Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
File:                     2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft (raw, json)
Hash identifier:          aJrERMN+n844+oWnsMFqPs8FahaCHSfPT+uKD7efb1c=
Subject key identifier:   FB:2C:EF:58:DF:86:1E:22:36:34:2B:A6:FC:42:EA:41:9C:B9:F6:61
Authority key identifier: 2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7
Certificate issuer:       /CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
Certificate serial:       4E1B397AA77C0B58382B8642638797F93A5E8D50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
Manifest number:          01CA
Signing time:             Sun 19 Oct 2025 21:58:09 +0000
Manifest this update:     Sun 19 Oct 2025 21:53:09 +0000
Manifest next update:     Mon 20 Oct 2025 23:33:09 +0000
Files and hashes:         1: 3137392e34382e3133372e302f32342d3234203d3e20323734363430.roa (hash: 61gejsX0uk9zhGJ4ZJfQ9xiAiQ66ltBn9knZR4l/mpI=)
                          2: 323830343a393136633a3a2f33322d3335203d3e20323734363430.roa (hash: WI9HCs6eGX9p1jo/mhyWY838lgd+KptHbbco/K1Lluw=)
                          3: 2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl (hash: 6jqjQ/cvlJcJPLshknZ2gqQDFwcR/SsSjjZ37zxjuJQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl
                          rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 23:33:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1b:39:7a:a7:7c:0b:58:38:2b:86:42:63:87:97:f9:3a:5e:8d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
        Validity
            Not Before: Oct 19 21:53:09 2025 GMT
            Not After : Oct 20 23:33:09 2025 GMT
        Subject: CN=FB2CEF58DF861E2236342BA6FC42EA419CB9F661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:de:9c:f8:63:77:93:9c:a9:1e:84:d6:cd:
                    6d:a4:31:c6:b9:1a:be:73:c4:e9:2e:5a:52:23:e3:
                    61:5f:c2:65:dc:28:84:44:22:b1:bf:92:dd:2d:93:
                    1c:0c:e4:4d:fe:d1:22:31:df:b3:c0:cf:94:8f:8b:
                    bd:e4:3f:b0:62:29:7d:7c:70:b6:59:81:06:3a:d7:
                    4b:0f:a2:84:57:bd:3b:d9:d6:d5:8c:45:10:76:99:
                    16:1d:d3:a7:03:42:d0:a3:ce:b9:f0:b0:13:b0:ac:
                    88:de:40:cc:9f:08:54:f0:e2:ec:a7:68:ab:d0:2d:
                    60:8c:3e:23:a5:28:24:0b:41:ae:21:7d:d5:80:63:
                    52:fd:a1:7d:dc:1a:9e:3d:31:05:7e:5b:27:1f:b0:
                    c5:ee:99:82:fc:03:9e:7e:34:c3:3c:52:09:9e:80:
                    93:50:75:8c:81:a1:00:41:7b:7f:42:3a:15:82:36:
                    34:ed:e6:01:ce:6d:5b:86:32:9b:a9:ee:92:17:32:
                    8e:7c:98:8b:6e:9b:10:1f:60:de:7b:63:5c:46:ea:
                    3f:d6:5c:21:c8:cf:fb:48:7f:32:11:f4:e2:d1:5a:
                    de:ae:1b:4c:11:80:cd:8f:33:5c:36:b7:54:ad:0d:
                    fe:8f:06:47:8f:68:27:04:f6:cf:33:08:26:2a:9e:
                    ec:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2C:EF:58:DF:86:1E:22:36:34:2B:A6:FC:42:EA:41:9C:B9:F6:61
            X509v3 Authority Key Identifier:
                keyid:2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:85:25:d0:45:f5:c7:cf:c7:41:6e:c2:91:a5:6e:e8:3f:74:
         5f:e5:57:23:a5:64:00:72:11:13:7f:36:1f:3b:0d:18:6b:27:
         7f:46:07:a1:0c:f4:4b:e9:28:bd:97:86:0c:88:35:95:71:7a:
         76:62:ce:d3:a8:3d:b4:6c:54:2b:a0:39:4d:64:53:fa:b6:98:
         75:4c:da:5e:bb:8e:04:da:75:fd:cf:48:47:99:fe:ba:e8:a5:
         03:6e:ba:a6:23:de:86:21:c4:ca:5d:0f:d3:2d:50:54:f1:34:
         63:c9:03:fe:a1:64:9c:f4:a8:78:1e:70:d8:c4:45:51:6a:20:
         b2:5b:7e:03:d3:72:6b:46:2d:79:5f:5f:6a:9c:08:d2:26:2c:
         cb:e7:8a:3d:e1:d6:db:56:c3:85:22:e3:b9:18:8a:20:1f:b3:
         38:3d:1c:0b:5d:1b:9c:80:e7:8e:29:4b:24:aa:c8:1b:89:f4:
         27:07:32:59:12:2b:ab:b5:c4:13:2a:ba:b1:96:26:7a:80:2f:
         93:79:1b:95:7b:dc:86:88:69:24:41:68:3d:64:be:e7:fd:b6:
         3a:8e:e4:61:72:94:7e:09:62:09:8d:34:e7:dd:96:8a:79:1f:
         13:31:69:d0:6a:f2:d5:72:91:7c:29:2e:a5:61:8a:4c:f9:1c:
         c5:f9:b8:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUThs5eqd8C1g4K4ZCY4eX+TpejVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRGNTU0OUNBOTBCNDdEOEZBNTIxNzgwMEYwMDVDN0VD
MEQ5NjZFNzAeFw0yNTEwMTkyMTUzMDlaFw0yNTEwMjAyMzMzMDlaMDMxMTAvBgNV
BAMTKEZCMkNFRjU4REY4NjFFMjIzNjM0MkJBNkZDNDJFQTQxOUNCOUY2NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv6d6c+GN3k5ypHoTWzW2kMca5
Gr5zxOkuWlIj42FfwmXcKIREIrG/kt0tkxwM5E3+0SIx37PAz5SPi73kP7BiKX18
cLZZgQY610sPooRXvTvZ1tWMRRB2mRYd06cDQtCjzrnwsBOwrIjeQMyfCFTw4uyn
aKvQLWCMPiOlKCQLQa4hfdWAY1L9oX3cGp49MQV+WycfsMXumYL8A55+NMM8Ugme
gJNQdYyBoQBBe39COhWCNjTt5gHObVuGMpup7pIXMo58mItumxAfYN57Y1xG6j/W
XCHIz/tIfzIR9OLRWt6uG0wRgM2PM1w2t1StDf6PBkePaCcE9s8zCCYqnuxJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+yzvWN+GHiI2NCum/ELqQZy59mEwHwYDVR0j
BBgwFoAULfVUnKkLR9j6UheADwBcfsDZZucwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRENuN29VMzI2aEJYZkhtM1FReEV0c2JFdE5IV1ZqN01oV1dwYWRLR1dR
Y1QvMC8yREY1NTQ5Q0E5MEI0N0Q4RkE1MjE3ODAwRjAwNUM3RUMwRDk2NkU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERjU1NDlDQTkwQjQ3RDhG
QTUyMTc4MDBGMDA1QzdFQzBEOTY2RTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RENuN29VMzI2aEJYZkhtM1FReEV0c2JFdE5IV1ZqN01oV1dwYWRLR1dRY1QvMC8y
REY1NTQ5Q0E5MEI0N0Q4RkE1MjE3ODAwRjAwNUM3RUMwRDk2NkU3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzYUl0EX1x8/HQW7CkaVu6D90X+VXI6VkAHIRE382HzsNGGsnf0YHoQz0S+ko
vZeGDIg1lXF6dmLO06g9tGxUK6A5TWRT+raYdUzaXruOBNp1/c9IR5n+uuilA266
piPehiHEyl0P0y1QVPE0Y8kD/qFknPSoeB5w2MRFUWogslt+A9Nya0YteV9fapwI
0iYsy+eKPeHW21bDhSLjuRiKIB+zOD0cC10bnIDnjilLJKrIG4n0JwcyWRIrq7XE
Eyq6sZYmeoAvk3kblXvchohpJEFoPWS+5/22Oo7kYXKUfgliCY00592WinkfEzFp
0Gry1XKRfCkupWGKTPkcxfm4pQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:31:47 2025 by rpki-client