Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.mft
File:                     96088310B0454DFFF2FF457C587DBC38970A3CA8.mft (raw, json)
Hash identifier:          PnglSHC+FF++dH/hObf5yAD/5LCeXPVBkLgQd5nPEmU=
Subject key identifier:   29:C8:9C:C6:E7:42:69:67:64:98:02:08:94:3D:42:98:24:B4:EB:66
Authority key identifier: 96:08:83:10:B0:45:4D:FF:F2:FF:45:7C:58:7D:BC:38:97:0A:3C:A8
Certificate issuer:       /CN=96088310B0454DFFF2FF457C587DBC38970A3CA8
Certificate serial:       4AEFC604AFC9D7AC2124A5C2EDD46D52F05B53F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.mft
Manifest number:          02F0
Signing time:             Sun 19 Oct 2025 17:27:15 +0000
Manifest this update:     Sun 19 Oct 2025 17:22:15 +0000
Manifest next update:     Mon 20 Oct 2025 21:14:15 +0000
Files and hashes:         1: 34352e3232362e3133382e302f32332d3233203d3e20323636393637.roa (hash: fsIdvnW/xBFbECbrPj/8Gph0WrWPtClpH4+zuWiA8ng=)
                          2: 96088310B0454DFFF2FF457C587DBC38970A3CA8.crl (hash: 01rXVZryozefouTDqqqMphpEKhlW944HtZS+d265klI=)
                          3: 34352e3232362e3133392e302f32342d3234203d3e20323636393637.roa (hash: 0G1iLeo8mtEEZgScDcIdKR1iIOOHZZ+8Livm5CUFjW8=)
                          4: 34352e3232362e3133382e302f32342d3234203d3e20323636393637.roa (hash: 4HY/TAFL3gyDZMXuigQ2nE9WO1ncW+700JaMse4s6CY=)
                          5: 323830343a343631343a663030303a3a2f33362d3336203d3e20323636393637.roa (hash: uI/DuN7U+WHTT1WgjGk6LyAAjC7CgYzTnKGz4t8/Uws=)
                          6: 323830343a343631343a653030303a3a2f33352d3335203d3e20323636393637.roa (hash: eRJSAjRr0f6WrZe6vLUDzXBJ9fUQzs9rKqig5tdGrfg=)
                          7: 323830343a343631343a653030303a3a2f33362d3336203d3e20323636393637.roa (hash: c2UtnTE58EnNpa58bbheDHkg1TxYnwksHe/UvQPfXXY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.crl
                          rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 21:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ef:c6:04:af:c9:d7:ac:21:24:a5:c2:ed:d4:6d:52:f0:5b:53:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96088310B0454DFFF2FF457C587DBC38970A3CA8
        Validity
            Not Before: Oct 19 17:22:15 2025 GMT
            Not After : Oct 20 21:14:15 2025 GMT
        Subject: CN=29C89CC6E742696764980208943D429824B4EB66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d5:b7:1c:de:9a:c5:ad:cb:ea:4c:86:d5:79:
                    95:07:8e:d5:b3:00:f2:e5:76:34:dc:b0:1e:ad:75:
                    14:fa:d1:0f:aa:b0:ef:08:17:02:c7:91:a2:e0:06:
                    eb:29:91:dc:28:49:3e:6c:4d:c8:7b:d6:97:ba:0c:
                    8f:c1:64:6b:34:27:3e:37:62:2a:5b:c8:f2:50:4d:
                    19:db:fb:2f:82:62:50:9f:c3:e1:8a:4e:04:f3:fb:
                    92:5b:59:9a:cc:fc:69:b7:ee:01:16:a7:78:4c:44:
                    71:22:f7:51:c1:6d:a3:25:ea:5a:ab:bf:1d:aa:cf:
                    98:53:b9:6c:b1:ab:50:78:98:a2:b3:ee:82:a8:db:
                    35:d1:f8:9e:f3:e7:c8:1d:8a:43:6b:64:94:1d:a1:
                    d9:c0:9a:bf:61:b8:88:a5:97:dd:1d:76:ad:3b:a6:
                    ec:00:dc:19:63:fe:56:88:a5:df:31:a1:28:fb:df:
                    e7:e0:fb:7c:40:e7:aa:69:a5:1d:d1:32:d0:88:9a:
                    38:34:f6:e8:f1:59:ce:6e:a5:5c:10:12:9c:8c:67:
                    45:d7:c4:20:62:76:d5:69:97:73:92:e0:8f:32:fe:
                    6b:4d:25:ce:9e:4e:72:6d:2a:58:97:9b:15:f5:a6:
                    49:62:47:7a:33:e0:8b:a3:0b:34:fa:42:ce:e3:84:
                    43:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C8:9C:C6:E7:42:69:67:64:98:02:08:94:3D:42:98:24:B4:EB:66
            X509v3 Authority Key Identifier:
                keyid:96:08:83:10:B0:45:4D:FF:F2:FF:45:7C:58:7D:BC:38:97:0A:3C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:8c:cf:4e:12:0c:66:cc:29:7d:87:4d:1c:81:53:12:08:71:
         2f:dd:55:b4:02:a9:b5:f6:85:e2:ef:e9:20:13:a4:a5:0f:74:
         ed:a3:d7:8f:7b:f2:f4:3b:9a:f1:7b:d8:28:34:53:62:83:7a:
         c2:bb:90:0a:03:ee:bb:60:4a:17:63:d5:b1:60:37:6b:12:57:
         69:cb:af:39:13:e6:a9:21:a2:ee:ce:0b:06:1c:1d:f9:e3:74:
         47:5a:d1:15:70:1e:2f:5d:01:a5:0c:f9:a0:5e:3d:c1:8f:25:
         80:39:07:21:86:51:8d:24:cc:40:ae:11:86:79:4a:4d:fa:93:
         56:6d:c6:e6:a0:9b:e4:d1:25:df:3e:79:ba:a4:15:7e:88:b8:
         69:6e:2c:61:57:7f:7b:ac:ff:c1:61:c2:69:d4:14:ef:3a:10:
         c1:1e:4a:6c:8c:4a:97:60:c9:a6:f0:9e:34:c1:2c:1f:cf:e1:
         b3:16:96:d5:89:18:11:bc:cf:cf:80:a5:ef:fb:8c:77:06:9a:
         98:e6:e3:a8:33:5e:9d:b0:52:e9:e4:a7:1b:e9:f9:36:c8:cf:
         3a:4a:90:16:53:61:c1:3c:10:a3:f0:3d:ef:c2:ce:0d:0c:80:
         65:98:bb:4e:4a:ac:9e:01:20:20:fd:b6:0d:90:2a:9c:ca:c2:
         83:5c:f7:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSu/GBK/J16whJKXC7dRtUvBbU/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYwODgzMTBCMDQ1NERGRkYyRkY0NTdDNTg3REJDMzg5
NzBBM0NBODAeFw0yNTEwMTkxNzIyMTVaFw0yNTEwMjAyMTE0MTVaMDMxMTAvBgNV
BAMTKDI5Qzg5Q0M2RTc0MjY5Njc2NDk4MDIwODk0M0Q0Mjk4MjRCNEVCNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD1bcc3prFrcvqTIbVeZUHjtWz
APLldjTcsB6tdRT60Q+qsO8IFwLHkaLgBuspkdwoST5sTch71pe6DI/BZGs0Jz43
YipbyPJQTRnb+y+CYlCfw+GKTgTz+5JbWZrM/Gm37gEWp3hMRHEi91HBbaMl6lqr
vx2qz5hTuWyxq1B4mKKz7oKo2zXR+J7z58gdikNrZJQdodnAmr9huIill90ddq07
puwA3Blj/laIpd8xoSj73+fg+3xA56pppR3RMtCImjg09ujxWc5upVwQEpyMZ0XX
xCBidtVpl3OS4I8y/mtNJc6eTnJtKliXmxX1pkliR3oz4IujCzT6Qs7jhENHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKcicxudCaWdkmAIIlD1CmCS062YwHwYDVR0j
BBgwFoAUlgiDELBFTf/y/0V8WH28OJcKPKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3Z6bUV4OE1EZ1pWdkhNR1QxdFlxRVZpRjdYdjdhTng3THl2RllzQng2
eDUvMS85NjA4ODMxMEIwNDU0REZGRjJGRjQ1N0M1ODdEQkMzODk3MEEzQ0E4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2MDg4MzEwQjA0NTRERkZG
MkZGNDU3QzU4N0RCQzM4OTcwQTNDQTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R3Z6bUV4OE1EZ1pWdkhNR1QxdFlxRVZpRjdYdjdhTng3THl2RllzQng2eDUvMS85
NjA4ODMxMEIwNDU0REZGRjJGRjQ1N0M1ODdEQkMzODk3MEEzQ0E4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO4zPThIMZswpfYdNHIFTEghxL91VtAKptfaF4u/pIBOkpQ907aPXj3vy9Dua
8XvYKDRTYoN6wruQCgPuu2BKF2PVsWA3axJXacuvORPmqSGi7s4LBhwd+eN0R1rR
FXAeL10BpQz5oF49wY8lgDkHIYZRjSTMQK4RhnlKTfqTVm3G5qCb5NEl3z55uqQV
foi4aW4sYVd/e6z/wWHCadQU7zoQwR5KbIxKl2DJpvCeNMEsH8/hsxaW1YkYEbzP
z4Cl7/uMdwaamObjqDNenbBS6eSnG+n5NsjPOkqQFlNhwTwQo/A978LODQyAZZi7
TkqsngEgIP22DZAqnMrCg1z3tw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:16:34 2025 by rpki-client