Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.mft
File:                     DEF78BE3350057ACC8FE96EE5D24BD578A03464E.mft (raw, json)
Hash identifier:          6I9vLqOmkBaJcZaM2xJrds9HxehxrQ++/Bx7cil7YJo=
Subject key identifier:   C0:9F:65:54:BC:81:E3:32:A1:C0:99:87:11:B7:A0:EF:86:16:17:2C
Authority key identifier: DE:F7:8B:E3:35:00:57:AC:C8:FE:96:EE:5D:24:BD:57:8A:03:46:4E
Certificate issuer:       /CN=DEF78BE3350057ACC8FE96EE5D24BD578A03464E
Certificate serial:       302E35905A04E494768D3C0C29D277230DB14FC3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.mft
Manifest number:          0103
Signing time:             Mon 20 Oct 2025 07:20:51 +0000
Manifest this update:     Mon 20 Oct 2025 07:15:51 +0000
Manifest next update:     Tue 21 Oct 2025 10:54:51 +0000
Files and hashes:         1: 323830343a353033303a3a2f33322d3438203d3e20323638333734.roa (hash: bmCfoJVjmMhZ9Zxei7VwsBUkWDIqf9LkUDnbJiwOoO8=)
                          2: 34352e3233392e32342e302f32322d3234203d3e20323638333734.roa (hash: pjcENXhwN39gPAIuzrYcrkt1/jTP1rUfHtlUwzsHBWs=)
                          3: DEF78BE3350057ACC8FE96EE5D24BD578A03464E.crl (hash: btKFwq3IYXRC4FywX974Q88mugngMQ/XFA7WDcPBkIY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.crl
                          rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:2e:35:90:5a:04:e4:94:76:8d:3c:0c:29:d2:77:23:0d:b1:4f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEF78BE3350057ACC8FE96EE5D24BD578A03464E
        Validity
            Not Before: Oct 20 07:15:51 2025 GMT
            Not After : Oct 21 10:54:51 2025 GMT
        Subject: CN=C09F6554BC81E332A1C0998711B7A0EF8616172C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:df:ff:a0:02:e4:5e:2c:85:5d:d8:b7:7d:49:
                    06:5c:97:09:d3:48:ec:eb:46:47:bf:2a:bf:26:2e:
                    2e:41:3b:b5:ba:53:5b:6d:79:76:af:94:23:bf:ac:
                    fc:5f:6c:81:3a:4f:90:7d:df:2a:22:7f:4f:40:18:
                    0d:51:3d:a8:e0:49:67:3f:7e:87:2b:61:d5:e7:ed:
                    30:8c:70:e2:56:c9:56:be:1a:b5:a5:51:57:09:31:
                    f4:c1:4f:c9:9f:b5:a4:6d:4b:a4:f2:e3:9b:9d:24:
                    86:d7:62:f7:4e:7c:ad:55:c7:08:fb:1f:97:fc:d5:
                    3b:9e:23:1d:dc:94:26:29:43:b5:3e:a2:48:81:d2:
                    59:22:48:0d:d3:7e:34:1a:91:67:7e:54:74:7c:d8:
                    79:90:3d:6a:54:5c:f0:47:ad:c1:b2:19:9b:3e:7a:
                    78:96:34:97:23:38:53:63:b3:53:b9:5c:8c:e4:9c:
                    79:3a:cf:3d:24:17:3f:38:c1:b2:17:ed:1e:57:29:
                    41:e9:35:9e:0b:4d:c7:be:82:e1:41:16:81:55:0c:
                    76:26:ca:55:b9:09:4a:10:94:11:4a:45:82:b0:9e:
                    1e:fe:77:47:c9:b9:0f:f7:57:ca:31:89:98:82:4d:
                    53:39:c5:2c:01:2c:9e:2f:80:ce:1f:40:bf:50:5f:
                    58:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9F:65:54:BC:81:E3:32:A1:C0:99:87:11:B7:A0:EF:86:16:17:2C
            X509v3 Authority Key Identifier:
                keyid:DE:F7:8B:E3:35:00:57:AC:C8:FE:96:EE:5D:24:BD:57:8A:03:46:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c6:60:a4:84:bd:e9:69:b3:6c:63:e2:80:f3:74:e5:71:3a:
         29:43:a5:7d:32:a6:38:11:5d:45:13:83:96:f2:ad:24:a9:16:
         e8:87:db:f0:c6:6c:32:d6:c1:0b:90:b7:32:3f:51:63:86:e5:
         f4:99:35:13:e0:47:86:a2:cf:b2:1c:f4:90:fd:b2:e0:1a:11:
         c2:24:b6:b8:b6:30:7c:3c:a0:ca:95:88:52:97:db:59:99:55:
         be:a8:da:2e:2d:50:c9:0b:d3:30:5f:54:8f:56:f1:42:90:86:
         58:61:fb:d8:8d:0f:3a:34:03:4f:2b:70:8f:b1:f8:5e:0b:db:
         dd:d8:7e:72:ce:3c:c7:25:6f:ce:33:be:6c:13:bd:d3:07:26:
         19:13:8e:af:00:af:2b:db:9c:71:33:0c:a5:6d:a1:0f:07:89:
         aa:74:b2:9b:b6:a1:09:89:57:5a:23:bd:19:ec:b6:09:c0:2e:
         0f:d1:55:80:cc:87:50:17:69:f2:dd:96:a8:7e:43:99:5f:14:
         0b:47:23:cf:63:fc:a5:57:35:25:d3:26:78:f8:70:aa:de:6d:
         2f:1c:5f:9b:c0:97:dc:2a:76:5a:10:53:d0:79:7d:21:d2:5a:
         5c:18:b9:25:d2:cb:a9:57:ea:56:7e:9e:5c:f7:25:61:e9:6c:
         c6:9a:cd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:43:18 2025 by rpki-client