Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.mft
File:                     E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.mft (raw, json)
Hash identifier:          hZaOKqU3Yw/7xG+a6qlalhU0ue/ish1kng3CdIGvRBk=
Subject key identifier:   91:93:68:95:8D:9E:57:2B:18:14:95:8E:AF:CD:EE:31:8A:27:34:08
Authority key identifier: E9:B8:00:2B:DB:CB:E0:F1:E3:D3:8E:83:21:C5:A2:85:64:93:4F:05
Certificate issuer:       /CN=E9B8002BDBCBE0F1E3D38E8321C5A28564934F05
Certificate serial:       11FE466FB99824F419842174DAC666EDAE123C8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.mft
Manifest number:          A7
Signing time:             Mon 20 Oct 2025 03:36:50 +0000
Manifest this update:     Mon 20 Oct 2025 03:31:50 +0000
Manifest next update:     Tue 21 Oct 2025 04:04:50 +0000
Files and hashes:         1: 323830343a393230383a383030303a3a2f33332d3438203d3e20323734363835.roa (hash: jw7Amp+5GDpey8fpiTBa0rj3KVf8nKoptUqC470BME4=)
                          2: 3138372e38342e3134362e302f32332d3234203d3e20323734363835.roa (hash: TzgeNEmHyNvsyIYDTsfV2LsVzy508MaHhQOBTxcbPm8=)
                          3: 323830343a393230383a3a2f33332d3333203d3e20323734363835.roa (hash: IfJqMMrrSRtRXEEduV6W4juFq/zvte6wJCyKNSC60OQ=)
                          4: E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.crl (hash: bj5nXGC9MJHDT87QtsrHu5VrRuCgbZEsRan/dIA+rAw=)
                          5: 3138372e38342e3134342e302f32332d3234203d3e20323734363835.roa (hash: zjq465cypziIH5qfLO64FqR9Sf0K9HD9embRiXIa/VU=)
                          6: 3138372e38342e3134362e302f32342d3234203d3e20323734363835.roa (hash: E35oI5AHEaRqKb3rJm2qGU29fXsDquOrkbsZ/nhDm90=)
                          7: 3138372e38342e3134342e302f32322d3232203d3e20323734363835.roa (hash: Ccfz94E1BKvtTLdSHV49hhwf1gZC8bT70JUuuaLBoMA=)
                          8: 3138372e38342e3134342e302f32322d3234203d3e20323734363835.roa (hash: DSMIsB8NEixh3KJzL5ZhBrFfNawteihDn7S4uNhfzJ4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.crl
                          rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:fe:46:6f:b9:98:24:f4:19:84:21:74:da:c6:66:ed:ae:12:3c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9B8002BDBCBE0F1E3D38E8321C5A28564934F05
        Validity
            Not Before: Oct 20 03:31:50 2025 GMT
            Not After : Oct 21 04:04:50 2025 GMT
        Subject: CN=919368958D9E572B1814958EAFCDEE318A273408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:da:42:1b:f3:a1:d1:38:5d:a6:c6:e4:55:9d:
                    58:56:7f:44:07:e8:a0:e0:ab:ee:3e:b5:80:29:6b:
                    ca:1e:39:48:24:9d:d6:23:c4:a2:f5:7a:84:8b:d1:
                    e0:70:25:b1:a9:61:85:62:be:17:5c:74:40:d8:a0:
                    12:88:0c:42:c0:1b:c4:ce:6a:d5:c9:6d:f6:8a:a9:
                    e7:9d:ce:dd:62:fa:83:e6:a9:3b:df:ea:1f:84:5c:
                    39:49:f7:9d:01:49:d4:ba:65:9d:11:6a:a7:43:6f:
                    4d:f5:8b:97:6f:c8:05:67:f0:e4:1a:68:1d:21:b4:
                    e8:77:cb:fa:f1:25:b0:a0:9f:c7:a3:d3:d9:16:cb:
                    28:89:d7:2f:f2:f2:48:30:76:d9:9b:fc:c2:d1:27:
                    ee:ac:e7:f9:1c:cf:7b:27:4e:04:7a:e7:8b:f1:f0:
                    34:df:c9:9c:e8:71:d2:02:14:0a:3f:47:6d:50:d5:
                    28:d9:24:15:62:57:b9:20:b7:78:ee:98:74:2f:b2:
                    61:c3:53:2e:0d:2e:2e:4f:81:b0:38:1b:b7:98:2e:
                    04:c6:4c:bb:c6:03:75:e7:bb:a4:da:53:fc:e1:a2:
                    b1:b3:ee:f3:05:6d:e1:e9:57:c5:30:4f:6f:78:7e:
                    a8:77:2f:aa:d9:48:72:eb:e0:39:9d:0e:78:0f:37:
                    45:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:93:68:95:8D:9E:57:2B:18:14:95:8E:AF:CD:EE:31:8A:27:34:08
            X509v3 Authority Key Identifier:
                keyid:E9:B8:00:2B:DB:CB:E0:F1:E3:D3:8E:83:21:C5:A2:85:64:93:4F:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:90:43:38:71:be:83:85:cb:ff:14:6d:c2:d4:2d:c2:43:14:
         c1:ee:5f:64:e6:04:27:a1:d2:76:55:91:1e:22:17:69:31:5b:
         2d:95:64:f0:05:b3:05:d8:c1:08:0d:04:eb:86:a3:c0:82:6e:
         30:b7:30:ea:67:6b:59:28:44:66:a7:dd:3c:e0:ed:3e:90:78:
         1c:b1:f7:56:d7:b1:d6:45:62:45:8c:04:77:cf:93:76:da:2a:
         44:83:b6:57:77:80:4c:04:37:e1:0d:3b:25:d1:95:81:5c:77:
         d9:00:8a:d1:eb:88:6e:9c:bf:48:37:bb:fc:02:4f:c4:f1:56:
         64:a0:62:66:73:4d:ee:65:b5:f0:3d:5c:50:39:be:78:e1:ae:
         4c:6b:a6:c5:99:ae:d2:7c:ee:e8:54:94:df:e0:9e:8a:ce:8a:
         b7:87:7e:4b:01:2a:24:a0:53:52:04:e0:35:ff:55:06:14:cb:
         1a:e0:fc:66:34:7d:a1:fe:89:ec:01:da:5e:90:5d:15:18:83:
         0a:8d:7e:cc:55:c4:0e:9f:f5:5f:88:6d:7e:b2:67:83:97:33:
         e6:e0:10:53:7f:12:aa:00:c2:c4:7b:80:c0:72:a6:0c:41:06:
         1f:65:e5:a4:bc:b4:8e:63:92:2c:f2:8c:0f:46:14:45:d4:6b:
         b9:a3:3b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:42:57 2025 by rpki-client