Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.mft
File:                     B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.mft (raw, json)
Hash identifier:          j94Sj8hJnJBnAeRrKsa/MmWDhwtfp4Ou2GFuukby9mo=
Subject key identifier:   1C:BB:09:C1:22:17:67:D6:C3:62:C0:52:6C:E7:12:1C:82:76:91:6F
Authority key identifier: B4:EF:C8:8C:CA:99:9E:CC:4D:A6:D0:30:45:FF:CE:FF:AF:85:22:1D
Certificate issuer:       /CN=B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D
Certificate serial:       422B8D665C9B050A411753B56B108E1028B73C25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.mft
Manifest number:          02F1
Signing time:             Sun 19 Oct 2025 23:49:18 +0000
Manifest this update:     Sun 19 Oct 2025 23:44:18 +0000
Manifest next update:     Tue 21 Oct 2025 03:47:18 +0000
Files and hashes:         1: B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.crl (hash: 719UGWBr54zU2JOPrbXRGOQs1x41kv0ocvtDB0JjovM=)
                          2: 323830343a383661383a3a2f33322d3332203d3e20323732363538.roa (hash: 4Wve8rrQyvXRaWHDbm6YxZLkom3e2sKuQg46NJyqVZw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.crl
                          rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:47:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2b:8d:66:5c:9b:05:0a:41:17:53:b5:6b:10:8e:10:28:b7:3c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D
        Validity
            Not Before: Oct 19 23:44:18 2025 GMT
            Not After : Oct 21 03:47:18 2025 GMT
        Subject: CN=1CBB09C1221767D6C362C0526CE7121C8276916F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:41:0b:8b:38:f9:c5:11:b7:50:4e:23:6a:7d:
                    7e:a5:72:78:8b:61:50:75:e3:b7:d6:60:40:22:90:
                    74:1b:6f:28:87:bb:b4:9e:44:7d:b2:ee:67:8a:ff:
                    84:94:31:0f:08:99:1b:1f:79:31:5a:15:b9:da:f5:
                    04:82:11:2b:6c:7a:0e:54:9b:c8:9c:d2:87:0a:df:
                    22:d6:91:dd:0c:70:41:a1:4b:20:cf:8a:7f:6c:1a:
                    e8:12:9a:a8:72:0e:05:82:fe:bf:00:31:24:86:92:
                    4b:a8:0e:e3:75:8d:44:63:48:54:98:ec:cc:05:1b:
                    27:60:c7:7e:e0:98:8c:84:82:7b:88:81:fb:f7:47:
                    ad:63:6c:9b:f7:6f:3e:57:6e:62:2e:cc:f7:2e:7e:
                    d3:52:5c:d2:12:f7:4a:bc:87:58:fe:3d:09:f9:05:
                    08:37:42:86:32:84:92:cc:fc:4e:32:bd:67:06:4d:
                    b7:33:1e:22:aa:85:82:79:63:6a:ec:6c:19:cc:09:
                    20:10:ed:2e:b8:00:2c:0e:54:a4:f7:97:53:7b:01:
                    65:e0:e5:d9:c0:1e:48:fd:e5:25:b3:13:32:d0:d6:
                    21:e5:5a:a6:3a:e5:8d:2d:e7:69:8c:24:29:71:52:
                    14:7f:b3:32:63:b9:78:bb:2a:d3:ef:f0:bb:1d:1b:
                    ea:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BB:09:C1:22:17:67:D6:C3:62:C0:52:6C:E7:12:1C:82:76:91:6F
            X509v3 Authority Key Identifier:
                keyid:B4:EF:C8:8C:CA:99:9E:CC:4D:A6:D0:30:45:FF:CE:FF:AF:85:22:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:61:b0:8f:31:c2:87:0c:0a:5b:a1:44:4c:24:cf:14:23:34:
         72:59:4a:1a:73:35:8b:8b:da:ec:60:c8:e2:5a:75:7b:3c:69:
         2c:75:9c:eb:cb:f5:6d:b7:35:7b:69:0e:df:68:cc:45:e4:d4:
         83:7b:52:bf:16:51:24:9d:8d:a4:4f:20:c9:76:36:3a:90:b7:
         84:85:41:d5:79:bc:c4:35:a2:f7:1f:ae:9f:3c:7e:7c:32:6f:
         8e:da:0b:1c:71:55:47:c6:eb:f4:79:4c:f9:12:24:16:ea:94:
         d3:c3:79:13:74:14:59:73:36:9f:f1:38:93:d9:fa:e5:d8:fa:
         7f:2d:da:dc:28:ac:32:77:83:df:a7:66:93:92:b4:00:71:f2:
         7f:c8:f2:f5:5b:15:fd:55:74:18:da:d5:f5:24:64:6b:e5:2e:
         52:bc:ae:86:e1:26:fc:91:27:7d:c2:77:8b:71:e7:e7:d2:b1:
         1c:f4:f6:71:7c:84:c3:8c:6e:26:f4:4a:cb:a5:fc:2d:e9:5b:
         86:2c:2b:7e:f9:bf:57:19:30:fd:f7:45:0d:65:62:4d:1d:c4:
         23:1c:16:08:03:7d:83:41:b1:a1:cf:03:d4:a4:96:4b:bc:6a:
         90:9a:6e:1c:4f:78:b6:5e:52:30:6e:0f:71:4c:92:01:3c:ba:
         ed:8b:a8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:30:35 2025 by rpki-client