Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft
File:                     3170E59F647D12F2C01381F789FEA19B94A7EA94.mft (raw, json)
Hash identifier:          aOlxKjAMp9bePfgkNmd8KsFs2rM9Is+/tKMgXnFLc0c=
Subject key identifier:   2B:4D:67:2A:19:2F:56:8B:6A:38:15:46:16:E2:30:6E:1A:3D:C3:3E
Authority key identifier: 31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94
Certificate issuer:       /CN=3170E59F647D12F2C01381F789FEA19B94A7EA94
Certificate serial:       6B5DC536E7912FF44C98D6CB3975FE05E63DEC5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft
Manifest number:          01DA
Signing time:             Mon 20 Oct 2025 01:48:58 +0000
Manifest this update:     Mon 20 Oct 2025 01:43:58 +0000
Manifest next update:     Tue 21 Oct 2025 03:24:58 +0000
Files and hashes:         1: 323830343a383236383a383030303a3a2f33342d3334203d3e20323732353138.roa (hash: dg++jRiYgNDqqn7koG7VCPM8YtEa8GnVfBh/0VMl//I=)
                          2: 323830343a383236383a3a2f33322d3332203d3e20323732353138.roa (hash: q7R7XejhMA0V5vkWZy0ZIvhEZuHvs9Cr/UvYs4FlnAM=)
                          3: 323830343a383236383a343030303a3a2f33342d3334203d3e20323732353138.roa (hash: 4tOjqevwqLCbIHFMqiUCrC3QvIg8BgWmeIZlTS/cwMg=)
                          4: 3170E59F647D12F2C01381F789FEA19B94A7EA94.crl (hash: 9dFyl1NPDPp6pX2w7GREXmln6LGxhePHQST/CnN4xBk=)
                          5: 323830343a383236383a3a2f33342d3334203d3e20323732353138.roa (hash: JRmzfNGpg/29BViI5J90w3B4mE9wS0FnfnNNBzvide4=)
                          6: 323830343a383236383a633030303a3a2f33342d3334203d3e20323732353138.roa (hash: lgKZpEMQXJgbbGxAppKdGMzEqXxmi5YjRfS1hmqnWqk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl
                          rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5d:c5:36:e7:91:2f:f4:4c:98:d6:cb:39:75:fe:05:e6:3d:ec:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3170E59F647D12F2C01381F789FEA19B94A7EA94
        Validity
            Not Before: Oct 20 01:43:58 2025 GMT
            Not After : Oct 21 03:24:58 2025 GMT
        Subject: CN=2B4D672A192F568B6A38154616E2306E1A3DC33E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:70:37:8b:22:b3:84:23:a2:84:9a:38:42:9d:
                    83:87:7a:86:06:f9:ce:8b:52:3d:5b:05:f6:76:53:
                    99:15:68:c3:e7:95:fc:b8:64:93:ba:77:9b:fd:c0:
                    48:a7:28:49:a3:6f:54:d7:e0:89:99:50:87:1b:bc:
                    ba:35:67:a8:9a:d0:00:d3:5a:ce:e2:d6:af:25:24:
                    36:a6:6b:6b:a2:5d:d8:58:36:9c:b1:b1:f6:11:f2:
                    a4:30:13:17:3e:d7:47:e9:be:5d:7b:d5:c8:af:4b:
                    de:b2:9c:5c:fd:98:ed:b4:70:92:de:7a:5f:46:f7:
                    9f:91:75:92:4e:92:4d:27:77:15:65:a2:70:4e:06:
                    19:a3:bb:95:03:e3:9b:47:93:09:a7:30:9e:81:7c:
                    be:b4:40:03:58:87:52:15:b5:f8:01:95:65:39:8a:
                    b8:64:8a:82:3a:e5:90:e6:17:e9:84:c2:73:bd:7e:
                    21:eb:74:aa:07:68:e7:5a:63:7d:e5:e8:91:05:af:
                    de:4e:66:c3:54:00:05:8a:f4:77:a5:2c:24:16:0b:
                    b0:40:6d:10:93:9b:3d:7b:11:47:86:e6:81:8f:34:
                    9d:0b:c4:62:4e:c6:94:f3:5d:4e:c2:b7:89:65:a4:
                    22:64:af:a4:05:76:39:a5:54:df:1c:af:96:26:f4:
                    fd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4D:67:2A:19:2F:56:8B:6A:38:15:46:16:E2:30:6E:1A:3D:C3:3E
            X509v3 Authority Key Identifier:
                keyid:31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:13:c6:fd:04:83:b2:5e:a9:be:6e:69:6a:86:7e:a8:ac:cc:
         44:8b:1a:27:ed:89:e1:c3:77:71:9b:09:50:7b:59:d0:d0:de:
         6f:5c:0e:6c:fc:65:90:16:1e:05:62:a0:fd:a8:ad:07:3f:1f:
         29:f7:e7:0d:f8:55:b6:6e:56:28:f2:47:17:2e:f2:f3:4b:17:
         86:f5:d8:f8:19:b3:83:8e:0e:22:10:d2:82:73:a1:6f:84:b6:
         2e:7b:8b:25:a2:f8:19:1b:8a:5c:b8:e9:e5:4f:ba:bb:6d:6e:
         50:e8:24:9d:7d:4e:4f:e8:2a:3c:eb:c3:2d:d2:7e:0c:1b:6a:
         e0:4d:d7:f2:9d:ae:1d:09:ca:09:ea:35:88:de:8f:99:e7:f9:
         ca:9b:4e:d0:c8:ef:e6:91:fe:d0:1b:a0:17:6c:55:ef:c9:7e:
         81:e1:d2:93:f2:43:29:04:3e:2e:72:73:97:86:07:55:18:13:
         46:d5:d6:1d:22:8d:8d:65:8d:a2:4e:70:3e:a7:24:89:79:16:
         ef:c8:05:04:05:87:47:20:c1:ab:64:54:9b:95:80:03:b5:da:
         7f:88:cf:60:2e:cd:00:1a:5b:80:93:16:92:41:fa:9b:8e:93:
         9d:00:20:9e:ab:84:88:26:64:76:eb:92:41:34:d8:d3:8a:7b:
         a7:2e:2c:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUa13FNueRL/RMmNbLOXX+BeY97F8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE3MEU1OUY2NDdEMTJGMkMwMTM4MUY3ODlGRUExOUI5
NEE3RUE5NDAeFw0yNTEwMjAwMTQzNThaFw0yNTEwMjEwMzI0NThaMDMxMTAvBgNV
BAMTKDJCNEQ2NzJBMTkyRjU2OEI2QTM4MTU0NjE2RTIzMDZFMUEzREMzM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCcDeLIrOEI6KEmjhCnYOHeoYG
+c6LUj1bBfZ2U5kVaMPnlfy4ZJO6d5v9wEinKEmjb1TX4ImZUIcbvLo1Z6ia0ADT
Ws7i1q8lJDama2uiXdhYNpyxsfYR8qQwExc+10fpvl171civS96ynFz9mO20cJLe
el9G95+RdZJOkk0ndxVlonBOBhmju5UD45tHkwmnMJ6BfL60QANYh1IVtfgBlWU5
irhkioI65ZDmF+mEwnO9fiHrdKoHaOdaY33l6JEFr95OZsNUAAWK9HelLCQWC7BA
bRCTmz17EUeG5oGPNJ0LxGJOxpTzXU7Ct4llpCJkr6QFdjmlVN8cr5Ym9P0LAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUK01nKhkvVotqOBVGFuIwbho9wz4wHwYDVR0j
BBgwFoAUMXDln2R9EvLAE4H3if6hm5Sn6pQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUIyR1RpN3BZakVmR1d4WURhNkZqYUx0SmVzaFFGWEpzVTlTc1pnVkY2
eHQvMC8zMTcwRTU5RjY0N0QxMkYyQzAxMzgxRjc4OUZFQTE5Qjk0QTdFQTk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxNzBFNTlGNjQ3RDEyRjJD
MDEzODFGNzg5RkVBMTlCOTRBN0VBOTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OUIyR1RpN3BZakVmR1d4WURhNkZqYUx0SmVzaFFGWEpzVTlTc1pnVkY2eHQvMC8z
MTcwRTU5RjY0N0QxMkYyQzAxMzgxRjc4OUZFQTE5Qjk0QTdFQTk0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkRPG/QSDsl6pvm5paoZ+qKzMRIsaJ+2J4cN3cZsJUHtZ0NDeb1wObPxlkBYe
BWKg/aitBz8fKffnDfhVtm5WKPJHFy7y80sXhvXY+Bmzg44OIhDSgnOhb4S2LnuL
JaL4GRuKXLjp5U+6u21uUOgknX1OT+gqPOvDLdJ+DBtq4E3X8p2uHQnKCeo1iN6P
mef5yptO0Mjv5pH+0BugF2xV78l+geHSk/JDKQQ+LnJzl4YHVRgTRtXWHSKNjWWN
ok5wPqckiXkW78gFBAWHRyDBq2RUm5WAA7Xaf4jPYC7NABpbgJMWkkH6m46TnQAg
nquEiCZkduuSQTTY04p7py4siw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:26:41 2025 by rpki-client