Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.mft
File:                     98BC0C92855F76759D28CD06035C9FF965BDF09F.mft (raw, json)
Hash identifier:          9n6FVJIh7OOW69sp3rVaR2c6L+1E4IhiPIzBdf0wYtc=
Subject key identifier:   2C:8B:A9:CD:25:54:03:39:1B:CD:4F:AF:EB:3C:6D:7D:69:7A:81:7E
Authority key identifier: 98:BC:0C:92:85:5F:76:75:9D:28:CD:06:03:5C:9F:F9:65:BD:F0:9F
Certificate issuer:       /CN=98BC0C92855F76759D28CD06035C9FF965BDF09F
Certificate serial:       5F2CCA0502CC2E61F0D642F5C473828230031221
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98BC0C92855F76759D28CD06035C9FF965BDF09F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.mft
Manifest number:          01D3
Signing time:             Mon 20 Oct 2025 11:25:01 +0000
Manifest this update:     Mon 20 Oct 2025 11:20:01 +0000
Manifest next update:     Tue 21 Oct 2025 11:56:01 +0000
Files and hashes:         1: 98BC0C92855F76759D28CD06035C9FF965BDF09F.crl (hash: r8Xztkm7uDvzc9yma8rmtdpftTYlEDnKRKJJ2KA0et4=)
                          2: 34352e3137322e3131322e302f32322d3234203d3e20323638373733.roa (hash: t+XjGLzXBnXntotjRrTq9Lj8Z53+sgV/xlqOeTYWMzk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.crl
                          rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98BC0C92855F76759D28CD06035C9FF965BDF09F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:56:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2c:ca:05:02:cc:2e:61:f0:d6:42:f5:c4:73:82:82:30:03:12:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98BC0C92855F76759D28CD06035C9FF965BDF09F
        Validity
            Not Before: Oct 20 11:20:01 2025 GMT
            Not After : Oct 21 11:56:01 2025 GMT
        Subject: CN=2C8BA9CD255403391BCD4FAFEB3C6D7D697A817E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:95:2e:b9:89:e8:65:04:69:26:37:e8:ac:61:
                    ee:f1:5c:e7:be:e4:ea:17:21:13:90:f0:45:85:60:
                    ad:79:13:eb:9d:dd:13:48:ef:df:39:93:b2:86:b2:
                    56:13:0f:fa:cf:4a:0b:d1:b6:40:49:06:a5:a5:64:
                    9c:fd:98:0f:22:d2:e1:bf:f2:39:1b:dd:e8:6b:57:
                    59:48:5e:ba:22:03:b1:21:d7:46:01:c6:1b:a9:90:
                    45:66:b1:2f:b0:82:ee:ad:a1:10:02:bc:68:e3:b2:
                    a5:7c:f4:bf:68:68:3e:b4:a6:85:f9:4d:5e:ae:b5:
                    18:80:19:93:20:78:a2:6d:e8:5e:2e:83:22:ea:1a:
                    71:88:7f:22:f5:f7:ee:e0:be:1d:84:b0:6f:1b:21:
                    fc:d6:00:4b:00:b1:1c:a7:5a:62:eb:94:ea:37:d0:
                    65:b0:1f:e0:4b:b8:98:42:50:94:b0:40:98:e4:bc:
                    01:b7:94:36:48:4a:01:9c:ef:2c:66:b7:95:75:6d:
                    22:b7:55:13:a4:b0:1e:ae:58:a9:7e:df:f0:ae:c3:
                    fd:60:9f:3d:d3:0e:93:53:3c:3c:20:c7:dc:63:1b:
                    06:f9:9d:5c:c3:8b:7a:37:4a:d9:5b:61:02:69:87:
                    ba:34:87:6e:d2:68:70:fb:0a:0f:59:a1:c6:30:bb:
                    88:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8B:A9:CD:25:54:03:39:1B:CD:4F:AF:EB:3C:6D:7D:69:7A:81:7E
            X509v3 Authority Key Identifier:
                keyid:98:BC:0C:92:85:5F:76:75:9D:28:CD:06:03:5C:9F:F9:65:BD:F0:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98BC0C92855F76759D28CD06035C9FF965BDF09F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:7a:73:b4:da:23:a7:b4:94:3b:c5:b4:4a:7c:bc:f4:67:fb:
         bc:1f:02:ce:34:1f:10:ec:78:f2:f2:ce:a7:4a:bb:02:e5:56:
         a7:57:9f:e4:ac:28:65:d1:1a:aa:7e:ff:b4:4e:c8:23:51:cb:
         a5:c1:20:b0:05:12:57:a7:5a:93:14:2b:4b:78:5c:04:e3:7e:
         96:fd:40:a0:13:7c:26:2d:59:ac:23:9f:21:e0:6a:56:53:c9:
         05:20:8a:0e:63:69:c1:f0:64:a0:ba:40:8b:47:61:8a:fd:04:
         51:11:6d:29:54:a0:ab:79:17:c6:18:41:b7:9a:1e:b1:c7:3a:
         02:16:73:ff:57:ec:5e:71:54:03:11:c4:57:70:0e:c4:51:e3:
         86:8d:f2:5e:b1:d8:78:ca:22:ac:29:ec:29:f2:c7:d6:3f:64:
         6f:b2:5e:35:2b:c3:51:28:9b:8d:81:ae:5f:42:03:39:5b:20:
         5d:9d:c2:32:fa:8a:4d:79:e3:02:2f:7f:94:b4:b8:31:bc:fb:
         3f:e1:00:08:d6:96:54:a2:e3:77:4c:e9:7c:48:e5:0b:5c:1c:
         dc:1b:89:9c:15:4a:ee:3f:6e:8b:f7:ea:16:be:e2:c9:16:cf:
         64:89:73:5b:e8:fe:d6:7b:dd:a3:e5:4a:47:63:12:d7:29:52:
         a8:6f:eb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:49:36 2025 by rpki-client