Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft
File:                     A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft (raw, json)
Hash identifier:          v3KAaLe/jejjwXSAGho2NE/mLpz+1xt3UUrbiacnGMM=
Subject key identifier:   C4:03:90:C8:30:D5:AB:82:38:E4:40:38:4E:8F:54:5E:9A:86:08:FE
Authority key identifier: A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8
Certificate issuer:       /CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8
Certificate serial:       23F39666E711443220264EF6778E522C3551F395
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft
Manifest number:          02D1
Signing time:             Mon 20 Oct 2025 05:25:46 +0000
Manifest this update:     Mon 20 Oct 2025 05:20:46 +0000
Manifest next update:     Tue 21 Oct 2025 06:02:46 +0000
Files and hashes:         1: 3138392e31342e38302e302f32302d3234203d3e203238323737.roa (hash: n7VK4GQZTYnWloqSAMHn76YqbnY1u2pgivENu6CiCes=)
                          2: 3137392e35312e3137322e302f32322d3234203d3e203238323737.roa (hash: yI1dK9ENc+AfYHAbDnixcQKXD5zluVjisHo5V8kfMxg=)
                          3: A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl (hash: QbWNgS1fnJkie4E3g989iJW3pjwctkNFPCjAGC61Uig=)
                          4: 3132382e3230312e3232332e302f32342d3234203d3e20323734353530.roa (hash: qaZF5sGE7R1S3fyD9Olk3Z91Djr7aIFGFPpqG9LyOrg=)
                          5: 3137372e3133362e38382e302f32312d3234203d3e203238323737.roa (hash: SODCeqMppG+109Vh2sZlp+D9Z3QOeLYSsI9zH1eRlCA=)
                          6: 3132382e3230312e3232302e302f32322d3232203d3e203238323737.roa (hash: kDghBo5U77bO+usc5zOBdFxqE24mUIdkJ+7yOKbwvI4=)
                          7: 323830343a3264633a3a2f33322d3431203d3e203238323737.roa (hash: Ol+1Kw+Ben9pcieWrCajh7sb58yandi25g3jjxFoMQI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl
                          rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 06:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f3:96:66:e7:11:44:32:20:26:4e:f6:77:8e:52:2c:35:51:f3:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8
        Validity
            Not Before: Oct 20 05:20:46 2025 GMT
            Not After : Oct 21 06:02:46 2025 GMT
        Subject: CN=C40390C830D5AB8238E440384E8F545E9A8608FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:90:56:a1:cb:ff:92:67:50:a2:c4:74:5f:ef:
                    7c:71:8d:4a:a6:6d:55:80:a7:44:fa:bc:9d:ba:1d:
                    e3:d4:9e:bd:d6:a6:83:7f:c6:44:ff:34:49:73:d9:
                    1e:ee:8f:0d:2d:5d:db:67:c9:39:d8:08:ba:9b:76:
                    3d:d1:db:28:99:83:9f:05:ab:de:87:36:59:3f:dd:
                    2a:ec:20:86:d3:8a:7d:e8:19:21:68:aa:89:23:21:
                    3b:6b:5a:43:90:d2:6d:03:f7:24:a3:3f:8a:03:d4:
                    d2:bd:2e:c9:de:6f:5d:8a:5b:64:16:54:df:35:c9:
                    1c:23:ef:5f:b6:20:e6:1a:f6:c5:91:ee:5f:76:ae:
                    57:23:45:03:63:63:3f:a4:38:d6:10:36:0d:d7:04:
                    25:de:9e:49:42:ff:e3:1f:ee:0a:a3:08:70:22:ab:
                    f1:6d:ae:18:3c:37:3e:cb:1a:59:9d:31:1c:ce:30:
                    8a:69:4d:e2:e3:e4:3f:87:01:7f:c2:d5:30:4b:e7:
                    92:37:4f:43:80:a1:fb:d6:d8:f4:ad:23:f2:03:5d:
                    4c:44:8b:9a:fa:3f:46:70:84:58:80:d4:58:5a:ec:
                    3c:9a:83:45:75:02:9c:5e:91:73:a6:fc:b5:e3:ee:
                    1b:a7:63:b4:e3:5f:74:b8:9d:4b:8c:9c:b8:be:4a:
                    fc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:03:90:C8:30:D5:AB:82:38:E4:40:38:4E:8F:54:5E:9A:86:08:FE
            X509v3 Authority Key Identifier:
                keyid:A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:8e:a7:53:ee:de:a9:a6:ef:34:0b:4a:88:b4:c9:3a:39:35:
         39:58:5f:eb:b0:d7:db:0d:64:f5:ea:5b:2f:3a:6b:2a:16:fe:
         33:aa:20:5d:56:a2:ea:dc:2d:29:0d:c3:02:3d:1c:dc:14:e6:
         06:b0:af:cd:41:0c:7d:e4:a6:e0:f5:c6:45:84:41:44:39:d2:
         6a:22:9a:d0:e6:45:e9:11:fc:4d:92:8e:19:8f:ff:3c:e8:c9:
         47:3a:b8:c4:df:18:cd:fe:85:08:d7:f0:af:18:18:0d:10:ad:
         0d:07:b8:95:c2:58:97:43:4b:5e:39:bb:c4:1c:85:24:fd:ef:
         30:ed:23:8a:ad:55:b4:14:28:3b:5c:76:3a:1d:8b:88:8e:14:
         53:88:56:77:c3:42:49:df:79:f8:f2:55:4f:04:be:4e:48:d7:
         5a:dd:d7:13:4d:71:a0:9a:c7:f1:12:ce:27:9e:24:6c:2b:97:
         d8:48:80:f8:d1:e7:17:d6:c7:b5:41:0a:8a:e1:38:1d:5b:ac:
         d5:ad:45:5a:05:d1:ba:d7:4e:de:cc:40:6e:3a:44:46:3a:b1:
         a6:c5:9c:7b:32:89:67:57:29:95:58:49:61:fb:c9:d8:20:15:
         7d:4b:9d:32:d5:af:da:ae:19:d3:47:28:cd:9a:4d:b3:98:4c:
         6f:88:4b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:34:14 2025 by rpki-client