Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
File:                     3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft (raw, json)
Hash identifier:          FXO3iiyD6FH4wlfJJcFqBuNpUuKPSN1FfZmyhXFb554=
Subject key identifier:   67:4B:DF:CC:E9:CC:8F:0A:1A:7D:96:95:DE:39:94:B6:5A:54:21:7B
Authority key identifier: 36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21
Certificate issuer:       /CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21
Certificate serial:       7AFC30198878A956AF9F6499ED11E64E69BADE0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
Manifest number:          02F1
Signing time:             Mon 20 Oct 2025 02:32:48 +0000
Manifest this update:     Mon 20 Oct 2025 02:27:48 +0000
Manifest next update:     Tue 21 Oct 2025 03:07:48 +0000
Files and hashes:         1: 323830343a386563383a3a2f33322d3438203d3e203631363136.roa (hash: lyXwR8szxK6wAklIFmsSWrdvlecUEfLPCwBeu/gOa+0=)
                          2: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl (hash: 653WFvxlIUvi/UwajuwqNrCjgz8XkbxAuKsGCwv/72g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl
                          rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:fc:30:19:88:78:a9:56:af:9f:64:99:ed:11:e6:4e:69:ba:de:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21
        Validity
            Not Before: Oct 20 02:27:48 2025 GMT
            Not After : Oct 21 03:07:48 2025 GMT
        Subject: CN=674BDFCCE9CC8F0A1A7D9695DE3994B65A54217B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a5:1a:c1:f7:3a:3d:f5:5d:c8:f3:48:61:14:
                    c6:8d:d2:1b:51:20:b3:b5:8f:ea:d4:28:c6:62:53:
                    14:68:5c:c9:cf:70:0b:a2:8c:fa:49:16:e0:a0:20:
                    4f:00:a9:f7:d3:90:dc:7f:38:8b:80:01:bb:77:52:
                    3f:1e:06:6b:f0:f0:c0:0a:e9:eb:ab:df:2b:e8:9d:
                    ad:68:21:12:b5:96:f6:a0:85:5e:3c:27:5f:b9:ea:
                    24:ed:4d:1a:9c:6b:9d:0d:99:72:af:36:27:81:c1:
                    ce:8d:19:41:f1:0b:af:55:92:ae:49:b4:85:ab:59:
                    0b:6c:6d:40:e1:67:d3:72:12:30:28:fc:b9:85:37:
                    7c:36:c5:28:1f:48:99:54:43:45:5e:6a:aa:fe:f3:
                    47:7b:9a:d5:53:a8:01:62:05:67:db:13:f1:18:15:
                    8d:10:27:b2:1e:92:6b:51:93:22:d5:b3:ee:7a:49:
                    fd:66:7a:85:ab:4e:44:40:d1:ef:51:b8:e6:04:46:
                    b5:43:da:1e:21:45:d1:ac:1c:d3:4f:48:d7:02:85:
                    fb:ea:2b:3c:29:92:a1:a2:3a:21:5f:f0:eb:e4:cb:
                    4c:4a:28:0c:af:1b:34:f5:89:9f:d8:4c:49:3b:8d:
                    45:77:27:5a:a3:de:0c:9b:9d:04:a1:1b:29:92:b3:
                    2f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4B:DF:CC:E9:CC:8F:0A:1A:7D:96:95:DE:39:94:B6:5A:54:21:7B
            X509v3 Authority Key Identifier:
                keyid:36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:f5:a0:1a:17:9f:1e:c3:44:91:45:45:eb:99:9d:1c:68:f6:
         9e:cc:1e:ea:10:fe:d1:33:ac:0f:bb:cb:e8:92:3c:fd:5c:7f:
         57:d8:f8:c0:1a:25:49:1c:f9:49:06:b1:83:a9:f6:7a:45:90:
         f7:7f:ea:c6:0a:0a:54:70:b6:7c:c8:cb:cd:e1:b5:e0:e0:03:
         e6:28:0c:e4:eb:8b:ce:df:c8:60:b5:b9:f0:6b:71:89:35:67:
         75:91:e6:ba:76:81:c7:37:12:f9:e1:8d:1a:b0:4c:22:91:90:
         ed:d4:cf:5b:9f:aa:a9:54:88:c5:0a:45:72:9f:29:a1:9c:b9:
         27:7e:f1:df:b0:19:5d:db:74:7d:38:77:1b:dc:c2:80:47:e2:
         d7:ac:a3:9c:98:78:26:e0:c1:e5:1b:76:d9:19:2a:63:0a:3a:
         48:03:f0:69:49:a8:7a:3f:3c:60:c3:20:62:ac:d5:a8:c6:17:
         92:18:42:36:d6:7c:82:45:d9:84:15:d0:c6:1f:ad:ce:08:01:
         d8:14:5f:55:b4:14:49:2b:12:07:7f:cd:e5:15:be:ef:b6:82:
         a9:fa:6d:be:50:1b:a5:26:cd:ab:57:64:eb:f3:6a:ec:e2:24:
         88:85:4a:3b:00:5d:12:70:31:83:0b:9e:63:72:64:f8:a9:e0:
         2c:ba:0c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:27:10 2025 by rpki-client