Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/85068FEAC49281A5AC659FD8ACD5E5618494FE80.mft
File:                     85068FEAC49281A5AC659FD8ACD5E5618494FE80.mft (raw, json)
Hash identifier:          5BnrLKTIZqnfE0T/sciZYcIWscJjrLDJ8DPUE3tr0eA=
Subject key identifier:   09:88:15:CB:08:03:E1:EF:09:98:23:1D:BB:B7:75:11:14:0C:63:47
Authority key identifier: 85:06:8F:EA:C4:92:81:A5:AC:65:9F:D8:AC:D5:E5:61:84:94:FE:80
Certificate issuer:       /CN=85068FEAC49281A5AC659FD8ACD5E5618494FE80
Certificate serial:       717174E397FAF9370267D629A89FEE4980092AA5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85068FEAC49281A5AC659FD8ACD5E5618494FE80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/85068FEAC49281A5AC659FD8ACD5E5618494FE80.mft
Manifest number:          5B
Signing time:             Sun 19 Oct 2025 22:20:50 +0000
Manifest this update:     Sun 19 Oct 2025 22:15:50 +0000
Manifest next update:     Mon 20 Oct 2025 22:20:50 +0000
Files and hashes:         1: 3138392e3131332e3139302e302f32342d3234203d3e20323730333131.roa (hash: PfBe69iu29jWZz2+9qaHmtzi9QqGT1j6b6bJF47cghc=)
                          2: 323830343a366132303a3a2f33352d3335203d3e20323730333131.roa (hash: kATj2QWkHPDvEzcQ6ybysXbSpkiDyHgqSAZt18xiT5s=)
                          3: 323830343a366132303a3a2f33322d3332203d3e20323730333131.roa (hash: nJRw2a5PSv2Upws4q6C3IDuHd+WXSYEUTkABck7q9vA=)
                          4: 3138392e3131332e3138382e302f32342d3234203d3e20323730333131.roa (hash: T5iSsyEa3CJ5ubJjAJ0Wh5EeghX/bBpzxG4BvxvQMnY=)
                          5: 3138392e3131332e3139312e302f32342d3234203d3e20323730333131.roa (hash: HWvHKUKBbIi2U8mRS7k7gBkY11IKW8zsgXIwVrKBf0k=)
                          6: 323830343a366132303a323030303a3a2f33352d3335203d3e20323730333131.roa (hash: crndK/TccfHrPXN22xqZ6uksrZ3hBAKDitK4kEkuC04=)
                          7: 3138392e3131332e3138392e302f32342d3234203d3e20323730333131.roa (hash: 8OCy0PQFpeRimd/3R/B5HNkDVJJ2JMsWz0MCw2sfDO0=)
                          8: 85068FEAC49281A5AC659FD8ACD5E5618494FE80.crl (hash: SQCV5VMrvJPgHahCn4DpezptqrLjyB5xGoG1vCjaqtg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/85068FEAC49281A5AC659FD8ACD5E5618494FE80.crl
                          rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/85068FEAC49281A5AC659FD8ACD5E5618494FE80.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85068FEAC49281A5AC659FD8ACD5E5618494FE80.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 22:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:71:74:e3:97:fa:f9:37:02:67:d6:29:a8:9f:ee:49:80:09:2a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85068FEAC49281A5AC659FD8ACD5E5618494FE80
        Validity
            Not Before: Oct 19 22:15:50 2025 GMT
            Not After : Oct 20 22:20:50 2025 GMT
        Subject: CN=098815CB0803E1EF0998231DBBB77511140C6347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:42:82:53:82:22:a7:47:0b:ea:95:5b:c6:40:
                    c2:1e:2d:11:7c:4e:6d:de:97:e9:de:66:8a:ad:2a:
                    85:d8:23:f0:46:85:03:dd:77:0f:d8:0f:0c:51:b5:
                    42:ae:6d:54:fd:c3:a7:d2:4a:26:1b:2e:73:67:6a:
                    5b:73:c6:3f:69:96:77:b5:b8:de:bd:04:45:b5:d6:
                    f8:d7:4d:6f:4a:a8:e3:67:1f:42:31:49:5e:6e:49:
                    ca:20:c9:56:f0:f9:e0:0c:be:8e:a5:ab:7e:b8:d6:
                    e6:4a:0e:8a:5c:27:f1:4d:d0:60:b4:2f:5a:4c:b6:
                    ce:1a:44:ad:95:4c:a4:86:15:19:ac:18:03:53:51:
                    53:17:c6:37:ae:d2:5b:c0:97:54:18:85:81:25:c6:
                    04:be:39:ed:8e:b5:6c:42:19:19:1a:fb:52:a0:88:
                    0f:6f:d2:f4:ab:3a:45:63:d6:19:88:15:14:8c:1d:
                    b0:c8:13:54:2c:c5:87:1e:07:af:c5:39:f7:8e:15:
                    01:ee:0a:f8:cb:d2:e7:40:8c:d7:91:51:3e:17:75:
                    30:25:33:49:f4:eb:c7:e0:d8:20:09:e6:a1:5c:a0:
                    dc:e6:95:b7:86:32:cb:f4:1b:12:7d:e3:b7:79:b3:
                    3d:70:a0:8f:25:b6:8e:c5:2a:eb:54:c4:22:a1:ae:
                    08:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:88:15:CB:08:03:E1:EF:09:98:23:1D:BB:B7:75:11:14:0C:63:47
            X509v3 Authority Key Identifier:
                keyid:85:06:8F:EA:C4:92:81:A5:AC:65:9F:D8:AC:D5:E5:61:84:94:FE:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/85068FEAC49281A5AC659FD8ACD5E5618494FE80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85068FEAC49281A5AC659FD8ACD5E5618494FE80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/85068FEAC49281A5AC659FD8ACD5E5618494FE80.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:3a:41:96:b4:ce:99:34:46:4e:48:9a:6b:eb:d5:5f:af:19:
         25:1e:23:8e:e6:8d:48:3b:37:bb:1f:55:83:cc:38:f2:aa:54:
         45:48:e5:a9:50:8b:39:78:1b:1e:36:b2:ec:d8:ad:c1:9c:32:
         de:a2:a6:00:36:c6:d2:41:fe:07:84:7b:97:f7:ec:c4:9d:94:
         05:bf:d0:81:db:54:37:cb:aa:38:6a:63:cb:a8:42:6f:e2:f0:
         28:bc:2a:9a:92:a1:a6:03:23:3c:f8:dd:75:d5:f2:27:db:08:
         2c:19:6d:c4:3a:59:0d:d0:fe:91:b7:7d:50:b8:51:82:53:33:
         9f:f5:b5:d0:a1:25:f3:d7:1c:12:59:f5:91:24:af:66:f8:24:
         f5:32:81:53:f8:91:ad:eb:8a:41:29:3e:0e:2c:01:78:05:a7:
         05:0f:b3:91:59:37:94:ab:a4:4c:b1:0f:5b:a4:16:9e:ba:0c:
         58:4e:9a:5d:c6:75:f4:13:a5:b4:65:dc:fb:97:64:26:a4:11:
         7b:51:ba:78:d9:5f:af:b3:b4:03:33:3e:ed:24:d8:fe:08:1b:
         4c:e7:31:76:32:2e:44:87:be:4d:87:6c:f9:bb:ef:82:7c:37:
         80:aa:ed:33:17:18:a3:d8:c1:f1:26:67:62:d7:56:79:7e:c7:
         ec:74:78:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:24:21 2025 by rpki-client