Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/1/3297FC6045B32620F4B7F6A0AABC041F270B248B.mft
File:                     3297FC6045B32620F4B7F6A0AABC041F270B248B.mft (raw, json)
Hash identifier:          rJOYa0Qsl2umXih+3bEON3NjW+ofatdBqz0WqSGzd+4=
Subject key identifier:   16:69:E4:D2:36:69:EF:8E:62:C6:9A:35:09:02:65:00:E5:3A:44:B1
Authority key identifier: 32:97:FC:60:45:B3:26:20:F4:B7:F6:A0:AA:BC:04:1F:27:0B:24:8B
Certificate issuer:       /CN=3297FC6045B32620F4B7F6A0AABC041F270B248B
Certificate serial:       0FAAAB4DF9F6827B1AD3DF0ED8C025F9B17F1D06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3297FC6045B32620F4B7F6A0AABC041F270B248B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/1/3297FC6045B32620F4B7F6A0AABC041F270B248B.mft
Manifest number:          02EE
Signing time:             Mon 20 Oct 2025 04:33:34 +0000
Manifest this update:     Mon 20 Oct 2025 04:28:34 +0000
Manifest next update:     Tue 21 Oct 2025 04:57:34 +0000
Files and hashes:         1: 3137392e34382e37322e302f32342d3234203d3e20323731303638.roa (hash: t2d+Xyzw367rAV1yE3HO6F3zT74d/eu+SZbBD/CzrVM=)
                          2: 3137392e34382e37332e302f32342d3234203d3e20323731303638.roa (hash: gaoG6u11kPw09dWpDPMtKnKe5B2POI3dnVYkWxK1u9Q=)
                          3: 3297FC6045B32620F4B7F6A0AABC041F270B248B.crl (hash: OPZ4wHm/X//nus0YQ1AFqdAj3OMSo4/it2lbow7iQ9g=)
                          4: 3137392e34382e37352e302f32342d3234203d3e20323731303638.roa (hash: 1OfTVoQ3/CQIrol0RatHyipTD+BsGnWJvkFWSFMaYM0=)
                          5: 323830343a373563343a3a2f33322d3332203d3e20323731303638.roa (hash: No+SenQrJrZeQBkDvOnB8+mVzmabjlJWutjEEM5/Uzc=)
                          6: 3137392e34382e37342e302f32342d3234203d3e20323731303638.roa (hash: rEBH0pP4zGVWKvFwq8ryFzkA0DNBbJ4RRIYH2oXzNs8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/1/3297FC6045B32620F4B7F6A0AABC041F270B248B.crl
                          rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/1/3297FC6045B32620F4B7F6A0AABC041F270B248B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3297FC6045B32620F4B7F6A0AABC041F270B248B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:aa:ab:4d:f9:f6:82:7b:1a:d3:df:0e:d8:c0:25:f9:b1:7f:1d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3297FC6045B32620F4B7F6A0AABC041F270B248B
        Validity
            Not Before: Oct 20 04:28:34 2025 GMT
            Not After : Oct 21 04:57:34 2025 GMT
        Subject: CN=1669E4D23669EF8E62C69A3509026500E53A44B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e3:09:33:85:0f:47:54:1d:85:75:ce:f5:65:
                    f1:11:ac:31:32:86:51:7c:4c:e6:b6:65:d1:4c:fa:
                    c3:9d:9f:d9:86:03:cd:03:ab:fc:c3:cd:7a:9f:31:
                    d2:73:c9:58:09:96:91:cf:92:67:02:09:28:c4:1e:
                    85:dd:42:48:61:9a:27:b0:e7:13:11:8f:9d:ff:68:
                    49:d2:36:f8:f7:39:43:4b:13:bb:a2:e3:c1:70:80:
                    49:58:e5:a2:b0:16:f8:a1:37:e6:ef:48:7c:7e:c5:
                    89:f1:c0:84:26:f2:8d:4e:9a:71:40:64:60:be:e5:
                    65:89:2d:ca:8e:77:23:2c:47:ea:85:59:c5:04:50:
                    fd:6c:1a:52:0f:b9:38:37:0a:4a:1d:66:bc:da:c7:
                    2d:7a:99:d3:2a:d9:d4:4b:26:97:b3:2e:2b:bb:f3:
                    5d:cc:f7:d5:12:f5:e6:93:8c:68:db:65:f4:40:c2:
                    94:57:37:37:a9:ea:86:db:6a:57:84:84:34:f8:f5:
                    66:09:3a:ec:d0:63:48:57:a2:5e:a1:27:ca:0d:13:
                    57:15:f1:b6:b8:fe:84:7d:22:8e:2e:23:fe:75:40:
                    77:f4:f0:c5:35:9e:0b:28:f1:98:2e:0c:2f:ef:cb:
                    1e:10:d6:5b:2f:32:9e:d0:55:b3:09:db:85:dd:b1:
                    63:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:69:E4:D2:36:69:EF:8E:62:C6:9A:35:09:02:65:00:E5:3A:44:B1
            X509v3 Authority Key Identifier:
                keyid:32:97:FC:60:45:B3:26:20:F4:B7:F6:A0:AA:BC:04:1F:27:0B:24:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/1/3297FC6045B32620F4B7F6A0AABC041F270B248B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3297FC6045B32620F4B7F6A0AABC041F270B248B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/1/3297FC6045B32620F4B7F6A0AABC041F270B248B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a8:23:c1:a0:19:dc:93:c6:db:7c:df:79:51:dc:7f:83:b9:
         80:3f:78:73:20:8a:2c:ea:14:38:48:ba:82:af:c4:6f:60:07:
         2f:52:b6:81:a7:80:52:96:42:05:8c:df:6a:19:10:de:12:8b:
         3d:96:37:6b:df:55:77:94:5e:4b:66:10:e8:13:0b:ba:58:68:
         9f:b5:04:99:47:1b:24:9e:7a:8a:ad:2c:d4:dd:dd:24:88:86:
         63:6a:ac:09:29:f6:5d:a2:b5:47:f9:b5:0d:3a:f3:98:16:76:
         d4:4c:4b:d2:ba:8b:43:41:85:16:08:65:65:d1:0f:1d:7a:29:
         c1:1f:60:c2:7b:67:0b:0d:46:4e:c1:1a:8b:95:17:9d:03:f8:
         91:93:46:ad:07:53:48:2e:4e:f8:74:05:47:6f:c8:27:8c:80:
         4b:21:64:d4:ab:73:5d:f7:f5:d4:b7:9a:fc:e0:a8:3f:86:7a:
         d1:a4:aa:8b:3f:24:f5:87:25:00:ac:8d:72:5f:3d:f0:97:83:
         dc:f3:51:ad:70:24:14:76:46:95:84:9b:26:40:1d:93:f4:6e:
         06:2a:fe:c7:73:89:87:37:6e:dd:19:76:a6:7f:05:c5:fc:2a:
         75:e4:f3:67:00:da:9c:57:ae:13:8c:73:81:1e:7a:a1:1e:b5:
         68:2f:c7:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUD6qrTfn2gnsa098O2MAl+bF/HQYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI5N0ZDNjA0NUIzMjYyMEY0QjdGNkEwQUFCQzA0MUYy
NzBCMjQ4QjAeFw0yNTEwMjAwNDI4MzRaFw0yNTEwMjEwNDU3MzRaMDMxMTAvBgNV
BAMTKDE2NjlFNEQyMzY2OUVGOEU2MkM2OUEzNTA5MDI2NTAwRTUzQTQ0QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv4wkzhQ9HVB2Fdc71ZfERrDEy
hlF8TOa2ZdFM+sOdn9mGA80Dq/zDzXqfMdJzyVgJlpHPkmcCCSjEHoXdQkhhmiew
5xMRj53/aEnSNvj3OUNLE7ui48FwgElY5aKwFvihN+bvSHx+xYnxwIQm8o1OmnFA
ZGC+5WWJLcqOdyMsR+qFWcUEUP1sGlIPuTg3CkodZrzaxy16mdMq2dRLJpezLiu7
813M99US9eaTjGjbZfRAwpRXNzep6obbaleEhDT49WYJOuzQY0hXol6hJ8oNE1cV
8ba4/oR9Io4uI/51QHf08MU1ngso8ZguDC/vyx4Q1lsvMp7QVbMJ24XdsWOhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUFmnk0jZp745ixpo1CQJlAOU6RLEwHwYDVR0j
BBgwFoAUMpf8YEWzJiD0t/agqrwEHycLJIswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSE5WMkpXc1E2RG8xR3RyeGhjcXBvVVp2SnNMeWFDTlRQaUFmakRmVjd3
MVovMS8zMjk3RkM2MDQ1QjMyNjIwRjRCN0Y2QTBBQUJDMDQxRjI3MEIyNDhCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyOTdGQzYwNDVCMzI2MjBG
NEI3RjZBMEFBQkMwNDFGMjcwQjI0OEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SE5WMkpXc1E2RG8xR3RyeGhjcXBvVVp2SnNMeWFDTlRQaUFmakRmVjd3MVovMS8z
Mjk3RkM2MDQ1QjMyNjIwRjRCN0Y2QTBBQUJDMDQxRjI3MEIyNDhCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgKgjwaAZ3JPG23zfeVHcf4O5gD94cyCKLOoUOEi6gq/Eb2AHL1K2gaeAUpZC
BYzfahkQ3hKLPZY3a99Vd5ReS2YQ6BMLulhon7UEmUcbJJ56iq0s1N3dJIiGY2qs
CSn2XaK1R/m1DTrzmBZ21ExL0rqLQ0GFFghlZdEPHXopwR9gwntnCw1GTsEai5UX
nQP4kZNGrQdTSC5O+HQFR2/IJ4yASyFk1KtzXff11Lea/OCoP4Z60aSqiz8k9Ycl
AKyNcl898JeD3PNRrXAkFHZGlYSbJkAdk/RuBir+x3OJhzdu3Rl2pn8FxfwqdeTz
ZwDanFeuE4xzgR56oR61aC/HIg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:46:02 2025 by rpki-client