Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft
File:                     D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft (raw, json)
Hash identifier:          ds5KTh05u4m9UpylfBMHsbwTRMQXobbw4iulXHT9PGI=
Subject key identifier:   64:CE:38:D7:33:EF:66:06:EF:62:D3:87:BE:60:79:B1:56:B8:29:F9
Authority key identifier: D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38
Certificate issuer:       /CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
Certificate serial:       2BBB754016AC2E45BC7A7DB3ACF876F9436E8459
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft
Manifest number:          02FD
Signing time:             Mon 20 Oct 2025 18:05:11 +0000
Manifest this update:     Mon 20 Oct 2025 18:00:11 +0000
Manifest next update:     Tue 21 Oct 2025 20:08:11 +0000
Files and hashes:         1: 323830343a326439343a666130303a3a2f34302d3430203d3e20323635323930.roa (hash: NuES/p5zdtlcVvqdl+3ByjpMNejdqw1ZB8I1DvCu3tI=)
                          2: 3136382e39302e3230342e302f32332d3234203d3e20323635323930.roa (hash: sOqje+t86gHWEq91Nahf6waLG/Bt67tz7Ty3X7VmiO4=)
                          3: 3136382e39302e3230362e302f32332d3234203d3e20323635323930.roa (hash: 5Kz92E7dmaGiDvn5OQF7P48AohtTTO3u/CgOdAlXJOk=)
                          4: D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl (hash: gVns7AOgfAbWnoIPYZ954gJrH/sKWtv+d95N82BhkxY=)
                          5: 3136382e39302e3230342e302f32322d3232203d3e20323635323930.roa (hash: ZU9KvqVGm8P3mgQ79bZVqEr6CzwEvUL9dvZSWmDkOZI=)
                          6: 323830343a326439343a3a2f33322d3334203d3e20323635323930.roa (hash: WoH36DchhyfMMnaTBZudh1PyvGPqfTPoPrxPPqkfiJI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl
                          rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:bb:75:40:16:ac:2e:45:bc:7a:7d:b3:ac:f8:76:f9:43:6e:84:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
        Validity
            Not Before: Oct 20 18:00:11 2025 GMT
            Not After : Oct 21 20:08:11 2025 GMT
        Subject: CN=64CE38D733EF6606EF62D387BE6079B156B829F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fd:1f:29:54:a2:60:79:68:41:83:cc:00:c9:
                    6e:57:78:71:c2:b4:86:b3:ee:78:fc:92:72:0f:27:
                    ec:22:a6:67:02:37:80:21:bf:c4:7c:bc:19:3d:fd:
                    3d:4d:b8:06:2e:d2:37:40:d0:40:32:68:41:12:17:
                    7a:ee:72:e7:bf:18:9c:51:b0:a8:d2:e3:34:31:f6:
                    b5:9b:ee:0c:d1:8d:f5:24:d5:57:5f:d1:e8:1a:3a:
                    2e:a8:dc:39:b3:aa:03:df:27:7c:6d:02:82:c9:b5:
                    a5:7c:9f:f2:f2:5d:54:64:d0:ec:76:1c:b9:75:92:
                    ab:be:a6:02:d4:50:4b:37:27:da:ab:f0:95:fb:0e:
                    b8:79:2d:fa:44:66:41:fd:29:b4:f4:ce:89:c7:f3:
                    4c:6e:11:45:21:a9:f6:ec:82:ca:47:24:3a:11:11:
                    ea:50:8b:b2:5f:b0:f2:bb:5c:69:91:bf:b0:8c:05:
                    2c:94:6c:5d:5b:a9:35:79:4f:2f:26:c2:69:e8:d5:
                    8d:07:4c:19:70:49:db:c7:db:d5:da:cd:ab:06:a0:
                    19:12:4e:72:a6:e1:c2:4a:38:3e:24:d1:2b:d3:20:
                    e7:95:9a:9a:6a:64:25:4b:23:a0:26:92:7d:b6:5c:
                    3f:9a:fe:c0:69:f9:4f:74:3e:12:ac:08:82:4c:c7:
                    65:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CE:38:D7:33:EF:66:06:EF:62:D3:87:BE:60:79:B1:56:B8:29:F9
            X509v3 Authority Key Identifier:
                keyid:D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:44:47:c7:35:57:57:b8:36:2b:26:77:d7:0d:6c:61:ab:fc:
         3d:7d:3c:ee:5e:86:d8:33:27:86:e6:d6:b8:b0:e1:9b:f3:84:
         48:a9:98:29:be:60:af:af:5a:80:2a:b0:36:e7:46:f2:99:67:
         df:9e:db:89:2d:06:da:ee:9a:a5:bd:94:2a:56:9d:e5:e4:aa:
         f1:0a:04:5f:4a:ab:a5:54:ab:33:f8:ef:da:e1:f7:3f:b6:fd:
         79:25:f0:f8:d4:60:92:40:4a:11:1c:68:40:07:33:5b:7d:95:
         ec:bb:2f:30:17:a1:96:a0:e0:84:91:53:d2:d5:9c:d6:60:09:
         f7:76:6a:6e:b8:8f:8c:58:54:be:31:27:7a:61:8e:8e:70:c9:
         c0:36:c1:4d:12:d5:72:5d:8d:4c:75:c7:f3:07:0e:40:1e:f0:
         b1:e2:41:00:da:69:c1:29:91:66:b6:c1:68:be:e2:71:2c:ce:
         e1:23:0b:12:04:34:20:86:9b:5d:4e:86:dd:9f:da:0d:20:c8:
         c7:ad:80:0b:bc:25:48:fa:cf:64:6e:e1:3b:c5:c2:45:50:8b:
         80:a1:b9:66:b5:43:33:cd:27:99:58:52:6b:d3:8d:30:e7:8d:
         cb:d4:15:7e:7c:17:4d:07:68:6b:17:08:8d:03:56:77:fc:b6:
         3c:e0:cc:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUK7t1QBasLkW8en2zrPh2+UNuhFkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDczQjZFQjlCOTcyRDVGM0I3MzUzQTMyQkJGMTFDQURC
NjIwN0QzODAeFw0yNTEwMjAxODAwMTFaFw0yNTEwMjEyMDA4MTFaMDMxMTAvBgNV
BAMTKDY0Q0UzOEQ3MzNFRjY2MDZFRjYyRDM4N0JFNjA3OUIxNTZCODI5RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb/R8pVKJgeWhBg8wAyW5XeHHC
tIaz7nj8knIPJ+wipmcCN4Ahv8R8vBk9/T1NuAYu0jdA0EAyaEESF3rucue/GJxR
sKjS4zQx9rWb7gzRjfUk1Vdf0egaOi6o3DmzqgPfJ3xtAoLJtaV8n/LyXVRk0Ox2
HLl1kqu+pgLUUEs3J9qr8JX7Drh5LfpEZkH9KbT0zonH80xuEUUhqfbsgspHJDoR
EepQi7JfsPK7XGmRv7CMBSyUbF1bqTV5Ty8mwmno1Y0HTBlwSdvH29XazasGoBkS
TnKm4cJKOD4k0SvTIOeVmppqZCVLI6Amkn22XD+a/sBp+U90PhKsCIJMx2WdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZM441zPvZgbvYtOHvmB5sVa4KfkwHwYDVR0j
BBgwFoAU1ztuubly1fO3NToyu/EcrbYgfTgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVluWFFHM1pXRVJqbW50Z3lIWDdSQXAxSHhRY24zSmhERDV2VXpSWVRS
UUsvMi9ENzNCNkVCOUI5NzJENUYzQjczNTNBMzJCQkYxMUNBREI2MjA3RDM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3M0I2RUI5Qjk3MkQ1RjNC
NzM1M0EzMkJCRjExQ0FEQjYyMDdEMzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QVluWFFHM1pXRVJqbW50Z3lIWDdSQXAxSHhRY24zSmhERDV2VXpSWVRSUUsvMi9E
NzNCNkVCOUI5NzJENUYzQjczNTNBMzJCQkYxMUNBREI2MjA3RDM4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATERHxzVXV7g2KyZ31w1sYav8PX087l6G2DMnhubWuLDhm/OESKmYKb5gr69a
gCqwNudG8pln357biS0G2u6apb2UKlad5eSq8QoEX0qrpVSrM/jv2uH3P7b9eSXw
+NRgkkBKERxoQAczW32V7LsvMBehlqDghJFT0tWc1mAJ93ZqbriPjFhUvjEnemGO
jnDJwDbBTRLVcl2NTHXH8wcOQB7wseJBANppwSmRZrbBaL7icSzO4SMLEgQ0IIab
XU6G3Z/aDSDIx62AC7wlSPrPZG7hO8XCRVCLgKG5ZrVDM80nmVhSa9ONMOeNy9QV
fnwXTQdoaxcIjQNWd/y2PODMEw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:35:11 2025 by rpki-client