Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H5bAucTVr4BBM1FBu8sf7mmKbS5fdCqzRLa891Zq6k3q/0/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.mft
File:                     7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.mft (raw, json)
Hash identifier:          8HZnN23LgGEfGslI/mhi0fzZK12LqyV/MRgjD7kgcY4=
Subject key identifier:   28:4B:60:C5:15:5D:03:3D:7B:49:D8:6F:D6:4D:B7:CA:C9:7C:9E:B3
Authority key identifier: 7F:A9:A1:0C:02:B8:B0:FF:C4:08:7A:67:A5:06:54:3C:D7:9B:DD:CC
Certificate issuer:       /CN=7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC
Certificate serial:       6435710B5A9168238A0290FF7BCEAE59E6E023A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5bAucTVr4BBM1FBu8sf7mmKbS5fdCqzRLa891Zq6k3q/0/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.mft
Manifest number:          A3
Signing time:             Mon 20 Oct 2025 06:06:37 +0000
Manifest this update:     Mon 20 Oct 2025 06:01:37 +0000
Manifest next update:     Tue 21 Oct 2025 07:53:37 +0000
Files and hashes:         1: 3133382e39392e39322e302f32322d3332203d3e20323634313631.roa (hash: igKFO5mi/Zmb2GxB1TjhkbiSdArIkjoGtl3o062ilvI=)
                          2: 3133312e3139362e3131312e302f32342d3234203d3e20323634313631.roa (hash: xMVL7URCpynYb2Eo9VisEhJozp+t8E/EUX7d0zHYVRk=)
                          3: 3133312e3139362e3130392e302f32342d3234203d3e20323634313631.roa (hash: p/PVDYT8IXkTp7D+DRKsPSm4J5boNUubJSaGEUWaX7o=)
                          4: 3133312e3139362e3130382e302f32342d3234203d3e20323634313631.roa (hash: E6L0WFAv8rftVeglEUxjHQKklWqKPLtcHeLHkJGc/c4=)
                          5: 3133312e3139362e3131302e302f32342d3234203d3e20323634313631.roa (hash: rA0l38OJX5Tc22130VELz/4JTQOGSOub4Rph1bSQRM4=)
                          6: 7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.crl (hash: sU/eA0r22phECDDIjtjkw+s0pa4y+99xXnQnZVAbzV4=)
                          7: 323830343a323336633a3a2f33322d313238203d3e20323634313631.roa (hash: 7sDSOYjIiFFehBnNM2R4Vu7WODNNTi+GfRvTBSHYuto=)
                          8: 34352e3136302e3134342e302f32322d3332203d3e20323634313631.roa (hash: /zJ7pdJgJuv5n7i9INM3QO63H08CTidCPnah3VdOweI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5bAucTVr4BBM1FBu8sf7mmKbS5fdCqzRLa891Zq6k3q/0/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.crl
                          rsync://rpki-repo.registro.br/repo/H5bAucTVr4BBM1FBu8sf7mmKbS5fdCqzRLa891Zq6k3q/0/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:53:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:35:71:0b:5a:91:68:23:8a:02:90:ff:7b:ce:ae:59:e6:e0:23:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC
        Validity
            Not Before: Oct 20 06:01:37 2025 GMT
            Not After : Oct 21 07:53:37 2025 GMT
        Subject: CN=284B60C5155D033D7B49D86FD64DB7CAC97C9EB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e6:2e:e3:23:3b:6f:1e:6f:8b:0f:84:c4:96:
                    39:45:f6:94:2e:8b:b0:92:1e:a9:48:d1:1e:bb:98:
                    b5:aa:5e:d4:0e:c9:95:0f:1e:30:9e:fd:fa:e1:df:
                    1c:6a:4b:37:0f:ba:e8:06:80:59:50:46:93:a5:6e:
                    d1:e6:4a:9a:fc:90:8a:94:81:49:bb:fa:9e:50:64:
                    f2:36:1b:28:3b:a4:02:81:aa:49:fc:0f:92:66:c1:
                    34:e2:e3:0f:71:46:3c:bc:c7:80:2c:28:f1:fd:34:
                    ac:39:a4:e4:32:80:78:3e:19:c2:82:7a:f1:42:69:
                    6b:8a:58:2d:d0:21:2b:7f:ad:5a:45:d3:a6:ab:87:
                    d2:f5:20:62:39:3e:81:cb:f6:8a:4d:43:84:61:08:
                    cd:1c:4a:8f:9c:2c:27:41:c1:a9:57:d4:b0:77:91:
                    a0:04:65:86:33:60:fd:04:27:19:28:77:87:fa:f8:
                    ef:7d:f7:85:54:54:08:66:8f:c3:ed:b4:7c:db:b3:
                    e0:71:e3:05:f7:59:64:f8:42:cf:49:cf:46:d2:eb:
                    0a:2d:79:47:56:b3:52:78:d6:3f:88:f7:b6:c4:54:
                    29:9a:a9:de:e4:5b:33:c4:f9:b5:62:42:f2:e1:85:
                    6a:27:6d:13:27:ed:93:3d:bd:96:ba:c6:3b:a8:e4:
                    bf:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4B:60:C5:15:5D:03:3D:7B:49:D8:6F:D6:4D:B7:CA:C9:7C:9E:B3
            X509v3 Authority Key Identifier:
                keyid:7F:A9:A1:0C:02:B8:B0:FF:C4:08:7A:67:A5:06:54:3C:D7:9B:DD:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5bAucTVr4BBM1FBu8sf7mmKbS5fdCqzRLa891Zq6k3q/0/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5bAucTVr4BBM1FBu8sf7mmKbS5fdCqzRLa891Zq6k3q/0/7FA9A10C02B8B0FFC4087A67A506543CD79BDDCC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:4f:c3:34:32:06:99:13:d5:be:2c:3f:d8:61:ab:66:51:f5:
         4a:3e:4d:3b:cc:0a:84:d2:d4:2f:ae:db:e8:5e:2f:a4:d9:4d:
         24:58:03:6d:93:c9:85:39:93:1e:b7:17:20:25:3c:bc:c0:98:
         98:99:96:f4:bc:ca:2e:29:d2:a4:06:72:09:69:d1:08:92:10:
         2b:f8:7b:15:d4:51:be:50:f0:fa:0b:35:29:b8:35:7a:e8:8e:
         e8:dc:dc:a4:35:f7:60:42:e3:b7:27:6b:1a:31:0e:2b:b0:4e:
         24:12:08:12:b2:64:09:38:81:4f:de:8a:73:5d:4c:ca:67:26:
         63:27:44:d4:87:14:c5:b7:57:3d:32:7a:0e:a3:6c:a2:eb:98:
         2d:a4:5d:25:b8:9c:e3:5c:05:ca:37:76:cc:14:e3:4f:0a:89:
         97:45:49:62:c8:59:63:7e:7f:6f:31:35:34:99:9f:a6:8d:ee:
         53:3e:18:05:56:fa:0c:00:bb:8e:41:87:94:0c:87:03:64:8f:
         b8:b4:d2:38:cc:0e:5a:36:57:b4:15:f9:7d:8c:c8:d5:85:de:
         26:e4:52:5a:8c:cd:15:37:fe:1b:03:ce:4f:56:97:60:72:0a:
         a1:68:6f:bd:2b:09:34:11:e5:e5:db:4b:82:b0:82:41:97:02:
         51:70:5f:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZDVxC1qRaCOKApD/e86uWebgI6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ZBOUExMEMwMkI4QjBGRkM0MDg3QTY3QTUwNjU0M0NE
NzlCRERDQzAeFw0yNTEwMjAwNjAxMzdaFw0yNTEwMjEwNzUzMzdaMDMxMTAvBgNV
BAMTKDI4NEI2MEM1MTU1RDAzM0Q3QjQ5RDg2RkQ2NERCN0NBQzk3QzlFQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb5i7jIztvHm+LD4TEljlF9pQu
i7CSHqlI0R67mLWqXtQOyZUPHjCe/frh3xxqSzcPuugGgFlQRpOlbtHmSpr8kIqU
gUm7+p5QZPI2Gyg7pAKBqkn8D5JmwTTi4w9xRjy8x4AsKPH9NKw5pOQygHg+GcKC
evFCaWuKWC3QISt/rVpF06arh9L1IGI5PoHL9opNQ4RhCM0cSo+cLCdBwalX1LB3
kaAEZYYzYP0EJxkod4f6+O9994VUVAhmj8PttHzbs+Bx4wX3WWT4Qs9Jz0bS6wot
eUdWs1J41j+I97bEVCmaqd7kWzPE+bViQvLhhWonbRMn7ZM9vZa6xjuo5L8DAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKEtgxRVdAz17Sdhv1k23ysl8nrMwHwYDVR0j
BBgwFoAUf6mhDAK4sP/ECHpnpQZUPNeb3cwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDViQXVjVFZyNEJCTTFGQnU4c2Y3bW1LYlM1ZmRDcXpSTGE4OTFacTZr
M3EvMC83RkE5QTEwQzAyQjhCMEZGQzQwODdBNjdBNTA2NTQzQ0Q3OUJERENDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdGQTlBMTBDMDJCOEIwRkZD
NDA4N0E2N0E1MDY1NDNDRDc5QkREQ0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SDViQXVjVFZyNEJCTTFGQnU4c2Y3bW1LYlM1ZmRDcXpSTGE4OTFacTZrM3EvMC83
RkE5QTEwQzAyQjhCMEZGQzQwODdBNjdBNTA2NTQzQ0Q3OUJERENDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW0/DNDIGmRPVviw/2GGrZlH1Sj5NO8wKhNLUL67b6F4vpNlNJFgDbZPJhTmT
HrcXICU8vMCYmJmW9LzKLinSpAZyCWnRCJIQK/h7FdRRvlDw+gs1Kbg1euiO6Nzc
pDX3YELjtydrGjEOK7BOJBIIErJkCTiBT96Kc11MymcmYydE1IcUxbdXPTJ6DqNs
ouuYLaRdJbic41wFyjd2zBTjTwqJl0VJYshZY35/bzE1NJmfpo3uUz4YBVb6DAC7
jkGHlAyHA2SPuLTSOMwOWjZXtBX5fYzI1YXeJuRSWozNFTf+GwPOT1aXYHIKoWhv
vSsJNBHl5dtLgrCCQZcCUXBfFg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:47:18 2025 by rpki-client