Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.mft
File:                     8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.mft (raw, json)
Hash identifier:          LYFmThfWvX4WyIyILH0mY7ldd3KPzzqxLCgWfjcUKEQ=
Subject key identifier:   9F:63:2F:A4:DF:2B:27:26:01:F6:6F:AA:9F:17:58:5A:7D:89:9C:F5
Authority key identifier: 8B:8B:1C:29:5E:F2:38:6F:8F:2B:BD:18:93:D8:D1:64:EE:B2:41:DA
Certificate issuer:       /CN=8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA
Certificate serial:       2023F586F5D9709DAB54D23371609AACE3215BC0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.mft
Manifest number:          5A
Signing time:             Mon 20 Oct 2025 09:55:58 +0000
Manifest this update:     Mon 20 Oct 2025 09:50:58 +0000
Manifest next update:     Tue 21 Oct 2025 12:36:58 +0000
Files and hashes:         1: AS272564.asa (hash: dJc1wuN6t7JkVdQRM/03T5SoGEkIN/qpvYr408ZvyRU=)
                          2: 8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.crl (hash: Ey90IbOfPA9kAwFm8/4TZH2PiFFyOgYDNSRJDdZKnlk=)
                          3: 323830343a383533343a3a2f33322d3334203d3e20323732353634.roa (hash: XcOIpeYy+DmE3xuP39pf3uvjt0M9bPxTDBiZqzaCbIk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.crl
                          rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:23:f5:86:f5:d9:70:9d:ab:54:d2:33:71:60:9a:ac:e3:21:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA
        Validity
            Not Before: Oct 20 09:50:58 2025 GMT
            Not After : Oct 21 12:36:58 2025 GMT
        Subject: CN=9F632FA4DF2B272601F66FAA9F17585A7D899CF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e5:8d:0a:ca:14:cb:84:10:ec:41:ea:c4:98:
                    6d:f0:7b:fa:09:ea:4c:04:a9:3a:0f:a5:d9:b4:5f:
                    1f:2d:ea:06:68:d3:72:4c:62:d0:3b:9e:9d:0c:e8:
                    59:62:eb:fa:af:74:3d:65:e3:66:d9:81:27:46:77:
                    6e:40:6c:5a:95:15:7a:1e:0e:9f:19:65:bb:6a:fb:
                    b8:69:d6:ef:d7:b8:d1:ea:8a:93:40:95:ca:9b:a6:
                    c0:06:d7:1f:22:32:74:5a:e5:ad:a9:50:bd:be:28:
                    73:02:57:11:43:ac:64:0b:f4:a5:e5:f9:61:57:b5:
                    3d:a1:fb:b4:bd:19:99:02:af:b5:53:36:30:88:3e:
                    db:65:d5:14:aa:92:97:01:3f:7e:9d:57:2c:06:2a:
                    3d:56:b4:0c:a0:3e:00:d3:7a:fd:06:a4:21:16:e3:
                    77:8b:05:72:eb:e6:20:60:27:df:c0:2a:38:9f:4f:
                    36:a0:3d:2e:94:f0:28:b8:d6:ed:b8:5b:2a:2d:d5:
                    bb:11:7d:f4:0b:5b:46:76:99:93:18:ed:88:43:67:
                    e8:60:1b:c2:b5:9f:ab:7e:4b:e1:10:76:52:88:bb:
                    a7:fb:bc:eb:83:0e:e8:bf:b7:09:74:6e:c5:07:01:
                    c7:fb:50:14:ad:49:19:ff:14:5c:e7:d5:56:f8:f1:
                    37:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:63:2F:A4:DF:2B:27:26:01:F6:6F:AA:9F:17:58:5A:7D:89:9C:F5
            X509v3 Authority Key Identifier:
                keyid:8B:8B:1C:29:5E:F2:38:6F:8F:2B:BD:18:93:D8:D1:64:EE:B2:41:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ga6XyJJ65kx2DWtTQauiFovAR9vCCsXnrwRe8nG93Djd/0/8B8B1C295EF2386F8F2BBD1893D8D164EEB241DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:da:e9:83:91:04:8b:c0:06:d6:4e:51:84:17:d5:15:ef:85:
         b6:02:73:65:f9:22:6e:0a:5a:08:1f:97:3c:77:6b:f5:03:5c:
         9c:0c:96:b6:dc:8b:71:37:c5:bb:02:b3:bb:af:4b:64:21:37:
         6f:af:9b:d8:cf:07:06:4d:d0:5d:f9:fe:70:94:ee:fd:04:04:
         31:eb:c3:f5:69:8f:62:61:f1:68:c9:ab:08:09:1a:5f:c8:d8:
         08:63:20:c3:f0:36:2c:bc:fa:f8:60:99:f1:1d:ba:b1:66:58:
         4b:9c:ff:b7:f1:50:f0:4f:e0:c7:ba:77:44:55:5a:66:28:ea:
         99:b0:2a:19:a5:f1:c9:14:4f:0d:30:2c:74:4e:1c:b0:b4:ab:
         86:49:14:6b:13:98:40:94:c7:22:56:dd:b2:fc:f9:b6:ff:30:
         12:25:91:ec:e9:d5:59:e1:77:05:4f:14:b2:66:8b:81:ba:5e:
         86:07:c8:be:1c:4b:38:58:1d:0c:a2:a0:e5:b2:0d:e7:6c:8a:
         90:cf:30:eb:f1:ed:c1:21:81:a0:b0:15:5d:9d:f9:a7:d9:72:
         b7:26:a9:b0:0a:c3:ff:a8:ed:79:cb:d0:f6:89:fe:71:4c:95:
         39:b8:61:cb:a7:e0:99:c5:f4:f1:46:26:e8:3d:69:da:b6:f6:
         40:cb:9e:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUICP1hvXZcJ2rVNIzcWCarOMhW8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI4QjFDMjk1RUYyMzg2RjhGMkJCRDE4OTNEOEQxNjRF
RUIyNDFEQTAeFw0yNTEwMjAwOTUwNThaFw0yNTEwMjExMjM2NThaMDMxMTAvBgNV
BAMTKDlGNjMyRkE0REYyQjI3MjYwMUY2NkZBQTlGMTc1ODVBN0Q4OTlDRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq5Y0KyhTLhBDsQerEmG3we/oJ
6kwEqToPpdm0Xx8t6gZo03JMYtA7np0M6Fli6/qvdD1l42bZgSdGd25AbFqVFXoe
Dp8ZZbtq+7hp1u/XuNHqipNAlcqbpsAG1x8iMnRa5a2pUL2+KHMCVxFDrGQL9KXl
+WFXtT2h+7S9GZkCr7VTNjCIPttl1RSqkpcBP36dVywGKj1WtAygPgDTev0GpCEW
43eLBXLr5iBgJ9/AKjifTzagPS6U8Ci41u24Wyot1bsRffQLW0Z2mZMY7YhDZ+hg
G8K1n6t+S+EQdlKIu6f7vOuDDui/twl0bsUHAcf7UBStSRn/FFzn1Vb48TcHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUn2MvpN8rJyYB9m+qnxdYWn2JnPUwHwYDVR0j
BBgwFoAUi4scKV7yOG+PK70Yk9jRZO6yQdowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2E2WHlKSjY1a3gyRFd0VFFhdWlGb3ZBUjl2Q0NzWG5yd1JlOG5HOTNE
amQvMC84QjhCMUMyOTVFRjIzODZGOEYyQkJEMTg5M0Q4RDE2NEVFQjI0MURBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCOEIxQzI5NUVGMjM4NkY4
RjJCQkQxODkzRDhEMTY0RUVCMjQxREEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R2E2WHlKSjY1a3gyRFd0VFFhdWlGb3ZBUjl2Q0NzWG5yd1JlOG5HOTNEamQvMC84
QjhCMUMyOTVFRjIzODZGOEYyQkJEMTg5M0Q4RDE2NEVFQjI0MURBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk9rpg5EEi8AG1k5RhBfVFe+FtgJzZfkibgpaCB+XPHdr9QNcnAyWttyLcTfF
uwKzu69LZCE3b6+b2M8HBk3QXfn+cJTu/QQEMevD9WmPYmHxaMmrCAkaX8jYCGMg
w/A2LLz6+GCZ8R26sWZYS5z/t/FQ8E/gx7p3RFVaZijqmbAqGaXxyRRPDTAsdE4c
sLSrhkkUaxOYQJTHIlbdsvz5tv8wEiWR7OnVWeF3BU8UsmaLgbpehgfIvhxLOFgd
DKKg5bIN52yKkM8w6/HtwSGBoLAVXZ35p9lytyapsArD/6jtecvQ9on+cUyVObhh
y6fgmcX08UYm6D1p2rb2QMueVQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:51:05 2025 by rpki-client