Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.mft
File:                     0D544ED42C6259C03F729BAE35330B8BC76BC251.mft (raw, json)
Hash identifier:          bpRW4upKS6505VJHwchkDGOiFFc4m34C4VTg/2Rpp7o=
Subject key identifier:   7C:1D:14:7F:06:E9:D4:B4:46:F3:CF:3F:3B:52:53:AE:8A:4F:5D:BD
Authority key identifier: 0D:54:4E:D4:2C:62:59:C0:3F:72:9B:AE:35:33:0B:8B:C7:6B:C2:51
Certificate issuer:       /CN=0D544ED42C6259C03F729BAE35330B8BC76BC251
Certificate serial:       451CE1E2B2B9FFAB7467CD6402727ED344D0AE1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D544ED42C6259C03F729BAE35330B8BC76BC251.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.mft
Manifest number:          01D2
Signing time:             Mon 20 Oct 2025 11:25:01 +0000
Manifest this update:     Mon 20 Oct 2025 11:20:01 +0000
Manifest next update:     Tue 21 Oct 2025 13:21:01 +0000
Files and hashes:         1: 0D544ED42C6259C03F729BAE35330B8BC76BC251.crl (hash: XffsMJKC6cP+0O3RJ4jjA0H6ZwBXM7lestKfVJPiepk=)
                          2: 3137372e3132392e36362e302f32332d3234203d3e20323632333839.roa (hash: KsWHaJ7vdXHcYweiBw7WF5loPstR/Hj2nfarSdw48sQ=)
                          3: 3137372e3132392e36342e302f32342d3234203d3e20323732373133.roa (hash: ge+yYFJNirKnVCEbRb4Q5GE2Vr5gFCwDtAoAQwvImVM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.crl
                          rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D544ED42C6259C03F729BAE35330B8BC76BC251.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:18:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1c:e1:e2:b2:b9:ff:ab:74:67:cd:64:02:72:7e:d3:44:d0:ae:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D544ED42C6259C03F729BAE35330B8BC76BC251
        Validity
            Not Before: Oct 20 11:20:01 2025 GMT
            Not After : Oct 21 13:21:01 2025 GMT
        Subject: CN=7C1D147F06E9D4B446F3CF3F3B5253AE8A4F5DBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bb:d7:6d:94:5c:34:88:78:c7:f1:d5:cf:70:
                    55:93:98:92:c2:1c:af:96:f7:64:39:f3:58:7a:6f:
                    c1:70:18:95:8b:0e:40:0e:d1:7b:a5:13:c0:9b:42:
                    c3:88:ad:f0:bd:e0:b0:5d:e5:01:53:af:1f:01:48:
                    75:69:68:76:e6:90:10:4d:19:1f:73:85:19:1b:2b:
                    19:a6:e8:7a:4d:11:58:58:fa:a7:9e:b2:3e:d1:bf:
                    d2:41:56:dc:af:16:b6:bc:bc:be:5a:ce:47:a2:35:
                    90:03:8d:b3:1e:e4:c5:81:10:4d:c2:01:80:10:2d:
                    56:e0:b9:01:9b:5c:50:09:8f:e2:da:df:95:8b:3d:
                    d4:ff:5b:f9:93:c4:26:a0:dd:7d:5d:83:2c:54:43:
                    e8:ae:44:ff:94:f9:a3:86:5d:58:50:98:d7:27:73:
                    42:09:2f:dc:3b:ba:f5:2d:14:cb:33:7e:ed:a9:d8:
                    45:db:a5:7a:56:c4:6f:f0:43:1a:d2:c1:77:d0:54:
                    6f:6f:8c:6e:8c:a7:63:28:35:0d:99:51:a6:6c:c6:
                    a7:6c:3f:4e:ca:3f:c0:3d:9c:39:50:50:65:b9:e9:
                    99:2b:44:bb:e5:de:6f:8c:f9:fb:1b:16:5f:bd:f8:
                    a9:04:4b:bc:c9:da:f6:20:c0:df:26:b6:fb:6a:86:
                    87:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1D:14:7F:06:E9:D4:B4:46:F3:CF:3F:3B:52:53:AE:8A:4F:5D:BD
            X509v3 Authority Key Identifier:
                keyid:0D:54:4E:D4:2C:62:59:C0:3F:72:9B:AE:35:33:0B:8B:C7:6B:C2:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D544ED42C6259C03F729BAE35330B8BC76BC251.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:de:66:81:99:4e:79:55:a9:87:1c:f8:6e:f5:bb:d8:45:ca:
         11:69:20:fe:b6:e4:81:74:6c:86:db:73:8a:2d:ab:9a:d4:d8:
         f8:00:16:fa:70:ef:19:1d:2d:c5:ab:0b:9b:b0:49:fb:6a:1f:
         3f:4f:71:35:e0:c1:58:b2:a7:7a:ad:0d:1a:2e:92:8f:41:98:
         14:95:2d:f8:49:16:c8:60:82:e8:79:53:15:ef:a2:23:5f:57:
         d3:84:39:a3:08:68:ff:2f:9d:86:df:36:99:3e:0d:59:1c:06:
         2d:96:db:bd:fc:92:e1:3b:26:ec:4f:e2:68:4e:13:1b:1c:ac:
         9e:a0:6f:02:95:e5:44:60:2e:67:d8:ea:26:7f:ce:58:9b:8f:
         91:44:1b:95:ad:42:31:88:e4:34:ba:bd:a3:ef:aa:1f:fa:23:
         3b:e3:96:01:3e:b1:2c:17:f9:b6:4d:61:85:a9:58:31:d6:70:
         46:f1:53:4a:71:41:4c:24:2b:fd:a8:cb:fe:55:3e:5e:db:c0:
         3c:b4:0a:84:8b:f8:17:27:ed:f9:bb:d0:30:92:ac:e4:b8:8c:
         3d:97:7c:37:3f:37:0b:64:c1:ec:f2:00:8c:7d:4e:ec:31:9f:
         17:c2:a2:53:d5:29:fa:f9:56:cc:ed:d8:79:bb:6b:77:6f:3a:
         26:a8:dc:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURRzh4rK5/6t0Z81kAnJ+00TQrhwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ1NDRFRDQyQzYyNTlDMDNGNzI5QkFFMzUzMzBCOEJD
NzZCQzI1MTAeFw0yNTEwMjAxMTIwMDFaFw0yNTEwMjExMzIxMDFaMDMxMTAvBgNV
BAMTKDdDMUQxNDdGMDZFOUQ0QjQ0NkYzQ0YzRjNCNTI1M0FFOEE0RjVEQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClu9dtlFw0iHjH8dXPcFWTmJLC
HK+W92Q581h6b8FwGJWLDkAO0XulE8CbQsOIrfC94LBd5QFTrx8BSHVpaHbmkBBN
GR9zhRkbKxmm6HpNEVhY+qeesj7Rv9JBVtyvFra8vL5azkeiNZADjbMe5MWBEE3C
AYAQLVbguQGbXFAJj+La35WLPdT/W/mTxCag3X1dgyxUQ+iuRP+U+aOGXVhQmNcn
c0IJL9w7uvUtFMszfu2p2EXbpXpWxG/wQxrSwXfQVG9vjG6Mp2MoNQ2ZUaZsxqds
P07KP8A9nDlQUGW56ZkrRLvl3m+M+fsbFl+9+KkES7zJ2vYgwN8mtvtqhocbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUfB0Ufwbp1LRG888/O1JTropPXb0wHwYDVR0j
BBgwFoAUDVRO1CxiWcA/cpuuNTMLi8drwlEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUVXMnFhenY1RlFNcjNhaFY1cGF4aXlXaHNUQzF6OVQyeWtMNDRWOUxY
cHkvMC8wRDU0NEVENDJDNjI1OUMwM0Y3MjlCQUUzNTMzMEI4QkM3NkJDMjUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBENTQ0RUQ0MkM2MjU5QzAz
RjcyOUJBRTM1MzMwQjhCQzc2QkMyNTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUVXMnFhenY1RlFNcjNhaFY1cGF4aXlXaHNUQzF6OVQyeWtMNDRWOUxYcHkvMC8w
RDU0NEVENDJDNjI1OUMwM0Y3MjlCQUUzNTMzMEI4QkM3NkJDMjUxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX95mgZlOeVWphxz4bvW72EXKEWkg/rbkgXRshttzii2rmtTY+AAW+nDvGR0t
xasLm7BJ+2ofP09xNeDBWLKneq0NGi6Sj0GYFJUt+EkWyGCC6HlTFe+iI19X04Q5
owho/y+dht82mT4NWRwGLZbbvfyS4Tsm7E/iaE4TGxysnqBvApXlRGAuZ9jqJn/O
WJuPkUQbla1CMYjkNLq9o++qH/ojO+OWAT6xLBf5tk1hhalYMdZwRvFTSnFBTCQr
/ajL/lU+XtvAPLQKhIv4Fyft+bvQMJKs5LiMPZd8Nz83C2TB7PIAjH1O7DGfF8Ki
U9Up+vlWzO3Yebtrd286Jqjcmg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:16:50 2025 by rpki-client