Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
File:                     03981ED1B457034CCBAC00F384454B3A021E294E.mft (raw, json)
Hash identifier:          qLynGKK6Gewk3QwZzoAB7bOSypAbgmEhvGzejIotOlA=
Subject key identifier:   48:DB:02:0E:23:77:88:ED:6A:D7:10:BC:96:E3:55:D3:C2:2D:9E:8E
Authority key identifier: 03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E
Certificate issuer:       /CN=03981ED1B457034CCBAC00F384454B3A021E294E
Certificate serial:       57B353C23E1B2331C9450433CB748596CB76C881
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
Manifest number:          02EF
Signing time:             Mon 20 Oct 2025 12:48:09 +0000
Manifest this update:     Mon 20 Oct 2025 12:43:09 +0000
Manifest next update:     Tue 21 Oct 2025 13:10:09 +0000
Files and hashes:         1: 323830343a3137303a343930303a3a2f34302d3430203d3e203238313331.roa (hash: 51gh5cZvKcku/HTCN3fV9dVatQeeJSDnbxCgtyYWsmE=)
                          2: 323830343a3137303a343830303a3a2f34302d3430203d3e203238313331.roa (hash: F6mWoNxivsjy49EpdLR1loouYSZizuLjad8AnzE3j0o=)
                          3: 03981ED1B457034CCBAC00F384454B3A021E294E.crl (hash: AhJl4kQla9FhL1TRLY5HuaYaRNrb3I1+FCNeKU8o26s=)
                          4: 3137302e302e3234302e302f32322d3234203d3e203238313331.roa (hash: HKbLS7E+Az6NGi4/iA6D4cS57BiWvM5NlPyC844QPL8=)
                          5: 3133382e302e3139322e302f32322d3234203d3e203238313331.roa (hash: MWVxqT61yiEzzjMFTCposX7gtE+sEQ7wd0IdrYcsZ9Q=)
                          6: 3138362e3230382e3232342e302f32302d3234203d3e203238313331.roa (hash: nJEBpBK1Y4aLUQIWVqdqrcvZIS6tSwnE500dFXpgXrM=)
                          7: 3137302e38312e3137362e302f32322d3234203d3e203238313331.roa (hash: JXSG2lFnsu0PgtPridDb9NXhPAdDzZRlfq4SjRqbuJg=)
                          8: 323830343a3137303a343430303a3a2f34302d3430203d3e203238313331.roa (hash: MIP4Ct7Qyn5a6eX6N12gAe7wtTAtwUTqEAsb/1llNfM=)
                          9: 323830343a3137303a343330303a3a2f34302d3430203d3e203238313331.roa (hash: YDLbq6/nkVVu74XQcp7zVk8Cwt/9A79mVa60Ys2rVrQ=)
                          10: 3136372e3234392e3131322e302f32322d3234203d3e203238313331.roa (hash: 1e1SPcAYyTs/4zRRsl9Nm8a/dhbju6PGdFzy/xxo8BU=)
                          11: 323830343a3137303a3a2f33322d3332203d3e203238313331.roa (hash: 1rGuIDzWKdjZ8sfNRuNpir5rQPE8te1SMicTdAZMSHU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl
                          rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b3:53:c2:3e:1b:23:31:c9:45:04:33:cb:74:85:96:cb:76:c8:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03981ED1B457034CCBAC00F384454B3A021E294E
        Validity
            Not Before: Oct 20 12:43:09 2025 GMT
            Not After : Oct 21 13:10:09 2025 GMT
        Subject: CN=48DB020E237788ED6AD710BC96E355D3C22D9E8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f0:01:a9:70:c7:17:7c:2a:c9:ed:1f:ec:10:
                    b3:ec:21:e3:d4:9b:a1:5a:1a:a6:0c:ab:ff:e9:9a:
                    4c:aa:81:9d:7b:9e:99:d6:3d:e0:69:03:5c:18:e1:
                    e1:ca:46:4b:03:54:2e:27:4f:49:2d:dc:44:d6:0e:
                    60:f7:3b:40:53:94:2f:4f:00:2b:b3:ed:96:92:85:
                    5c:c9:6f:4a:31:64:b7:3d:c6:b3:b0:23:17:7c:13:
                    1f:f2:b8:05:03:26:ac:82:92:19:2a:26:8b:81:b1:
                    15:ca:2d:f1:7d:8a:f6:45:da:5b:82:81:0f:82:cc:
                    84:19:f9:eb:e4:f1:4a:26:27:85:c8:3a:35:ce:89:
                    45:f6:8d:8c:f1:76:b4:fe:6c:03:da:63:e9:04:ff:
                    da:69:ca:c9:b4:63:09:3e:81:92:18:6d:ae:0a:51:
                    08:fb:12:20:4d:6c:9a:3f:a2:71:ec:c6:c3:91:fb:
                    13:df:13:b2:4c:04:fe:59:8c:06:71:e5:0e:33:89:
                    73:d3:11:cb:6e:97:06:80:05:db:bf:9f:f9:5b:8d:
                    96:b6:5f:ad:a4:77:95:a8:02:6d:74:50:4b:c1:52:
                    d3:14:e2:9f:20:05:d6:7e:e2:a8:d1:13:9d:0c:b5:
                    d5:74:7c:4c:ca:12:22:66:4a:84:a6:46:65:0b:ac:
                    73:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DB:02:0E:23:77:88:ED:6A:D7:10:BC:96:E3:55:D3:C2:2D:9E:8E
            X509v3 Authority Key Identifier:
                keyid:03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f8:f6:88:16:a2:25:13:36:d7:cf:27:dc:7a:f7:77:97:ac:
         b9:bb:b5:71:71:9a:7a:ae:56:99:3d:40:8d:0e:fb:fc:ed:77:
         39:23:d9:41:0c:5e:29:77:0c:17:6c:cc:ee:ca:2c:9b:fd:13:
         3c:b4:58:21:7a:1c:de:ec:c2:c4:82:7f:8b:90:6c:78:3b:65:
         51:d6:14:63:b0:16:c6:cb:0f:8a:09:b2:75:a9:4e:4e:d3:75:
         5b:e7:9d:8e:15:74:34:3d:c6:55:e6:3f:f6:eb:26:f2:fe:2a:
         8e:2f:b7:40:61:1e:79:e4:82:7f:09:f9:40:f4:82:dc:2e:bc:
         2d:8d:2a:e5:26:55:48:16:91:59:62:1a:46:1e:a6:a1:8a:ae:
         63:84:d6:70:f0:f1:81:fa:c8:96:9a:f0:66:80:5d:06:26:30:
         b1:9a:f2:f9:1f:56:cf:18:60:41:1b:76:56:d7:c7:3e:16:27:
         2e:01:9f:2b:3a:88:01:33:86:bb:2f:dd:a0:cc:ab:ed:eb:97:
         65:ac:ed:f5:97:28:ec:34:ea:07:6c:30:23:9a:72:f6:13:3d:
         ce:8c:6b:4c:23:5e:8c:d2:cc:d8:ff:3f:1a:c9:35:f2:0a:e8:
         de:03:ba:49:d4:95:f5:18:58:b9:bb:6a:6e:b0:19:d5:db:01:
         7d:ef:21:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:25:06 2025 by rpki-client