Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
File:                     45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft (raw, json)
Hash identifier:          Tl9qff3e8sbeVs9fqeAgUm+870HXT4nS5llWKLSK1eI=
Subject key identifier:   98:4F:13:17:AA:8C:E3:FC:80:BF:0C:E1:D2:5E:F7:69:E1:05:24:D6
Authority key identifier: 45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6
Certificate issuer:       /CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
Certificate serial:       6A642DADDF3451780236006826C353350E9BD92D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
Manifest number:          02EF
Signing time:             Mon 20 Oct 2025 01:36:24 +0000
Manifest this update:     Mon 20 Oct 2025 01:31:24 +0000
Manifest next update:     Tue 21 Oct 2025 03:40:24 +0000
Files and hashes:         1: 45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl (hash: 2kQM8i4PIhiSdZ06sVvm8M3ZuoqPJI38kUpyCzzqdFU=)
                          2: 34352e3137312e31362e302f32332d3233203d3e20323638313831.roa (hash: C2Urw1CANF3BYR4oYboPvzubkyeHTC4GKOwLeRX1lQY=)
                          3: 34352e3137312e31372e302f32342d3234203d3e20323638313831.roa (hash: Nn6jD2pUfzWh45ebiPgn3qZcw/WBvZhUPEAdVETzjO8=)
                          4: 323830343a353934383a3a2f33322d3332203d3e20323638313831.roa (hash: jFOKmZdUzrqB7DuIgqBanfryUkoDH0GXcs2RL/VGiII=)
                          5: 34352e3137312e31382e302f32342d3234203d3e20323638313831.roa (hash: 1GNUZSNPHTUgvUkppz4F7t0eGoRsad2SmjP7A9wBQ4U=)
                          6: 34352e3137312e31362e302f32342d3234203d3e20323638313831.roa (hash: sqv4PJRsVf1fbuPiqi5aE4THOHXbUo9nkuAmPfa1rXE=)
                          7: 34352e3137312e31392e302f32342d3234203d3e20323638313831.roa (hash: ocNiHrf1d9Z7plIcCmYweeZ2niT6wSQyBuY0x2/edlw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl
                          rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:64:2d:ad:df:34:51:78:02:36:00:68:26:c3:53:35:0e:9b:d9:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
        Validity
            Not Before: Oct 20 01:31:24 2025 GMT
            Not After : Oct 21 03:40:24 2025 GMT
        Subject: CN=984F1317AA8CE3FC80BF0CE1D25EF769E10524D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:97:5c:10:00:0e:b3:97:57:8b:d3:0b:2c:2a:
                    9c:47:a1:e6:a4:05:4a:49:73:0c:76:0c:cb:7e:5c:
                    5d:eb:50:9a:a2:53:6a:fc:f8:99:b4:a9:9c:60:4b:
                    44:c2:26:b0:3b:a3:4c:54:72:b3:56:10:60:a6:0b:
                    f7:96:1e:ac:4a:c5:33:0f:e3:25:eb:72:78:26:3a:
                    9b:08:10:44:ce:f2:15:e9:14:9b:d8:dd:5d:1a:ec:
                    e6:91:0c:7a:ec:e0:a6:46:93:0f:16:94:68:c3:df:
                    1a:33:23:e4:b9:5c:9d:a3:a0:a1:5c:99:52:b7:60:
                    49:dd:6c:a5:a6:59:49:a8:bc:0c:fe:87:2e:61:82:
                    be:73:05:b2:7f:bd:84:da:02:00:1d:a2:3f:72:10:
                    e4:1c:87:1a:69:ca:f5:4a:e7:a1:ee:9f:f3:71:6a:
                    ca:13:2f:02:2e:eb:84:bd:b2:0b:09:56:0d:d9:ff:
                    a3:4f:9f:45:70:a7:6a:47:c2:da:50:66:90:bd:41:
                    f1:2f:44:23:3b:26:94:d5:56:b9:78:2c:0f:ea:75:
                    e9:2d:ab:f3:f7:a7:6d:c1:10:9d:fd:d6:2b:a1:69:
                    cb:6a:ad:2b:d5:d8:ea:0a:13:d6:05:7c:c9:2d:f4:
                    02:9c:96:2d:4f:7e:76:b3:69:0d:cf:7b:4f:9b:c2:
                    bd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4F:13:17:AA:8C:E3:FC:80:BF:0C:E1:D2:5E:F7:69:E1:05:24:D6
            X509v3 Authority Key Identifier:
                keyid:45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:5d:17:51:67:e5:36:d3:de:af:f3:50:94:fc:27:64:9d:78:
         58:78:32:6e:f1:c7:f6:d0:8d:61:fa:bb:d3:f5:5b:74:87:5f:
         a9:cc:7b:2a:33:7e:18:41:bd:d8:a9:87:ae:cd:36:10:3d:a2:
         c2:0e:3d:46:4c:9e:5a:3d:e4:24:b9:35:f0:a0:f2:18:38:14:
         42:96:1b:e9:35:ae:8a:83:f7:e5:e1:ca:ac:b0:37:8a:3d:04:
         57:5b:a8:4c:f2:f1:3f:d5:37:7b:98:26:ba:c7:9d:57:ad:c3:
         95:02:5a:60:68:2e:46:b1:17:a8:4b:2d:a9:01:c5:3c:7a:c4:
         ea:38:8d:9d:38:a6:24:9b:28:a1:a5:e7:d9:86:0f:63:b5:15:
         6c:f4:79:dc:26:af:61:3d:6d:fd:90:72:fb:26:6f:15:f4:08:
         78:02:a5:8e:ea:51:ee:58:76:eb:51:1a:e8:21:3f:bf:3b:ed:
         e7:51:be:e3:5b:b8:0e:aa:38:48:99:c5:ee:5a:87:cf:45:0d:
         84:be:20:4e:68:86:8f:d1:ea:0d:fa:dc:97:3c:a0:76:1f:0f:
         d2:21:37:5f:c4:d3:56:2d:8a:8b:32:03:46:3f:f8:63:cb:58:
         8e:23:3b:f6:ee:60:b7:bd:a4:b1:5e:1e:73:a0:70:70:60:c4:
         b2:a0:3a:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUamQtrd80UXgCNgBoJsNTNQ6b2S0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVEMDY0NDRFN0U2RTgxQkFBN0ZFRkQ0ODAwQTkzNzA3
Mzk2QUNBNjAeFw0yNTEwMjAwMTMxMjRaFw0yNTEwMjEwMzQwMjRaMDMxMTAvBgNV
BAMTKDk4NEYxMzE3QUE4Q0UzRkM4MEJGMENFMUQyNUVGNzY5RTEwNTI0RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVl1wQAA6zl1eL0wssKpxHoeak
BUpJcwx2DMt+XF3rUJqiU2r8+Jm0qZxgS0TCJrA7o0xUcrNWEGCmC/eWHqxKxTMP
4yXrcngmOpsIEETO8hXpFJvY3V0a7OaRDHrs4KZGkw8WlGjD3xozI+S5XJ2joKFc
mVK3YEndbKWmWUmovAz+hy5hgr5zBbJ/vYTaAgAdoj9yEOQchxppyvVK56Hun/Nx
asoTLwIu64S9sgsJVg3Z/6NPn0Vwp2pHwtpQZpC9QfEvRCM7JpTVVrl4LA/qdekt
q/P3p23BEJ391iuhactqrSvV2OoKE9YFfMkt9AKcli1PfnazaQ3Pe0+bwr3RAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUmE8TF6qM4/yAvwzh0l73aeEFJNYwHwYDVR0j
BBgwFoAURdBkROfm6Buqf+/UgAqTcHOWrKYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3NaSmZGZE1EcmM1V045Nmp2MmE5RVFoejJMWkg1c1diTGFWQkxMTkpN
SHUvMS80NUQwNjQ0NEU3RTZFODFCQUE3RkVGRDQ4MDBBOTM3MDczOTZBQ0E2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1RDA2NDQ0RTdFNkU4MUJB
QTdGRUZENDgwMEE5MzcwNzM5NkFDQTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R3NaSmZGZE1EcmM1V045Nmp2MmE5RVFoejJMWkg1c1diTGFWQkxMTkpNSHUvMS80
NUQwNjQ0NEU3RTZFODFCQUE3RkVGRDQ4MDBBOTM3MDczOTZBQ0E2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAS10XUWflNtPer/NQlPwnZJ14WHgybvHH9tCNYfq70/VbdIdfqcx7KjN+GEG9
2KmHrs02ED2iwg49RkyeWj3kJLk18KDyGDgUQpYb6TWuioP35eHKrLA3ij0EV1uo
TPLxP9U3e5gmusedV63DlQJaYGguRrEXqEstqQHFPHrE6jiNnTimJJsooaXn2YYP
Y7UVbPR53CavYT1t/ZBy+yZvFfQIeAKljupR7lh261Ea6CE/vzvt51G+41u4Dqo4
SJnF7lqHz0UNhL4gTmiGj9HqDfrclzygdh8P0iE3X8TTVi2KizIDRj/4Y8tYjiM7
9u5gt72ksV4ec6BwcGDEsqA6Pw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:00:51 2025 by rpki-client