Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
File:                     0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft (raw, json)
Hash identifier:          kuwG6nuWTSIj6cZ1NzR5MhCUf9US48LMu9iShsfcDh0=
Subject key identifier:   62:2B:D7:2E:C3:14:D2:C3:85:D7:DC:BA:42:3B:89:74:FC:AE:17:E7
Authority key identifier: 0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A
Certificate issuer:       /CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
Certificate serial:       2AF33BE6B1145F0E37A07AA8FEBD5471F7C95E88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
Manifest number:          02ED
Signing time:             Mon 20 Oct 2025 03:46:43 +0000
Manifest this update:     Mon 20 Oct 2025 03:41:43 +0000
Manifest next update:     Tue 21 Oct 2025 07:35:43 +0000
Files and hashes:         1: 3230312e36322e36342e302f32302d3332203d3e203238363334.roa (hash: lpNTcJ76pZKRQrWXJmF+l/fSxgPsLSGCWHGhl98FSog=)
                          2: 0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl (hash: dkMEqyJKtrrcWYmcOzeE/zTVw5rFnoV4IruUe99wo5w=)
                          3: 3137372e3130352e3132382e302f32302d3332203d3e203238363334.roa (hash: CfOnRF4j6DfohH6BFHRKC5zu5+rSa0Rfv661CHSNmXE=)
                          4: 3137392e39362e3134342e302f32302d3332203d3e203238363334.roa (hash: rSPI8oEusC7WuxESqvOdBN/aubwtRxI6CeNya94CYSg=)
                          5: 3138392e39302e39362e302f32302d3332203d3e203238363334.roa (hash: o/aOBYWzoNM2ezTPVUmL9FfbjqSHXnYykvoAEekZKlg=)
                          6: 3230312e36322e38302e302f32302d3332203d3e203238363334.roa (hash: VwGDp5qPyJtagqlMoefg79n3taB0a1j2IIyezyfSxfc=)
                          7: 323830343a3132383a3a2f33322d313238203d3e203238363334.roa (hash: jhkpyCGOiFoaKho/F9VSBfkFrUgfmttqVKiUPpsPEuM=)
                          8: 3137392e39362e3132382e302f32302d3332203d3e203238363334.roa (hash: MszXxChKZIxqO1H76aI8EC2vVoyHxziN2kG99kubgms=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl
                          rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f3:3b:e6:b1:14:5f:0e:37:a0:7a:a8:fe:bd:54:71:f7:c9:5e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
        Validity
            Not Before: Oct 20 03:41:43 2025 GMT
            Not After : Oct 21 07:35:43 2025 GMT
        Subject: CN=622BD72EC314D2C385D7DCBA423B8974FCAE17E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:76:a2:84:20:93:6d:ac:22:0a:a2:bd:b0:fd:
                    d5:49:e6:d0:85:93:09:a4:72:5e:cd:b8:ed:f5:43:
                    04:5e:8b:2f:80:99:a4:c7:ec:15:30:b1:c0:0b:67:
                    62:94:a4:98:b3:39:aa:ce:5f:89:b2:a6:cb:3f:12:
                    e3:88:20:64:fb:88:9f:3e:47:46:99:17:fd:5c:04:
                    43:79:0f:c3:fe:2b:8c:31:e7:44:f5:84:4a:28:b0:
                    f5:59:6b:a9:2b:86:0f:ee:f2:43:2c:5e:9e:e8:4f:
                    e3:fb:51:53:bf:c9:d5:6a:8f:7a:07:7e:01:7e:61:
                    4c:60:cf:2c:d5:b7:02:ba:c7:ba:74:7b:8f:01:e1:
                    39:6b:10:71:43:be:8d:9d:70:b2:32:19:17:10:92:
                    d2:2d:b8:34:b8:ad:20:09:79:70:92:c6:28:46:25:
                    d3:38:68:05:a6:95:ad:15:93:00:a5:86:7f:b9:e8:
                    32:da:56:69:2c:99:2b:9d:02:f2:2f:b9:bd:55:b0:
                    be:28:d4:49:89:c9:27:42:72:e4:64:b7:b2:d3:2e:
                    8d:e4:08:0b:fa:d6:48:af:43:1d:2b:7b:10:fa:e0:
                    ef:de:92:87:59:75:e9:1e:f7:0f:31:9b:94:14:76:
                    7f:fc:e0:1a:e7:cd:15:30:45:b0:ed:ef:3f:42:bd:
                    d2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2B:D7:2E:C3:14:D2:C3:85:D7:DC:BA:42:3B:89:74:FC:AE:17:E7
            X509v3 Authority Key Identifier:
                keyid:0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:4a:8c:14:87:56:75:e8:ba:88:a9:9a:45:5c:3a:cd:96:cf:
         07:fd:6a:56:cf:cd:75:1a:62:3b:f6:7d:af:33:03:c2:ba:a0:
         02:00:2c:17:eb:6b:d7:5b:a6:18:30:47:f8:1a:06:b8:be:aa:
         17:d3:40:9e:64:67:f9:fd:1f:4e:50:b2:1b:16:a8:aa:5e:1a:
         aa:d4:7d:13:70:8b:1f:48:2a:de:01:6f:d2:cc:d1:22:cd:b2:
         dc:e8:80:80:8a:ab:c5:d4:69:43:c6:c1:25:45:d0:9c:60:94:
         e8:ba:f9:c7:ce:c5:a3:27:10:ef:77:8e:b1:0a:40:4e:2b:db:
         72:99:4c:3b:6e:a5:5d:40:68:f0:ac:23:e9:b4:fe:d6:80:c4:
         d4:07:85:ca:95:a5:56:d0:03:2b:21:d5:9b:b1:9f:df:77:2e:
         4d:5f:7d:67:36:ff:1a:6e:c6:ec:2f:ec:fe:49:19:1a:19:31:
         e3:b2:bb:4b:9e:42:99:9e:10:a1:fe:1b:bb:dd:46:5c:40:15:
         2f:f4:cc:4a:0f:60:5a:c0:68:1f:c0:d8:b5:07:37:ff:e5:24:
         0a:7d:e1:30:de:0d:48:e9:0e:14:ff:79:ef:38:88:51:06:06:
         af:08:99:4b:db:f6:22:61:87:20:7d:46:e9:bd:09:ca:c9:e8:
         f6:44:8f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:18:53 2025 by rpki-client