Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.mft
File:                     3438EF474B88120C954212EE504ACF2C02AF3889.mft (raw, json)
Hash identifier:          m0q121Bxh/Y7Z7SmMw8i/1iQh6W8PWEE6br+3srHHxs=
Subject key identifier:   B4:6A:48:3E:DC:3B:E9:ED:D2:D6:59:27:70:EC:A0:8E:E8:6F:34:E7
Authority key identifier: 34:38:EF:47:4B:88:12:0C:95:42:12:EE:50:4A:CF:2C:02:AF:38:89
Certificate issuer:       /CN=3438EF474B88120C954212EE504ACF2C02AF3889
Certificate serial:       50DF448BDF643558FF0E1D5D2F7DBDFB87AB6D58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3438EF474B88120C954212EE504ACF2C02AF3889.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.mft
Manifest number:          F8
Signing time:             Sun 19 Oct 2025 21:15:06 +0000
Manifest this update:     Sun 19 Oct 2025 21:10:06 +0000
Manifest next update:     Tue 21 Oct 2025 01:04:06 +0000
Files and hashes:         1: 3137372e3133302e3132382e302f31392d3235203d3e203238323032.roa (hash: Z6pIhsjnVhIGFKWYZKvCVj5vy8bkp1QZ7wOc64Sp6nY=)
                          2: 3138392e39312e302e302f31392d3235203d3e203238323032.roa (hash: Hu0ei8r8XFIYW5cidhumkYDbO6Mg8ZzPdHu1MTyIKx8=)
                          3: 3138372e34342e302e302f31382d3235203d3e203238323032.roa (hash: k4ZEWqStZqdeiizwzpxYS/y21HrZDTgVMksarnxQxvM=)
                          4: 3438EF474B88120C954212EE504ACF2C02AF3889.crl (hash: 3TnQgPYCoAeucK9HUqWyccuKORODOQFDIAe1MxHCR70=)
                          5: 3137372e34342e302e302f31372d3235203d3e203238323032.roa (hash: /U/OngAc0MYV9SINp90LnkMguo0z2IqQ0Y1lvs4W4uw=)
                          6: 323830343a3837633a3a2f33322d3438203d3e203238323032.roa (hash: 3U8v5wWVU5DKuoqKxOZlyA4aH6wQWVHyDsBw39wyRng=)
                          7: 3137372e3133302e3136302e302f31392d3235203d3e203238323032.roa (hash: yweAROg5FhlocO1xEgi3/tdYFuc2BclWrzJHyGWs2t8=)
                          8: 3139312e3234302e302e302f31372d3235203d3e203238323032.roa (hash: 4NnsqoSeT+5Zn5TL9p8ulO45uiNKI73CuiSSE2jhQp8=)
                          9: 3138362e3231362e36342e302f31382d3235203d3e203238323032.roa (hash: 1/pyHMIAfL06J0VEIZqoHDUBduatU86nbTixn3aNe10=)
                          10: 3138372e3132302e36342e302f31382d3235203d3e203238323032.roa (hash: CUmohz5mDhwwGIiRcgFRXXFnq1N8P5j4aNSMS9oPTwc=)
                          11: 3137392e3138392e3136302e302f31392d3235203d3e203238323032.roa (hash: FcLauEny8HFG+9CDE+cOc2OPV8xlyXFVblqydZFLii8=)
                          12: 3139312e35332e302e302f31362d3235203d3e203238323032.roa (hash: fzlJfuNfGs98/1MXM9FAPOukrmfvjUc9Upo5Ah/hiSo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.crl
                          rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3438EF474B88120C954212EE504ACF2C02AF3889.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 01:04:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:df:44:8b:df:64:35:58:ff:0e:1d:5d:2f:7d:bd:fb:87:ab:6d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3438EF474B88120C954212EE504ACF2C02AF3889
        Validity
            Not Before: Oct 19 21:10:06 2025 GMT
            Not After : Oct 21 01:04:06 2025 GMT
        Subject: CN=B46A483EDC3BE9EDD2D6592770ECA08EE86F34E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:d3:8a:4b:05:00:9e:7e:83:d2:dc:79:91:
                    3b:c7:77:8b:18:32:cd:ca:24:cd:b3:1c:a4:f4:2f:
                    8c:f4:3c:3d:28:cb:5f:00:25:ad:e6:58:94:66:ec:
                    a5:a7:84:be:7d:66:b4:05:79:c9:7b:95:78:e4:24:
                    8f:79:7a:04:84:ea:4f:ed:f5:a9:2f:b7:28:9e:42:
                    cc:d4:83:57:b7:9f:cf:f7:8e:fc:06:6f:3c:9b:17:
                    d1:a7:3d:f2:28:94:17:d8:eb:c6:c0:70:9a:8c:fd:
                    e2:b8:52:d6:79:d5:b2:79:60:e2:23:8f:3e:45:df:
                    cb:f1:e2:35:84:72:e4:99:cb:76:17:6b:67:b0:82:
                    62:39:8f:db:12:27:51:13:f6:6c:ec:9e:f6:0c:84:
                    69:9f:10:da:a7:e7:de:01:0b:1e:40:9b:70:8f:20:
                    b6:48:76:de:78:5e:9a:7b:19:51:f6:54:33:cb:b4:
                    d3:3c:ee:6e:43:e2:7a:c0:fe:a2:82:6d:40:e7:4d:
                    94:2b:80:28:95:8b:5b:2f:40:5e:b9:bd:3e:3f:98:
                    70:b0:97:1d:46:e6:f8:dd:c8:ca:70:ae:25:17:9d:
                    02:b9:27:63:b7:53:8f:a1:a2:b6:0e:21:09:52:c3:
                    f2:c3:dd:62:27:a3:4c:8f:f8:30:dd:8e:44:82:ad:
                    5a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6A:48:3E:DC:3B:E9:ED:D2:D6:59:27:70:EC:A0:8E:E8:6F:34:E7
            X509v3 Authority Key Identifier:
                keyid:34:38:EF:47:4B:88:12:0C:95:42:12:EE:50:4A:CF:2C:02:AF:38:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3438EF474B88120C954212EE504ACF2C02AF3889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:1c:6e:a5:f3:15:0c:01:a1:66:11:83:24:12:00:06:c8:74:
         2d:06:27:b0:eb:ad:75:d1:ac:4a:94:ed:10:7a:11:87:7d:8c:
         c9:16:28:db:de:db:5e:b7:40:62:d2:6b:f4:91:5f:f5:8b:6e:
         3a:25:47:a4:9a:93:d7:70:00:67:22:01:d5:33:dc:a1:0a:31:
         4f:3f:fe:ae:80:0b:cc:c6:e3:22:79:76:9f:77:f6:0e:97:72:
         3d:ae:bb:68:0b:3f:a4:41:3a:9f:de:d8:93:69:95:97:92:9e:
         57:76:58:6b:bb:63:83:c3:45:d8:19:80:71:a5:29:55:e9:6d:
         a9:bd:37:ab:25:00:d3:a1:7d:ae:26:74:26:4e:3d:57:ed:22:
         c6:12:fc:5e:e8:f1:40:4b:b3:f6:f9:bd:0d:c2:1c:23:dc:df:
         47:89:23:d4:43:02:82:97:9a:98:21:b5:c8:89:eb:f1:d1:db:
         3d:a6:0f:87:20:df:8e:ab:2e:ec:bd:c5:20:84:35:c0:c5:43:
         73:e0:47:be:bd:ea:a7:6b:89:de:bc:ec:63:38:b9:95:25:ed:
         b6:7f:cc:5d:a5:3f:14:44:14:9b:ef:02:13:c0:c8:1c:71:ae:
         b4:ae:67:f8:7f:8d:b1:19:84:e9:c2:35:69:9a:86:fd:83:60:
         53:dc:d2:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUUN9Ei99kNVj/Dh1dL329+4erbVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQzOEVGNDc0Qjg4MTIwQzk1NDIxMkVFNTA0QUNGMkMw
MkFGMzg4OTAeFw0yNTEwMTkyMTEwMDZaFw0yNTEwMjEwMTA0MDZaMDMxMTAvBgNV
BAMTKEI0NkE0ODNFREMzQkU5RUREMkQ2NTkyNzcwRUNBMDhFRTg2RjM0RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyANOKSwUAnn6D0tx5kTvHd4sY
Ms3KJM2zHKT0L4z0PD0oy18AJa3mWJRm7KWnhL59ZrQFecl7lXjkJI95egSE6k/t
9akvtyieQszUg1e3n8/3jvwGbzybF9GnPfIolBfY68bAcJqM/eK4UtZ51bJ5YOIj
jz5F38vx4jWEcuSZy3YXa2ewgmI5j9sSJ1ET9mzsnvYMhGmfENqn594BCx5Am3CP
ILZIdt54Xpp7GVH2VDPLtNM87m5D4nrA/qKCbUDnTZQrgCiVi1svQF65vT4/mHCw
lx1G5vjdyMpwriUXnQK5J2O3U4+horYOIQlSw/LD3WIno0yP+DDdjkSCrVoBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtGpIPtw76e3S1lkncOygjuhvNOcwHwYDVR0j
BBgwFoAUNDjvR0uIEgyVQhLuUErPLAKvOIkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRQN05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1V
V00vMC8zNDM4RUY0NzRCODgxMjBDOTU0MjEyRUU1MDRBQ0YyQzAyQUYzODg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0MzhFRjQ3NEI4ODEyMEM5
NTQyMTJFRTUwNEFDRjJDMDJBRjM4ODkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NGRQN05GMUJkM3ZBekdEY2o3dm1RVlc5ZmtyQVE3UHltUDl1eE04Qk1VV00vMC8z
NDM4RUY0NzRCODgxMjBDOTU0MjEyRUU1MDRBQ0YyQzAyQUYzODg5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASBxupfMVDAGhZhGDJBIABsh0LQYnsOutddGsSpTtEHoRh32MyRYo297bXrdA
YtJr9JFf9YtuOiVHpJqT13AAZyIB1TPcoQoxTz/+roALzMbjInl2n3f2DpdyPa67
aAs/pEE6n97Yk2mVl5KeV3ZYa7tjg8NF2BmAcaUpVeltqb03qyUA06F9riZ0Jk49
V+0ixhL8XujxQEuz9vm9DcIcI9zfR4kj1EMCgpeamCG1yInr8dHbPaYPhyDfjqsu
7L3FIIQ1wMVDc+BHvr3qp2uJ3rzsYzi5lSXttn/MXaU/FEQUm+8CE8DIHHGutK5n
+H+NsRmE6cI1aZqG/YNgU9zSMw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:14:00 2025 by rpki-client