Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft
File:                     049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft (raw, json)
Hash identifier:          1wvGPAYsmrpNqcIl68qZWiO//zYaDizsJ5mcf/qquiY=
Subject key identifier:   D6:5C:CB:2A:9D:59:67:90:0E:2D:53:4E:C3:78:64:90:76:55:D6:0F
Authority key identifier: 04:9A:7D:9E:67:45:91:0C:F5:F3:43:5E:31:22:4E:A7:BB:DE:92:80
Certificate issuer:       /CN=049A7D9E6745910CF5F3435E31224EA7BBDE9280
Certificate serial:       08A6A425A69DB47D31FCEBB9226A60C968C689E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft
Manifest number:          02F1
Signing time:             Mon 20 Oct 2025 13:05:46 +0000
Manifest this update:     Mon 20 Oct 2025 13:00:46 +0000
Manifest next update:     Tue 21 Oct 2025 14:41:46 +0000
Files and hashes:         1: 3231362e39382e3231382e302f32342d3234203d3e20323636323236.roa (hash: LwI+QB/TjMVf8G/QgSFG16qXD7El/5C8Z42mnNFNJW8=)
                          2: 3231362e39382e3231362e302f32342d3234203d3e20323636323236.roa (hash: Y7E29OoCqFM/hqqVdQrAoirWKWxxLcQQ3MY1P2Z3x5o=)
                          3: 3231362e39382e3231362e302f32322d3232203d3e20323636323236.roa (hash: 8MHZYB00jpMu9bL7PENSCmahv8upOnDcw1afAo+avdg=)
                          4: 3231362e39382e3231392e302f32342d3234203d3e20323636323236.roa (hash: ub2IS8OX6EgFlZitQTXImnYH+e5QN9q11+sChOE1i0k=)
                          5: 049A7D9E6745910CF5F3435E31224EA7BBDE9280.crl (hash: U3Pb+XIdzkPuTCsks5ovVa/2Uf+Gp6kyuSSezKsy0Fk=)
                          6: 3231362e39382e3231372e302f32342d3234203d3e20323636323236.roa (hash: jMCfjQXfLwdkIBOBUjFghP/CT/oRuuuewuH/syABSL0=)
                          7: 323830343a336361343a3a2f33322d3332203d3e20323636323236.roa (hash: nIFOFKBY50PKkmeqOio9qj007zeZ4Ka0UUBHwcKFUW8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.crl
                          rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a6:a4:25:a6:9d:b4:7d:31:fc:eb:b9:22:6a:60:c9:68:c6:89:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049A7D9E6745910CF5F3435E31224EA7BBDE9280
        Validity
            Not Before: Oct 20 13:00:46 2025 GMT
            Not After : Oct 21 14:41:46 2025 GMT
        Subject: CN=D65CCB2A9D5967900E2D534EC37864907655D60F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:eb:1f:69:a2:1e:fa:a2:8a:34:7d:c3:5e:66:
                    70:d4:d3:22:aa:bd:47:24:2d:b6:19:c1:30:00:28:
                    f3:c1:ae:a8:4a:83:fb:14:73:84:08:e4:00:d5:13:
                    ed:6d:c2:8d:ff:5b:62:75:11:7b:14:d8:97:d1:72:
                    e1:98:96:cd:f6:a7:4d:35:1a:6c:3c:73:c8:e8:ca:
                    39:2a:f3:4f:68:d2:e2:5c:b3:ce:76:cc:eb:5a:a5:
                    28:11:6d:7a:e0:52:30:8e:66:be:6f:49:4a:ae:d9:
                    51:f4:ca:17:9f:23:95:1e:9b:70:c6:5b:4b:89:07:
                    95:15:53:1a:6d:89:c0:96:7b:fc:b9:43:71:e9:60:
                    e8:9a:3f:19:03:82:6a:9e:c2:2b:36:17:32:d3:3b:
                    68:29:39:66:d2:6a:f5:86:3b:97:c9:23:8e:f3:18:
                    57:9c:1f:55:ac:12:58:64:48:87:62:97:85:de:4c:
                    36:5f:14:0f:f4:81:19:c6:a8:e2:4d:ee:ad:1f:7f:
                    5c:9f:a3:16:4f:c2:f7:35:fb:27:88:a3:5d:a2:11:
                    9b:5c:a7:97:b4:46:d6:4f:35:8c:4b:9d:fe:82:71:
                    2f:9f:33:24:dc:57:9a:82:bf:57:f5:ce:ab:2a:12:
                    74:26:52:14:11:85:10:2a:b8:44:bc:95:de:94:e5:
                    d3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5C:CB:2A:9D:59:67:90:0E:2D:53:4E:C3:78:64:90:76:55:D6:0F
            X509v3 Authority Key Identifier:
                keyid:04:9A:7D:9E:67:45:91:0C:F5:F3:43:5E:31:22:4E:A7:BB:DE:92:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:0c:65:eb:3a:82:17:59:89:2a:3b:25:47:1a:03:43:a7:25:
         42:b0:4e:2c:40:3f:2d:73:94:7a:17:78:ae:c6:32:fc:27:93:
         e0:2b:f6:0b:50:d3:3c:2f:a1:26:20:69:0f:c8:70:49:65:2b:
         d8:dc:6b:6e:b9:b0:e4:71:9c:a1:8d:15:a4:5d:00:98:0a:3f:
         45:93:bc:f1:35:73:27:1b:02:55:8c:74:5a:ae:d4:b1:08:4b:
         54:cd:9b:d2:7c:71:2a:df:05:34:79:50:23:a2:6f:12:8a:ed:
         cd:00:46:27:62:04:ef:62:af:6d:ce:04:29:a1:e1:99:a6:f5:
         90:44:1a:05:ce:c0:89:6f:d4:90:c5:21:71:64:60:de:17:a4:
         69:70:94:7c:41:e8:ab:30:e1:96:73:8e:73:85:c7:c5:51:37:
         74:6d:0c:87:3d:e4:7f:9c:43:b1:05:ff:56:74:1c:78:06:cf:
         36:d1:4b:cc:fb:32:d8:33:26:66:12:c8:0a:5b:03:0a:e1:c3:
         8c:20:14:07:c7:b9:bb:b2:22:57:9b:de:ae:5e:0c:79:ff:02:
         b9:17:a1:14:db:e7:46:50:28:23:d1:03:5c:c3:fd:3e:b9:b9:
         84:2e:d7:aa:83:64:df:56:9b:06:ac:b5:de:e5:ec:76:19:c3:
         61:41:42:cb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCKakJaadtH0x/Ou5ImpgyWjGieEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ5QTdEOUU2NzQ1OTEwQ0Y1RjM0MzVFMzEyMjRFQTdC
QkRFOTI4MDAeFw0yNTEwMjAxMzAwNDZaFw0yNTEwMjExNDQxNDZaMDMxMTAvBgNV
BAMTKEQ2NUNDQjJBOUQ1OTY3OTAwRTJENTM0RUMzNzg2NDkwNzY1NUQ2MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS6x9poh76ooo0fcNeZnDU0yKq
vUckLbYZwTAAKPPBrqhKg/sUc4QI5ADVE+1two3/W2J1EXsU2JfRcuGYls32p001
Gmw8c8joyjkq809o0uJcs852zOtapSgRbXrgUjCOZr5vSUqu2VH0yhefI5Uem3DG
W0uJB5UVUxpticCWe/y5Q3HpYOiaPxkDgmqewis2FzLTO2gpOWbSavWGO5fJI47z
GFecH1WsElhkSIdil4XeTDZfFA/0gRnGqOJN7q0ff1yfoxZPwvc1+yeIo12iEZtc
p5e0RtZPNYxLnf6CcS+fMyTcV5qCv1f1zqsqEnQmUhQRhRAquES8ld6U5dOBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1lzLKp1ZZ5AOLVNOw3hkkHZV1g8wHwYDVR0j
BBgwFoAUBJp9nmdFkQz180NeMSJOp7vekoAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEJrOFhpdUFpekdCeWpnQjI4Vm5FcU5CbmlTc3luN2NNY1QxNXlDSjFy
eWgvMS8wNDlBN0Q5RTY3NDU5MTBDRjVGMzQzNUUzMTIyNEVBN0JCREU5MjgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0OUE3RDlFNjc0NTkxMENG
NUYzNDM1RTMxMjI0RUE3QkJERTkyODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OEJrOFhpdUFpekdCeWpnQjI4Vm5FcU5CbmlTc3luN2NNY1QxNXlDSjFyeWgvMS8w
NDlBN0Q5RTY3NDU5MTBDRjVGMzQzNUUzMTIyNEVBN0JCREU5MjgwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJQxl6zqCF1mJKjslRxoDQ6clQrBOLEA/LXOUehd4rsYy/CeT4Cv2C1DTPC+h
JiBpD8hwSWUr2Nxrbrmw5HGcoY0VpF0AmAo/RZO88TVzJxsCVYx0Wq7UsQhLVM2b
0nxxKt8FNHlQI6JvEortzQBGJ2IE72Kvbc4EKaHhmab1kEQaBc7AiW/UkMUhcWRg
3hekaXCUfEHoqzDhlnOOc4XHxVE3dG0Mhz3kf5xDsQX/VnQceAbPNtFLzPsy2DMm
ZhLIClsDCuHDjCAUB8e5u7IiV5verl4Mef8CuRehFNvnRlAoI9EDXMP9Prm5hC7X
qoNk31abBqy13uXsdhnDYUFCyw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:54:36 2025 by rpki-client