Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.mft
File:                     701F7EBD5EE2152D4689A615D0F186D075EECD41.mft (raw, json)
Hash identifier:          9MW9LdVDYFyE8qjUWu4ABDzlO/f0N57afiJ4XVPPGpI=
Subject key identifier:   AF:6B:DF:F3:92:F3:84:3F:15:86:9F:41:D7:32:0A:AC:B4:3F:B1:3B
Authority key identifier: 70:1F:7E:BD:5E:E2:15:2D:46:89:A6:15:D0:F1:86:D0:75:EE:CD:41
Certificate issuer:       /CN=701F7EBD5EE2152D4689A615D0F186D075EECD41
Certificate serial:       38A73162E24D420A151AB3D58BB1630AA52FAA0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.mft
Manifest number:          1B
Signing time:             Mon 20 Oct 2025 08:03:49 +0000
Manifest this update:     Mon 20 Oct 2025 07:58:49 +0000
Manifest next update:     Tue 21 Oct 2025 10:38:49 +0000
Files and hashes:         1: 323830343a353134303a3a2f33332d3333203d3e20323638343430.roa (hash: LeRqew8opsaem32EprvHblYNmhZFlfM2Lnc7VUAt0Ic=)
                          2: 34352e3136312e32302e302f32342d3234203d3e20323638343430.roa (hash: QXOWosaoZUnOff/366m5+VXqxvO9oKo3qAcNaj++9vs=)
                          3: 34352e3136312e32312e302f32342d3234203d3e20323638343430.roa (hash: IQ41tqOgD7uD/PEIYH5h/oUTE5tnT9q42FfS6tEZMuU=)
                          4: 323830343a353134303a383030303a3a2f33332d3333203d3e20323638343430.roa (hash: hFhn5MBA6jIN2tEXivR9+TiaYDg5D9dFbXSRRyxTQw8=)
                          5: 34352e3136312e32322e302f32332d3233203d3e20323638343430.roa (hash: M6krz/e6ZES22ESypEdU6b07Nh29rjcbX207CCLJmG0=)
                          6: 701F7EBD5EE2152D4689A615D0F186D075EECD41.crl (hash: C/TKFevLjR++Eg3d+Bv1O1F7UdbJm4blPu5vrDq5gnY=)
                          7: 34352e3136312e32322e302f32342d3234203d3e20323638343430.roa (hash: y2PpABc/Sg1TZ0UYoWQMJkfjOm+jHPlyiTpY2c2lreM=)
                          8: 34352e3136312e32302e302f32332d3233203d3e20323638343430.roa (hash: ADh4CVwpL0Yv+Rq09yTFltLU+cq9uBqPwNE16rgyxiQ=)
                          9: 34352e3136312e32302e302f32322d3232203d3e20323638343430.roa (hash: xE2fRlN5dX60ZRAfgmHWPeQa5LWHn/7y2Wik31QJxSw=)
                          10: 323830343a353134303a3a2f33322d3332203d3e20323638343430.roa (hash: rb1GVHIGSODc5A+kSif6zWYICVt9SMW6ZwSJ9kxJhfA=)
                          11: 34352e3136312e32332e302f32342d3234203d3e20323638343430.roa (hash: L+Qb68oKLljVQz7SdZNTQj4XlE9OAhJMPy9WKcpvPm0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.crl
                          rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a7:31:62:e2:4d:42:0a:15:1a:b3:d5:8b:b1:63:0a:a5:2f:aa:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701F7EBD5EE2152D4689A615D0F186D075EECD41
        Validity
            Not Before: Oct 20 07:58:49 2025 GMT
            Not After : Oct 21 10:38:49 2025 GMT
        Subject: CN=AF6BDFF392F3843F15869F41D7320AACB43FB13B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ef:e3:6e:c5:40:49:b7:a7:85:23:41:b4:dc:
                    ad:4e:c1:d6:38:a7:e6:b9:03:d7:f3:43:5f:a6:65:
                    98:0e:b8:eb:96:1e:5f:1e:0d:3b:b4:aa:1f:0c:b1:
                    82:b2:f7:bd:ff:e5:bf:95:ce:58:fb:12:7b:00:d8:
                    ab:2d:0e:4a:8e:e2:b5:51:92:8b:2b:0c:ab:86:8e:
                    17:5a:d6:c9:9a:d7:86:4d:b8:2a:99:70:c5:00:44:
                    51:7f:7e:9e:df:89:0e:62:eb:c2:cd:24:f0:cd:af:
                    17:f3:32:75:b8:67:a8:40:46:56:4a:42:06:28:fa:
                    a1:9e:ba:b3:63:11:22:7d:cc:22:75:e5:77:7f:5f:
                    4c:8a:8e:e0:1f:bb:4a:c4:d0:c3:df:33:47:5e:8a:
                    5c:f2:2a:05:69:97:37:d8:38:04:f8:f3:1a:dc:f1:
                    b1:8e:8b:90:62:ed:8f:a1:79:48:cd:84:55:4f:72:
                    91:78:f5:6a:91:07:3f:0c:70:49:97:ca:18:e3:f2:
                    2e:34:ee:89:e7:87:2e:75:f6:8d:a0:a9:ce:04:fe:
                    07:ae:56:62:8c:55:7e:16:60:1f:be:ae:22:c4:b4:
                    92:2e:0c:dc:52:b9:19:b9:e5:34:1f:1b:19:01:57:
                    f9:5f:27:75:63:2f:c2:ee:aa:88:c0:44:44:64:57:
                    3b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6B:DF:F3:92:F3:84:3F:15:86:9F:41:D7:32:0A:AC:B4:3F:B1:3B
            X509v3 Authority Key Identifier:
                keyid:70:1F:7E:BD:5E:E2:15:2D:46:89:A6:15:D0:F1:86:D0:75:EE:CD:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f0:5a:e9:17:dc:93:31:84:49:52:9d:bd:2d:20:1f:24:79:
         d4:6c:00:74:85:36:78:98:3f:e6:07:79:81:a4:af:cc:1f:50:
         e9:55:28:e2:de:ad:01:11:e9:0c:b7:7c:61:22:27:1d:a3:2c:
         08:7e:42:f1:f3:fb:0f:31:18:4d:2b:70:54:93:0e:aa:72:c9:
         b8:03:ce:b1:04:21:9f:44:0f:75:73:50:9c:dc:5d:61:65:bf:
         4e:9f:f0:9d:e6:c3:61:fb:a3:6c:79:25:2a:04:1b:c2:6f:77:
         37:bd:47:1e:00:8d:f0:ab:9d:07:c5:c8:e8:ca:69:1d:4a:0e:
         15:30:f5:eb:d7:da:ba:f4:61:d9:65:59:cc:df:d5:26:4c:d4:
         54:35:bb:91:bc:eb:8b:0d:79:47:73:23:78:71:0e:2c:09:92:
         a3:b1:63:02:01:6f:c4:05:e6:54:65:23:86:13:86:65:23:1a:
         38:13:8c:22:82:9a:56:61:0e:9f:ce:dd:d4:a6:32:2a:5e:0b:
         43:6d:2b:b9:b3:18:46:ca:1b:86:ed:6a:f7:ad:f9:81:02:49:
         2c:89:db:5e:3b:81:ef:93:f0:52:e3:69:78:90:69:b1:f4:d4:
         b0:e7:55:43:42:62:ac:b4:6a:23:0f:26:30:0a:86:64:d6:3a:
         f5:1f:f0:a1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOKcxYuJNQgoVGrPVi7FjCqUvqgowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzAxRjdFQkQ1RUUyMTUyRDQ2ODlBNjE1RDBGMTg2RDA3
NUVFQ0Q0MTAeFw0yNTEwMjAwNzU4NDlaFw0yNTEwMjExMDM4NDlaMDMxMTAvBgNV
BAMTKEFGNkJERkYzOTJGMzg0M0YxNTg2OUY0MUQ3MzIwQUFDQjQzRkIxM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj7+NuxUBJt6eFI0G03K1OwdY4
p+a5A9fzQ1+mZZgOuOuWHl8eDTu0qh8MsYKy973/5b+Vzlj7EnsA2KstDkqO4rVR
kosrDKuGjhda1sma14ZNuCqZcMUARFF/fp7fiQ5i68LNJPDNrxfzMnW4Z6hARlZK
QgYo+qGeurNjESJ9zCJ15Xd/X0yKjuAfu0rE0MPfM0deilzyKgVplzfYOAT48xrc
8bGOi5Bi7Y+heUjNhFVPcpF49WqRBz8McEmXyhjj8i407onnhy519o2gqc4E/geu
VmKMVX4WYB++riLEtJIuDNxSuRm55TQfGxkBV/lfJ3VjL8LuqojARERkVzunAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUr2vf85LzhD8Vhp9B1zIKrLQ/sTswHwYDVR0j
BBgwFoAUcB9+vV7iFS1GiaYV0PGG0HXuzUEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGJNM0djRDl2YmhYdVh0NmN6SmRpbjVZQ3Y5MmFzZEVDbmVTc3JwMWRl
MlkvMC83MDFGN0VCRDVFRTIxNTJENDY4OUE2MTVEMEYxODZEMDc1RUVDRDQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwMUY3RUJENUVFMjE1MkQ0
Njg5QTYxNUQwRjE4NkQwNzVFRUNENDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SGJNM0djRDl2YmhYdVh0NmN6SmRpbjVZQ3Y5MmFzZEVDbmVTc3JwMWRlMlkvMC83
MDFGN0VCRDVFRTIxNTJENDY4OUE2MTVEMEYxODZEMDc1RUVDRDQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARPBa6RfckzGESVKdvS0gHyR51GwAdIU2eJg/5gd5gaSvzB9Q6VUo4t6tARHp
DLd8YSInHaMsCH5C8fP7DzEYTStwVJMOqnLJuAPOsQQhn0QPdXNQnNxdYWW/Tp/w
nebDYfujbHklKgQbwm93N71HHgCN8KudB8XI6MppHUoOFTD169fauvRh2WVZzN/V
JkzUVDW7kbzriw15R3MjeHEOLAmSo7FjAgFvxAXmVGUjhhOGZSMaOBOMIoKaVmEO
n87d1KYyKl4LQ20rubMYRsobhu1q9635gQJJLInbXjuB75PwUuNpeJBpsfTUsOdV
Q0JirLRqIw8mMAqGZNY69R/woQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:01:50 2025 by rpki-client