Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.mft
File:                     1264AC4645C5D468F6F578F2BECD4FAA697E7333.mft (raw, json)
Hash identifier:          eVwG7iLbuGtqIR9kc+5ayaBGepvYKZ68QKFrnp7QUMc=
Subject key identifier:   AA:43:36:59:A1:D8:36:B2:E0:ED:03:75:5F:98:F6:D1:65:82:C5:A8
Authority key identifier: 12:64:AC:46:45:C5:D4:68:F6:F5:78:F2:BE:CD:4F:AA:69:7E:73:33
Certificate issuer:       /CN=1264AC4645C5D468F6F578F2BECD4FAA697E7333
Certificate serial:       5A9FB48D30C89C5C7A10C70CAB48BABED5BE666F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.mft
Manifest number:          02F7
Signing time:             Mon 20 Oct 2025 20:06:06 +0000
Manifest this update:     Mon 20 Oct 2025 20:01:06 +0000
Manifest next update:     Tue 21 Oct 2025 23:08:06 +0000
Files and hashes:         1: 34352e3232362e39382e3132382f32352d3235203d3e20323637303230.roa (hash: Tvq62HJxwhnoD0bCvCbYuTorFFm90hu8X0caUoUH4jg=)
                          2: 1264AC4645C5D468F6F578F2BECD4FAA697E7333.crl (hash: QtUQIYTiLeYCNX4ktgevBN1eG2aScidrBwXM+XMuoFM=)
                          3: 34352e3232362e39382e302f32352d3235203d3e20323637303230.roa (hash: R7whsP3vlfSdPCRhyNvO/olKOiJLU2Fo1ZzrCbNCnOM=)
                          4: 34352e3232362e39362e302f32322d3234203d3e20323637303230.roa (hash: MRAiQKTojaVpRfQGkPLa1Lh6WM6wdQ4TkPR3CL/g/uk=)
                          5: 323830343a343665633a3a2f33322d3430203d3e20323637303230.roa (hash: 9odPoGc8STXLWzdL468akws1+CSlUQ77RKuRZaZub7A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.crl
                          rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 23:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:9f:b4:8d:30:c8:9c:5c:7a:10:c7:0c:ab:48:ba:be:d5:be:66:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1264AC4645C5D468F6F578F2BECD4FAA697E7333
        Validity
            Not Before: Oct 20 20:01:06 2025 GMT
            Not After : Oct 21 23:08:06 2025 GMT
        Subject: CN=AA433659A1D836B2E0ED03755F98F6D16582C5A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:90:d6:83:1a:56:23:40:20:17:6d:de:ef:
                    88:9c:cd:7d:90:24:b1:9e:51:3c:23:b8:fd:41:bb:
                    3d:60:6a:62:e6:d6:b8:22:33:80:12:dc:41:5c:cf:
                    68:af:06:87:be:51:93:19:55:08:57:40:57:99:7a:
                    04:63:9d:5b:0b:13:c6:b8:08:b2:a8:2c:fe:38:a2:
                    c2:61:a0:b2:f8:f0:e4:0d:10:46:f5:2a:f6:05:e1:
                    b9:a2:7a:46:10:72:ce:8b:8e:38:45:d6:08:45:d1:
                    d7:33:02:e6:32:74:71:69:63:f2:5f:c8:58:36:cc:
                    92:fc:6b:a2:0d:b6:44:f2:ff:01:50:0d:9b:ae:69:
                    4e:01:70:1c:0c:0d:4a:f4:6f:91:aa:ab:0f:d5:e7:
                    cd:9d:d5:21:11:7f:c3:36:f4:b7:a5:eb:b2:3d:6f:
                    13:55:aa:d3:f0:3f:f3:21:7e:0c:71:bb:03:ed:cd:
                    db:36:f3:02:51:86:8b:22:95:13:2f:19:59:68:a6:
                    a9:69:b9:4d:1e:61:37:48:5f:4c:77:b8:4e:1b:00:
                    c4:3f:bb:2d:7b:53:9e:68:3b:3c:be:fa:39:df:0b:
                    db:8b:a3:95:5c:fb:25:c0:77:45:6b:0c:cb:b3:27:
                    72:2a:7b:11:62:e5:37:ec:f7:f6:e1:65:c4:be:57:
                    ef:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:43:36:59:A1:D8:36:B2:E0:ED:03:75:5F:98:F6:D1:65:82:C5:A8
            X509v3 Authority Key Identifier:
                keyid:12:64:AC:46:45:C5:D4:68:F6:F5:78:F2:BE:CD:4F:AA:69:7E:73:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d4:d8:de:91:c9:59:15:eb:58:00:68:29:fc:6f:ed:8a:71:
         c9:da:f2:09:d3:14:e4:95:1b:05:86:9a:57:10:65:07:74:bc:
         3b:d7:24:f3:06:6e:de:7b:d4:30:07:79:73:e4:92:de:1b:fd:
         ee:86:56:90:88:60:40:cf:89:9d:13:ca:21:f4:be:cc:81:4f:
         97:b4:0b:81:9f:c3:8a:9e:5c:f7:3c:6e:21:cf:35:c5:bb:da:
         d1:b1:f7:a2:95:b2:8e:51:63:35:10:b7:92:6f:80:5c:21:ac:
         b0:64:46:bf:e5:8c:15:ef:d5:e5:c4:b0:ee:0e:4e:62:d6:25:
         d9:5c:25:2b:07:4d:c5:c6:31:53:2f:d2:43:84:50:3a:8a:ce:
         4f:d6:70:db:81:bc:d6:c2:75:a6:29:76:df:0d:aa:c9:e9:4c:
         b1:1f:3d:ec:a2:b5:44:8d:45:d2:93:20:b0:d2:44:3f:1f:a2:
         eb:09:39:a5:f4:97:4c:90:81:19:43:18:b9:d5:df:74:51:3b:
         16:e7:4b:cd:00:2a:25:58:f7:21:d6:b2:85:d9:77:84:38:f5:
         6b:42:30:52:34:d7:99:c2:6c:ee:e0:5a:f0:b6:2e:00:fc:e6:
         b0:44:f5:cf:e9:22:fc:e0:9d:b6:c1:5b:e4:7b:45:18:03:cf:
         fc:c5:81:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWp+0jTDInFx6EMcMq0i6vtW+Zm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI2NEFDNDY0NUM1RDQ2OEY2RjU3OEYyQkVDRDRGQUE2
OTdFNzMzMzAeFw0yNTEwMjAyMDAxMDZaFw0yNTEwMjEyMzA4MDZaMDMxMTAvBgNV
BAMTKEFBNDMzNjU5QTFEODM2QjJFMEVEMDM3NTVGOThGNkQxNjU4MkM1QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9YpDWgxpWI0AgF23e74iczX2Q
JLGeUTwjuP1Buz1gamLm1rgiM4AS3EFcz2ivBoe+UZMZVQhXQFeZegRjnVsLE8a4
CLKoLP44osJhoLL48OQNEEb1KvYF4bmiekYQcs6LjjhF1ghF0dczAuYydHFpY/Jf
yFg2zJL8a6INtkTy/wFQDZuuaU4BcBwMDUr0b5Gqqw/V582d1SERf8M29Lel67I9
bxNVqtPwP/MhfgxxuwPtzds28wJRhosilRMvGVlopqlpuU0eYTdIX0x3uE4bAMQ/
uy17U55oOzy++jnfC9uLo5Vc+yXAd0VrDMuzJ3IqexFi5Tfs9/bhZcS+V+9zAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUqkM2WaHYNrLg7QN1X5j20WWCxagwHwYDVR0j
BBgwFoAUEmSsRkXF1Gj29Xjyvs1Pqml+czMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSExMS21WdEp5YU1IWjZvQVNQQjlVazJtb1M1R21qV2FrUnZ2NURxQzlt
OEgvMS8xMjY0QUM0NjQ1QzVENDY4RjZGNTc4RjJCRUNENEZBQTY5N0U3MzMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyNjRBQzQ2NDVDNUQ0NjhG
NkY1NzhGMkJFQ0Q0RkFBNjk3RTczMzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SExMS21WdEp5YU1IWjZvQVNQQjlVazJtb1M1R21qV2FrUnZ2NURxQzltOEgvMS8x
MjY0QUM0NjQ1QzVENDY4RjZGNTc4RjJCRUNENEZBQTY5N0U3MzMzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE9TY3pHJWRXrWABoKfxv7YpxydryCdMU5JUbBYaaVxBlB3S8O9ck8wZu3nvU
MAd5c+SS3hv97oZWkIhgQM+JnRPKIfS+zIFPl7QLgZ/Dip5c9zxuIc81xbva0bH3
opWyjlFjNRC3km+AXCGssGRGv+WMFe/V5cSw7g5OYtYl2VwlKwdNxcYxUy/SQ4RQ
OorOT9Zw24G81sJ1pil23w2qyelMsR897KK1RI1F0pMgsNJEPx+i6wk5pfSXTJCB
GUMYudXfdFE7FudLzQAqJVj3Idayhdl3hDj1a0IwUjTXmcJs7uBa8LYuAPzmsET1
z+ki/OCdtsFb5HtFGAPP/MWB4Q==
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:02:22 2025 by rpki-client