Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
File:                     D95F78E630398477E9BAE976B3EAEDB0059994DB.mft (raw, json)
Hash identifier:          2Q/PX11pK6XGt833xcWXN6gugSfCcZ6vO4xGlVcGjZs=
Subject key identifier:   2C:A5:12:71:3C:CC:F1:6D:DD:D7:70:7D:63:C8:00:2E:BC:01:CC:A3
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Certificate issuer:       /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial:       056737338144F8888BCE3BDFF033E7B05B4210C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
Manifest number:          02F2
Signing time:             Mon 20 Oct 2025 06:57:40 +0000
Manifest this update:     Mon 20 Oct 2025 06:52:40 +0000
Manifest next update:     Tue 21 Oct 2025 09:21:40 +0000
Files and hashes:         1: 323830343a363762633a3a2f33332d3333203d3e20323639363437.roa (hash: fq1tAY/Hvr8TiBRRAGWAcmB1gFi2EhTX6NTMAkPcoCA=)
                          2: 34352e3139302e3133372e302f32342d3234203d3e20323639363437.roa (hash: 2lcSwgY6plo6lzCSLskE1qyNDmDYzzc+dJyZYNREMVs=)
                          3: 323830343a363762633a3a2f33342d3334203d3e20323639363437.roa (hash: Y+fE8BkqszrbIP4g4wpzOkGPcdjysr1CqPeEWpUGIuA=)
                          4: 323830343a363762633a383030303a3a2f33332d3333203d3e20323639363437.roa (hash: cyVUhf1TZuNChMUYn5qaQqNw6BdaLkM3NTVtQTPrLe8=)
                          5: 34352e3139302e3133382e302f32342d3234203d3e20323639363437.roa (hash: Sp3SopNcKakB7jI3Q/O4d4reeHmpO06eDlmoon4YLWM=)
                          6: D95F78E630398477E9BAE976B3EAEDB0059994DB.crl (hash: bqxvXXw1xTB2Kc0mCj9CqZ+J5Eir6ArUsvxNKPEjjow=)
                          7: 323830343a363762633a633030303a3a2f33342d3334203d3e20323639363437.roa (hash: 5odB5yWTm4uAB6rsgPg3I+OPxNXaHhdycLs/wC5tT3I=)
                          8: 323830343a363762633a383030303a3a2f33342d3334203d3e20323639363437.roa (hash: 9CSAPHN+viGAg80cmPbSF9EDb77vYGOvsBdu/ZyZuPY=)
                          9: 323830343a363762633a343030303a3a2f33342d3334203d3e20323639363437.roa (hash: a1C+hpzUTZtHk2FHBwHGm01zz+wU4bo5iettVF0Z6Ls=)
                          10: 34352e3139302e3133362e302f32322d3232203d3e20323639363437.roa (hash: qS5l42jMTMud52+Q5WuCosVZYWIuJec8+7s4K9zvd2M=)
                          11: 34352e3139302e3133362e302f32322d3234203d3e20323639363437.roa (hash: UsoK1E4xojwEmL5lGIIC2QJyIGhJDLI7BwOxgoRjb88=)
                          12: 323830343a363762633a3a2f33322d3438203d3e20323630363437.roa (hash: V3vQoWj/pcT74SkEXQYJqSIiwsCNzpVOZJ9AUjyQ4sQ=)
                          13: 323830343a363762633a3a2f33322d3332203d3e20323639363437.roa (hash: SfIJW5WPLYXsHY31oI4k3snKmNhXfICkKaFJev5pT9Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
                          rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:67:37:33:81:44:f8:88:8b:ce:3b:df:f0:33:e7:b0:5b:42:10:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Validity
            Not Before: Oct 20 06:52:40 2025 GMT
            Not After : Oct 21 09:21:40 2025 GMT
        Subject: CN=2CA512713CCCF16DDDD7707D63C8002EBC01CCA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d6:30:42:44:a3:d9:5d:8b:d0:cf:04:9e:86:
                    8d:ae:20:27:af:49:4f:4a:47:e9:71:09:9b:4e:db:
                    55:68:53:88:ec:7e:45:57:7d:42:fd:73:b4:91:85:
                    ac:df:1c:65:88:d8:5f:83:70:cb:87:a0:99:2e:0e:
                    4d:5a:4f:dd:4e:43:5d:56:dc:07:ee:e0:f9:96:e4:
                    ba:a2:08:ef:68:1e:7e:09:d5:d0:c0:8a:46:e9:f0:
                    90:30:a3:0c:4e:a1:33:35:8a:c4:c5:b6:80:0d:b1:
                    96:52:6b:b8:cb:31:83:6e:81:3d:d3:64:bb:90:f2:
                    00:24:2f:ee:a4:24:f0:43:5c:dd:a1:f4:4e:67:2d:
                    20:6a:49:91:02:e8:1b:64:c7:4e:7a:1b:a2:f1:44:
                    ba:ae:7c:74:76:51:c9:b4:33:90:53:29:31:45:7d:
                    0b:6e:4d:98:87:e3:30:7b:c4:48:f8:60:f7:e7:9d:
                    c4:17:98:ee:11:1f:4a:b8:3f:a2:b0:a9:a0:05:cb:
                    e9:01:cb:b1:12:4b:f9:a9:b0:ca:ec:ac:6c:f2:b3:
                    ea:08:f5:eb:69:ba:45:d3:8c:90:b9:7d:46:a2:da:
                    9b:1c:39:00:c6:ae:d7:01:ad:e5:db:9b:01:ee:e8:
                    69:e7:02:99:bf:f1:c1:ea:9c:5f:dc:72:f2:83:cf:
                    71:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A5:12:71:3C:CC:F1:6D:DD:D7:70:7D:63:C8:00:2E:BC:01:CC:A3
            X509v3 Authority Key Identifier:
                keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f0:91:bb:2c:0e:19:29:b5:17:80:4c:ea:a8:a4:45:df:d7:
         c0:24:17:98:3d:8b:e0:d3:57:55:bc:36:97:70:d6:a7:e2:2b:
         62:0d:e0:d4:ef:87:c0:e1:36:bc:ae:94:30:49:da:35:28:72:
         7f:fb:75:8e:f1:2f:52:ed:f3:e7:68:d5:b0:54:f2:5a:be:fb:
         1c:58:7b:c6:2c:d4:fb:64:95:17:93:c7:02:a1:6d:65:33:93:
         d0:3d:57:a9:1b:d0:ba:5e:1f:9b:c3:a4:47:53:ca:4e:80:cc:
         35:f6:fd:aa:9e:14:09:af:95:24:a8:b1:69:9f:9d:9a:7b:4f:
         d8:42:68:23:f4:c3:48:77:3b:f0:f9:44:64:49:07:2c:e8:28:
         f0:32:68:7e:65:ca:99:4a:4e:17:b4:37:e7:31:6a:cd:0a:fd:
         00:2e:f6:6f:c7:7f:29:69:43:d8:53:04:76:42:d8:2c:3f:4b:
         a9:04:cd:48:69:72:36:b7:3c:97:25:07:52:a6:b1:03:f4:30:
         bb:71:4e:ca:32:c7:c2:68:b0:16:4e:08:00:42:64:20:05:5d:
         88:72:b9:9c:0b:66:e6:ed:55:cc:38:33:4a:e4:03:e7:25:f3:
         9a:42:19:f7:fe:66:db:44:f8:a5:52:37:de:b9:32:40:b3:ea:
         c0:2c:70:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBWc3M4FE+IiLzjvf8DPnsFtCEMEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk1Rjc4RTYzMDM5ODQ3N0U5QkFFOTc2QjNFQUVEQjAw
NTk5OTREQjAeFw0yNTEwMjAwNjUyNDBaFw0yNTEwMjEwOTIxNDBaMDMxMTAvBgNV
BAMTKDJDQTUxMjcxM0NDQ0YxNkREREQ3NzA3RDYzQzgwMDJFQkMwMUNDQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb1jBCRKPZXYvQzwSeho2uICev
SU9KR+lxCZtO21VoU4jsfkVXfUL9c7SRhazfHGWI2F+DcMuHoJkuDk1aT91OQ11W
3Afu4PmW5LqiCO9oHn4J1dDAikbp8JAwowxOoTM1isTFtoANsZZSa7jLMYNugT3T
ZLuQ8gAkL+6kJPBDXN2h9E5nLSBqSZEC6Btkx056G6LxRLqufHR2Ucm0M5BTKTFF
fQtuTZiH4zB7xEj4YPfnncQXmO4RH0q4P6KwqaAFy+kBy7ESS/mpsMrsrGzys+oI
9etpukXTjJC5fUai2pscOQDGrtcBreXbmwHu6GnnApm/8cHqnF/ccvKDz3H7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULKUScTzM8W3d13B9Y8gALrwBzKMwHwYDVR0j
BBgwFoAU2V945jA5hHfpuul2s+rtsAWZlNswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFRGOFdYR0hXZVBkekZNOUEzanU4VGVnNUNSUHM0THFVS2NXelZhcXBR
TDUvMS9EOTVGNzhFNjMwMzk4NDc3RTlCQUU5NzZCM0VBRURCMDA1OTk5NERCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NUY3OEU2MzAzOTg0NzdF
OUJBRTk3NkIzRUFFREIwMDU5OTk0REIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OFRGOFdYR0hXZVBkekZNOUEzanU4VGVnNUNSUHM0THFVS2NXelZhcXBRTDUvMS9E
OTVGNzhFNjMwMzk4NDc3RTlCQUU5NzZCM0VBRURCMDA1OTk5NERCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWfCRuywOGSm1F4BM6qikRd/XwCQXmD2L4NNXVbw2l3DWp+IrYg3g1O+HwOE2
vK6UMEnaNShyf/t1jvEvUu3z52jVsFTyWr77HFh7xizU+2SVF5PHAqFtZTOT0D1X
qRvQul4fm8OkR1PKToDMNfb9qp4UCa+VJKixaZ+dmntP2EJoI/TDSHc78PlEZEkH
LOgo8DJofmXKmUpOF7Q35zFqzQr9AC72b8d/KWlD2FMEdkLYLD9LqQTNSGlyNrc8
lyUHUqaxA/Qwu3FOyjLHwmiwFk4IAEJkIAVdiHK5nAtm5u1VzDgzSuQD5yXzmkIZ
9/5m20T4pVI33rkyQLPqwCxwNQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:04:39 2025 by rpki-client