Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft
File:                     99143CBAF11D170944D719FD796009BC38F9F201.mft (raw, json)
Hash identifier:          f87HAxVjPBpsaRsJgaMv3Gw3clynVf/qpNRaWZydjKY=
Subject key identifier:   C9:80:2C:74:FF:3D:2A:85:0D:DB:AF:56:DE:38:6A:06:80:A6:5E:40
Authority key identifier: 99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01
Certificate issuer:       /CN=99143CBAF11D170944D719FD796009BC38F9F201
Certificate serial:       278032407312189003BDCA0505C1464D768EF817
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft
Manifest number:          0143
Signing time:             Mon 20 Oct 2025 17:47:38 +0000
Manifest this update:     Mon 20 Oct 2025 17:42:38 +0000
Manifest next update:     Tue 21 Oct 2025 18:58:38 +0000
Files and hashes:         1: 323830343a3666383a3a2f33322d3332203d3e203532383438.roa (hash: ArZW0IEPQT9qmNg5J+/twX+29UWHR8soH8MuXLBopaw=)
                          2: 99143CBAF11D170944D719FD796009BC38F9F201.crl (hash: IrwUH1JuyGACY6s4Z85pidbUIxsBaMLh/MzfDtsf/r0=)
                          3: 3137372e38352e3230382e302f32312d3231203d3e203532383438.roa (hash: RRqoJBiXii3TgpvUYwzTzwuOv7ddzpllt21x0hxGtNA=)
                          4: 3136382e3139362e3138382e302f32322d3232203d3e203532383438.roa (hash: wGmW5HddS84Jo/UI8qqwdMdyTdX5hWciOmvr9JPT1Hk=)
                          5: 323830343a3666383a3a2f34382d3438203d3e203532383438.roa (hash: 8xtcR24IPJaMX/rjvHeT8tMqZCtqzrZlmnUr2V0pZho=)
                          6: 3137372e38352e3231322e302f32342d3234203d3e203532383438.roa (hash: MK46EOQmbC35WhEWUmA1L+F9AWzxso9iv0FyQJWVVEg=)
                          7: 3137372e38352e3231362e302f32312d3231203d3e203532383438.roa (hash: dT3drk2apCMlmTaJ587FJLVDRKf659GM5r5ocqzqC5s=)
                          8: 3137372e38352e3232302e302f32322d3232203d3e203532383438.roa (hash: bpwbadI4PJrdbgkJUAI3blXoAxBzzJDOU/RK8agy34I=)
                          9: 323830343a3666383a633365383a3a2f34382d3438203d3e203532383438.roa (hash: g+kDGTXDx32jeHWBRz886fdCkrH4EgBpA9ppSeKKh58=)
                          10: 3137372e38352e3230392e302f32342d3234203d3e203532383438.roa (hash: +e4JE9WbQSTeKpKZM4B9htThLOM6QwAAvUGG04RlxEg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.crl
                          rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:80:32:40:73:12:18:90:03:bd:ca:05:05:c1:46:4d:76:8e:f8:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99143CBAF11D170944D719FD796009BC38F9F201
        Validity
            Not Before: Oct 20 17:42:38 2025 GMT
            Not After : Oct 21 18:58:38 2025 GMT
        Subject: CN=C9802C74FF3D2A850DDBAF56DE386A0680A65E40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ba:8b:26:36:5c:8b:3a:69:88:30:66:39:aa:
                    8a:d1:50:66:fe:97:25:8b:3b:46:36:d6:09:ad:c2:
                    50:fc:81:a6:34:ed:e5:8c:98:98:99:fa:70:d3:1f:
                    d7:8d:16:7a:45:ff:93:5b:d5:86:30:98:c8:88:0f:
                    e6:8c:dc:34:ee:6b:a6:d6:e9:51:e5:8c:a6:a7:83:
                    b2:c5:60:2e:77:9c:88:db:08:1e:47:6e:fa:e7:b2:
                    b4:8e:0a:a8:40:3f:77:4f:4e:ca:94:b1:a8:c6:3e:
                    50:27:dd:98:aa:8c:94:0f:8f:57:d8:7d:e2:2e:54:
                    8a:94:16:f5:31:1d:23:3f:de:07:55:4a:57:92:d3:
                    ed:74:c8:04:7b:1e:9c:7e:87:65:bf:7d:80:d6:da:
                    22:4d:2c:80:3b:fe:8f:05:cc:f9:d3:e4:17:4b:c2:
                    6b:b6:66:4a:33:a8:42:f7:46:84:80:fd:48:07:ab:
                    9d:9b:88:56:89:f3:4c:59:bb:1f:b7:af:49:b7:02:
                    26:af:ca:89:15:f9:49:a5:70:3a:a3:7f:df:55:6f:
                    a3:19:ed:d0:51:d8:f3:25:f4:8d:e1:3b:4f:84:c7:
                    a2:b6:a2:6b:a1:a2:00:37:40:15:32:cf:51:56:ad:
                    b8:10:e5:ce:48:27:09:6b:5c:b0:85:0b:45:84:7f:
                    65:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:80:2C:74:FF:3D:2A:85:0D:DB:AF:56:DE:38:6A:06:80:A6:5E:40
            X509v3 Authority Key Identifier:
                keyid:99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f9:81:58:d1:c6:2a:73:38:53:76:63:9c:49:c5:6c:99:bb:
         cb:89:7b:5d:06:aa:da:d1:95:d2:8b:e8:12:f4:0e:af:e8:0d:
         7a:29:0a:b5:b1:de:2f:da:13:2e:40:09:4f:52:ee:ac:85:99:
         9b:2c:34:9d:a1:ef:25:7f:3d:a8:15:2a:f1:4d:dc:6f:ba:81:
         30:e4:d9:fb:1b:ce:19:9d:49:43:4a:95:09:03:5e:d2:f1:12:
         f0:f2:9c:43:e6:c6:7f:38:2f:68:8d:60:d7:07:82:20:5a:68:
         15:bb:8e:3a:48:69:87:4b:af:fc:c4:da:43:24:a4:2a:b6:b4:
         a9:fa:89:06:99:77:83:11:ca:85:ae:4b:0b:60:64:1a:e5:03:
         77:a2:97:7d:3b:a8:4c:01:0f:b0:a7:9b:b1:ba:64:a7:68:e9:
         21:83:c4:72:c2:0c:6a:a3:ae:c8:60:fa:b2:f2:d0:da:d5:fd:
         4b:bb:5b:1c:12:5a:dc:b9:15:bd:9f:45:e6:f8:6c:a4:13:29:
         7b:d5:88:aa:4d:d8:20:c9:2c:c5:b0:b8:6f:af:7e:21:dd:d9:
         b8:35:dd:61:ea:eb:ed:18:65:a2:29:44:1d:b9:b2:98:be:f7:
         ab:a6:11:d1:1b:6e:c7:28:e6:64:bc:2b:81:a9:b3:4d:19:91:
         ce:41:f0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:27:09 2025 by rpki-client