Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.mft
File:                     600921937E8C82CCBB357FE8103E7D3356A4C6BE.mft (raw, json)
Hash identifier:          upJNCLrUlKiQZifobiFHRvZSAONDjAMw/A/aMUwuXq0=
Subject key identifier:   6D:D9:7A:45:79:12:EB:2C:2C:BD:FA:D9:29:A3:75:63:E3:E2:E5:F6
Authority key identifier: 60:09:21:93:7E:8C:82:CC:BB:35:7F:E8:10:3E:7D:33:56:A4:C6:BE
Certificate issuer:       /CN=600921937E8C82CCBB357FE8103E7D3356A4C6BE
Certificate serial:       52005FAFBBB1D8B495CD27033ED986777FA85923
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.mft
Manifest number:          59
Signing time:             Mon 20 Oct 2025 08:11:12 +0000
Manifest this update:     Mon 20 Oct 2025 08:06:12 +0000
Manifest next update:     Tue 21 Oct 2025 08:56:12 +0000
Files and hashes:         1: 3138372e3130392e3139332e302f32342d3234203d3e20323632333232.roa (hash: fOTibBFKKyXjplaxOcREpK8J+dYXBp3XoREK0RnxVQI=)
                          2: 3138372e3130392e3139322e302f32302d3332203d3e203533313135.roa (hash: +6k+b9VeSbhSO0vP0CADMZsNoboYf5M2SRBXU9o0sdI=)
                          3: 3138372e3130392e3139322e302f32302d3332203d3e20313938393439.roa (hash: 6ezk2I65S592vTg6TbE8cLrlUSyrgMUOdYnyeaQIoCA=)
                          4: 323830343a346434383a3a2f33322d313238203d3e203533313135.roa (hash: aQxxvWufxAC3iF5dPfp+RD7XaNfg9aaNRDuwzbJEDJQ=)
                          5: 3138372e3130392e3139382e302f32342d3234203d3e20323632333632.roa (hash: e0KWuyU6WNN3xQ1met+ramHmtSjB0JvY4m+Gfn3H6GU=)
                          6: 600921937E8C82CCBB357FE8103E7D3356A4C6BE.crl (hash: qg3vhv9eRnfQHTR2V6P+zBmgcEmDyUlHstxRVZX9gQA=)
                          7: 3138372e3130392e3139362e302f32342d3234203d3e20323632333232.roa (hash: 27MQqd2Al1+K5boId1TrMsV4FF5zZdSyB79G6mULH84=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.crl
                          rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:56:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:5f:af:bb:b1:d8:b4:95:cd:27:03:3e:d9:86:77:7f:a8:59:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600921937E8C82CCBB357FE8103E7D3356A4C6BE
        Validity
            Not Before: Oct 20 08:06:12 2025 GMT
            Not After : Oct 21 08:56:12 2025 GMT
        Subject: CN=6DD97A457912EB2C2CBDFAD929A37563E3E2E5F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d6:85:ca:39:0c:8c:ed:90:5c:ff:69:06:4f:
                    66:ea:f4:76:68:a7:2c:e7:7c:88:2c:54:42:a5:20:
                    97:a0:7e:7f:5a:bd:2d:c6:c4:7b:1c:fc:66:8d:c4:
                    08:8d:a2:ef:d3:b3:0f:8d:9e:3d:43:82:5b:5f:29:
                    e2:09:bd:ea:7a:70:70:4f:03:a1:da:57:37:e5:a6:
                    0f:2c:f1:a6:25:03:7b:f9:41:dd:59:d2:ed:e5:0c:
                    52:e0:d6:ba:0e:73:1b:fd:30:4e:8d:a2:e7:f4:c4:
                    c7:e8:5c:ec:e9:36:3d:d9:e8:c8:04:12:20:25:d5:
                    10:84:a7:cc:31:da:96:f8:df:fe:e6:45:79:18:ea:
                    7a:39:b5:d2:42:b4:42:48:81:60:69:af:d4:e7:b3:
                    7e:0e:e0:8e:52:04:21:cd:09:c1:a7:36:25:90:df:
                    ec:db:28:64:9c:85:5b:fb:29:7b:d8:f7:99:6f:73:
                    44:c5:85:d4:d2:4f:5b:cc:a0:93:63:ea:85:68:92:
                    ff:27:39:1a:f6:ba:42:63:8c:f5:cf:42:ff:46:a4:
                    51:fe:1d:51:99:c0:fc:4a:b5:df:52:35:06:6b:e4:
                    fd:f9:b8:55:f1:c3:a5:b9:6a:9e:5e:f7:ec:19:0f:
                    cf:68:3f:ad:eb:29:04:01:87:2d:f5:3e:4c:ae:39:
                    7f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D9:7A:45:79:12:EB:2C:2C:BD:FA:D9:29:A3:75:63:E3:E2:E5:F6
            X509v3 Authority Key Identifier:
                keyid:60:09:21:93:7E:8C:82:CC:BB:35:7F:E8:10:3E:7D:33:56:A4:C6:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:0b:ea:65:07:66:75:ca:ed:e6:91:98:c5:20:b3:61:06:78:
         d2:25:1b:fe:fc:e2:22:b1:15:b2:47:45:d5:de:34:6d:ba:92:
         24:4c:e6:41:0c:4a:50:a4:37:fa:79:bf:2d:fb:31:b5:87:c0:
         34:1b:d4:6d:e3:d1:fc:0d:53:73:e7:f9:21:fc:4f:99:7a:a4:
         e2:fa:30:3f:35:c3:52:8b:0f:33:6d:7a:b3:12:b1:c3:05:43:
         6d:b8:a7:85:84:c3:fe:43:b3:99:38:5e:ee:e7:90:23:0c:9f:
         0f:b5:1e:0a:8c:6e:e3:bd:5a:30:a5:f1:3b:ce:0a:28:c0:e1:
         e6:ca:48:1f:df:7e:77:fc:52:09:a8:5e:83:0b:62:dd:24:65:
         83:27:fe:dd:97:e5:b7:78:ee:20:3b:10:63:a0:dc:6e:2f:5f:
         9d:7d:19:a5:81:58:97:60:dc:14:66:58:90:7b:71:7b:1a:c0:
         16:4e:04:13:a7:c8:6c:dc:df:8c:b8:11:57:08:f6:da:f7:f9:
         d9:2b:ba:94:65:50:35:3a:f4:00:37:24:c5:81:7e:ce:6e:3a:
         85:64:7a:98:8b:67:a7:05:cd:6a:f5:11:94:09:c1:9e:82:e5:
         d3:df:64:8d:bf:bb:5c:07:b9:e6:a6:77:c9:5d:6c:d8:69:b6:
         e3:d1:5d:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUUgBfr7ux2LSVzScDPtmGd3+oWSMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwOTIxOTM3RThDODJDQ0JCMzU3RkU4MTAzRTdEMzM1
NkE0QzZCRTAeFw0yNTEwMjAwODA2MTJaFw0yNTEwMjEwODU2MTJaMDMxMTAvBgNV
BAMTKDZERDk3QTQ1NzkxMkVCMkMyQ0JERkFEOTI5QTM3NTYzRTNFMkU1RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy1oXKOQyM7ZBc/2kGT2bq9HZo
pyznfIgsVEKlIJegfn9avS3GxHsc/GaNxAiNou/Tsw+Nnj1DgltfKeIJvep6cHBP
A6HaVzflpg8s8aYlA3v5Qd1Z0u3lDFLg1roOcxv9ME6Nouf0xMfoXOzpNj3Z6MgE
EiAl1RCEp8wx2pb43/7mRXkY6no5tdJCtEJIgWBpr9Tns34O4I5SBCHNCcGnNiWQ
3+zbKGSchVv7KXvY95lvc0TFhdTST1vMoJNj6oVokv8nORr2ukJjjPXPQv9GpFH+
HVGZwPxKtd9SNQZr5P35uFXxw6W5ap5e9+wZD89oP63rKQQBhy31PkyuOX/LAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUbdl6RXkS6ywsvfrZKaN1Y+Pi5fYwHwYDVR0j
BBgwFoAUYAkhk36Mgsy7NX/oED59M1akxr4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVE5U2hZaUZINXlrc2ZRVmVtaXFNOFRFUVVrOHVqdWd2eExOYndDdUN2
RUQvMS82MDA5MjE5MzdFOEM4MkNDQkIzNTdGRTgxMDNFN0QzMzU2QTRDNkJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwMDkyMTkzN0U4QzgyQ0NC
QjM1N0ZFODEwM0U3RDMzNTZBNEM2QkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RVE5U2hZaUZINXlrc2ZRVmVtaXFNOFRFUVVrOHVqdWd2eExOYndDdUN2RUQvMS82
MDA5MjE5MzdFOEM4MkNDQkIzNTdGRTgxMDNFN0QzMzU2QTRDNkJFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAwvqZQdmdcrt5pGYxSCzYQZ40iUb/vziIrEVskdF1d40bbqSJEzmQQxKUKQ3
+nm/LfsxtYfANBvUbePR/A1Tc+f5IfxPmXqk4vowPzXDUosPM216sxKxwwVDbbin
hYTD/kOzmThe7ueQIwyfD7UeCoxu471aMKXxO84KKMDh5spIH99+d/xSCahegwti
3SRlgyf+3Zflt3juIDsQY6Dcbi9fnX0ZpYFYl2DcFGZYkHtxexrAFk4EE6fIbNzf
jLgRVwj22vf52Su6lGVQNTr0ADckxYF+zm46hWR6mItnpwXNavURlAnBnoLl099k
jb+7XAe55qZ3yV1s2Gm249Fdkg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:40:56 2025 by rpki-client