Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.mft
File:                     DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.mft (raw, json)
Hash identifier:          JI1Zit45YOcCddTmu2O4A1rwDBa7748iHem1U9KkHTw=
Subject key identifier:   69:CE:C0:C2:46:81:F7:35:5A:D8:F0:C8:9F:0F:DE:69:FB:6B:A8:F4
Authority key identifier: DE:A4:78:CF:34:A1:1C:20:16:DD:7E:D2:6F:DC:94:21:A6:EE:29:4D
Certificate issuer:       /CN=DEA478CF34A11C2016DD7ED26FDC9421A6EE294D
Certificate serial:       592E5D3929DBEFE66758233F828111F62D6CCCF2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.mft
Manifest number:          02FA
Signing time:             Mon 20 Oct 2025 08:04:59 +0000
Manifest this update:     Mon 20 Oct 2025 07:59:59 +0000
Manifest next update:     Tue 21 Oct 2025 08:59:59 +0000
Files and hashes:         1: 323830343a353464633a383030303a3a2f33332d3333203d3e20323638363734.roa (hash: 3Ivye6BWBG3HzbEMq9Yk4n5e7wScURhO70Azx2lduEs=)
                          2: 34352e3136352e39382e302f32332d3233203d3e20323638363734.roa (hash: BLQT2gF1gWMxdlnLjR1JMe+tccC2tXTIs0mN6yyKaOg=)
                          3: 34352e3136352e39362e302f32322d3232203d3e20323638363734.roa (hash: F0iJJLK+qtzIFyRLpy0EyTtly0FRV+JWkpb8raqK7Ug=)
                          4: 34352e3136352e39362e302f32332d3233203d3e20323638363734.roa (hash: G96u8Es8rAMxBgadnJF1aLhiy1bc5gUbAouK+dNgJs4=)
                          5: 323830343a353464633a3a2f33332d3333203d3e20323638363734.roa (hash: 9vPzg3Epdrtk4V/Ppm9P+Msv6bbSb1T5JX6NqowAsPc=)
                          6: 323830343a353464633a3a2f33322d3332203d3e20323638363734.roa (hash: 8CgHQ9irKPqyXd+/nfsUIZVpQRSUaHbclbp+QT/EMhI=)
                          7: 34352e3136352e39382e302f32342d3234203d3e20323638363734.roa (hash: 9+i7sCc+fn6JzBJIPO9Mu7IMOuYn28ht0HhNneZTgdg=)
                          8: DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.crl (hash: 2Bu8yAo/IQ6BZEu1U3fWJvokI1pWv67gHD1ZR+MH+gY=)
                          9: 34352e3136352e39362e302f32342d3234203d3e20323638363734.roa (hash: kZRi7uRivoMGOiN59xVkAkEoXGpFdo2o8Nzgqo/+u/g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.crl
                          rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:59:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2e:5d:39:29:db:ef:e6:67:58:23:3f:82:81:11:f6:2d:6c:cc:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEA478CF34A11C2016DD7ED26FDC9421A6EE294D
        Validity
            Not Before: Oct 20 07:59:59 2025 GMT
            Not After : Oct 21 08:59:59 2025 GMT
        Subject: CN=69CEC0C24681F7355AD8F0C89F0FDE69FB6BA8F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:21:a0:2f:cb:40:79:d6:3b:a1:a2:85:0b:83:
                    9a:2e:4f:cd:65:e9:e7:9f:d7:d3:12:5b:8c:78:62:
                    07:cd:85:ba:0e:44:a1:1c:47:28:6e:51:0e:df:00:
                    43:b8:2d:04:ba:3b:19:a3:26:e2:b1:55:57:6c:82:
                    41:c2:19:c5:2c:6d:96:d5:eb:9d:20:be:fe:19:84:
                    49:7d:e6:99:32:01:58:aa:b4:1c:04:c2:b4:a9:d6:
                    82:f1:42:fd:34:76:0c:89:09:cd:c5:0c:15:d0:2b:
                    66:b1:be:f6:2b:95:e8:ba:fb:19:3e:7d:cd:69:8c:
                    d0:00:08:d1:40:98:13:0d:83:ab:cb:97:a6:c3:17:
                    dd:b1:4f:73:f3:21:87:b5:09:77:42:22:6f:3e:6d:
                    1a:cb:af:ed:0c:d9:f9:e2:6d:14:58:9f:46:fb:92:
                    e6:65:14:ae:a9:52:c7:e2:1c:5e:7a:ae:9e:15:27:
                    4c:b2:94:08:cb:82:96:b0:5e:8b:d2:3e:7e:d1:94:
                    50:9c:7c:0d:a5:b5:96:e4:48:8c:8e:46:62:76:a1:
                    f5:74:b4:63:be:38:98:56:41:ff:03:c3:7b:22:06:
                    79:cc:e3:4e:da:e0:e1:89:5d:f9:2d:69:49:34:bd:
                    8d:24:2e:ff:3d:f8:2f:88:1d:83:1b:69:a6:98:e9:
                    e0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CE:C0:C2:46:81:F7:35:5A:D8:F0:C8:9F:0F:DE:69:FB:6B:A8:F4
            X509v3 Authority Key Identifier:
                keyid:DE:A4:78:CF:34:A1:1C:20:16:DD:7E:D2:6F:DC:94:21:A6:EE:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:e9:3f:b2:4a:e9:46:61:b7:8d:ad:9d:60:f6:81:b1:08:fc:
         4e:ee:16:ea:fb:c3:de:d2:61:6f:af:1c:92:c7:85:8a:45:74:
         2e:e2:e6:46:36:5e:f6:f7:a2:a5:76:5a:06:b0:79:57:e7:c5:
         fa:56:76:a9:9f:56:74:ea:5d:af:47:b8:cd:47:51:61:de:3b:
         09:fd:fd:71:b9:12:ec:36:2b:df:a1:8c:da:21:e6:c8:6c:d3:
         fd:f6:20:2c:64:a6:3e:37:83:13:2f:e6:aa:39:12:b7:ae:69:
         71:c7:d4:d2:3a:da:c4:78:ba:f6:e3:42:f0:23:09:41:18:38:
         1e:fb:1b:d2:07:e5:50:ef:60:9e:71:af:e4:2f:b7:33:6a:ab:
         11:3d:33:70:6b:9e:94:88:38:be:bf:40:05:06:ac:65:cf:fd:
         0c:07:e9:8e:7d:06:27:5e:ee:ab:62:be:fa:a4:42:05:ce:5d:
         0c:04:2a:bb:0f:56:21:91:57:51:a8:2e:9d:6c:95:28:dd:ff:
         d5:9f:4b:81:cd:35:f7:87:0d:08:b7:d7:8c:51:40:d0:9c:a0:
         e0:5c:a5:78:f1:65:64:d1:73:65:6b:22:55:43:ae:10:12:03:
         dd:25:03:85:a7:f9:c8:51:7f:fd:84:1c:8b:1d:74:15:52:44:
         14:ff:51:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:19:06 2025 by rpki-client