Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
File:                     FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft (raw, json)
Hash identifier:          Xv0TxTGJQnmLGFmPzKFMVv/HX2xPGfyeu1vljiqCjW8=
Subject key identifier:   76:AD:4B:BD:3D:E0:82:2E:F7:9C:4A:65:92:CC:84:A1:51:8A:36:12
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Certificate issuer:       /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial:       2F3513F77C8B622C50DEC4BDEB0F294E11DFEF22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
Manifest number:          030E
Signing time:             Mon 20 Oct 2025 02:45:17 +0000
Manifest this update:     Mon 20 Oct 2025 02:40:17 +0000
Manifest next update:     Tue 21 Oct 2025 05:38:17 +0000
Files and hashes:         1: 3133312e3136312e3135362e302f32322d3332203d3e203631383035.roa (hash: w3VwJhYvfnUiyO/LcEYCKf+bD+MOs2qLL6CH8S9yoLA=)
                          2: 3137302e3234362e33322e302f32322d3332203d3e203631383035.roa (hash: SBGAv4ZfBm0EW7CBbuSRt4GCH36OO74KVgEuKivqpmc=)
                          3: 3137302e3234372e38302e302f32322d3332203d3e203631383035.roa (hash: K384e2CdvXpNMiIX9W7fQRr9UeSqEvH25WwkQ81qvaI=)
                          4: 323830343a313939383a3a2f33322d313238203d3e203631383035.roa (hash: DEdn1PUucNYh26MflbSbXwR48HFdlBfMJXHqQYtgYUs=)
                          5: FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl (hash: ma03wWEtVUJXSzhr5GriuBPC92hPIExnlAOjQShZ/Lw=)
                          6: 34352e3233392e3232342e302f32322d3332203d3e203631383035.roa (hash: djbfpPqg9E0HJi6cTRuj2HfgZ4bsPQ/NaNaDLxntsyM=)
                          7: 3230302e3232392e3135362e302f32322d3332203d3e203631383035.roa (hash: sh+y1qhxjHdTZyX/+9eOUtfwxP27K0otzRUu2H8M6ng=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl
                          rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:35:13:f7:7c:8b:62:2c:50:de:c4:bd:eb:0f:29:4e:11:df:ef:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Validity
            Not Before: Oct 20 02:40:17 2025 GMT
            Not After : Oct 21 05:38:17 2025 GMT
        Subject: CN=76AD4BBD3DE0822EF79C4A6592CC84A1518A3612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ab:39:45:69:4b:17:1f:92:44:ef:cb:5d:c9:
                    f8:3e:c6:41:86:56:4f:3e:b1:29:c3:61:76:16:87:
                    b2:3d:b6:97:58:9a:de:77:1d:f3:05:99:e3:7d:6c:
                    98:0b:9d:f4:f1:87:b5:f5:a5:59:79:af:9b:dc:94:
                    1e:c9:57:12:d5:da:cf:7c:fb:70:6e:9e:38:06:24:
                    04:80:41:cf:88:6f:3b:0e:f9:e0:4a:c4:a4:22:09:
                    aa:fe:c2:20:54:5e:53:67:e3:a0:cd:95:e5:d4:e0:
                    6a:ab:a1:53:fa:a1:19:be:2c:f3:0c:b1:a7:33:1e:
                    8c:56:f6:3f:fd:0c:45:26:4a:c0:61:66:d6:90:45:
                    69:9e:1f:65:c2:63:98:55:c4:0f:41:d6:a2:7a:03:
                    79:26:49:fe:90:57:b2:70:08:1c:87:09:c0:55:74:
                    25:77:77:9a:54:d5:6c:5a:85:35:9a:5b:4d:25:e2:
                    71:37:7c:77:e5:b5:4d:d8:80:91:c1:ff:89:15:ad:
                    7b:a3:54:83:ec:c8:4a:37:7c:27:49:79:3f:e2:50:
                    b0:c0:ee:88:3a:80:11:c5:99:8d:83:0c:3a:54:5b:
                    b5:38:0b:a5:7a:dd:25:88:cc:a7:53:a5:5d:b9:5d:
                    6b:06:d2:b8:38:87:57:6c:8c:c7:38:2b:c5:26:ce:
                    32:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AD:4B:BD:3D:E0:82:2E:F7:9C:4A:65:92:CC:84:A1:51:8A:36:12
            X509v3 Authority Key Identifier:
                keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:19:d5:24:99:47:16:3f:15:d3:03:e5:f3:1d:90:2f:5a:68:
         6a:49:6b:54:6b:04:2d:28:4f:1a:b4:a0:cd:c5:37:74:7b:78:
         b8:f4:01:3d:ff:2f:61:59:41:93:de:bd:9e:3e:d3:45:a1:4c:
         0a:2d:df:85:ae:d4:a7:f4:4a:8b:95:2d:d8:68:43:07:f7:03:
         b4:4c:46:c9:6f:fb:17:fe:8c:37:bd:43:39:eb:95:a6:ce:27:
         c5:64:74:f0:b8:21:01:ad:ee:36:7d:cb:bf:99:ea:a2:7a:b5:
         7f:d0:c2:09:ff:88:5b:9f:b8:b5:ce:80:83:85:1c:63:16:f3:
         8e:60:e9:69:55:21:ce:8e:b4:6f:e0:fb:c9:80:2e:55:12:6e:
         ca:0b:3b:28:40:8a:81:9b:4b:26:92:fa:4d:cc:eb:7e:2d:85:
         b6:90:f8:52:35:79:0f:e0:bd:4f:05:c6:52:f5:4b:2c:db:82:
         24:44:ef:5c:44:78:bf:2d:f9:ee:69:18:ed:c8:a0:c0:67:16:
         2e:be:b1:b1:a4:1c:22:03:5e:46:62:6e:89:e1:f7:19:a9:4c:
         15:86:ca:13:68:f8:96:28:4e:70:cb:9c:4f:c6:20:23:76:7b:
         29:44:73:ff:c3:c8:1d:63:3e:b9:37:f7:1d:e7:a1:0a:0a:0e:
         9d:0d:33:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:31:39 2025 by rpki-client