Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft
File:                     66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft (raw, json)
Hash identifier:          yC9YXYkwZUC8zRMAXv6x0tN9WrYSVgBwjrGu8VfuuHw=
Subject key identifier:   26:D1:E9:81:AF:C6:E9:3A:80:DF:97:DA:C6:3D:EF:BC:15:4E:88:B5
Authority key identifier: 66:D4:FE:79:ED:8A:8E:0D:19:50:41:C3:35:EE:B1:B7:48:A1:2F:0A
Certificate issuer:       /CN=66D4FE79ED8A8E0D195041C335EEB1B748A12F0A
Certificate serial:       60EABE37275E5EEAF189AD6F5ED3486A82EEE2D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft
Manifest number:          010D
Signing time:             Mon 20 Oct 2025 01:04:53 +0000
Manifest this update:     Mon 20 Oct 2025 00:59:53 +0000
Manifest next update:     Tue 21 Oct 2025 03:20:53 +0000
Files and hashes:         1: 323830343a343435343a3a2f33322d3438203d3e20323637363235.roa (hash: /WjYyisieWtzaIuL75i3lmBc4NoZr/0fgfXNHo2u2Is=)
                          2: 34352e37312e3233362e302f32342d3234203d3e20323637363235.roa (hash: VUTn+Y8YyzHneDvvRQcoyorG1q5ZDQSxPkSxk5vT2hY=)
                          3: 34352e37312e3233372e302f32342d3234203d3e20323637363235.roa (hash: iUnbmlTouB10xnx8TOK+EWUlJuN+cWOIF6iqgO4OrK4=)
                          4: 34352e37312e3233392e302f32342d3234203d3e20323637363235.roa (hash: hPSaKo57ySusHDN0f4CdKQ0QS4fQ2++vIqAa8DQVylk=)
                          5: 34352e37312e3233382e302f32342d3234203d3e20323637363235.roa (hash: usuDM2FAYkWoIM3CCbZCOoUM273ijs0GyzSA6Jp+vII=)
                          6: 66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.crl (hash: Fb1Nqbl/Nm8zmZld3rw7BbRremoeBojXvrQKvnsqBxA=)
                          7: 34352e37312e3233362e302f32322d3233203d3e20323637363235.roa (hash: 9Ayla/+sosVGnmtIxYAHJNLCvzWyM6XzIGWav1hvbBg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.crl
                          rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:20:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ea:be:37:27:5e:5e:ea:f1:89:ad:6f:5e:d3:48:6a:82:ee:e2:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66D4FE79ED8A8E0D195041C335EEB1B748A12F0A
        Validity
            Not Before: Oct 20 00:59:53 2025 GMT
            Not After : Oct 21 03:20:53 2025 GMT
        Subject: CN=26D1E981AFC6E93A80DF97DAC63DEFBC154E88B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:02:83:18:4c:f6:99:9a:75:14:de:52:b5:18:
                    72:5d:ea:01:1f:b1:c2:c5:28:9d:34:77:c4:ef:88:
                    22:a2:99:36:51:56:b8:7b:f2:06:d1:2b:dd:52:c5:
                    ca:fa:0a:54:4b:43:28:6a:e2:e0:42:85:5a:ce:e9:
                    92:81:60:6a:9c:af:f0:4f:2e:08:eb:11:41:6f:7f:
                    6a:f0:65:2e:11:70:b3:f5:53:9e:51:6a:37:dc:8e:
                    56:28:53:bc:1a:09:cb:d1:0d:28:43:23:fb:1c:03:
                    d7:bc:10:4c:a1:6c:02:40:41:49:59:64:57:56:7a:
                    85:e3:3c:19:3e:8c:69:cd:f3:35:05:61:6f:e7:9b:
                    96:19:fa:cf:8b:59:59:f3:47:61:3c:de:73:08:dc:
                    b4:d3:ae:30:bb:e3:a8:78:25:90:37:45:4b:05:78:
                    b2:97:0b:72:2e:ba:d0:ce:73:7d:09:07:19:bd:ae:
                    12:b7:4e:3e:0e:c5:ba:f4:ae:06:8d:20:a6:8b:8d:
                    2b:2e:80:73:6d:1f:54:af:0c:0a:2e:72:de:18:88:
                    60:f7:6e:fc:45:be:a9:a6:ae:31:28:1f:74:87:98:
                    d1:61:8c:df:7f:4b:ae:eb:0a:9a:d8:04:75:0a:94:
                    d2:4e:c7:e3:db:14:89:43:1d:eb:80:91:3e:84:49:
                    98:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D1:E9:81:AF:C6:E9:3A:80:DF:97:DA:C6:3D:EF:BC:15:4E:88:B5
            X509v3 Authority Key Identifier:
                keyid:66:D4:FE:79:ED:8A:8E:0D:19:50:41:C3:35:EE:B1:B7:48:A1:2F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:cf:26:c2:75:44:58:d7:e0:85:ef:a3:47:d9:d1:7d:e5:ab:
         93:9e:5c:6a:cf:d6:52:27:c0:3d:32:09:ec:cd:ff:29:33:c9:
         db:e0:6d:73:db:92:d5:97:63:7d:9a:18:ee:b2:dd:79:49:93:
         3c:42:36:ea:c0:05:d3:36:9d:39:e9:af:76:57:be:28:d7:5c:
         49:f7:8f:22:7a:05:3b:5a:42:40:f8:8e:0c:3a:97:15:60:33:
         12:14:29:f0:06:eb:77:4e:e0:d6:55:a2:43:3a:c1:c3:9f:63:
         b5:fe:49:f8:a9:64:00:0c:69:e7:63:b5:a1:6c:f3:e7:15:f3:
         89:c8:79:f5:94:c7:cc:69:38:99:00:f8:dd:ca:dc:ea:7f:39:
         15:af:fc:7b:4c:e4:f4:10:41:c9:cf:0b:18:34:cd:35:82:c9:
         cf:3e:e6:ee:fa:a0:ae:ba:c9:bf:09:ad:2c:ba:50:1a:19:60:
         91:05:e3:8f:c7:c5:af:6e:13:d5:02:7a:26:e1:bf:97:16:50:
         5f:02:3d:d4:29:4a:cc:e3:f1:86:9e:b1:e9:13:c3:09:c3:30:
         a7:da:ea:79:0c:eb:a5:28:8d:f9:b8:93:2e:7e:09:4f:26:fe:
         5c:25:c9:ba:66:20:9f:64:8d:93:2b:13:91:72:d4:0b:47:b3:
         b1:a9:75:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:08:24 2025 by rpki-client