Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.mft
File:                     D7845391014F7F9470788EC727561382C9EE8439.mft (raw, json)
Hash identifier:          f6kr06KdnsQBtbcSP9o/Tpor+t1iuBBUi+29sZlKO24=
Subject key identifier:   FE:4C:1E:F4:BD:94:4E:FD:B7:AF:56:77:DD:53:14:BF:9B:48:9E:D3
Authority key identifier: D7:84:53:91:01:4F:7F:94:70:78:8E:C7:27:56:13:82:C9:EE:84:39
Certificate issuer:       /CN=D7845391014F7F9470788EC727561382C9EE8439
Certificate serial:       5A352449D40AE742DD0F4E30AF2D21C0595FF247
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7845391014F7F9470788EC727561382C9EE8439.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.mft
Manifest number:          0109
Signing time:             Mon 20 Oct 2025 17:30:05 +0000
Manifest this update:     Mon 20 Oct 2025 17:25:05 +0000
Manifest next update:     Tue 21 Oct 2025 20:29:05 +0000
Files and hashes:         1: 323830343a383336343a3a2f33322d3332203d3e20323732313935.roa (hash: rgvbKpGGOBBwQiU4IYW5VEIzyEidbzoZXS4wrkDPyRQ=)
                          2: 323830343a383336343a3a2f33342d3334203d3e20323732313935.roa (hash: OVa1a5v+QoZlIYGiHT9SrqRCIw87bhwKdHhHZ59h0Vw=)
                          3: 323830343a383336343a633030303a3a2f33342d3334203d3e20323732313935.roa (hash: GHlEJYoOK3UZfIQkY3Z0DdCy5FiSdSOVhsz6I91euIc=)
                          4: D7845391014F7F9470788EC727561382C9EE8439.crl (hash: KnawFKokparmOci0nZThsNr/5gP/PvMcXsQZTLX/cNg=)
                          5: 323830343a383336343a383030303a3a2f33342d3334203d3e20323732313935.roa (hash: R7pr90YgpFFP5Nc7qri0o39IOqCfCC6qNNTtfKj76zk=)
                          6: 323830343a383336343a343030303a3a2f33342d3334203d3e20323732313935.roa (hash: hMS/g2zUJ8tEuCLfr1w0Pne2zylTOnyo12ThqYKt5gY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.crl
                          rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7845391014F7F9470788EC727561382C9EE8439.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:35:24:49:d4:0a:e7:42:dd:0f:4e:30:af:2d:21:c0:59:5f:f2:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7845391014F7F9470788EC727561382C9EE8439
        Validity
            Not Before: Oct 20 17:25:05 2025 GMT
            Not After : Oct 21 20:29:05 2025 GMT
        Subject: CN=FE4C1EF4BD944EFDB7AF5677DD5314BF9B489ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:c0:52:f5:08:be:ee:6d:bd:1a:c7:ca:bb:
                    55:ad:33:c1:d6:82:e3:6a:c5:2e:76:b6:19:19:5f:
                    59:47:67:83:56:c7:3f:53:dc:f6:24:78:a0:82:44:
                    cf:bb:11:71:5a:b1:34:b3:42:54:b1:32:39:be:97:
                    a2:5c:0c:fc:53:e4:2c:e2:fc:46:a4:38:df:a2:38:
                    d4:47:7a:d3:c7:a6:53:5f:11:8d:0d:08:0c:4f:db:
                    46:47:12:27:c6:6c:72:6b:ba:43:3d:3f:b7:df:f1:
                    97:61:3a:34:17:7d:06:e9:22:f3:7b:0c:a9:5b:bd:
                    1e:95:66:8d:30:27:e0:ad:11:6e:d6:37:cb:c9:32:
                    a0:a5:4d:11:9d:9f:2b:60:82:e2:59:b7:bd:49:64:
                    f7:56:06:60:18:90:7b:00:f1:e5:25:64:2f:75:5c:
                    7f:21:e8:7f:9a:54:86:33:a0:dc:55:4f:2b:68:1e:
                    f0:37:13:ab:53:ac:5b:36:93:e1:35:0b:3c:b0:46:
                    fd:43:06:cc:83:a1:71:a4:f9:d7:54:0f:bc:15:42:
                    59:9f:1a:74:5d:bc:b6:eb:a3:74:72:81:86:bb:ff:
                    f5:08:6e:29:2c:88:b0:ec:8c:f2:c6:fb:ff:77:c2:
                    d6:36:2f:38:e8:55:38:00:d9:02:2b:56:66:5c:29:
                    90:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4C:1E:F4:BD:94:4E:FD:B7:AF:56:77:DD:53:14:BF:9B:48:9E:D3
            X509v3 Authority Key Identifier:
                keyid:D7:84:53:91:01:4F:7F:94:70:78:8E:C7:27:56:13:82:C9:EE:84:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7845391014F7F9470788EC727561382C9EE8439.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:98:87:66:43:f2:eb:03:84:b8:d9:bd:ab:83:6c:b2:5c:03:
         ac:4c:91:9f:bd:94:14:e8:ab:58:e5:74:f6:d8:d2:8c:2e:ee:
         55:c0:87:c0:8a:18:6d:b5:52:5f:c2:f8:5d:7d:c9:21:3a:85:
         e2:62:16:70:a0:b2:22:95:00:e0:90:d0:79:f2:9c:c3:c1:5a:
         c6:7b:9d:d4:54:7f:97:df:74:bb:cc:c7:be:cb:cf:5a:25:b8:
         60:ce:71:a0:2e:6b:5b:1a:b2:f7:f8:c1:b0:f1:33:e1:20:f3:
         43:5e:53:42:a2:02:2a:ae:55:67:f1:10:b0:91:e3:f7:15:de:
         8f:25:c6:40:71:be:27:de:4a:e9:7f:a4:d7:08:eb:7a:f7:b1:
         3a:df:ba:02:a4:d0:b9:f4:ba:3c:94:29:a2:11:fc:4f:f0:97:
         3a:37:6a:15:87:67:82:cb:ba:1d:62:9e:4e:48:cb:bd:ef:06:
         36:01:19:94:ff:74:c9:f2:64:3e:7d:89:6e:20:ae:df:16:9a:
         4e:be:58:e3:33:13:0e:03:90:82:b3:eb:2a:79:c6:61:ed:29:
         c4:2c:cb:de:4d:7f:4f:5f:52:31:9b:58:56:ff:7a:0f:68:d6:
         c2:60:8a:a2:58:93:b3:8a:9e:04:e5:8f:c1:86:83:4d:45:1e:
         be:1b:6d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:08 2025 by rpki-client