Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4zBU7vViPnHZtxTQp1HShMmQEpzTCby5vWo3jGeht91T/0/7F97F39AAB3141A64ADAE0C3853FB919DA5AC600.mft
File:                     7F97F39AAB3141A64ADAE0C3853FB919DA5AC600.mft (raw, json)
Hash identifier:          sJYD9dM0FaksNTEqICSIHBOsJqaX6vw9qfyya9MAuYE=
Subject key identifier:   FF:8D:DB:7B:88:80:0C:79:55:C6:F8:5B:6A:2D:E5:29:9F:7E:6D:DA
Authority key identifier: 7F:97:F3:9A:AB:31:41:A6:4A:DA:E0:C3:85:3F:B9:19:DA:5A:C6:00
Certificate issuer:       /CN=7F97F39AAB3141A64ADAE0C3853FB919DA5AC600
Certificate serial:       3574EE110063B8FAD3A63A3CE346E961035AD0F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F97F39AAB3141A64ADAE0C3853FB919DA5AC600.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4zBU7vViPnHZtxTQp1HShMmQEpzTCby5vWo3jGeht91T/0/7F97F39AAB3141A64ADAE0C3853FB919DA5AC600.mft
Manifest number:          89
Signing time:             Mon 20 Oct 2025 09:19:59 +0000
Manifest this update:     Mon 20 Oct 2025 09:14:59 +0000
Manifest next update:     Tue 21 Oct 2025 10:24:59 +0000
Files and hashes:         1: 323830343a316163303a3a2f33322d3438203d3e203631383833.roa (hash: W6I1V4320MGRumXSRGJ7GmBOAiRLcsTafH/rYE6CRx8=)
                          2: 7F97F39AAB3141A64ADAE0C3853FB919DA5AC600.crl (hash: gLgA0fMBpEacmK3jicnQ0EVUmLDmGFi2BDgY8rAcw8w=)
                          3: 3133312e302e3130302e302f32322d3234203d3e203631383833.roa (hash: FngtNL/Io5YlHXAhNZyz7aoSCMw2DC/5GlW5NN02/Ks=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4zBU7vViPnHZtxTQp1HShMmQEpzTCby5vWo3jGeht91T/0/7F97F39AAB3141A64ADAE0C3853FB919DA5AC600.crl
                          rsync://rpki-repo.registro.br/repo/4zBU7vViPnHZtxTQp1HShMmQEpzTCby5vWo3jGeht91T/0/7F97F39AAB3141A64ADAE0C3853FB919DA5AC600.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F97F39AAB3141A64ADAE0C3853FB919DA5AC600.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:74:ee:11:00:63:b8:fa:d3:a6:3a:3c:e3:46:e9:61:03:5a:d0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F97F39AAB3141A64ADAE0C3853FB919DA5AC600
        Validity
            Not Before: Oct 20 09:14:59 2025 GMT
            Not After : Oct 21 10:24:59 2025 GMT
        Subject: CN=FF8DDB7B88800C7955C6F85B6A2DE5299F7E6DDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:71:e8:d0:be:dd:00:9b:e0:23:af:48:c4:9f:
                    8d:16:a9:9b:df:aa:74:07:70:30:81:2d:6c:6f:c2:
                    bd:66:87:4b:a1:ec:97:1d:e9:10:b1:11:94:05:55:
                    79:ad:aa:07:39:5f:c7:24:bb:cf:ae:ac:7b:3e:a8:
                    a1:07:ae:af:2d:2c:bd:6b:e2:64:65:d9:86:93:52:
                    24:a4:90:85:ec:3c:5b:98:9e:bb:a8:3b:a5:a2:a5:
                    55:18:09:93:87:7d:ac:14:89:16:30:33:7c:85:dc:
                    f2:00:f4:01:ff:89:e6:08:d8:f7:41:bb:65:d6:9b:
                    5f:7d:4e:21:03:13:a3:07:46:49:f2:87:d4:34:7a:
                    57:53:7e:f4:59:b7:5b:a3:d5:01:6d:be:a5:1a:04:
                    9a:2f:99:b7:79:fa:03:58:98:cd:a2:7d:53:fd:4a:
                    bd:27:1a:cc:54:3f:26:4c:5e:6c:46:40:de:98:f7:
                    e0:c6:5f:ac:6f:3e:a7:39:4e:fa:18:9f:9f:ef:5b:
                    71:2e:41:9d:03:7d:c7:89:e1:7a:fe:fb:79:f2:33:
                    2d:45:f8:c2:1f:5a:ac:69:91:49:de:53:1d:24:42:
                    2f:14:0f:1b:b1:1b:36:80:0b:ca:d5:a1:65:3b:22:
                    5e:f1:aa:6c:70:a0:11:34:8e:c2:9f:8c:f9:ae:d4:
                    24:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8D:DB:7B:88:80:0C:79:55:C6:F8:5B:6A:2D:E5:29:9F:7E:6D:DA
            X509v3 Authority Key Identifier:
                keyid:7F:97:F3:9A:AB:31:41:A6:4A:DA:E0:C3:85:3F:B9:19:DA:5A:C6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4zBU7vViPnHZtxTQp1HShMmQEpzTCby5vWo3jGeht91T/0/7F97F39AAB3141A64ADAE0C3853FB919DA5AC600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F97F39AAB3141A64ADAE0C3853FB919DA5AC600.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4zBU7vViPnHZtxTQp1HShMmQEpzTCby5vWo3jGeht91T/0/7F97F39AAB3141A64ADAE0C3853FB919DA5AC600.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:b0:cc:bd:e2:02:6d:87:0b:4f:e2:33:51:33:30:2e:0d:42:
         71:e5:c9:c2:01:5e:5f:11:e6:2e:f9:61:75:2d:4a:c5:d8:c1:
         90:1c:b1:a2:c6:08:26:2c:5c:8b:a7:91:55:e1:0c:e1:91:5c:
         f1:cc:d3:bd:3e:c9:31:1c:ee:5b:c4:27:f3:51:3e:ff:59:c0:
         e2:bf:5d:51:fd:9c:75:a5:27:e1:e4:c2:a5:28:71:84:1c:76:
         43:cf:6b:a2:bd:ee:ee:db:69:fa:68:64:f9:25:f0:a6:dd:0d:
         52:53:85:4f:79:cc:68:a5:de:c5:9a:91:97:68:33:12:ec:7d:
         bc:84:ff:9f:36:cc:45:bd:fe:8e:ff:ab:c5:92:25:c9:30:4e:
         95:b3:5e:c7:b7:f6:1a:3b:e1:6d:31:e5:36:52:0a:48:b7:12:
         3a:2a:bd:a8:76:0c:19:5c:b2:de:36:e5:50:64:44:83:a5:86:
         66:a5:f5:ca:57:f9:d7:11:0b:38:cb:63:f4:4d:26:c7:91:88:
         cd:f5:31:9f:22:cc:f9:33:f4:2e:50:34:a8:ee:f3:8c:61:e6:
         2e:73:b2:e6:f2:11:95:a0:a2:b0:d7:2c:c4:4e:c9:be:cb:c1:
         5f:75:71:bb:99:b5:89:7e:48:4c:b3:dd:8f:92:1e:1f:ca:b7:
         6c:62:a7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:25:23 2025 by rpki-client