Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/B410AE9221B712152EE021F11F6C4A32F7D29278.mft
File:                     B410AE9221B712152EE021F11F6C4A32F7D29278.mft (raw, json)
Hash identifier:          sm0nKGJFzeuiSZivvDAdolXfzt3aYpTAVNGZwMlxajs=
Subject key identifier:   04:F4:63:AC:8A:D1:DF:54:AA:4F:74:0D:5D:81:BF:DF:9E:4A:84:1B
Authority key identifier: B4:10:AE:92:21:B7:12:15:2E:E0:21:F1:1F:6C:4A:32:F7:D2:92:78
Certificate issuer:       /CN=B410AE9221B712152EE021F11F6C4A32F7D29278
Certificate serial:       337ECD912327A818BE9A55E2AF9061A0CB0BEDDE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B410AE9221B712152EE021F11F6C4A32F7D29278.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/B410AE9221B712152EE021F11F6C4A32F7D29278.mft
Manifest number:          01A2
Signing time:             Mon 20 Oct 2025 11:25:20 +0000
Manifest this update:     Mon 20 Oct 2025 11:20:20 +0000
Manifest next update:     Tue 21 Oct 2025 12:23:20 +0000
Files and hashes:         1: B410AE9221B712152EE021F11F6C4A32F7D29278.crl (hash: VkpwyP3e92g9qMB/lxLeLO36VJPPQ4ee1+XPNuSkMD0=)
                          2: 34352e3137342e3136342e302f32322d3234203d3e20323632353330.roa (hash: LRiAtgmbzZ8W5JJXwngeFHwcdNqoP8ChIWh5gePLgvE=)
                          3: 3136382e3139362e3134382e302f32322d3234203d3e20323632353330.roa (hash: tkbauZl6Dwnyzf/xVX+3Gj1p6m28c6MiSVyfsMX7Guk=)
                          4: 3137372e39332e3138382e302f32322d3234203d3e20323632353330.roa (hash: O3iNCJF1ETfJuWXbOJkxvEbrhodrDzhzSvHwPbEZwbU=)
                          5: 3137372e36372e37362e302f32322d3234203d3e20323632353330.roa (hash: zZiibEM9SPx3fN5zUPQcAJmz1m6nv36aeVqlsQ7ozLA=)
                          6: 323830343a3966343a3a2f33322d3430203d3e20323632353330.roa (hash: lP9kC7AA3K1wg9a2x8PiGarCZBecAwF7HZDC8Hf1ktw=)
                          7: 3137302e3234372e3134382e302f32322d3234203d3e20323632353330.roa (hash: IngGN0mJ+n4tgXsVppgiZEyGL9JxxpA7bVx4qfkVE9o=)
                          8: 3137372e36372e37322e302f32322d3234203d3e20323632353330.roa (hash: Z7ynmyqFbfhJN+cwJ6dTA7t3rm/iuNpFL+M0dPaCOBI=)
                          9: 3137302e3233312e3139362e302f32322d3234203d3e20323632353330.roa (hash: 5TGbCuLDpZ/lBc+Pp9BUO5720+2jc9erdbeVKuwG98M=)
                          10: 3230302e33332e38382e302f32312d3234203d3e20323632353330.roa (hash: 0Ddl237lVfZhvoQgfYRVacNlxsaNkzA7aAfSS0JTUPw=)
                          11: 3137392e3132372e3134342e302f32322d3234203d3e20323632353330.roa (hash: hhbXEYdzLkqCvohp0x0j0xKsS7APxJ+YSMj4d0PrN/E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/B410AE9221B712152EE021F11F6C4A32F7D29278.crl
                          rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/B410AE9221B712152EE021F11F6C4A32F7D29278.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B410AE9221B712152EE021F11F6C4A32F7D29278.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7e:cd:91:23:27:a8:18:be:9a:55:e2:af:90:61:a0:cb:0b:ed:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B410AE9221B712152EE021F11F6C4A32F7D29278
        Validity
            Not Before: Oct 20 11:20:20 2025 GMT
            Not After : Oct 21 12:23:20 2025 GMT
        Subject: CN=04F463AC8AD1DF54AA4F740D5D81BFDF9E4A841B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c7:0f:a8:f3:b7:be:30:77:e8:b6:2b:87:ab:
                    c2:46:75:ae:1f:f2:25:14:60:bb:b1:20:8d:0b:9a:
                    6e:25:e6:b4:bd:cf:8f:39:0a:3d:d5:60:90:b9:01:
                    ce:18:68:6f:b7:bb:f1:48:67:d1:40:fc:8a:3d:68:
                    04:7a:08:25:0f:bd:d7:80:36:40:e4:ac:fe:99:74:
                    de:87:d2:8d:19:72:37:d0:1b:b5:30:c6:40:f4:14:
                    5b:c5:c3:75:f9:f8:84:c3:bf:50:fd:bd:2d:5a:c9:
                    fa:bc:a4:72:55:46:cd:6d:30:cb:9b:2f:3d:9c:83:
                    db:35:6d:7e:38:cc:fb:4d:a2:5b:ac:85:65:63:7c:
                    c2:64:99:d7:eb:23:8f:9d:76:df:fa:55:7f:a8:b0:
                    3b:39:75:4a:7f:bf:5c:f8:0f:73:c3:48:6f:b0:00:
                    5e:22:2e:5b:cc:ad:98:6f:50:df:73:82:37:81:a0:
                    bf:ac:12:36:0f:3e:26:d3:e4:db:6b:a9:97:af:c4:
                    c7:ef:4d:2c:96:1b:5d:95:14:50:f0:a3:65:a8:15:
                    9c:7b:49:44:d7:87:6c:42:c9:8f:29:e6:4f:70:d8:
                    5a:e3:ea:25:b4:73:43:66:1c:db:89:f8:93:43:89:
                    15:06:ac:13:e1:9e:a3:f9:c6:b0:a6:0d:a8:90:a7:
                    33:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F4:63:AC:8A:D1:DF:54:AA:4F:74:0D:5D:81:BF:DF:9E:4A:84:1B
            X509v3 Authority Key Identifier:
                keyid:B4:10:AE:92:21:B7:12:15:2E:E0:21:F1:1F:6C:4A:32:F7:D2:92:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/B410AE9221B712152EE021F11F6C4A32F7D29278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B410AE9221B712152EE021F11F6C4A32F7D29278.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/B410AE9221B712152EE021F11F6C4A32F7D29278.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:59:24:de:76:4d:52:71:69:bb:12:96:ca:53:c8:f0:96:aa:
         03:20:fb:dd:b6:e8:3f:ee:5a:e0:a3:71:b1:86:54:72:27:22:
         c6:b8:98:55:02:1b:92:2a:dc:5b:c0:c3:2b:b3:8a:ee:32:77:
         8f:4f:cd:7c:d7:d4:29:61:90:2b:8a:30:ba:d7:46:c7:0d:0d:
         da:3c:81:c0:10:b2:d5:e1:c2:e4:41:aa:90:ae:4a:8b:79:aa:
         46:1a:b8:cf:e4:4f:3b:81:27:58:8d:74:2f:b3:16:9c:8a:0d:
         0a:d8:bc:55:e5:bf:30:8b:a3:5f:38:1d:08:e4:09:5b:64:21:
         df:c9:53:85:0f:41:29:1a:d2:cf:70:bf:59:96:65:26:75:d2:
         d2:83:9a:1b:cd:82:4a:29:e5:ce:6b:a2:d4:ce:dc:31:f8:35:
         8c:8c:b5:2f:ea:f4:84:a1:25:e9:91:02:99:b1:ec:bb:3f:aa:
         19:46:15:a3:51:7f:be:f8:9b:62:e4:69:d7:8b:c5:62:e2:c8:
         53:31:61:54:41:dc:48:70:2a:78:30:34:cb:25:55:07:3e:ea:
         6f:0d:6e:a6:2b:59:b4:82:03:12:a9:b5:a0:38:b7:06:b8:fe:
         72:4d:21:75:8b:ec:6b:2b:97:ba:11:03:66:c1:22:b4:8b:b7:
         97:8a:d2:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUM37NkSMnqBi+mlXir5BhoMsL7d4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQxMEFFOTIyMUI3MTIxNTJFRTAyMUYxMUY2QzRBMzJG
N0QyOTI3ODAeFw0yNTEwMjAxMTIwMjBaFw0yNTEwMjExMjIzMjBaMDMxMTAvBgNV
BAMTKDA0RjQ2M0FDOEFEMURGNTRBQTRGNzQwRDVEODFCRkRGOUU0QTg0MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9xw+o87e+MHfotiuHq8JGda4f
8iUUYLuxII0Lmm4l5rS9z485Cj3VYJC5Ac4YaG+3u/FIZ9FA/Io9aAR6CCUPvdeA
NkDkrP6ZdN6H0o0ZcjfQG7UwxkD0FFvFw3X5+ITDv1D9vS1ayfq8pHJVRs1tMMub
Lz2cg9s1bX44zPtNolushWVjfMJkmdfrI4+ddt/6VX+osDs5dUp/v1z4D3PDSG+w
AF4iLlvMrZhvUN9zgjeBoL+sEjYPPibT5NtrqZevxMfvTSyWG12VFFDwo2WoFZx7
SUTXh2xCyY8p5k9w2Frj6iW0c0NmHNuJ+JNDiRUGrBPhnqP5xrCmDaiQpzMDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUBPRjrIrR31SqT3QNXYG/355KhBswHwYDVR0j
BBgwFoAUtBCukiG3EhUu4CHxH2xKMvfSkngwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXp2R1llOHRVU2c1Z0dlV25SZ2VDeDFEdEp0Yml1OFFvQTlGbjhGUnN0
RmcvMC9CNDEwQUU5MjIxQjcxMjE1MkVFMDIxRjExRjZDNEEzMkY3RDI5Mjc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0MTBBRTkyMjFCNzEyMTUy
RUUwMjFGMTFGNkM0QTMyRjdEMjkyNzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QXp2R1llOHRVU2c1Z0dlV25SZ2VDeDFEdEp0Yml1OFFvQTlGbjhGUnN0RmcvMC9C
NDEwQUU5MjIxQjcxMjE1MkVFMDIxRjExRjZDNEEzMkY3RDI5Mjc4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe1kk3nZNUnFpuxKWylPI8JaqAyD73bboP+5a4KNxsYZUcicixriYVQIbkirc
W8DDK7OK7jJ3j0/NfNfUKWGQK4owutdGxw0N2jyBwBCy1eHC5EGqkK5Ki3mqRhq4
z+RPO4EnWI10L7MWnIoNCti8VeW/MIujXzgdCOQJW2Qh38lThQ9BKRrSz3C/WZZl
JnXS0oOaG82CSinlzmui1M7cMfg1jIy1L+r0hKEl6ZECmbHsuz+qGUYVo1F/vvib
YuRp14vFYuLIUzFhVEHcSHAqeDA0yyVVBz7qbw1upitZtIIDEqm1oDi3Brj+ck0h
dYvsayuXuhEDZsEitIu3l4rSiA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:32:53 2025 by rpki-client