Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.mft
File:                     2855A71E150CFAB4453167F74DEE4613F739EA02.mft (raw, json)
Hash identifier:          jrWoZbN8iiivOB+xr4+AHXXSldDvyPWDfxfWqTXj1KQ=
Subject key identifier:   C9:6E:39:56:15:69:8F:46:92:AF:5B:2A:37:87:BD:CF:26:CD:06:5B
Authority key identifier: 28:55:A7:1E:15:0C:FA:B4:45:31:67:F7:4D:EE:46:13:F7:39:EA:02
Certificate issuer:       /CN=2855A71E150CFAB4453167F74DEE4613F739EA02
Certificate serial:       06C8AFC0DFD5708BACA4C2788A6E14AF14D55E3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.mft
Manifest number:          E0
Signing time:             Mon 20 Oct 2025 14:18:24 +0000
Manifest this update:     Mon 20 Oct 2025 14:13:24 +0000
Manifest next update:     Tue 21 Oct 2025 15:12:24 +0000
Files and hashes:         1: 3137372e33362e36382e302f32342d3234203d3e20323730393531.roa (hash: 7Okh+SXRNQjQa5fOkXfDbosLb0nUEjaGjU4QjG6p7dU=)
                          2: 2855A71E150CFAB4453167F74DEE4613F739EA02.crl (hash: LNJSl3Dsy2ClKKjp45rqBbKUNQnY3oxaNwk0/GXprYg=)
                          3: 3137372e33362e36392e302f32342d3234203d3e20323730393531.roa (hash: B+19bI+kr6Z2d08IfqBncU9ZASUecW1oIy0/EqKAbyU=)
                          4: 323830343a373430303a633030303a3a2f34302d3430203d3e20323730393531.roa (hash: +mB7+Ln3v26C5H7k/9q3QiKkmQNWgXA//LXEnTHml5k=)
                          5: 3137372e33362e37302e302f32332d3233203d3e20323730393531.roa (hash: T0uisPhEBXv8mI4+ibqv1hEDBIpV4KI+/rJcBTNDy94=)
                          6: 3137372e33362e37302e302f32342d3234203d3e20323730393531.roa (hash: QB/7FYKGMuSSTESFD3l9dOYNebWGpIMbGxvB3Q59iG8=)
                          7: 3137372e33362e37312e302f32342d3234203d3e20323730393531.roa (hash: 5T2+0XB0DlBcQ+y+y2vwtE7XEVqcQE/QcBCw+GVC2fU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.crl
                          rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c8:af:c0:df:d5:70:8b:ac:a4:c2:78:8a:6e:14:af:14:d5:5e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855A71E150CFAB4453167F74DEE4613F739EA02
        Validity
            Not Before: Oct 20 14:13:24 2025 GMT
            Not After : Oct 21 15:12:24 2025 GMT
        Subject: CN=C96E395615698F4692AF5B2A3787BDCF26CD065B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:df:17:c7:65:d3:a6:5b:88:88:cf:b9:53:3e:
                    23:00:eb:7c:c1:07:73:9b:fa:ce:2a:5c:68:2c:6f:
                    a5:ab:a4:8b:99:69:9c:c6:5d:7d:c7:96:d4:d2:59:
                    d4:e9:17:dc:a9:d4:99:1e:61:15:60:95:b6:ed:2d:
                    eb:16:76:25:c4:8e:70:3d:46:2b:2a:43:21:4d:83:
                    85:90:e4:6e:32:ce:33:36:c3:f2:34:fb:9f:c3:6e:
                    4e:92:74:17:fc:f6:cb:c9:53:b4:ec:7c:68:ff:b7:
                    47:7f:d2:d3:ba:b4:3f:e6:86:35:d4:b5:d2:9d:77:
                    d1:d8:fd:ad:2c:eb:58:5e:40:1a:60:b1:77:f8:10:
                    60:32:47:32:9d:ee:bd:d2:ae:f4:89:96:eb:2a:9a:
                    cd:38:ca:85:3f:6d:02:bd:1a:14:6b:5b:c0:35:69:
                    b3:85:b3:6e:75:e4:ab:4d:96:b2:3c:ff:c4:4d:1c:
                    2a:bc:51:d2:ae:87:d3:6c:4f:c6:38:35:51:a1:23:
                    83:80:41:eb:d0:2d:04:3d:f4:08:fc:50:3a:b5:50:
                    d1:a1:f9:5a:7f:52:68:6a:e1:d4:71:74:44:cc:b3:
                    29:ba:8c:61:32:95:9c:44:c8:0b:8c:44:dc:d3:e6:
                    b0:bc:68:86:2d:71:a3:a3:65:3f:a7:71:9c:1b:67:
                    27:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6E:39:56:15:69:8F:46:92:AF:5B:2A:37:87:BD:CF:26:CD:06:5B
            X509v3 Authority Key Identifier:
                keyid:28:55:A7:1E:15:0C:FA:B4:45:31:67:F7:4D:EE:46:13:F7:39:EA:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:85:f5:d2:40:13:44:76:be:e1:4b:4a:83:ab:63:af:b0:30:
         38:3f:55:e5:f0:29:25:9e:7c:eb:4a:7b:2c:53:a8:e4:3e:8f:
         50:40:b9:0c:86:c6:5d:a7:ff:77:93:5c:b7:5b:03:b5:4d:c5:
         45:2e:17:7d:15:a2:1d:95:f2:33:e7:53:42:f9:ee:f1:52:c5:
         31:1a:4c:23:e0:4d:b0:bf:e2:bb:8c:2b:89:aa:2a:04:3c:87:
         d9:91:2e:73:8e:1e:82:d4:8a:d8:71:62:96:ad:87:d0:03:8b:
         46:0b:e2:17:60:da:6b:b9:63:60:d7:5a:d9:2a:16:50:69:f1:
         b9:89:f9:90:90:35:75:ce:e2:42:18:b8:de:c6:2f:0e:d3:95:
         1c:c9:4e:c3:e7:4b:81:7f:43:84:11:75:30:a9:12:60:c3:3f:
         8c:cf:c9:f1:95:51:64:7c:72:05:0e:6c:e5:c4:1f:e7:56:ed:
         24:ee:3e:0f:8a:fc:b6:7a:62:23:04:0e:4d:f2:4f:35:2f:63:
         ec:1d:60:a2:e8:34:d6:d1:e7:cb:90:1b:57:9e:12:f1:0a:ef:
         21:f8:f4:1f:ce:a4:51:e3:4a:2f:6f:c1:d6:8f:ec:0e:bf:d0:
         8a:9e:de:89:65:fa:71:65:02:90:f3:64:9c:ed:91:c3:99:2e:
         10:20:5c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:55:14 2025 by rpki-client