Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
File:                     221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft (raw, json)
Hash identifier:          kQ6Z8W6/tSOImw65mn6ITsC9/lICFwQ+Ezlqweh3LG8=
Subject key identifier:   33:2F:09:AE:79:AF:C7:73:76:8B:FC:FB:17:D2:D0:89:25:B5:55:40
Authority key identifier: 22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA
Certificate issuer:       /CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
Certificate serial:       06473561ECFA05387D81D39A67C6E41218B63312
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
Manifest number:          0352
Signing time:             Mon 20 Oct 2025 11:00:00 +0000
Manifest this update:     Mon 20 Oct 2025 10:55:00 +0000
Manifest next update:     Tue 21 Oct 2025 11:00:00 +0000
Files and hashes:         1: 3230302e37312e36342e302f32322d3232203d3e20323636313931.roa (hash: kkgmOvYUGJwCoEzhh6knneyi7masyyVrcruSvH1uCbc=)
                          2: 3230302e37312e36362e302f32332d3233203d3e20323636313931.roa (hash: oRjbqp6pjg2TmDUKGgED/gzftTBc7f6ZnecSyTGmpbI=)
                          3: 323830343a336331633a3a2f33322d3332203d3e20323636313931.roa (hash: Eor7M2D6z/2xQ1niFvkxuMAJ4eTZB8D5egPYNxjsSvc=)
                          4: 3230302e37312e36342e302f32332d3233203d3e20323636313931.roa (hash: AMV1d6c4e5KYrOkkkv0/PjBnedVDFLar/tNt2Q35+ak=)
                          5: 221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl (hash: R4cDq07Hoq26SfEjlfv0O3sqghE+pq0LdnkEueH79P4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl
                          rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:47:35:61:ec:fa:05:38:7d:81:d3:9a:67:c6:e4:12:18:b6:33:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
        Validity
            Not Before: Oct 20 10:55:00 2025 GMT
            Not After : Oct 21 11:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6f:cb:6b:78:b1:86:ed:0e:88:0b:93:45:f7:
                    11:bf:e9:03:69:da:f0:d0:c8:cf:0e:ef:0a:13:e8:
                    ae:22:85:ec:06:30:e8:55:d7:46:d9:96:61:e1:d9:
                    11:2f:b5:73:e3:ae:fd:76:e1:09:94:a7:db:da:63:
                    68:18:98:b1:ef:d9:75:e7:bd:8f:c1:ca:d1:10:60:
                    c4:59:dc:8a:14:64:35:fa:2e:dd:ad:d1:9f:98:92:
                    1f:99:6b:77:d4:cd:95:d3:9e:1e:35:c0:48:81:47:
                    0e:9f:40:7e:65:18:a7:9b:96:b3:85:ed:7c:80:12:
                    f8:a3:d4:82:a5:2c:b2:ee:01:77:7a:f7:41:88:25:
                    52:bb:c9:06:d3:21:9f:c4:89:7d:84:ee:df:3f:d1:
                    92:d3:f5:a2:55:57:10:d4:53:93:5a:44:ee:51:f3:
                    5d:0e:ce:07:71:fe:76:ca:ba:fe:47:06:bc:d5:54:
                    9b:88:95:9e:21:4d:b8:34:d2:d3:8b:f8:f6:f9:3d:
                    e9:29:f2:3b:dc:67:ed:d0:67:2f:86:ff:fc:96:23:
                    8b:d5:a7:0e:5c:2c:ec:30:3f:5e:89:7d:6c:d9:63:
                    c7:67:a6:d3:63:ee:f5:b8:ad:4a:88:10:a2:68:8e:
                    15:05:b3:ac:5a:c7:13:2e:69:32:94:d6:c4:ab:df:
                    2d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2F:09:AE:79:AF:C7:73:76:8B:FC:FB:17:D2:D0:89:25:B5:55:40
            X509v3 Authority Key Identifier:
                keyid:22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:bf:d8:69:46:ae:0b:66:4f:18:ec:3e:b2:28:fc:5a:03:59:
         76:d1:70:52:e6:b6:e0:b8:96:76:cf:3f:cc:93:5a:37:9c:d5:
         81:6e:53:d0:bc:dd:6a:c1:05:7d:c3:d8:fa:52:bf:98:8c:75:
         f0:c9:eb:57:ae:e2:e7:09:42:c9:f4:d8:b8:5f:ed:8d:5b:5f:
         b3:9b:22:29:6e:52:4e:6e:ad:6d:61:9c:26:12:c8:46:57:47:
         90:25:47:5d:e9:f5:1a:45:21:c5:e6:3d:d6:b4:a4:7a:a8:b2:
         89:a3:38:99:b1:ed:77:fb:6e:36:58:d7:e2:fe:f5:50:6c:c2:
         47:f6:e5:2b:7b:bd:01:34:0c:9b:8f:a1:83:f6:58:14:a5:39:
         3f:b1:e5:91:0a:82:22:b8:b2:26:82:6f:3a:97:b2:41:36:14:
         7a:0e:40:71:00:2e:74:e0:20:d9:e7:88:fd:9c:94:47:36:f0:
         b0:39:20:64:2f:c6:8a:2e:e0:70:4b:c3:4e:ac:d9:4e:02:df:
         78:90:61:74:1b:bd:4d:ee:2d:ec:3f:77:21:50:0a:9d:38:c6:
         ac:26:39:13:51:b8:74:23:91:dc:2d:17:b0:38:99:d2:7c:10:
         e8:59:80:13:0a:4d:8a:45:fd:26:3a:a1:2f:ce:18:f5:eb:5c:
         7c:5e:07:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:02:18 2025 by rpki-client