:c2:cd:90:76:
                    03:62:07:55:7c:82:07:cb:3f:3f:fa:ef:14:5a:9a:
                    f6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D7:94:C8:D3:1F:74:9D:53:24:F0:CB:55:C9:60:A3:D5:C4:97:3C
            X509v3 Authority Key Identifier:
                keyid:67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:9d:cd:c8:a0:1c:4d:58:1f:4f:49:7b:f2:98:d2:fd:6a:de:
         ab:ed:bd:fe:fc:6f:40:31:e8:2f:61:40:d0:da:ec:6c:b9:7a:
         49:d8:a3:ed:15:62:ca:3b:67:df:af:06:00:b4:c8:3b:f1:47:
         92:13:f2:63:40:ad:e4:c3:88:50:c5:a3:58:c1:da:0f:52:91:
         6b:c2:20:23:d1:bc:e7:4b:8f:7d:e7:31:13:e6:67:74:9e:01:
         51:d1:b6:3b:18:e5:24:e3:a0:7a:21:df:d1:3c:3e:a4:3d:10:
         8d:c6:5e:58:91:98:e9:9b:91:f2:e2:2d:c5:ab:28:58:0f:c0:
         8a:6c:37:89:c1:c1:7d:c8:77:f1:2b:84:5d:5b:49:bf:c0:b6:
         93:e2:cb:0e:e1:e8:9b:f0:d1:e2:f4:47:2e:20:03:ba:ca:5c:
         81:75:82:af:a6:55:fd:d6:26:c5:71:af:e9:2d:72:9d:90:2a:
         38:a7:fd:eb:a5:db:00:3d:3f:bb:af:87:bb:5a:21:0d:67:f7:
         54:29:42:4e:75:d1:10:8f:23:3b:ef:d3:a1:61:be:6e:8d:a9:
         6f:31:76:c6:27:cf:2e:95:22:ed:e3:99:3f:a7:44:83:e2:12:
         06:ba:4b:f7:47:12:a8:58:2d:2e:54:fa:38:bf:91:b7:01:5d:
         7c:91:59:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:17:45 2025 by rpki-client