Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/9A0F3F8F96F763E503AA1695E46721EED45714D7.mft
File:                     9A0F3F8F96F763E503AA1695E46721EED45714D7.mft (raw, json)
Hash identifier:          XlQEEr1Ld+2KCmZAM/uXuWtQzJpBd9GNdxxEJOJcRC0=
Subject key identifier:   3E:C1:BB:66:A1:DD:38:EA:A5:91:4B:C6:BB:DB:3C:F0:8B:0B:C2:0B
Authority key identifier: 9A:0F:3F:8F:96:F7:63:E5:03:AA:16:95:E4:67:21:EE:D4:57:14:D7
Certificate issuer:       /CN=9A0F3F8F96F763E503AA1695E46721EED45714D7
Certificate serial:       349F416300A965608E93657847BB2CD51B62EE19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A0F3F8F96F763E503AA1695E46721EED45714D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/9A0F3F8F96F763E503AA1695E46721EED45714D7.mft
Manifest number:          8D
Signing time:             Mon 20 Oct 2025 12:13:34 +0000
Manifest this update:     Mon 20 Oct 2025 12:08:34 +0000
Manifest next update:     Tue 21 Oct 2025 13:05:34 +0000
Files and hashes:         1: 323830343a383331303a3a2f33322d313238203d3e20323732313734.roa (hash: gY8DEVjBzvPz7spBGxxGuDN6TdzH048FCCv/sMByRtc=)
                          2: 9A0F3F8F96F763E503AA1695E46721EED45714D7.crl (hash: q5wwtIoly7nXdK1wNIuPaPTQArS1zjfdllWLWGCbzTc=)
                          3: 34352e3136342e3230322e302f32332d3332203d3e20323732313734.roa (hash: V7ee/ZIyjG1csvf3721aEFPJJ+X8O/x+M2dogK6V9Vg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/9A0F3F8F96F763E503AA1695E46721EED45714D7.crl
                          rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/9A0F3F8F96F763E503AA1695E46721EED45714D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A0F3F8F96F763E503AA1695E46721EED45714D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:9f:41:63:00:a9:65:60:8e:93:65:78:47:bb:2c:d5:1b:62:ee:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A0F3F8F96F763E503AA1695E46721EED45714D7
        Validity
            Not Before: Oct 20 12:08:34 2025 GMT
            Not After : Oct 21 13:05:34 2025 GMT
        Subject: CN=3EC1BB66A1DD38EAA5914BC6BBDB3CF08B0BC20B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:31:4c:a9:7a:45:36:fa:8d:a8:19:a1:47:24:
                    a4:69:c6:6f:0b:a8:04:48:d4:f6:7b:52:6a:03:b8:
                    5e:86:af:42:eb:2b:e7:89:d2:b2:fd:1b:3a:73:a6:
                    5f:6b:ed:87:3b:96:64:31:d9:c0:e3:73:e6:dc:9d:
                    4c:6b:ab:cf:4e:ef:72:4c:b7:16:c5:d5:56:03:12:
                    e0:a4:0f:b9:fe:50:bf:86:cf:9a:a3:3c:5e:6e:46:
                    a8:1d:a9:e2:c1:ff:64:e3:3d:9c:3c:63:08:06:05:
                    a5:6f:1f:3f:00:86:ed:9e:1c:50:2f:c7:8f:26:a7:
                    10:ca:16:ce:31:d8:14:50:8b:9e:ef:4b:56:8a:9b:
                    92:92:04:69:c6:7c:e2:8b:ac:0d:6f:f1:df:37:08:
                    17:4c:6b:2d:03:c4:1b:cb:56:ff:f1:9a:99:e4:6e:
                    5b:f5:16:54:3a:6a:05:f0:26:09:41:ce:57:0a:98:
                    c0:7a:27:78:6b:4d:94:ee:dc:1a:ef:52:e7:23:95:
                    b0:c6:a1:4e:94:bc:b6:b3:ce:ae:ff:ed:0d:0c:93:
                    b7:09:19:6a:a2:59:ef:70:0e:75:b0:57:1d:a6:44:
                    b5:74:4c:2c:71:cc:c5:0b:77:88:68:f5:5c:e4:06:
                    7f:2c:2d:0c:d0:f7:ab:1e:0f:ef:e5:6b:f3:90:8c:
                    a8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C1:BB:66:A1:DD:38:EA:A5:91:4B:C6:BB:DB:3C:F0:8B:0B:C2:0B
            X509v3 Authority Key Identifier:
                keyid:9A:0F:3F:8F:96:F7:63:E5:03:AA:16:95:E4:67:21:EE:D4:57:14:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/9A0F3F8F96F763E503AA1695E46721EED45714D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A0F3F8F96F763E503AA1695E46721EED45714D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/9A0F3F8F96F763E503AA1695E46721EED45714D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:3b:63:55:e2:86:4e:e1:27:54:c4:88:cd:68:5d:ef:06:69:
         09:b5:0d:db:db:95:c6:f7:e5:e2:e8:64:88:45:67:d8:c6:35:
         64:03:f2:7f:7f:04:d1:33:c5:00:73:58:0f:49:7e:72:44:f5:
         d6:2c:ec:6d:e6:44:3a:5f:6a:72:48:a8:40:3b:c9:13:68:b0:
         33:b9:a6:6b:c5:a9:f5:f8:13:ab:88:c8:f9:82:21:6e:31:7a:
         3a:0b:d1:74:d7:e2:1e:81:b4:fa:de:4d:9f:9d:3e:67:b7:bd:
         a2:ef:66:70:a1:45:25:69:50:fc:18:79:5a:0e:65:4e:e2:6e:
         87:8e:1c:49:be:7d:0f:fc:f5:60:82:0e:2b:79:36:02:7e:2b:
         e5:ba:b3:0e:14:65:83:e2:50:cc:a5:b1:aa:2c:cb:3c:b7:53:
         e8:02:27:66:4e:eb:17:ff:8a:ff:2f:60:b4:7e:86:41:99:e7:
         f9:ce:09:ba:76:63:54:73:cd:7c:cd:5e:b7:80:83:87:8a:8c:
         39:aa:8d:b5:03:3d:6f:82:f3:54:b5:76:52:d7:4a:31:77:95:
         95:a4:f6:4f:a2:71:c7:1a:ae:ae:f5:9c:a5:31:ca:d2:a9:de:
         ad:96:e4:9d:13:b8:e8:68:69:bc:e0:93:ae:f6:b7:95:89:49:
         67:04:c9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:13:46 2025 by rpki-client