Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.mft
File:                     06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.mft (raw, json)
Hash identifier:          PZkKI/wVhtX4L7ertOQQk0luCN+vd6/ol2jD1NJbNRo=
Subject key identifier:   F7:97:19:1F:7E:6C:74:87:56:37:20:BA:6C:15:E1:3A:2C:47:4A:73
Authority key identifier: 06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB
Certificate issuer:       /CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
Certificate serial:       017E0AFDD596114CD9722B821DAE4B15341C81E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.mft
Manifest number:          02F1
Signing time:             Mon 20 Oct 2025 01:40:00 +0000
Manifest this update:     Mon 20 Oct 2025 01:35:00 +0000
Manifest next update:     Tue 21 Oct 2025 03:12:00 +0000
Files and hashes:         1: 3137372e38342e34322e302f32332d3233203d3e203532373038.roa (hash: YvwgD6fKowYuzWRPQe0uYtKEhEj2PboBzIToCJOMGKo=)
                          2: 3137372e38342e34302e302f32322d3232203d3e203532373038.roa (hash: 8lAxpoHN0cPLmBISxaokeboqnT1u07//nilPkj7iMjg=)
                          3: 3133382e3131382e3130302e302f32322d3232203d3e203532373038.roa (hash: b6iIVydTh43XokrS/1WVUXDbFQjVZ4DainVRRNA3Ucs=)
                          4: 3133382e3131382e3130322e302f32332d3233203d3e203532373038.roa (hash: 6SMyLXYm7o+6nD4HiC1sx57AD5tgiDGsqISt31nmv/M=)
                          5: 323830343a323530343a3a2f33322d3332203d3e203532373038.roa (hash: bdoIk1Ag9RA6dAVTEOU+HWP/8MI8aK3J9BHrjAzueqg=)
                          6: 3133382e3131382e3130302e302f32332d3233203d3e203532373038.roa (hash: VJikl/3nm/8I6Y6J82gL5vQrKAHsyoQCf/eCIkwxPJ0=)
                          7: 06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.crl (hash: 3jqxprqHpsOWsuUDLQhyG96+jKib5oU9ITtQ9e170eE=)
                          8: 3137372e38342e34302e302f32332d3233203d3e203532373038.roa (hash: txbtQ4+KsBmDnzeVugvTddlXwMd2CaM4d5jfa1CwLzo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.crl
                          rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7e:0a:fd:d5:96:11:4c:d9:72:2b:82:1d:ae:4b:15:34:1c:81:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
        Validity
            Not Before: Oct 20 01:35:00 2025 GMT
            Not After : Oct 21 03:12:00 2025 GMT
        Subject: CN=F797191F7E6C7487563720BA6C15E13A2C474A73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f4:ad:08:e6:57:b7:b5:60:0f:df:86:b6:0f:
                    39:77:f3:dc:90:28:de:ac:eb:6b:60:55:8f:2e:cc:
                    0b:35:1d:ae:f9:a0:0d:26:a2:e6:7b:20:fc:1e:ea:
                    ac:d9:90:76:a3:a1:6e:92:fa:af:a5:8f:fb:61:80:
                    40:12:58:06:54:11:d1:7e:5b:a9:91:57:40:42:0e:
                    f1:2d:01:87:e0:60:61:d7:7f:88:e6:38:95:3e:03:
                    ed:90:a7:90:5e:f7:be:f4:85:65:62:b8:01:e8:e6:
                    8f:da:50:fa:77:09:8b:d4:af:62:3d:50:d0:43:d3:
                    7b:55:3d:72:f9:3c:22:17:77:f5:c1:e7:ae:e1:1d:
                    9e:8c:33:e7:ce:5a:1b:c4:5c:18:e1:b7:a5:b8:1b:
                    3f:28:31:5d:88:a4:39:1f:3d:ec:1a:5f:86:90:cf:
                    bb:f6:17:54:c0:5a:f8:16:b7:a0:51:ec:d5:b0:5d:
                    05:20:12:ae:3a:72:b5:ec:62:ff:49:e3:1e:19:6b:
                    a9:60:93:35:5e:88:00:98:8c:86:35:a8:1b:09:0c:
                    de:ab:89:0a:ee:c2:2a:90:52:58:52:f9:b6:c7:c6:
                    f9:b6:d9:67:9e:42:35:40:41:38:79:cf:f7:8c:8a:
                    04:34:87:b2:23:a3:12:74:a1:ef:9e:9a:26:e0:20:
                    34:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:97:19:1F:7E:6C:74:87:56:37:20:BA:6C:15:E1:3A:2C:47:4A:73
            X509v3 Authority Key Identifier:
                keyid:06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:cc:17:c6:d9:e8:b6:93:2c:e0:30:3d:52:4b:ac:1d:18:34:
         bf:ce:cb:be:18:36:e7:25:cf:8f:f5:34:6f:6e:76:c4:58:2c:
         5b:7c:24:80:82:3c:39:15:f0:70:6a:e1:a9:9f:02:a6:ac:10:
         11:de:00:7d:58:cc:c2:b6:dc:80:9f:09:1d:a3:21:a5:31:90:
         2e:5f:2e:df:41:6c:b4:5b:b4:f6:ff:dd:ca:3f:14:82:f5:4f:
         e6:dd:17:8e:e9:f4:da:96:80:ee:dc:a1:71:ea:8c:7e:ee:7b:
         eb:3c:28:6f:4c:96:18:24:f9:2f:fd:12:89:91:06:2a:3f:c3:
         ab:32:e5:f7:45:dd:94:9a:4b:6b:a6:40:20:bb:e3:25:6d:d4:
         2c:cf:9d:a4:50:b5:c3:df:68:c4:ba:1c:b0:96:e7:87:69:0c:
         ba:8d:81:62:f1:7b:62:e7:a9:52:4f:ca:71:8b:ea:0c:68:46:
         b4:33:4e:d4:1c:3c:39:ae:7a:1e:79:f5:f6:c9:f3:c4:66:8a:
         a7:0f:d9:9c:14:88:f4:7f:63:bf:1b:3f:1e:e8:8a:07:22:c2:
         db:73:f3:bc:a2:51:0b:11:88:5d:2c:7e:e9:c4:4d:b0:13:3a:
         39:c4:ff:60:54:c2:3f:e7:b9:7b:f6:3e:14:c7:25:5e:9d:ac:
         9e:ae:da:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:37:53 2025 by rpki-client