Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.mft
File:                     8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.mft (raw, json)
Hash identifier:          G2nRRlXT7LO7q8WJD8MEcWcpKKaNKYtyxL3TLLfNAUE=
Subject key identifier:   CB:B9:D8:54:8E:3F:27:B0:24:4B:E4:06:4A:80:19:09:DF:02:B4:90
Authority key identifier: 8A:E3:3D:76:F6:C9:FC:9D:0B:0F:F7:F5:54:C3:51:92:71:D1:C8:38
Certificate issuer:       /CN=8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838
Certificate serial:       6510776044F4667E9A97848E64B2401AFB4320C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.mft
Manifest number:          21
Signing time:             Sun 19 Oct 2025 18:46:33 +0000
Manifest this update:     Sun 19 Oct 2025 18:41:33 +0000
Manifest next update:     Mon 20 Oct 2025 19:04:33 +0000
Files and hashes:         1: 3139302e3130392e39392e302f32342d3234203d3e20323731323232.roa (hash: wHlU3sTFbjAA4O7WdhVkKwAR5dednQvUfHubbR1dvf8=)
                          2: 3139302e3130392e39362e302f32332d3233203d3e20323731323232.roa (hash: eS5+BzUz/P8gDxELe1obBXuVHdIgN6UEEqiN1aXBrk4=)
                          3: 3139302e3130392e39382e302f32342d3234203d3e20323731323232.roa (hash: 4BJu53rKTMN1pl6CAz+q6eWZttl5HIejDJqVkTRBNw8=)
                          4: 8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.crl (hash: 3r8NL+wPvyO180NZYP5AkGPCDEkUATtVaT2BKK9rK7w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.crl
                          rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 19:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:10:77:60:44:f4:66:7e:9a:97:84:8e:64:b2:40:1a:fb:43:20:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838
        Validity
            Not Before: Oct 19 18:41:33 2025 GMT
            Not After : Oct 20 19:04:33 2025 GMT
        Subject: CN=CBB9D8548E3F27B0244BE4064A801909DF02B490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ea:37:8c:f7:70:a6:38:8f:40:8e:7d:e9:6d:
                    f0:b2:6a:97:74:be:25:69:21:9e:c5:6a:7f:7e:ff:
                    2c:b8:89:3e:09:fe:03:86:5e:d2:8e:46:40:00:30:
                    60:8e:f7:8e:02:9b:d2:b5:3c:0f:aa:d5:f1:2c:5b:
                    fb:5a:8a:9e:d7:77:2c:9f:38:61:f6:87:dd:3f:30:
                    a3:00:9f:a0:9e:ff:8f:94:38:4d:29:12:07:72:cd:
                    a2:f2:3b:5e:f1:d6:a9:5b:d1:42:a9:39:99:fd:0e:
                    ad:91:4f:fd:e2:f7:07:52:9e:77:22:47:0a:05:b9:
                    6f:5e:0b:00:40:83:50:20:ce:14:6a:cf:9e:02:e3:
                    a9:ea:64:26:ea:f4:07:9f:35:b0:1b:27:cc:bf:9c:
                    52:50:38:3b:ab:65:46:96:5f:37:5e:76:f2:34:ea:
                    35:60:1b:d9:d9:2a:2a:4f:d0:bc:57:17:2c:5b:62:
                    15:eb:3e:d9:30:12:32:34:89:6f:5c:ba:0b:92:5f:
                    f3:78:de:60:59:e3:10:d3:e4:15:b9:75:f0:2c:4a:
                    7d:2b:a9:32:ae:02:b3:63:c2:38:9e:62:b4:09:ef:
                    81:eb:f8:72:e8:75:7b:c6:14:f0:30:4d:cd:e7:a4:
                    d3:ec:7c:26:42:f9:21:44:ee:79:eb:8b:61:95:bf:
                    28:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B9:D8:54:8E:3F:27:B0:24:4B:E4:06:4A:80:19:09:DF:02:B4:90
            X509v3 Authority Key Identifier:
                keyid:8A:E3:3D:76:F6:C9:FC:9D:0B:0F:F7:F5:54:C3:51:92:71:D1:C8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:bb:ab:36:39:77:23:23:16:23:07:b0:07:64:ef:95:f9:63:
         1d:41:bc:b9:a8:bf:cb:82:8e:a1:e8:65:dc:3d:bd:5c:ba:ee:
         27:8b:03:8c:fe:2b:7f:b5:b8:e5:d2:3f:26:ef:ae:08:e1:82:
         89:19:8d:cf:90:dd:8e:05:dc:57:ae:6d:60:dd:29:8e:05:9d:
         cb:25:27:6a:43:f5:02:7f:1c:31:5e:89:b6:9c:ae:0b:d7:ad:
         96:25:f8:16:7c:96:2d:c4:4f:88:24:ac:72:32:26:24:7b:91:
         7e:89:d3:90:8d:33:e3:ad:86:76:65:80:30:ee:a3:30:bd:7f:
         9c:60:16:b3:a4:b1:d1:ba:21:3f:ff:d1:a3:86:87:5f:0d:c9:
         29:5e:2a:8b:c2:16:1d:c7:93:a9:ba:da:f1:5f:c6:4c:56:94:
         cd:f0:18:bf:3d:3a:ff:bc:4a:5f:b4:ba:46:83:cf:75:ff:2f:
         cf:fe:69:51:1f:df:f3:23:26:c2:df:e1:d9:c5:6b:e9:ce:ff:
         86:d1:e2:9a:08:2f:ec:0d:a2:40:48:99:b0:8a:38:3c:75:09:
         ef:e0:7e:13:56:48:a8:e1:98:34:4f:03:23:9b:5f:f7:e1:2b:
         e3:42:ad:e7:3c:ed:f5:49:f2:f0:84:27:3b:cd:a8:f2:0e:5d:
         86:ce:14:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:50:38 2025 by rpki-client