Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.mft
File:                     32D842DEE7974134E5B4C88618DC7A30F4029092.mft (raw, json)
Hash identifier:          BzFIP0LeVrfAdSgrXZDo4dgqQKvCoWM6cEejGPp9OdM=
Subject key identifier:   7D:B3:4D:61:99:A0:5B:8F:E3:46:53:4D:C1:5A:77:AE:AF:49:E9:93
Authority key identifier: 32:D8:42:DE:E7:97:41:34:E5:B4:C8:86:18:DC:7A:30:F4:02:90:92
Certificate issuer:       /CN=32D842DEE7974134E5B4C88618DC7A30F4029092
Certificate serial:       7E4D4ABD8F43E2E1CE16E4910B1EDB4B0B943A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D842DEE7974134E5B4C88618DC7A30F4029092.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.mft
Manifest number:          C2
Signing time:             Sun 19 Oct 2025 21:55:20 +0000
Manifest this update:     Sun 19 Oct 2025 21:50:20 +0000
Manifest next update:     Mon 20 Oct 2025 23:03:20 +0000
Files and hashes:         1: 3136382e3139372e3233322e302f32332d3233203d3e20323635343836.roa (hash: 9ug1j7Fqg28hINwRnrYJnkGqYcAMffo5ELp36ADRWc0=)
                          2: 3136382e3139372e3233342e302f32342d3234203d3e20323635343836.roa (hash: XA7BCriBR7mT9sUcfsGwde4HG74h7lP+Z0uholwoLQY=)
                          3: 3136382e3139372e3233352e302f32342d3234203d3e20323635343836.roa (hash: J508pyMPVY1GBTHPyYTQDwMoH3gUnkrLafJaNo1qATo=)
                          4: 323830343a333465303a3a2f33342d3334203d3e20323635343836.roa (hash: lP9yLdGOkCk+3ShNrz6bkeh6s9PD/F1QN6A9J9tvCxQ=)
                          5: 323830343a333465303a633030303a3a2f33342d3334203d3e20323635343836.roa (hash: F+zuHK7ZLqRaMSs3CVGCAqv4XCc1pxSxeZXlwW6nBUo=)
                          6: 32D842DEE7974134E5B4C88618DC7A30F4029092.crl (hash: nkUWinB7uLM4K7zGaw6ABHXUx9+U/eoWjwo7Y8Qx8lA=)
                          7: 323830343a333465303a383030303a3a2f33342d3334203d3e20323635343836.roa (hash: 6mk1VOE4VOvb63uNwwW58W2PQRmGYAMUGRYeFxQc7SU=)
                          8: 323830343a333465303a343030303a3a2f33342d3334203d3e20323635343836.roa (hash: w8t1N5b5CKW5U01k2orVmlH3xGf64uRyJrjngJrgDu0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.crl
                          rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D842DEE7974134E5B4C88618DC7A30F4029092.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 23:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:4d:4a:bd:8f:43:e2:e1:ce:16:e4:91:0b:1e:db:4b:0b:94:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32D842DEE7974134E5B4C88618DC7A30F4029092
        Validity
            Not Before: Oct 19 21:50:20 2025 GMT
            Not After : Oct 20 23:03:20 2025 GMT
        Subject: CN=7DB34D6199A05B8FE346534DC15A77AEAF49E993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:99:cc:44:23:fa:93:a3:69:78:11:9b:d9:2a:
                    ae:fb:ac:2b:c1:b3:b3:7e:e8:ee:e1:09:90:5d:7a:
                    e6:42:e2:55:7e:93:90:c7:a5:d3:90:ef:19:11:bd:
                    77:d8:50:c2:3c:20:48:85:54:a7:6f:95:0b:e5:b6:
                    4a:16:6a:56:e7:6d:ed:4c:b3:00:04:d3:12:62:8c:
                    ae:c9:7c:1b:b1:a3:00:ad:4e:3c:76:40:fe:1f:23:
                    ef:1c:00:dd:2d:b0:b1:4f:34:62:cf:6a:dd:63:ea:
                    da:40:af:7d:86:de:6b:e5:61:8b:1f:57:81:66:40:
                    31:2b:66:a7:dc:4c:84:b6:13:2f:79:85:42:3e:ca:
                    f5:dc:f8:2b:f3:93:3a:bd:a4:e6:b3:da:40:47:28:
                    af:91:4e:a3:b4:40:64:58:ce:ff:2f:79:34:62:a3:
                    c6:a5:5c:54:ef:38:87:5d:8a:fb:71:6d:05:c6:03:
                    b0:18:0a:d2:ed:b6:e7:84:66:83:46:50:f7:64:19:
                    25:9f:be:da:0c:03:ea:01:77:e7:0b:c9:48:cd:84:
                    1d:24:66:de:75:7f:18:e7:f4:db:f2:32:a9:2a:88:
                    d0:42:90:bd:c4:6e:a4:65:52:26:77:21:c8:06:9a:
                    2c:c8:50:41:54:f5:70:79:78:40:64:02:26:de:ee:
                    85:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B3:4D:61:99:A0:5B:8F:E3:46:53:4D:C1:5A:77:AE:AF:49:E9:93
            X509v3 Authority Key Identifier:
                keyid:32:D8:42:DE:E7:97:41:34:E5:B4:C8:86:18:DC:7A:30:F4:02:90:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D842DEE7974134E5B4C88618DC7A30F4029092.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a3:3b:91:8c:ef:48:c0:3a:9c:94:6e:29:bf:eb:a6:f3:9b:
         e5:76:31:7e:c6:ac:8a:13:04:7a:3b:77:a5:1e:93:61:c2:a8:
         0f:19:ba:5e:5c:59:c3:0b:e3:74:a0:29:46:01:80:b2:d1:81:
         d2:6d:37:f9:d1:ea:a2:04:08:87:9e:ca:78:e0:b0:ff:b4:5b:
         f0:00:7c:8a:90:ac:91:b3:ee:9e:7e:05:33:9b:f2:f9:fc:05:
         2a:47:2b:20:f8:c6:c0:05:87:d9:68:6b:ea:f3:48:80:39:5c:
         ce:59:3d:0c:07:12:22:b1:dd:f6:99:3a:a1:f9:2e:50:47:02:
         88:50:aa:2f:a3:40:a6:35:f3:b2:7a:02:ac:7e:40:48:4a:71:
         ef:b1:04:dd:0c:05:fa:c1:4c:3a:a5:71:40:d1:f0:32:7e:4a:
         b2:5b:e4:0e:3f:ac:41:13:fd:8a:20:9c:86:b2:2c:e3:a2:4f:
         86:a9:a9:38:4c:c3:49:f8:27:3d:95:d7:ea:f5:23:73:38:db:
         b4:22:8a:36:b9:5b:0b:cf:48:c2:5e:59:b9:19:da:1b:f2:60:
         f4:1a:3e:4e:1e:2c:34:ac:23:09:48:f7:3a:be:ef:8a:a6:c5:
         f6:29:e9:88:c3:97:dc:c4:47:b4:90:67:65:c6:9e:d9:63:a4:
         a4:70:c7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:16:18 2025 by rpki-client