Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
File:                     CEA74FF3945E7508599D54A721E47B3BA75706E3.mft (raw, json)
Hash identifier:          M5M0NVYH4sI9ChbSMxv4sgyhh92iQSijrTmaeKP5rls=
Subject key identifier:   F4:D9:5E:C0:A2:07:4F:BB:2E:EB:C5:2F:8F:BD:E1:50:78:D6:A0:A6
Authority key identifier: CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3
Certificate issuer:       /CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
Certificate serial:       4FD8028439D0569785CA3E0EFC0F74CA9734EB00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
Manifest number:          39
Signing time:             Mon 20 Oct 2025 03:13:33 +0000
Manifest this update:     Mon 20 Oct 2025 03:08:33 +0000
Manifest next update:     Tue 21 Oct 2025 05:11:33 +0000
Files and hashes:         1: 34352e3136382e39332e302f32342d3234203d3e20323638303430.roa (hash: IUZPl3HABE+NbxOlmkkLFMZO5STQT9Ai+fogmJfb7iY=)
                          2: 34352e3136382e39322e302f32332d3233203d3e20323638303430.roa (hash: vXL3rBnLSmw+J/CZGJUcyYkEUODj5iau3OEYJ2GWr1k=)
                          3: 323830343a353730633a383030303a3a2f33362d3336203d3e20323638303430.roa (hash: NFU0jsGK6nSlrz0zk/uZrUWGBjONw0UGc1cZM4BbMUI=)
                          4: CEA74FF3945E7508599D54A721E47B3BA75706E3.crl (hash: jonZLS/j74cmRNpy36mKq8aNLspDOv65GUDPAPd0GSI=)
                          5: 323830343a353730633a353030303a3a2f33362d3336203d3e20323638303430.roa (hash: xKOZCLzFhIukCU7Ho1bE8l21fKx8oMJdRkB6RP4zOU0=)
                          6: 323830343a353730633a633030303a3a2f33362d3336203d3e20323638303430.roa (hash: O7Oqr//PpcCqpzqFcZFT9boA2UaSvzJGXYDNBvE/tdI=)
                          7: 323830343a353730633a613030303a3a2f33362d3336203d3e20323638303430.roa (hash: T3V/Fz/+CDSWTRlwglp3HyVdgtedfBKa6uhVQvV4HZM=)
                          8: 323830343a353730633a393030303a3a2f33362d3336203d3e20323638303430.roa (hash: h+Y8VHW8KQwbGe6hDzwUUcFE6gQRTp4SniquNbqCvlw=)
                          9: 323830343a353730633a653030303a3a2f33362d3336203d3e20323638303430.roa (hash: t88Kw7BF7trQ4diDbERO9KwQHVsvIgc6sb+afFk1/oU=)
                          10: 34352e3136382e39322e302f32342d3234203d3e20323638303430.roa (hash: K5wxrWM8xGNa7I2Y8rel/TySV+3C7EVkaRe9ditefw4=)
                          11: 323830343a353730633a643030303a3a2f33362d3336203d3e20323638303430.roa (hash: 7tiAzH2T7BZpiBdZ7h8cWjCqszI1cAHqi1AKIdwI+Ns=)
                          12: 323830343a353730633a323030303a3a2f33362d3336203d3e20323638303430.roa (hash: Q6zbgVZ9/2xEzK0l0oVACRPG06HR5I8bst3e2ItEODc=)
                          13: 323830343a353730633a363030303a3a2f33362d3336203d3e20323638303430.roa (hash: K2v77Gt9NOI7lpPDfVMsT7/UdsiCfs7Bid43RGcyb+8=)
                          14: 323830343a353730633a313030303a3a2f33362d3336203d3e20323638303430.roa (hash: XX4RgqWrgK0cN07dELop4PmkV3SAb55I/eZ0jEmBII0=)
                          15: 323830343a353730633a623030303a3a2f33362d3336203d3e20323638303430.roa (hash: VbbGJ8kXVWVaWgkpRfTJcqYFKwhfCrLnwCzYQO9WjaY=)
                          16: 323830343a353730633a373030303a3a2f33362d3336203d3e20323638303430.roa (hash: qEGTNLA+KBcnLwyZCSUh18M49As5kWTLHnJHsfSSMfE=)
                          17: 323830343a353730633a333030303a3a2f33362d3336203d3e20323638303430.roa (hash: tGy459mLNyebpYZY+MbMekDYPXcRxv1h1TrwkkoKkFk=)
                          18: 323830343a353730633a663030303a3a2f33362d3336203d3e20323638303430.roa (hash: DDqiXH4DdttjGY2bJj8hMTSCzoazExdYreFMNjG5kNw=)
                          19: 323830343a353730633a343030303a3a2f33362d3336203d3e20323638303430.roa (hash: 9BWp1l5TIZv7ozJAknPOYmLX23z8eO7kjS9UJR1G2ac=)
                          20: 323830343a353730633a3a2f33362d3336203d3e20323638303430.roa (hash: cX+NY4bOnb/vgPKQTr/m0/s7d+cdADKZKZxk5MIvTZE=)
                          21: 323830343a353730633a3a2f33322d3332203d3e20323638303430.roa (hash: NPJlZoapyXgbKp6nQrUGfGeQejkrs2Sgotm/M7pu97Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl
                          rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:11:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d8:02:84:39:d0:56:97:85:ca:3e:0e:fc:0f:74:ca:97:34:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
        Validity
            Not Before: Oct 20 03:08:33 2025 GMT
            Not After : Oct 21 05:11:33 2025 GMT
        Subject: CN=F4D95EC0A2074FBB2EEBC52F8FBDE15078D6A0A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a6:88:88:2e:7f:b2:64:7a:20:c8:82:1a:b4:
                    36:63:a0:82:81:5b:8c:dc:f1:73:59:ee:ad:46:e7:
                    af:43:ce:91:1d:3e:e8:c8:9a:3f:0a:98:07:b9:48:
                    50:99:fb:c4:fc:ab:c0:f5:38:b4:bb:b4:46:f1:b4:
                    50:78:bc:06:ae:d6:2b:a1:b6:fd:86:71:61:dd:d9:
                    df:ef:1d:8d:04:b7:a1:7f:f0:02:27:e1:c7:db:13:
                    b9:c0:37:83:28:9c:ed:e6:91:6d:db:2a:4c:c9:c4:
                    99:10:83:fa:14:fb:6e:63:7a:b0:74:2e:5d:a7:3c:
                    c7:03:7d:5c:8e:86:a6:09:98:c4:aa:6b:ec:2a:19:
                    34:14:f0:40:55:4f:8f:d7:17:1b:b2:81:14:28:3c:
                    67:ba:b1:9c:9e:78:7a:04:1b:9e:9f:0c:16:9f:12:
                    d8:63:79:c7:7a:f7:f7:82:61:b2:36:5b:68:04:b9:
                    72:77:7c:75:3d:73:78:e1:81:21:4d:f8:bd:af:97:
                    09:65:65:fb:eb:83:00:19:17:c6:36:41:82:62:50:
                    61:f2:98:a4:4d:f4:af:c6:10:8b:04:84:16:28:ae:
                    38:ed:f6:79:24:eb:a7:1f:03:b4:ba:b5:27:99:99:
                    ba:fd:c4:56:db:82:d8:f1:67:09:ea:10:f5:87:1d:
                    32:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D9:5E:C0:A2:07:4F:BB:2E:EB:C5:2F:8F:BD:E1:50:78:D6:A0:A6
            X509v3 Authority Key Identifier:
                keyid:CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:94:5b:72:78:3f:91:46:c9:0c:62:0b:bf:2c:e9:7a:b5:12:
         1b:f8:53:11:d6:45:54:83:b9:1d:9a:56:2a:80:63:74:5a:0d:
         5a:b5:ce:27:53:b2:17:3d:28:52:fb:ea:a2:ae:d0:3e:c5:ff:
         80:cc:70:eb:f7:5a:b6:6c:86:25:76:29:16:df:57:63:cd:8f:
         23:70:b2:2b:3e:f7:9c:40:71:8a:bc:09:7b:40:45:ba:64:ec:
         4e:8f:8d:e7:99:d5:e1:c6:0c:dc:76:fa:f6:23:98:fa:61:21:
         8a:92:f0:6a:ba:05:a9:1d:29:70:a8:2b:80:f0:3f:4f:09:23:
         f7:3f:d9:22:12:0e:71:4b:d1:49:de:6e:45:2b:50:a4:b8:46:
         8b:9f:ae:2c:2f:17:01:dc:fa:04:2e:c2:a3:1e:90:14:c5:dd:
         f4:b0:41:b1:8c:99:85:9c:98:bd:c2:62:5c:1c:b2:46:0d:47:
         aa:dd:7d:88:55:19:4f:c4:96:c7:32:fd:50:6e:45:d5:d1:fe:
         71:e0:cf:d3:7d:91:69:5f:a3:3e:c2:9c:dc:5d:c3:9b:61:9d:
         5b:76:c2:9b:68:74:f7:4e:cf:65:94:6e:2a:e0:2d:21:5a:ec:
         02:e2:98:13:c9:4c:c5:5c:92:74:00:83:0c:16:40:a8:2e:5e:
         07:e7:d4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:14:03 2025 by rpki-client