Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/BB0E18F43E99502212097842E9F81169A8D29D2E.mft
File:                     BB0E18F43E99502212097842E9F81169A8D29D2E.mft (raw, json)
Hash identifier:          lK3BBKUA+JFmGKid+/y/RBBBw0/wPLViMR9L1oJJWPQ=
Subject key identifier:   71:76:E0:58:95:3F:09:71:B5:03:C6:16:F8:A9:02:0E:6C:FA:BB:82
Authority key identifier: BB:0E:18:F4:3E:99:50:22:12:09:78:42:E9:F8:11:69:A8:D2:9D:2E
Certificate issuer:       /CN=BB0E18F43E99502212097842E9F81169A8D29D2E
Certificate serial:       177B81A2C3085ABBBC861007470E5B2124515DE3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0E18F43E99502212097842E9F81169A8D29D2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/BB0E18F43E99502212097842E9F81169A8D29D2E.mft
Manifest number:          3B
Signing time:             Mon 20 Oct 2025 08:40:00 +0000
Manifest this update:     Mon 20 Oct 2025 08:35:00 +0000
Manifest next update:     Tue 21 Oct 2025 08:40:00 +0000
Files and hashes:         1: 323830343a313661303a3a2f33322d3438203d3e203631393038.roa (hash: SJwWMVcW/R4MVm7fqAAEcDXrhO9/opvkLPKGfeP40SA=)
                          2: BB0E18F43E99502212097842E9F81169A8D29D2E.crl (hash: hpRE1RZT+fMHPwR9oO7+vzSFfXDSuljOYFKx7IHkJks=)
                          3: 3133382e3132312e3230342e302f32322d3234203d3e203631393038.roa (hash: EfeDTyXlAV/AcyIAL99jnZrUZwoBsQqBhvHzOD2I31Q=)
                          4: 3133322e3235352e34302e302f32322d3234203d3e203631393038.roa (hash: ivGb7kFrN/xXnPSxmz8bTdaUJWDWXTxf6Qa16j3bHGA=)
                          5: 3136382e3139372e3234342e302f32322d3234203d3e203631393038.roa (hash: AbhiS6atM/ufUan1NgjjbSssoI/bofGFQ0tlSXQ5Em0=)
                          6: 3137392e3132342e3138342e302f32312d3234203d3e203631393038.roa (hash: a9FHcagAn8rTT1KRkuR2JDFTVm1b8nEjEU2X9IozEzw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/BB0E18F43E99502212097842E9F81169A8D29D2E.crl
                          rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/BB0E18F43E99502212097842E9F81169A8D29D2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0E18F43E99502212097842E9F81169A8D29D2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7b:81:a2:c3:08:5a:bb:bc:86:10:07:47:0e:5b:21:24:51:5d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB0E18F43E99502212097842E9F81169A8D29D2E
        Validity
            Not Before: Oct 20 08:35:00 2025 GMT
            Not After : Oct 21 08:40:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3f:ce:54:f8:9e:98:56:c8:3c:01:54:4e:10:
                    48:5d:60:ae:3c:91:76:55:e9:cb:be:6d:4c:cf:b6:
                    49:cc:d9:07:bc:1d:7b:da:14:93:df:c6:39:d5:46:
                    2f:83:63:d3:64:9a:37:3f:f5:67:49:54:16:9e:c6:
                    5c:72:08:f1:e0:d8:5e:6d:bc:aa:b4:fc:fc:8b:88:
                    e8:df:9a:0a:dc:ea:f9:93:4e:3a:30:cb:61:5e:e4:
                    cd:04:24:59:f2:a0:a0:91:ea:bf:4d:75:3d:21:b2:
                    9d:d6:df:2e:6b:3f:f3:d0:b3:56:5f:fb:c6:47:2e:
                    fa:e1:a5:ce:43:97:69:26:7e:47:7c:3e:40:9d:a7:
                    c9:ea:88:18:e7:16:2b:80:f8:ec:e1:56:2d:36:c8:
                    ae:47:57:48:70:b6:2d:35:37:6b:67:d0:ca:9a:b1:
                    a9:9e:b7:63:17:c6:40:01:5d:33:21:bd:d5:e1:2e:
                    63:7a:d4:10:91:e0:ae:1b:3c:54:87:2a:d6:97:9b:
                    37:11:43:c1:2f:4a:4d:3d:09:20:17:af:24:fb:aa:
                    01:8e:16:c7:f4:b0:d4:8f:0a:e6:44:a7:53:2d:41:
                    36:37:7a:c4:69:00:7c:b6:9e:6d:9f:03:87:fa:73:
                    8b:fa:79:fd:fe:41:e6:22:b3:9d:74:78:64:f1:d4:
                    7d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:76:E0:58:95:3F:09:71:B5:03:C6:16:F8:A9:02:0E:6C:FA:BB:82
            X509v3 Authority Key Identifier:
                keyid:BB:0E:18:F4:3E:99:50:22:12:09:78:42:E9:F8:11:69:A8:D2:9D:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/BB0E18F43E99502212097842E9F81169A8D29D2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0E18F43E99502212097842E9F81169A8D29D2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/BB0E18F43E99502212097842E9F81169A8D29D2E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:86:ee:81:47:a9:eb:ce:e9:88:f0:02:a9:5f:8e:37:be:3c:
         e9:3c:9f:d3:4d:58:8c:8d:00:00:8e:7b:ba:87:f5:e1:4b:fc:
         80:6f:87:55:8a:87:4d:94:69:d4:b0:f8:44:a6:2f:a8:27:aa:
         48:3a:bb:b2:7f:6b:01:3a:60:8f:50:c6:d9:e6:f6:93:ff:da:
         18:9d:e8:c2:9b:e8:68:45:1d:72:7f:1c:5c:f2:b7:41:74:92:
         eb:c6:cb:15:17:60:c1:c4:86:6a:56:d9:cf:f9:37:dd:b6:dc:
         a3:d4:72:0c:86:bd:8f:2e:72:d4:28:39:ac:fb:a4:38:1c:71:
         e9:4a:bf:8f:17:2b:63:7f:9a:77:4d:08:15:d9:2a:be:e9:f9:
         12:e2:fc:4e:24:9a:e8:d2:f9:51:38:df:ff:a8:6e:49:4f:e5:
         59:d2:8b:30:40:a5:f6:05:7c:9a:c9:49:18:35:ee:06:6e:18:
         a4:c4:ad:93:68:76:3f:67:78:39:2b:df:f7:7e:d4:be:ce:7c:
         04:7f:11:af:da:fa:0c:49:03:d3:ae:55:28:b5:55:94:89:d0:
         38:e8:b3:26:76:a2:63:ee:60:3c:da:0d:ae:eb:25:77:e3:1b:
         da:eb:5b:e3:76:cb:8c:34:f7:c5:d7:7a:8d:51:d6:d8:af:76:
         a8:4c:6a:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:57:52 2025 by rpki-client