Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/B91FC0A7A5B63500982ACDF1752548B798B4DF47.mft
File:                     B91FC0A7A5B63500982ACDF1752548B798B4DF47.mft (raw, json)
Hash identifier:          8QMt6BuTEY50Danea3+MQKd6N1APm3v1R2fOrdsWk9w=
Subject key identifier:   8A:3A:EF:E2:3E:CF:51:D7:29:F7:CB:00:F2:E5:5C:91:96:E0:C3:7A
Authority key identifier: B9:1F:C0:A7:A5:B6:35:00:98:2A:CD:F1:75:25:48:B7:98:B4:DF:47
Certificate issuer:       /CN=B91FC0A7A5B63500982ACDF1752548B798B4DF47
Certificate serial:       180F0CA629CC8A782BC2328F792A1A2DFDF87704
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B91FC0A7A5B63500982ACDF1752548B798B4DF47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/B91FC0A7A5B63500982ACDF1752548B798B4DF47.mft
Manifest number:          A1
Signing time:             Sun 19 Oct 2025 21:13:56 +0000
Manifest this update:     Sun 19 Oct 2025 21:08:56 +0000
Manifest next update:     Tue 21 Oct 2025 00:15:56 +0000
Files and hashes:         1: 323830343a376338343a3a2f33322d313238203d3e20323731353031.roa (hash: wYyNe3fSa5rl9Px25f4UBF6xxNLIp94do6v1iSFAcvI=)
                          2: B91FC0A7A5B63500982ACDF1752548B798B4DF47.crl (hash: /KukS8WFdknHUYoyPN5h+dCdsh1QQYYFql+y3I1WFEY=)
                          3: 34352e36352e3136302e302f32322d3332203d3e20323731353031.roa (hash: b/un7hGMo5cWHcbRfJX/IFkD91PkDOwkI3l+W/v8lvM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/B91FC0A7A5B63500982ACDF1752548B798B4DF47.crl
                          rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/B91FC0A7A5B63500982ACDF1752548B798B4DF47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B91FC0A7A5B63500982ACDF1752548B798B4DF47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:0f:0c:a6:29:cc:8a:78:2b:c2:32:8f:79:2a:1a:2d:fd:f8:77:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B91FC0A7A5B63500982ACDF1752548B798B4DF47
        Validity
            Not Before: Oct 19 21:08:56 2025 GMT
            Not After : Oct 21 00:15:56 2025 GMT
        Subject: CN=8A3AEFE23ECF51D729F7CB00F2E55C9196E0C37A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:15:c7:c3:cd:cd:fc:61:8c:88:6a:30:1a:62:
                    22:05:3d:a8:09:81:9a:f2:43:f5:4e:54:b6:dd:be:
                    aa:bc:30:85:54:57:e6:b5:cb:d6:4e:cb:14:f2:fe:
                    df:69:a6:d8:d9:38:ad:89:91:9a:32:99:35:7f:04:
                    ee:fe:d1:c1:75:c9:a6:49:b7:2a:dc:a8:59:bd:3d:
                    38:09:68:c2:24:5b:92:e8:a4:52:92:e0:92:38:21:
                    ab:b0:be:4e:e2:a9:62:8d:fd:23:86:de:28:ef:ac:
                    99:56:45:95:93:26:92:6f:62:89:49:30:c8:ee:26:
                    8b:fc:76:61:e0:e7:dc:bd:07:d3:7c:34:eb:1a:af:
                    35:95:01:9a:e7:c3:c4:aa:f4:4e:a8:78:7c:db:d0:
                    98:40:77:24:c9:96:6e:cc:b8:e2:ad:9f:1c:47:5e:
                    02:1a:ec:ff:45:f6:1d:fc:bb:cd:9d:cd:62:f2:e0:
                    5c:28:83:eb:6f:25:62:f9:91:6c:ee:e6:b8:19:b1:
                    b2:d7:62:7b:1b:d1:cc:f7:bc:2a:d4:59:46:f0:e5:
                    17:45:3b:6b:08:a2:3e:3c:88:d6:46:92:20:e4:6a:
                    5c:60:fc:56:e5:c0:50:60:cd:b9:95:1e:63:ed:f6:
                    37:4c:87:6e:01:db:5c:9d:66:a1:ff:61:17:2a:a1:
                    90:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3A:EF:E2:3E:CF:51:D7:29:F7:CB:00:F2:E5:5C:91:96:E0:C3:7A
            X509v3 Authority Key Identifier:
                keyid:B9:1F:C0:A7:A5:B6:35:00:98:2A:CD:F1:75:25:48:B7:98:B4:DF:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/B91FC0A7A5B63500982ACDF1752548B798B4DF47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B91FC0A7A5B63500982ACDF1752548B798B4DF47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/B91FC0A7A5B63500982ACDF1752548B798B4DF47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:00:0c:40:a5:f9:e5:ba:c0:af:2d:7e:67:75:2b:d8:a2:de:
         f6:a0:f2:44:d5:31:71:bd:53:2c:10:1c:0b:5c:db:82:64:63:
         b6:83:be:f6:69:ff:3b:20:be:ca:8d:44:7c:2c:10:f6:26:f7:
         69:8a:e7:b9:c2:8e:4a:d0:13:cb:bc:d3:6a:19:df:68:7d:85:
         b0:30:9c:01:fa:01:fa:38:34:41:89:fb:52:45:7d:aa:7d:03:
         8f:1a:7a:e0:5a:85:62:7c:45:e2:ab:a8:f2:53:13:50:af:1f:
         50:37:77:e6:19:df:38:20:52:8c:ce:5a:93:76:23:a9:fc:4c:
         0c:38:1d:a9:b9:6e:20:b5:5e:94:a4:08:ec:e6:33:cc:48:ce:
         42:b0:eb:6a:ce:d1:79:fb:b0:98:a7:fc:bb:f4:89:eb:d2:38:
         d8:bd:42:f7:a9:75:ed:85:3c:8e:94:5b:f4:70:79:29:f8:54:
         b1:4b:f1:13:ad:f7:1a:70:02:a1:69:f9:79:e8:bc:67:df:71:
         a1:99:a8:2e:bd:f2:56:32:dd:c1:d4:52:be:15:33:b8:3a:da:
         fa:ff:81:2c:46:c4:65:5c:80:d7:94:93:98:d4:98:f2:35:48:
         fc:df:24:89:70:4b:6e:de:c9:f1:9b:1d:da:a8:3f:43:ec:fe:
         98:05:2f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:50:02 2025 by rpki-client