Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/00398394BC116D8D01BE15C08D06060EF5755D29.mft
File:                     00398394BC116D8D01BE15C08D06060EF5755D29.mft (raw, json)
Hash identifier:          SrjrhXakUrb6r7D4h/4F8Vw5IWivhzrquXSO2IfiCCg=
Subject key identifier:   38:87:2E:1D:95:4E:CE:E2:C2:E6:5C:EB:B3:96:E2:54:C3:A4:15:2A
Authority key identifier: 00:39:83:94:BC:11:6D:8D:01:BE:15:C0:8D:06:06:0E:F5:75:5D:29
Certificate issuer:       /CN=00398394BC116D8D01BE15C08D06060EF5755D29
Certificate serial:       25FEC5B8135DD075F7AE9C7D8381E2D74AE61BC1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00398394BC116D8D01BE15C08D06060EF5755D29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/00398394BC116D8D01BE15C08D06060EF5755D29.mft
Manifest number:          014E
Signing time:             Mon 20 Oct 2025 21:46:52 +0000
Manifest this update:     Mon 20 Oct 2025 21:41:52 +0000
Manifest next update:     Wed 22 Oct 2025 00:52:52 +0000
Files and hashes:         1: 3137372e3230302e39362e302f32302d3234203d3e203238333036.roa (hash: I5QHxn84/SYLgq1w9iUv8TGCgXnHKh0qrKn3T6Mis3Q=)
                          2: 00398394BC116D8D01BE15C08D06060EF5755D29.crl (hash: ZUjz6YPH4kkmMWlb4Cmtq1bmyXqWdBg7eAQ9LjpkqB0=)
                          3: 3138392e33382e302e302f32302d3234203d3e203238333036.roa (hash: IVpomPYsstVgUrNlGGRSnV7BAHeBMDlsHxZbd71KgSo=)
                          4: 3137372e39312e3137362e302f32302d3234203d3e203238333036.roa (hash: k0Qp9OBBCyIDuweYwGmVIOMPBaMos5/4z4jDIiRZNq4=)
                          5: 3138372e39342e38302e302f32302d3234203d3e203238333036.roa (hash: MaY/QGq1nFC3eJ4HpJqvVDH+fxkumlWAWv60xlPNEX0=)
                          6: 323830343a33343a3a2f33322d3438203d3e203238333036.roa (hash: 2bZm4vj15VHvPexCZ7bOxBFmJe9FFJyBZCYgQB+zAH0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/00398394BC116D8D01BE15C08D06060EF5755D29.crl
                          rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/00398394BC116D8D01BE15C08D06060EF5755D29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00398394BC116D8D01BE15C08D06060EF5755D29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 00:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fe:c5:b8:13:5d:d0:75:f7:ae:9c:7d:83:81:e2:d7:4a:e6:1b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00398394BC116D8D01BE15C08D06060EF5755D29
        Validity
            Not Before: Oct 20 21:41:52 2025 GMT
            Not After : Oct 22 00:52:52 2025 GMT
        Subject: CN=38872E1D954ECEE2C2E65CEBB396E254C3A4152A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e5:0c:8f:1c:bc:30:ae:31:78:5a:82:8b:48:
                    74:ae:3b:ad:8a:17:a2:a5:5b:e4:34:22:5f:d9:34:
                    65:68:77:fc:68:f8:a1:a9:01:61:e0:9d:5a:36:2b:
                    3e:30:76:4f:24:13:1c:0b:df:39:d7:4b:9a:a1:87:
                    d9:05:0f:3f:16:7f:99:d4:21:29:16:2e:7b:4a:ae:
                    ce:7f:f7:ba:49:8c:80:ec:ef:e6:25:b0:02:3e:de:
                    0c:40:e5:be:5c:33:9e:1d:25:97:23:7c:dd:19:45:
                    a3:f5:60:6f:eb:5e:ab:96:e5:8d:d4:58:31:3c:9b:
                    00:ca:c4:33:d7:18:6f:4e:b3:e8:7d:36:e7:e9:58:
                    30:59:96:dd:74:00:61:a3:36:84:bb:a4:a5:5a:31:
                    3b:7e:47:e2:2c:db:c2:35:85:a8:b4:a7:97:1f:b2:
                    ad:d5:0a:20:09:e9:82:87:7a:cd:3a:9f:1b:07:3b:
                    f2:01:16:34:5b:43:0d:3c:d4:53:b4:0d:8a:42:49:
                    06:68:34:86:82:85:b5:9c:53:a7:b2:0e:d9:de:71:
                    94:8a:77:86:ea:75:44:c5:40:4d:05:dd:3a:18:48:
                    4e:81:1a:d7:26:ee:3a:73:26:5f:af:c7:b2:12:ad:
                    8e:63:f7:dd:43:c9:83:9d:ee:b0:71:06:43:f7:de:
                    9e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:87:2E:1D:95:4E:CE:E2:C2:E6:5C:EB:B3:96:E2:54:C3:A4:15:2A
            X509v3 Authority Key Identifier:
                keyid:00:39:83:94:BC:11:6D:8D:01:BE:15:C0:8D:06:06:0E:F5:75:5D:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/00398394BC116D8D01BE15C08D06060EF5755D29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00398394BC116D8D01BE15C08D06060EF5755D29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/00398394BC116D8D01BE15C08D06060EF5755D29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d5:15:2d:9b:71:20:9c:80:d3:c6:b8:d8:d1:45:cc:de:d9:
         78:c8:eb:94:56:06:ab:e2:00:88:43:97:9f:af:73:40:48:0f:
         0a:8a:5f:0f:98:a2:17:7c:cf:c2:cd:04:03:03:66:67:1d:aa:
         dc:c8:9d:46:b0:c1:f7:a9:20:07:a2:fa:82:c6:8f:27:ce:8d:
         56:66:46:4d:31:0e:9d:27:a1:28:4c:ba:62:f5:57:16:34:ca:
         a9:c1:d0:00:70:f0:5e:35:ce:b6:91:5e:04:ed:0d:8d:59:67:
         28:7b:66:34:8d:23:d4:b2:8e:75:e1:3a:6e:92:fa:af:58:57:
         3c:d7:30:86:64:34:e2:78:9a:05:48:71:b5:c8:1f:35:bf:02:
         90:1d:4d:86:5a:7b:70:41:7f:58:2f:ee:3b:59:89:f6:70:8d:
         ef:32:d7:9e:25:1e:fe:5a:09:0d:eb:82:28:41:6b:2d:4a:3d:
         00:a2:1e:20:63:6e:f3:f7:df:72:cb:54:1d:0a:50:19:b3:a8:
         3b:e5:2d:5f:bf:52:08:d2:c5:11:d7:a4:b0:c2:5a:c1:cf:a8:
         0f:03:b5:b7:c8:30:8e:50:62:a4:bd:52:c9:78:6d:ee:da:de:
         72:1f:bc:4d:c1:f1:f4:de:71:ec:a8:b7:16:99:70:9b:7d:c3:
         1a:29:d7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:25:35 2025 by rpki-client