Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.mft
File:                     DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.mft (raw, json)
Hash identifier:          Cu3XaU1QPBqkaVAEGuvUIrHOcd6iYmBnDUjkCApVNjc=
Subject key identifier:   B8:55:EE:DA:99:CC:FC:84:BF:66:ED:61:0D:06:C8:46:8D:23:01:53
Authority key identifier: DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE
Certificate issuer:       /CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
Certificate serial:       3172CB526984DAF61508CDA019D43A405A1F4888
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.mft
Manifest number:          24
Signing time:             Mon 20 Oct 2025 02:15:28 +0000
Manifest this update:     Mon 20 Oct 2025 02:10:28 +0000
Manifest next update:     Tue 21 Oct 2025 02:37:28 +0000
Files and hashes:         1: 34352e3137362e3232302e302f32322d3234203d3e20323639303134.roa (hash: ge2phTe2NN8MRwoQD8+ZG78r2vszmkaJ1OwFlxk13M4=)
                          2: 34352e3137362e3232332e302f32342d3234203d3e20323639303134.roa (hash: WKF9kW3IdQe0HNhrevkSmsuPdqnfBA4ywbhAMolFvfE=)
                          3: 34352e3137362e3232322e302f32332d3233203d3e20323639303134.roa (hash: CCo7JO1gW2ifzltv64/NpFubhb8vmWpme17iH1E4rsI=)
                          4: 34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa (hash: 03MTSWx0aYFRYp/zR79V3fM04Z2nNMHJqdxHH0/q3tI=)
                          5: 34352e3137362e3232302e302f32342d3234203d3e20323639303134.roa (hash: FrsphXcWqkDuFn0CXa+pBZziIZeOJM3cPaTZIWpiT50=)
                          6: 323830343a356532343a3a2f33322d3332203d3e20323639303134.roa (hash: dbRajCwkUM/mXWCLryUwlycBUOEYhLxqWf5vL7Fmxwo=)
                          7: 34352e3137362e3232312e302f32342d3234203d3e20323639303134.roa (hash: 2hev66JOFX0FKC7O7RoNH9Wt/SFuRIWNEh42DhEj6Z0=)
                          8: 323830343a356532343a3a2f33322d3336203d3e20323639303134.roa (hash: SgQxhgts+Y+EWNtugqTsmlKzL2Okz9e8hZxr+1j3IGo=)
                          9: DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl (hash: AK3OTZmGYLIvoMv+yC3wYyc29u/1ml0q8VG5nCAi+mI=)
                          10: 34352e3137362e3232322e302f32342d3234203d3e20323639303134.roa (hash: nAs9vj+VE47MOhkAdRgyOAQJNeyiEPJ0Qny/Uje8WgE=)
                          11: 34352e3137362e3232302e302f32332d3233203d3e20323639303134.roa (hash: n5qQL8Qwe+npN0Nl/PQCSPCduJl3kS1i6jVGcInInDw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl
                          rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:72:cb:52:69:84:da:f6:15:08:cd:a0:19:d4:3a:40:5a:1f:48:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
        Validity
            Not Before: Oct 20 02:10:28 2025 GMT
            Not After : Oct 21 02:37:28 2025 GMT
        Subject: CN=B855EEDA99CCFC84BF66ED610D06C8468D230153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:fb:18:20:d4:36:28:6d:68:06:8f:06:bf:
                    7b:59:d5:87:7a:c2:af:d2:0a:8f:e9:a6:5e:91:b5:
                    e4:e5:bf:93:68:e0:4c:27:2c:e7:bf:27:8c:29:1a:
                    a0:b8:42:b9:d3:a4:b1:39:55:96:70:a1:ae:86:bf:
                    a6:60:f2:1d:2c:c7:c6:ac:b6:f1:e3:2b:76:99:b2:
                    e1:4e:15:1f:cd:73:fe:52:3e:c9:47:a0:84:7b:f0:
                    30:20:81:8b:db:2c:f5:1a:b6:e0:ab:55:73:79:9c:
                    aa:3a:e2:ba:d0:34:9e:d1:1d:1c:52:14:ec:f6:dc:
                    6c:b5:bb:26:c5:14:44:38:a5:8b:cf:51:3f:42:16:
                    b4:0e:c0:e5:20:3a:ca:a0:8a:e6:dd:e6:b3:54:c4:
                    e8:0d:6d:80:b1:c0:e3:d6:1d:0a:a8:3e:87:f2:6d:
                    d3:a6:20:ca:a5:3e:fc:f4:30:c1:de:a7:f2:c2:d3:
                    df:63:ab:84:5e:c4:7b:50:75:eb:cc:7a:12:96:a8:
                    c2:e2:53:ae:9a:e6:08:64:56:7b:1b:e3:c3:7d:40:
                    55:77:1f:61:72:5e:53:42:0d:0b:86:20:c3:6d:22:
                    98:a9:60:86:c9:50:9d:71:85:5f:20:ed:2e:51:58:
                    ce:70:92:88:be:37:47:86:f4:85:ce:65:20:6f:d3:
                    9b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:55:EE:DA:99:CC:FC:84:BF:66:ED:61:0D:06:C8:46:8D:23:01:53
            X509v3 Authority Key Identifier:
                keyid:DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:18:65:b6:39:00:17:a5:6a:92:39:3f:9b:0f:04:f8:d3:e1:
         c5:e1:54:bb:ff:a3:40:6c:31:62:bf:a0:6f:a4:c9:8b:ae:ff:
         13:3b:5c:26:c3:a9:2e:cb:ee:68:71:9c:96:47:6a:f4:62:d2:
         9f:17:a0:29:66:6b:0e:0d:6a:96:c9:8d:69:eb:cd:32:ea:f1:
         77:0c:be:88:97:83:ea:8f:75:34:96:58:a4:8a:58:c6:f3:96:
         13:98:48:1d:10:7c:45:fb:fb:95:98:e8:a4:95:38:81:4b:1a:
         c1:0a:83:48:7e:fc:ec:39:f5:e3:f6:50:9b:7e:5a:68:0e:85:
         29:d5:84:c6:2d:3a:ed:64:1c:ac:de:da:66:93:06:91:fe:c7:
         c0:1e:bd:3f:f3:72:8f:77:fb:60:67:d6:e4:1b:fc:99:36:69:
         c7:1a:74:a7:38:61:64:cb:7a:5f:d0:c5:62:4e:43:25:ba:b7:
         b4:0e:e9:ae:25:90:c0:ca:39:c8:0a:68:44:aa:1b:f8:af:85:
         1b:0d:bc:af:94:4a:3a:d8:32:29:c5:df:e6:67:0f:ff:a4:91:
         42:de:34:93:e6:ce:80:a1:7e:5c:38:e7:db:07:00:4a:87:2b:
         f0:af:5a:37:3b:87:b1:f4:99:ec:09:69:65:2c:7e:be:d4:8c:
         a6:31:27:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMXLLUmmE2vYVCM2gGdQ6QFofSIgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENFMTJFQzBEQTQxQjU5QkU3NTIxNkUyOEEzRDc5OEQ0
MzEzQUZFRTAeFw0yNTEwMjAwMjEwMjhaFw0yNTEwMjEwMjM3MjhaMDMxMTAvBgNV
BAMTKEI4NTVFRURBOTlDQ0ZDODRCRjY2RUQ2MTBEMDZDODQ2OEQyMzAxNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6W/sYINQ2KG1oBo8Gv3tZ1Yd6
wq/SCo/ppl6RteTlv5No4EwnLOe/J4wpGqC4QrnTpLE5VZZwoa6Gv6Zg8h0sx8as
tvHjK3aZsuFOFR/Nc/5SPslHoIR78DAggYvbLPUatuCrVXN5nKo64rrQNJ7RHRxS
FOz23Gy1uybFFEQ4pYvPUT9CFrQOwOUgOsqgiubd5rNUxOgNbYCxwOPWHQqoPofy
bdOmIMqlPvz0MMHep/LC099jq4RexHtQdevMehKWqMLiU66a5ghkVnsb48N9QFV3
H2FyXlNCDQuGIMNtIpipYIbJUJ1xhV8g7S5RWM5wkoi+N0eG9IXOZSBv05uFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUuFXu2pnM/IS/Zu1hDQbIRo0jAVMwHwYDVR0j
BBgwFoAU3OEuwNpBtZvnUhbiij15jUMTr+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3hUS0U2TDE0RkhmU0xybkIxa1EyYjVqaHRjaWY2UHh0aE5FOVpUNFRY
V1AvMC9EQ0UxMkVDMERBNDFCNTlCRTc1MjE2RTI4QTNENzk4RDQzMTNBRkVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDRTEyRUMwREE0MUI1OUJF
NzUyMTZFMjhBM0Q3OThENDMxM0FGRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q3hUS0U2TDE0RkhmU0xybkIxa1EyYjVqaHRjaWY2UHh0aE5FOVpUNFRYV1AvMC9E
Q0UxMkVDMERBNDFCNTlCRTc1MjE2RTI4QTNENzk4RDQzMTNBRkVFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPxhltjkAF6Vqkjk/mw8E+NPhxeFUu/+jQGwxYr+gb6TJi67/EztcJsOpLsvu
aHGclkdq9GLSnxegKWZrDg1qlsmNaevNMurxdwy+iJeD6o91NJZYpIpYxvOWE5hI
HRB8Rfv7lZjopJU4gUsawQqDSH787Dn14/ZQm35aaA6FKdWExi067WQcrN7aZpMG
kf7HwB69P/Nyj3f7YGfW5Bv8mTZpxxp0pzhhZMt6X9DFYk5DJbq3tA7priWQwMo5
yApoRKob+K+FGw28r5RKOtgyKcXf5mcP/6SRQt40k+bOgKF+XDjn2wcASocr8K9a
NzuHsfSZ7AlpZSx+vtSMpjEnmA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:33:25 2025 by rpki-client