Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/1/D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140.mft
File:                     D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140.mft (raw, json)
Hash identifier:          y4V/QbPHaTEZfKUYkHj3tdMGJtDRpoxrIRwuGTXU6Zg=
Subject key identifier:   B8:B4:CE:16:F3:C0:0C:03:F2:FB:A6:0D:58:C8:24:4F:48:FB:95:A0
Authority key identifier: D3:4D:FC:74:62:B9:6F:AC:5C:3E:2C:31:EB:ED:B3:9F:17:F4:B1:40
Certificate issuer:       /CN=D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140
Certificate serial:       71C1F79CC3868D2479272126BD89B4C9CDC4A8DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/1/D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140.mft
Manifest number:          034F
Signing time:             Mon 20 Oct 2025 10:24:00 +0000
Manifest this update:     Mon 20 Oct 2025 10:19:00 +0000
Manifest next update:     Tue 21 Oct 2025 10:24:00 +0000
Files and hashes:         1: D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140.crl (hash: 2VSQSxFm3w2i9KP/kPZOJi3/Uh77oRjgF0Kh4KAvD+w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/1/D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140.crl
                          rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/1/D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c1:f7:9c:c3:86:8d:24:79:27:21:26:bd:89:b4:c9:cd:c4:a8:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140
        Validity
            Not Before: Oct 20 10:19:00 2025 GMT
            Not After : Oct 27 10:24:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8f:db:35:79:76:a9:6d:41:4f:ac:44:1b:9a:
                    9c:81:28:32:f8:71:30:2c:06:25:f3:93:af:84:e8:
                    57:d8:82:3a:7a:ef:2a:aa:42:d4:83:f5:26:71:d5:
                    47:19:8a:84:df:a8:60:f5:24:42:fa:ea:19:b6:3f:
                    b0:85:2f:fb:03:ed:3d:db:83:0c:f9:23:3f:87:62:
                    e3:e6:e0:1e:51:7c:22:d4:39:c8:b1:e1:d7:be:9b:
                    80:07:d1:f2:e1:aa:fa:5a:c8:f4:2c:3a:d7:25:7f:
                    67:0a:b6:ec:93:64:d8:6a:f9:18:23:a4:02:cb:a9:
                    ba:ca:f9:48:b7:08:fd:c1:24:22:39:79:d4:19:75:
                    3a:c6:ac:b7:51:4f:19:73:af:b8:84:88:b2:22:14:
                    e6:f7:ca:46:ab:b7:7f:78:e6:98:e1:a9:c9:9d:c0:
                    c5:7e:78:96:5e:c6:61:40:98:ca:84:25:e8:8d:47:
                    15:44:9a:0d:86:81:1f:e1:43:33:08:e8:04:45:ec:
                    1c:08:ad:4c:67:9b:3d:76:9f:eb:b1:56:6a:b4:75:
                    11:d8:89:26:21:6a:b6:51:5a:96:11:51:cc:4b:05:
                    c9:8c:61:ff:f3:7d:eb:63:21:5a:0f:c4:cd:65:da:
                    81:40:da:4d:0c:b7:eb:09:24:83:8b:51:e2:95:5d:
                    0f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B4:CE:16:F3:C0:0C:03:F2:FB:A6:0D:58:C8:24:4F:48:FB:95:A0
            X509v3 Authority Key Identifier:
                keyid:D3:4D:FC:74:62:B9:6F:AC:5C:3E:2C:31:EB:ED:B3:9F:17:F4:B1:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/1/D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/1/D34DFC7462B96FAC5C3E2C31EBEDB39F17F4B140.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:4a:bd:33:4f:aa:fc:ad:f6:fa:45:a1:3b:5d:ea:7c:1e:63:
         02:4c:ab:62:7e:9f:f3:7e:7f:0b:a9:05:74:13:87:6c:af:a3:
         6b:bf:0b:f4:16:57:9b:97:35:a8:87:d5:7f:ca:40:0c:f8:ed:
         9c:66:4a:0a:ff:b1:d2:eb:dd:6c:30:69:2e:06:81:83:e4:72:
         71:48:61:71:c9:3a:c8:ee:56:0b:71:df:45:c1:cd:ab:4d:ea:
         6b:6e:34:a8:88:d5:02:79:40:4f:3f:12:99:e6:b3:1a:37:34:
         b0:47:93:84:31:a5:c1:8b:06:e7:67:78:c9:35:4d:6b:1c:dd:
         fe:fe:79:ae:b4:b8:9c:34:87:85:13:36:d7:da:a6:50:01:02:
         05:b0:dd:12:28:3a:67:e1:c9:cd:1b:17:e4:5a:6b:32:e1:61:
         52:1a:30:e1:66:0b:93:b8:6d:95:b3:16:02:9f:36:53:6e:3d:
         24:db:24:f2:11:d2:0b:92:14:66:42:d2:a2:02:ff:01:28:33:
         c0:d9:e9:20:ea:69:68:6b:52:08:fc:44:47:78:a7:c7:db:1f:
         67:2b:7b:34:70:b9:0d:e5:40:b4:6e:1f:23:2b:53:38:0c:f7:
         25:50:6e:ff:cf:63:27:34:83:d6:6e:3b:54:80:ea:00:6f:7c:
         c0:f4:11:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:31:44 2025 by rpki-client