Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.mft
File:                     430FB5BDF465EB5283536F57FCCA377B820BED2A.mft (raw, json)
Hash identifier:          poh8gZY6siB4ld4Qq1ZbnVTHdKny19f4au6w8hf02Qk=
Subject key identifier:   52:54:24:63:57:EE:9E:B6:2B:F8:E1:0F:E2:63:CB:FC:B1:FF:6D:06
Authority key identifier: 43:0F:B5:BD:F4:65:EB:52:83:53:6F:57:FC:CA:37:7B:82:0B:ED:2A
Certificate issuer:       /CN=430FB5BDF465EB5283536F57FCCA377B820BED2A
Certificate serial:       2CAD79F1492C898D4FCF576A1BD287C811E8BF86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430FB5BDF465EB5283536F57FCCA377B820BED2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.mft
Manifest number:          D0
Signing time:             Sun 19 Oct 2025 14:09:37 +0000
Manifest this update:     Sun 19 Oct 2025 14:04:37 +0000
Manifest next update:     Mon 20 Oct 2025 16:34:37 +0000
Files and hashes:         1: 34352e3138362e39352e302f32342d3234203d3e20323638313833.roa (hash: ofd2wR6pH72dv/mAMqhhf7mC9OiE6Aalc21ZieASeHI=)
                          2: 430FB5BDF465EB5283536F57FCCA377B820BED2A.crl (hash: otpsbSOOlMYsNnzyUPcmM3Q27nJyIvUw8GgM3yl5fYA=)
                          3: 34352e3138362e39322e302f32332d3233203d3e20323638313833.roa (hash: MyB8/jddpLFcuJ+dczA5Lejh/l6u4ItuqQCLLShwLKc=)
                          4: 34352e3137312e32372e302f32342d3234203d3e20323638313833.roa (hash: iZbaBf2rq2JjM4lcv/PRGFzUONmMJjth7yHXA+/m7EY=)
                          5: 34352e3138362e39322e302f32342d3234203d3e20323638313833.roa (hash: d/SIiWYDTCdfpDzkwCwhavyT5CFLWN+IbJsBkxLqR0c=)
                          6: 34352e3137312e32352e302f32342d3234203d3e20323638313833.roa (hash: ppxaf1gfv0HFGEe0KHbY11vXWeC7+QQcz+W+QIoq/+c=)
                          7: 34352e3137312e32362e302f32342d3234203d3e20323638313833.roa (hash: FiGpPzDufq5aJ4/Ne3HxZ0+I/exmSWpZRdGaFBicVqQ=)
                          8: 34352e3138362e39332e302f32342d3234203d3e20323638313833.roa (hash: gQMe/xy6ntj2MeHSwDbqry6Z6Qib92CjffengjjoD+c=)
                          9: 34352e3137312e32342e302f32342d3234203d3e20323638313833.roa (hash: bAtA49PqSpHSTgX8hoWKZmjkkXF0l8s3srKFQfFbSvE=)
                          10: 34352e3138362e39342e302f32342d3234203d3e20323638313833.roa (hash: flB398YvehjMqBIzUEV5bg3oI3/cBMHC1cB1qdZP+uc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.crl
                          rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430FB5BDF465EB5283536F57FCCA377B820BED2A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 16:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ad:79:f1:49:2c:89:8d:4f:cf:57:6a:1b:d2:87:c8:11:e8:bf:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430FB5BDF465EB5283536F57FCCA377B820BED2A
        Validity
            Not Before: Oct 19 14:04:37 2025 GMT
            Not After : Oct 20 16:34:37 2025 GMT
        Subject: CN=5254246357EE9EB62BF8E10FE263CBFCB1FF6D06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a6:12:f9:c3:aa:21:4f:4b:bb:4a:c8:73:0a:
                    98:00:60:81:3f:ea:34:d9:bf:6f:e9:dd:fb:aa:b7:
                    a0:c0:e2:1f:9c:0b:c8:ef:ec:80:3c:98:fa:d4:1d:
                    c7:c5:02:23:f8:62:99:67:a5:e8:4b:72:b1:94:d1:
                    b6:ce:05:18:5d:0e:88:5b:31:ca:23:66:d7:74:c1:
                    5c:2c:58:5c:cb:ae:b3:fd:98:be:6e:20:07:5f:13:
                    4f:f2:3d:02:8d:b0:b6:8e:1e:8a:be:74:d6:cd:b3:
                    dc:1a:e8:c9:dd:30:45:4f:14:90:37:52:4a:23:a9:
                    5d:bc:48:53:fa:3b:29:58:c8:a5:70:11:89:fa:3a:
                    b0:fc:04:a2:9a:27:94:8d:d6:3d:12:09:4b:2a:f5:
                    76:03:62:98:fc:fe:59:4c:04:5a:7b:5c:98:d2:98:
                    7f:a0:1b:ce:24:3f:7f:ee:a7:8b:7d:01:f1:0e:93:
                    b1:ee:da:8c:45:d0:77:ae:16:45:6f:79:15:3f:61:
                    eb:8f:a3:f1:9d:6c:2f:c4:4b:d0:d6:b5:98:e2:29:
                    c2:c2:b5:e6:35:a7:de:e5:12:6c:34:31:17:73:12:
                    3b:8f:1a:73:92:3c:56:87:ab:52:46:6b:5f:dd:3f:
                    03:64:0b:91:b3:7d:86:b8:b4:d6:1a:0b:2a:f4:98:
                    1e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:54:24:63:57:EE:9E:B6:2B:F8:E1:0F:E2:63:CB:FC:B1:FF:6D:06
            X509v3 Authority Key Identifier:
                keyid:43:0F:B5:BD:F4:65:EB:52:83:53:6F:57:FC:CA:37:7B:82:0B:ED:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430FB5BDF465EB5283536F57FCCA377B820BED2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:cf:7d:2f:e9:36:65:96:be:93:5f:e0:7a:ef:2b:5c:6e:c7:
         12:59:3b:8f:71:51:03:54:26:f5:1c:fd:09:58:6d:44:a2:e3:
         9a:9f:8f:98:6c:f2:86:f9:a3:0e:ab:c1:ae:63:17:14:c0:bc:
         d3:fa:4e:62:ce:24:32:bf:26:75:47:0d:84:24:16:e7:eb:fe:
         f9:5f:de:6d:4e:46:3d:fc:a3:36:aa:56:27:0c:44:cd:c2:55:
         4c:8c:73:e3:68:ad:8f:ce:de:34:d0:1b:79:9a:a4:9d:41:ae:
         eb:cc:a2:02:36:4d:db:ea:12:6d:12:b2:43:ba:28:be:fb:0f:
         02:d4:a7:ff:72:ce:c9:59:5f:e8:0d:b2:b1:e9:17:9c:c7:b2:
         dc:56:72:ba:a0:50:47:2a:a0:56:50:23:13:a6:79:8d:f1:55:
         0e:09:c4:5a:e1:ec:c5:68:f1:6c:0f:7d:eb:8d:f4:24:5f:58:
         0e:b7:b2:18:95:1f:b4:07:ac:98:85:d7:4b:c6:fb:46:99:ab:
         af:9b:3e:74:4a:d3:a9:c6:5a:31:7f:37:4d:e8:73:4c:2a:e7:
         4a:f8:cf:fc:25:db:3d:8c:cd:41:17:73:af:f5:a8:78:fe:43:
         c1:90:53:94:bb:72:e0:cb:e2:f3:68:e3:c1:a6:cb:19:24:ee:
         d5:82:22:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:06:02 2025 by rpki-client