Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.mft
File:                     2F9F8427BB2212C28E037F5F38698A3912DB7D20.mft (raw, json)
Hash identifier:          oZ3SCZAxHNq9szgbJarjMBYSmrSSRk3PkL/NqbpcswM=
Subject key identifier:   45:3E:B4:BF:AA:F2:F8:5B:69:D8:B1:7D:40:B4:31:24:30:33:F5:70
Authority key identifier: 2F:9F:84:27:BB:22:12:C2:8E:03:7F:5F:38:69:8A:39:12:DB:7D:20
Certificate issuer:       /CN=2F9F8427BB2212C28E037F5F38698A3912DB7D20
Certificate serial:       38BFE9EAC5A3D23874AEED187E81A7CC7A050372
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.mft
Manifest number:          2A
Signing time:             Mon 20 Oct 2025 03:25:26 +0000
Manifest this update:     Mon 20 Oct 2025 03:20:26 +0000
Manifest next update:     Tue 21 Oct 2025 05:16:26 +0000
Files and hashes:         1: 323830343a333036343a383030303a3a2f33332d3333203d3e20323634393438.roa (hash: R2TcYrDJy0DPhVlGHqpAiEqcstBNc1yDCEU98eCnnyA=)
                          2: 3136382e3233322e3139362e302f32332d3233203d3e20323634393438.roa (hash: 4Z15I+0U5E1ssSDUsaTL0123lczjTOKD1NFImgV1RZ4=)
                          3: 3136382e3233322e3139382e302f32342d3234203d3e20323634393438.roa (hash: 4X+pSTWd+BH1cHW+ek9IINrAs6n2CZWq7V0ElYKlEZQ=)
                          4: 323830343a333036343a3a2f33322d3332203d3e20323634393438.roa (hash: 5vpOFOEsRoS2ozGkhDGryk4jSAfAY10S72uq26TV8mg=)
                          5: 2F9F8427BB2212C28E037F5F38698A3912DB7D20.crl (hash: c++t70QwdxFxTXJtzzLs+EWOnS1qSX9nebg4SsZhQn4=)
                          6: 323830343a333036343a3a2f33332d3333203d3e20323634393438.roa (hash: /rO3jJafFeOGEAtNapgVox9P4yXMEg+mLPayRxjv7no=)
                          7: 3136382e3233322e3139392e302f32342d3234203d3e20323634393438.roa (hash: ojMaeDWJRF8DKg7DYmBqHOo7o42S64B6S4fyae/szgU=)
                          8: 3136382e3233322e3139372e302f32342d3234203d3e20323634393438.roa (hash: QzE75kSlnNEwl16krpFH4dg4BW6I5wRWdmczIaNJlkc=)
                          9: 3136382e3233322e3139382e302f32332d3233203d3e20323634393438.roa (hash: Ijrt4KM3SfhklIx2H/EU+LM9OmhcoVV7HtcYnjrxum8=)
                          10: 3136382e3233322e3139362e302f32342d3234203d3e20323634393438.roa (hash: 5GlH6XaAnMJW1tX7C0MnGeSbnYNtiuVJOkkniPV41Qo=)
                          11: 3136382e3233322e3139362e302f32322d3232203d3e20323634393438.roa (hash: AfgADzyhLigmS3IhMUQSDCXMYTHNZ0iSppW5VRd7xoA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.crl
                          rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:bf:e9:ea:c5:a3:d2:38:74:ae:ed:18:7e:81:a7:cc:7a:05:03:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F9F8427BB2212C28E037F5F38698A3912DB7D20
        Validity
            Not Before: Oct 20 03:20:26 2025 GMT
            Not After : Oct 21 05:16:26 2025 GMT
        Subject: CN=453EB4BFAAF2F85B69D8B17D40B431243033F570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f9:6a:9b:bd:9c:c3:a9:7c:ff:ec:ca:6b:45:
                    b4:5b:e1:d3:3b:a0:d3:d4:02:66:a9:16:c5:03:5a:
                    4e:d4:c3:f8:18:6d:03:53:0c:65:94:8c:78:3f:d0:
                    53:29:73:bc:13:87:46:6a:ed:59:c5:f0:95:51:d6:
                    48:e5:ef:a7:92:cb:2f:0d:06:54:24:8f:50:e7:e6:
                    1e:4d:6e:62:c5:bf:32:3a:e1:a7:09:3b:01:f3:e8:
                    bb:c4:ae:c7:69:cf:2d:6b:1d:56:3c:08:60:3c:2a:
                    12:f0:8f:86:cb:f5:ab:16:3e:71:fa:f6:64:ad:41:
                    9b:ce:ee:b6:a9:d5:cd:14:05:02:5a:a1:3c:fc:f6:
                    95:ea:1a:f9:87:ff:f3:d1:24:f1:6a:f0:db:d1:c9:
                    25:4a:cd:06:60:ae:2d:2d:f9:a4:97:3e:1b:b7:e2:
                    e2:34:54:50:c0:83:32:d0:e2:71:f0:39:44:d6:92:
                    a3:74:4a:35:da:d5:2d:31:f2:2f:08:b3:3e:c1:8e:
                    d4:06:63:84:b8:55:a4:40:29:a6:17:c5:42:b3:d5:
                    67:5b:99:f9:71:47:c0:99:8a:08:23:61:5e:f4:1c:
                    c9:5e:b1:79:f9:d0:a6:b6:15:66:db:42:6b:9a:c8:
                    28:28:bb:52:98:1c:bb:24:31:27:a6:d3:7b:25:8e:
                    0a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3E:B4:BF:AA:F2:F8:5B:69:D8:B1:7D:40:B4:31:24:30:33:F5:70
            X509v3 Authority Key Identifier:
                keyid:2F:9F:84:27:BB:22:12:C2:8E:03:7F:5F:38:69:8A:39:12:DB:7D:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:96:c8:f9:25:35:00:89:55:db:61:27:fa:47:ba:e2:df:f5:
         4e:16:b3:33:4e:fb:b0:c9:52:fb:e1:3e:4f:61:4f:dd:de:4d:
         28:37:09:cc:fe:e0:b9:76:fc:31:2c:cb:30:78:32:53:b2:16:
         da:1a:79:36:c1:87:5d:f2:41:f5:5a:c0:44:ab:6a:24:e8:20:
         e5:1c:20:fc:77:1a:4b:5b:08:9c:15:c1:28:aa:cc:33:12:17:
         4a:52:b9:20:bd:2f:59:f5:6a:70:cc:cc:8c:40:98:8d:16:d7:
         f6:6e:36:9d:6f:e5:f1:d0:9c:a8:59:7b:57:a9:5c:7e:62:e6:
         d7:9d:56:a9:9f:39:01:af:87:1c:8e:63:c9:10:88:af:f1:71:
         70:7b:f4:36:9b:92:bb:65:29:09:5c:d2:6e:6c:23:67:b2:be:
         97:95:d9:f1:f2:5e:ec:75:a2:a8:b4:1f:e9:73:83:75:b3:9a:
         63:92:ad:fd:56:e7:77:2f:ed:d0:9f:8e:66:65:3b:0f:07:0b:
         db:86:22:d7:3e:67:33:a4:17:05:4f:b0:49:b2:dd:41:10:b8:
         c5:a4:18:99:d6:44:e0:57:37:87:d0:db:ca:10:d1:19:c2:23:
         ce:7c:d2:e0:4c:d3:3a:e8:25:43:86:65:74:7c:a8:50:e3:65:
         7c:42:6d:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOL/p6sWj0jh0ru0YfoGnzHoFA3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY5Rjg0MjdCQjIyMTJDMjhFMDM3RjVGMzg2OThBMzkx
MkRCN0QyMDAeFw0yNTEwMjAwMzIwMjZaFw0yNTEwMjEwNTE2MjZaMDMxMTAvBgNV
BAMTKDQ1M0VCNEJGQUFGMkY4NUI2OUQ4QjE3RDQwQjQzMTI0MzAzM0Y1NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz+WqbvZzDqXz/7MprRbRb4dM7
oNPUAmapFsUDWk7Uw/gYbQNTDGWUjHg/0FMpc7wTh0Zq7VnF8JVR1kjl76eSyy8N
BlQkj1Dn5h5NbmLFvzI64acJOwHz6LvErsdpzy1rHVY8CGA8KhLwj4bL9asWPnH6
9mStQZvO7rap1c0UBQJaoTz89pXqGvmH//PRJPFq8NvRySVKzQZgri0t+aSXPhu3
4uI0VFDAgzLQ4nHwOUTWkqN0SjXa1S0x8i8Isz7BjtQGY4S4VaRAKaYXxUKz1Wdb
mflxR8CZiggjYV70HMlesXn50Ka2FWbbQmuayCgou1KYHLskMSem03sljgqtAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQURT60v6ry+Ftp2LF9QLQxJDAz9XAwHwYDVR0j
BBgwFoAUL5+EJ7siEsKOA39fOGmKORLbfSAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUJlbk02QkhhVTJteG5qeHdhSGFwYk5NZlJhWXJOS3VNakR0Uml2bjRq
Y1gvMC8yRjlGODQyN0JCMjIxMkMyOEUwMzdGNUYzODY5OEEzOTEyREI3RDIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGOUY4NDI3QkIyMjEyQzI4
RTAzN0Y1RjM4Njk4QTM5MTJEQjdEMjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUJlbk02QkhhVTJteG5qeHdhSGFwYk5NZlJhWXJOS3VNakR0Uml2bjRqY1gvMC8y
RjlGODQyN0JCMjIxMkMyOEUwMzdGNUYzODY5OEEzOTEyREI3RDIwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvpbI+SU1AIlV22En+ke64t/1ThazM077sMlS++E+T2FP3d5NKDcJzP7guXb8
MSzLMHgyU7IW2hp5NsGHXfJB9VrARKtqJOgg5Rwg/HcaS1sInBXBKKrMMxIXSlK5
IL0vWfVqcMzMjECYjRbX9m42nW/l8dCcqFl7V6lcfmLm151WqZ85Aa+HHI5jyRCI
r/FxcHv0NpuSu2UpCVzSbmwjZ7K+l5XZ8fJe7HWiqLQf6XODdbOaY5Kt/Vbndy/t
0J+OZmU7DwcL24Yi1z5nM6QXBU+wSbLdQRC4xaQYmdZE4Fc3h9DbyhDRGcIjznzS
4EzTOuglQ4ZldHyoUONlfEJtiw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:08:57 2025 by rpki-client