Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
File:                     4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft (raw, json)
Hash identifier:          xj5hDsv/jHfqzysP/8iiIh0s7/Cs0iaclQ+NEaL7tBA=
Subject key identifier:   61:35:9C:34:FF:BF:F8:4E:F7:F7:87:79:CA:DA:30:CE:19:95:68:F2
Authority key identifier: 4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A
Certificate issuer:       /CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
Certificate serial:       7C6E5EE545891E5BBB9A3865F2F3CF5C0F5DCAE9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
Manifest number:          032B
Signing time:             Tue 21 Oct 2025 01:00:00 +0000
Manifest this update:     Tue 21 Oct 2025 00:55:00 +0000
Manifest next update:     Wed 22 Oct 2025 01:00:00 +0000
Files and hashes:         1: 323830343a373131343a3136373a3a2f3438203d3e20323730373635.roa (hash: PEqddxWP0UwQjFUWTOEctj/kWBjXgV+ouzSyGaK99kI=)
                          2: 323830343a373131343a3136363a3a2f3438203d3e20323730373635.roa (hash: jj/DFtVSWkmoEDR9MMoDSC5fGS5/8QPrbd2PVIl6KtU=)
                          3: 3138362e3139342e3136362e302f32332d3234203d3e20323730373635.roa (hash: M4n3WBZ85cIDAi2DlwuCjajPGJplflgk5JxusQKYXVk=)
                          4: 3138362e3139342e3136342e302f32322d3234203d3e20323730373635.roa (hash: WYv4Ld2DCVe6YHJc3QqWlwjyBfRe+8s44NvzSgBrKDs=)
                          5: 323830343a373131343a3a2f33322d3438203d3e20323730373635.roa (hash: e5+lboSeP7wRX2S+7kV/NMg3fIZ77X3rsllnhtzm6x0=)
                          6: 4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl (hash: neXs+QoR4NXW5gHwKTUp1WE2HXNEDK8mxGgmfl1PiQw=)
                          7: 323830343a373131343a3136343a3a2f3438203d3e20323730373635.roa (hash: Mo/X9tzCDrmFki02A1WCTk9a4T2l+eDUGX1jPqDh11o=)
                          8: 323830343a373131343a3136353a3a2f3438203d3e20323730373635.roa (hash: wWar2zLFazdvxtcXttabAzwTbUhLghXXyWV35gTV4AU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl
                          rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:6e:5e:e5:45:89:1e:5b:bb:9a:38:65:f2:f3:cf:5c:0f:5d:ca:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
        Validity
            Not Before: Oct 21 00:55:00 2025 GMT
            Not After : Oct 28 01:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d5:60:1f:66:de:94:d5:8c:a1:4b:cc:4e:ca:
                    89:08:93:88:58:29:d5:45:54:c2:9d:a5:c4:77:d2:
                    d4:ff:27:2c:e4:b9:7f:03:45:75:23:03:c6:d1:49:
                    29:2c:09:da:f7:5a:18:8a:53:e0:ac:8f:57:96:0d:
                    8a:89:58:a8:34:18:70:fc:26:5c:3c:c2:03:f9:2c:
                    9e:cd:91:c8:20:1e:84:9e:ab:a5:e5:05:73:0d:a6:
                    52:ed:5a:f2:b8:72:51:d3:77:53:81:ae:50:5e:0c:
                    a0:43:e5:06:5f:63:39:07:de:cd:cf:d5:b6:ca:e8:
                    e9:49:7a:f0:64:c3:d3:5e:55:20:6d:c9:54:83:a3:
                    6f:51:f2:b6:f6:b1:02:0d:d9:aa:9c:ff:9a:cd:d2:
                    d7:f7:a8:61:99:ae:4a:c3:3f:44:6d:62:ca:48:db:
                    6c:44:2d:f6:45:1c:43:4c:a2:6b:8a:a2:a6:30:8b:
                    03:28:4f:0b:8d:08:0d:d1:ea:b9:a7:84:8f:f9:df:
                    d9:96:99:2a:32:9a:55:02:ec:eb:70:71:61:9a:26:
                    a1:ea:c1:f8:64:c1:a6:61:55:fe:db:e2:34:4b:d2:
                    7c:6b:e9:4c:2b:1d:16:7a:dc:bf:2d:02:4e:38:95:
                    d8:47:de:58:c5:1e:7d:9d:c8:a5:db:a4:75:0b:73:
                    24:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:35:9C:34:FF:BF:F8:4E:F7:F7:87:79:CA:DA:30:CE:19:95:68:F2
            X509v3 Authority Key Identifier:
                keyid:4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:1d:3d:b8:88:3f:76:50:3d:c3:95:60:e9:b5:ba:08:4b:db:
         99:3c:1d:48:d8:15:03:cd:f5:17:6f:02:1e:7d:d2:7b:e3:55:
         39:60:d7:86:3b:2a:19:cc:83:98:11:b8:f9:fc:d9:4b:99:73:
         ee:58:4d:dd:16:08:b3:f2:70:12:11:de:ad:6e:58:7f:09:f2:
         73:05:34:2a:40:7f:87:4e:48:b0:f8:7d:76:fb:67:3f:7a:4b:
         77:e4:e9:cb:b9:fa:ba:b1:00:be:8c:09:1f:83:38:3d:52:84:
         af:ac:2e:e3:7d:b2:ee:62:0c:f9:e9:ed:dd:2a:ef:3a:4b:34:
         14:59:41:f3:7d:90:10:d9:0a:cd:2a:dc:5d:21:93:34:59:7d:
         d1:df:0a:f4:3c:1e:bb:1d:4b:63:d3:40:5d:22:4e:f5:4b:a6:
         b2:8c:84:6a:0c:3f:4d:b8:b4:59:2e:9f:c0:03:6d:39:16:41:
         7c:40:14:8c:4b:25:ed:20:29:a5:ab:26:3c:39:9d:e0:8c:dd:
         a2:11:f7:b1:bb:bc:22:fa:cf:e0:4e:58:e3:07:a6:91:25:dd:
         8c:56:ff:42:d1:38:ee:0a:eb:9c:3b:ea:95:92:aa:6f:e6:ec:
         02:f5:1f:6c:b4:8b:61:d5:e5:4b:e4:04:80:ac:1a:ac:90:f0:
         5b:3e:f2:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 21 03:57:02 2025 by rpki-client