Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/2E870BD5A2AEB5F6053B769848A273709E6B62AD.mft
File:                     2E870BD5A2AEB5F6053B769848A273709E6B62AD.mft (raw, json)
Hash identifier:          39tarGIWdRyQLvcWKSrsY67ea1NyAuFdkDc7Xz+AeKA=
Subject key identifier:   96:DF:E8:70:6E:2B:E0:B4:36:29:F8:16:E6:80:D2:0A:BC:D0:24:6A
Authority key identifier: 2E:87:0B:D5:A2:AE:B5:F6:05:3B:76:98:48:A2:73:70:9E:6B:62:AD
Certificate issuer:       /CN=2E870BD5A2AEB5F6053B769848A273709E6B62AD
Certificate serial:       55118B324781610FA27CCD9A6737DC28714CEE18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E870BD5A2AEB5F6053B769848A273709E6B62AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/2E870BD5A2AEB5F6053B769848A273709E6B62AD.mft
Manifest number:          D2
Signing time:             Mon 20 Oct 2025 06:10:54 +0000
Manifest this update:     Mon 20 Oct 2025 06:05:54 +0000
Manifest next update:     Tue 21 Oct 2025 09:25:54 +0000
Files and hashes:         1: 3136382e3138312e3132352e302f32342d3234203d3e20323635333536.roa (hash: FZBOPE9QbVXzGDx7oZxOTBP7uUYY2oIyw3O/B5IDTW8=)
                          2: 3136382e3138312e3132372e302f32342d3234203d3e20323635333536.roa (hash: jqFmXzTJ2Srpky5LXAjLRUiecbjUdHpS5xQySxYo6KE=)
                          3: 2E870BD5A2AEB5F6053B769848A273709E6B62AD.crl (hash: 39+cLB4kPQcysJOsYIvboeFZTzZYoW/oAUkThlt+yvU=)
                          4: 323830343a326561303a3a2f33322d3333203d3e20323635333536.roa (hash: 0VWEDiBHbWym2j23nhS7jwFLcOrNVbU4ljnM7IfHmSg=)
                          5: 3136382e3138312e3132342e302f32322d3233203d3e20323635333536.roa (hash: aUS/7J4Pj67EwEZgX/yZhudJTgk7N6LVXjibvG+tpX0=)
                          6: 3136382e3138312e3132362e302f32342d3234203d3e20323635333536.roa (hash: vG87QNKLjP6rALigOHp32jwOho88rezmrOU/agoPik8=)
                          7: 3136382e3138312e3132342e302f32342d3234203d3e20323635333536.roa (hash: lKtL+tMiNQgyep4puwNr+8WNkGWQgfnoKDSa14qN9Aw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/2E870BD5A2AEB5F6053B769848A273709E6B62AD.crl
                          rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/2E870BD5A2AEB5F6053B769848A273709E6B62AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E870BD5A2AEB5F6053B769848A273709E6B62AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:11:8b:32:47:81:61:0f:a2:7c:cd:9a:67:37:dc:28:71:4c:ee:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E870BD5A2AEB5F6053B769848A273709E6B62AD
        Validity
            Not Before: Oct 20 06:05:54 2025 GMT
            Not After : Oct 21 09:25:54 2025 GMT
        Subject: CN=96DFE8706E2BE0B43629F816E680D20ABCD0246A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d3:0a:d2:c6:a7:09:42:50:ac:09:12:d1:6d:
                    56:59:ad:2c:6d:46:33:32:11:e6:d6:7e:62:c9:78:
                    72:a3:d0:46:46:63:14:b3:5f:e4:9f:80:e8:9e:05:
                    26:d7:1c:46:17:aa:1d:cf:de:d9:94:25:23:c0:3b:
                    b4:79:f1:eb:9a:57:81:df:4d:b5:2f:07:17:db:31:
                    36:87:f7:50:7a:b0:5a:2b:75:44:5f:10:bc:df:f0:
                    c1:8d:73:ed:63:3f:62:b5:fa:c1:b7:90:08:ce:88:
                    a6:0d:35:39:49:26:be:2e:97:fc:44:90:45:24:ff:
                    9b:fc:e9:6f:74:fe:22:6f:59:92:57:30:1d:e1:b6:
                    da:12:95:36:0e:da:08:06:29:f2:21:03:25:36:5f:
                    81:d8:3c:b7:0e:9c:13:a8:e8:25:bd:cc:64:d1:cc:
                    dd:93:62:ab:9b:54:d0:c5:f2:40:7a:8a:23:fc:31:
                    c5:4f:fa:41:f2:86:d2:da:d8:f5:66:c6:61:2e:78:
                    86:15:1c:c8:3e:9b:29:76:11:4d:35:0e:45:4d:ff:
                    2d:54:7f:14:9c:c3:11:77:56:3e:4f:94:75:2d:0e:
                    d1:a5:6b:69:ac:fa:0a:a7:b2:7a:4b:f5:59:64:59:
                    3e:d3:81:32:ae:e9:36:71:28:33:6a:54:28:89:1d:
                    d0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DF:E8:70:6E:2B:E0:B4:36:29:F8:16:E6:80:D2:0A:BC:D0:24:6A
            X509v3 Authority Key Identifier:
                keyid:2E:87:0B:D5:A2:AE:B5:F6:05:3B:76:98:48:A2:73:70:9E:6B:62:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/2E870BD5A2AEB5F6053B769848A273709E6B62AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E870BD5A2AEB5F6053B769848A273709E6B62AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/2E870BD5A2AEB5F6053B769848A273709E6B62AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b0:b7:61:38:d5:75:1b:de:88:da:82:a2:f4:2a:e1:47:03:
         cc:e7:2b:59:19:c7:a3:6c:83:46:98:ca:75:e6:90:94:5b:54:
         a1:a5:93:6b:06:ad:bb:2d:ad:3e:ff:14:45:1d:a1:5c:c2:1d:
         45:fd:0e:5c:f1:ec:1a:8a:46:49:9e:6a:79:d6:7c:69:37:81:
         05:07:f6:60:18:e7:20:62:74:1b:ec:4b:80:6e:ab:a0:a0:20:
         c0:d3:b7:2c:e7:54:c3:1a:70:07:60:98:52:45:37:5e:a4:4b:
         4d:c0:fd:67:88:4b:7c:50:a4:f1:e2:94:d4:ec:ed:31:fc:37:
         e0:7b:ae:df:65:51:5f:c8:36:47:82:87:75:0c:6d:5a:a1:91:
         35:05:11:44:d4:9c:21:0a:aa:8d:ca:a1:e3:c3:8a:94:df:c2:
         42:af:a0:c8:41:65:d5:e6:f8:82:86:43:a2:8f:a7:85:3a:8b:
         01:27:a6:69:73:ba:9c:63:c8:cb:1f:fb:95:14:80:a8:c0:ca:
         08:21:00:e7:36:c2:76:8f:80:03:58:93:99:81:db:9e:36:10:
         be:42:d2:1e:cc:30:27:0c:91:1d:81:48:58:0a:71:06:0f:1f:
         e5:91:ff:cb:5f:1e:e4:d4:a2:34:5a:53:53:7d:be:48:ff:61:
         1a:0c:ab:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVRGLMkeBYQ+ifM2aZzfcKHFM7hgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU4NzBCRDVBMkFFQjVGNjA1M0I3Njk4NDhBMjczNzA5
RTZCNjJBRDAeFw0yNTEwMjAwNjA1NTRaFw0yNTEwMjEwOTI1NTRaMDMxMTAvBgNV
BAMTKDk2REZFODcwNkUyQkUwQjQzNjI5RjgxNkU2ODBEMjBBQkNEMDI0NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS0wrSxqcJQlCsCRLRbVZZrSxt
RjMyEebWfmLJeHKj0EZGYxSzX+SfgOieBSbXHEYXqh3P3tmUJSPAO7R58euaV4Hf
TbUvBxfbMTaH91B6sFordURfELzf8MGNc+1jP2K1+sG3kAjOiKYNNTlJJr4ul/xE
kEUk/5v86W90/iJvWZJXMB3httoSlTYO2ggGKfIhAyU2X4HYPLcOnBOo6CW9zGTR
zN2TYqubVNDF8kB6iiP8McVP+kHyhtLa2PVmxmEueIYVHMg+myl2EU01DkVN/y1U
fxScwxF3Vj5PlHUtDtGla2ms+gqnsnpL9VlkWT7TgTKu6TZxKDNqVCiJHdBxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUlt/ocG4r4LQ2KfgW5oDSCrzQJGowHwYDVR0j
BBgwFoAULocL1aKutfYFO3aYSKJzcJ5rYq0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjJlSFo0ZlNLNnZOUUdkTndOWGliWk1SWEthVW1aVmZFbXQxRXJUdVRX
RXovMC8yRTg3MEJENUEyQUVCNUY2MDUzQjc2OTg0OEEyNzM3MDlFNkI2MkFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFODcwQkQ1QTJBRUI1RjYw
NTNCNzY5ODQ4QTI3MzcwOUU2QjYyQUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NjJlSFo0ZlNLNnZOUUdkTndOWGliWk1SWEthVW1aVmZFbXQxRXJUdVRXRXovMC8y
RTg3MEJENUEyQUVCNUY2MDUzQjc2OTg0OEEyNzM3MDlFNkI2MkFELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkrC3YTjVdRveiNqCovQq4UcDzOcrWRnHo2yDRpjKdeaQlFtUoaWTawatuy2t
Pv8URR2hXMIdRf0OXPHsGopGSZ5qedZ8aTeBBQf2YBjnIGJ0G+xLgG6roKAgwNO3
LOdUwxpwB2CYUkU3XqRLTcD9Z4hLfFCk8eKU1OztMfw34Huu32VRX8g2R4KHdQxt
WqGRNQURRNScIQqqjcqh48OKlN/CQq+gyEFl1eb4goZDoo+nhTqLASemaXO6nGPI
yx/7lRSAqMDKCCEA5zbCdo+AA1iTmYHbnjYQvkLSHswwJwyRHYFIWApxBg8f5ZH/
y18e5NSiNFpTU32+SP9hGgyr5A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:31:00 2025 by rpki-client