Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.mft
File:                     368148FC0FF010466206F11D6AC1C58A7CBD3AE9.mft (raw, json)
Hash identifier:          L4GrjzkApcH7T2wKhvxHBFuJX2CqJE6OJP/ThldpdSk=
Subject key identifier:   E4:6E:83:45:F8:DA:4E:B0:5E:EE:18:02:F9:22:AD:5D:63:F2:22:87
Authority key identifier: 36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9
Certificate issuer:       /CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
Certificate serial:       72DF644FA03880F3FAFDB9C1F7C0A8671C812943
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.mft
Manifest number:          036D
Signing time:             Mon 20 Oct 2025 10:00:00 +0000
Manifest this update:     Mon 20 Oct 2025 09:55:00 +0000
Manifest next update:     Tue 21 Oct 2025 10:00:00 +0000
Files and hashes:         1: 3137392e3132352e3132322e302f32342d3234203d3e20323633363335.roa (hash: MC2ojCAez6I+RLzc+BwcwMOnVS+diXPFzwqavfs7VLw=)
                          2: 3137392e3132352e3132312e302f32342d3234203d3e20323633363335.roa (hash: WlwvY1QiY3S5pVOgDdHgrap8tPkyhd7mtngNDXgG2LQ=)
                          3: 3137302e3235342e3138312e302f32342d3234203d3e20323633363335.roa (hash: 76YnUj1q2Os+XeqsFqurVPKGsJ5jG1v1Webb7t8F/7o=)
                          4: 3137302e3235342e3138302e302f32322d3232203d3e20323633363335.roa (hash: kzpv/xJpMsBGEXEaNmf/wXkC8B2uQK2v4gXwM/DhHTI=)
                          5: 368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl (hash: VNE6e3n89r7DZ5nv29Kewe7u2aKmoghvfe5iX3A1nxY=)
                          6: 3137302e3235342e3138322e302f32342d3234203d3e20323633363335.roa (hash: v+7WalEOFC1dTaQYmG6Bp9C6wiuNFuVy548lZgBvU0w=)
                          7: 3137392e3132352e3132302e302f32322d3232203d3e20323633363335.roa (hash: UvFbkEoEOmIMAqdSZ4Sn8uxM+U8T8PpcCK+xnq0G8WM=)
                          8: 3137302e3235342e3138302e302f32342d3234203d3e20323633363335.roa (hash: Xycc0v77uDFFxCl3fW8QZdrPqmpWroJefmv061/0blY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl
                          rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:df:64:4f:a0:38:80:f3:fa:fd:b9:c1:f7:c0:a8:67:1c:81:29:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
        Validity
            Not Before: Oct 20 09:55:00 2025 GMT
            Not After : Oct 27 10:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:41:60:56:1a:87:cb:12:dd:c9:d6:98:50:7c:
                    42:e0:e1:f9:88:41:24:94:b7:10:a8:2f:fc:ae:89:
                    7d:e1:51:37:e4:c4:51:03:f0:82:40:d8:05:b9:e7:
                    75:35:4c:13:38:eb:07:c3:d3:84:a0:22:a1:4a:a0:
                    f8:42:2a:85:46:bc:9f:01:55:33:95:14:fb:bf:e0:
                    08:25:86:ce:18:fc:b4:e7:d7:14:16:a8:8c:ea:5d:
                    76:0b:71:60:c2:b5:10:cc:be:33:22:c9:b1:6d:3b:
                    83:fa:99:ad:eb:33:3d:9a:d4:e0:68:be:78:3e:5b:
                    ac:ba:34:91:a2:11:75:0d:8d:e8:b0:1b:2b:62:61:
                    af:7f:3c:d0:a1:52:2e:da:0b:57:c2:80:f5:98:b3:
                    f4:52:90:bf:7a:df:9e:44:63:eb:94:bc:49:2e:5b:
                    05:80:31:c2:a6:64:87:62:47:03:d1:e6:16:14:69:
                    56:c3:b7:46:2f:0d:4a:dc:f7:b5:45:a4:2b:05:f5:
                    24:55:88:30:6b:c9:46:fd:d5:5e:d2:a5:73:b2:8a:
                    bc:6d:ed:5d:41:7e:56:4e:4d:fa:f2:3b:ea:ab:9f:
                    07:13:07:58:b3:65:05:d9:c8:e2:fa:cb:f7:c2:a0:
                    29:3a:2f:de:cb:8a:08:9d:30:0d:f1:6d:60:c1:6b:
                    2c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6E:83:45:F8:DA:4E:B0:5E:EE:18:02:F9:22:AD:5D:63:F2:22:87
            X509v3 Authority Key Identifier:
                keyid:36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:73:b7:ac:db:47:28:61:71:c1:bd:55:60:a1:1f:41:d0:b1:
         eb:92:7c:4a:99:17:da:d4:62:63:51:03:79:e2:bc:b7:e4:bb:
         4b:0b:f9:84:c7:89:97:28:a8:f6:0d:aa:88:0b:0d:8b:ca:4a:
         c7:19:f4:e7:44:a6:34:bd:ef:23:4e:8b:a9:2f:0c:74:92:a5:
         3a:63:a8:32:e4:bf:16:db:3d:60:3c:f7:d1:47:e5:f6:d3:09:
         36:ce:57:5d:a8:32:05:6a:bd:ed:fa:35:f2:41:85:8a:83:88:
         84:96:3e:7e:78:e8:11:bd:25:b3:0d:72:2c:20:24:cb:db:2b:
         26:14:8a:80:7d:9a:d7:1b:29:7b:27:06:ba:d1:d3:97:f4:d3:
         f2:5a:7f:6c:09:ac:bc:c8:8b:3c:f0:f2:dd:4c:0d:46:18:bd:
         7d:4f:ea:ae:58:d6:8f:97:a3:e1:a8:d7:38:72:6b:c8:1a:b3:
         7d:c3:8a:0e:5e:fc:86:e6:13:a4:31:e5:e0:85:4e:d8:c5:f7:
         f0:28:42:30:65:c5:04:9c:4b:af:7d:31:03:22:74:4d:a3:e8:
         0d:3d:eb:67:a5:53:8b:81:41:71:92:2c:67:4f:67:64:1b:47:
         cc:83:f0:af:e6:d7:11:ea:4f:67:29:00:a2:6a:d1:4b:ab:2f:
         c3:e6:aa:05
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUct9kT6A4gPP6/bnB98CoZxyBKUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY4MTQ4RkMwRkYwMTA0NjYyMDZGMTFENkFDMUM1OEE3
Q0JEM0FFOTAeFw0yNTEwMjAwOTU1MDBaFw0yNTEwMjcxMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkQ0MTYwNTYxQTg3Q0IxMkRE
QzlENjk4NTA3QzQyRTBFMUY5ODg0MTI0OTRCNzEwQTgyRkZDQUU4OTdERTE1MTM3
RTRDNDUxMDNGMDgyNDBEODA1QjlFNzc1MzU0QzEzMzhFQjA3QzNEMzg0QTAyMkEx
NEFBMEY4NDIyQTg1NDZCQzlGMDE1NTMzOTUxNEZCQkZFMDA4MjU4NkNFMThGQ0I0
RTdENzE0MTZBODhDRUE1RDc2MEI3MTYwQzJCNTEwQ0NCRTMzMjJDOUIxNkQzQjgz
RkE5OUFERUIzMzNEOUFENEUwNjhCRTc4M0U1QkFDQkEzNDkxQTIxMTc1MEQ4REU4
QjAxQjJCNjI2MUFGN0YzQ0QwQTE1MjJFREEwQjU3QzI4MEY1OThCM0Y0NTI5MEJG
N0FERjlFNDQ2M0VCOTRCQzQ5MkU1QjA1ODAzMUMyQTY2NDg3NjI0NzAzRDFFNjE2
MTQ2OTU2QzNCNzQ2MkYwRDRBRENGN0I1NDVBNDJCMDVGNTI0NTU4ODMwNkJDOTQ2
RkRENTVFRDJBNTczQjI4QUJDNkRFRDVENDE3RTU2NEU0REZBRjIzQkVBQUI5RjA3
MTMwNzU4QjM2NTA1RDlDOEUyRkFDQkY3QzJBMDI5M0EyRkRFQ0I4QTA4OUQzMDBE
RjE2RDYwQzE2QjJDRDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvUFgVhqHyxLdydaYUHxC4OH5iEEklLcQqC/8rol94VE35MRRA/CC
QNgFued1NUwTOOsHw9OEoCKhSqD4QiqFRryfAVUzlRT7v+AIJYbOGPy059cUFqiM
6l12C3FgwrUQzL4zIsmxbTuD+pmt6zM9mtTgaL54PlusujSRohF1DY3osBsrYmGv
fzzQoVIu2gtXwoD1mLP0UpC/et+eRGPrlLxJLlsFgDHCpmSHYkcD0eYWFGlWw7dG
Lw1K3Pe1RaQrBfUkVYgwa8lG/dVe0qVzsoq8be1dQX5WTk368jvqq58HEwdYs2UF
2cji+sv3wqApOi/ey4oInTAN8W1gwWss0QIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FORug0X42k6wXu4YAvkirV1j8iKHMB8GA1UdIwQYMBaAFDaBSPwP8BBGYgbxHWrB
xYp8vTrpMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RFbXp0Wk1DU0xMcHFr
R2dFcnc4M29Qb2NRTkRkOGROUVRhdHg2MVpxaEQzLzEvMzY4MTQ4RkMwRkYwMTA0
NjYyMDZGMTFENkFDMUM1OEE3Q0JEM0FFOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zNjgxNDhGQzBGRjAxMDQ2NjIwNkYxMUQ2QUMxQzU4QTdDQkQz
QUU5LmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RFbXp0Wk1DU0xMcHFrR2dFcnc4
M29Qb2NRTkRkOGROUVRhdHg2MVpxaEQzLzEvMzY4MTQ4RkMwRkYwMTA0NjYyMDZG
MTFENkFDMUM1OEE3Q0JEM0FFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAFzt6zbRyhhccG9VWChH0HQ
seuSfEqZF9rUYmNRA3nivLfku0sL+YTHiZcoqPYNqogLDYvKSscZ9OdEpjS97yNO
i6kvDHSSpTpjqDLkvxbbPWA899FH5fbTCTbOV12oMgVqve36NfJBhYqDiISWPn54
6BG9JbMNciwgJMvbKyYUioB9mtcbKXsnBrrR05f00/Jaf2wJrLzIizzw8t1MDUYY
vX1P6q5Y1o+Xo+Go1zhya8gas33Dig5e/IbmE6Qx5eCFTtjF9/AoQjBlxQScS699
MQMidE2j6A0962elU4uBQXGSLGdPZ2QbR8yD8K/m1xHqT2cpAKJq0UurL8PmqgU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:28:39 2025 by rpki-client