Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.mft
File:                     66D5AB14A687F80E7A5A3698F13E2B2421405A11.mft (raw, json)
Hash identifier:          2ou72gtLOwNCGbV86NPpDexR8OyGno6HqD0DOyuZOX4=
Subject key identifier:   8D:AE:58:15:D0:30:9C:93:40:9A:FE:9D:17:49:0A:A1:29:8A:DF:5E
Authority key identifier: 66:D5:AB:14:A6:87:F8:0E:7A:5A:36:98:F1:3E:2B:24:21:40:5A:11
Certificate issuer:       /CN=66D5AB14A687F80E7A5A3698F13E2B2421405A11
Certificate serial:       7E4BD09D56B25F203616E205A658A5B650A4E8B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.mft
Manifest number:          02F2
Signing time:             Mon 20 Oct 2025 00:30:02 +0000
Manifest this update:     Mon 20 Oct 2025 00:25:02 +0000
Manifest next update:     Tue 21 Oct 2025 03:04:02 +0000
Files and hashes:         1: 323830343a323461633a3a2f33332d3333203d3e20323634323337.roa (hash: j8mHx3967p7qX9/U0Qsty3qwPCqhIz6OMlS+sc6/MgU=)
                          2: 66D5AB14A687F80E7A5A3698F13E2B2421405A11.crl (hash: 4Ph0xueWfCygL8oi2YtO+CWRYbWpsaWBsFeoCjECpJE=)
                          3: 323830343a323461633a3a2f33322d3332203d3e20323634323337.roa (hash: c/mlW5rnknCWgucVDHZfO/xmMCZPKhWOzPqKgdj+r0Y=)
                          4: 323830343a323461633a383030303a3a2f33332d3333203d3e20323634323337.roa (hash: QGc7C7/l+j1t8/W4LkXoYiBPPPzndHcjt4vmMkzhPgE=)
                          5: 3133382e3131372e3137322e302f32342d3234203d3e20323634323337.roa (hash: 3xJJOasBl7tmT2UJ3R3jEyWJ9hbTOjQyngQeFZM1+lY=)
                          6: 3133382e3131372e3137342e302f32342d3234203d3e20323634323337.roa (hash: zKaP+1XeHHwPhBJMFBRwtKS8AbuI7JQSOiSohav1n3g=)
                          7: 3133382e3131372e3137332e302f32342d3234203d3e20323634323337.roa (hash: i9pI4icREJ6g8KHTVSzGwz4KOJYCPYvSFLsJjLH2hKw=)
                          8: 3133382e3131372e3137322e302f32332d3233203d3e20323634323337.roa (hash: NSEAxMQrQ7JYWvRpaQdNvWFInyNuqUxvI9JSJHN0N4Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.crl
                          rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:4b:d0:9d:56:b2:5f:20:36:16:e2:05:a6:58:a5:b6:50:a4:e8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66D5AB14A687F80E7A5A3698F13E2B2421405A11
        Validity
            Not Before: Oct 20 00:25:02 2025 GMT
            Not After : Oct 21 03:04:02 2025 GMT
        Subject: CN=8DAE5815D0309C93409AFE9D17490AA1298ADF5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f6:12:c6:80:b3:6d:9a:0d:a1:2a:53:3b:b2:
                    07:57:d1:f0:c5:2b:49:93:aa:b3:4d:36:c0:91:e8:
                    ac:76:b9:f5:42:5c:46:01:0f:ad:c7:84:45:64:c5:
                    64:55:68:a3:7d:a9:a7:08:c6:90:cc:59:36:74:bb:
                    24:6b:e3:73:7f:92:de:3f:b3:d9:98:1d:78:de:da:
                    d9:71:c7:40:4a:6e:7d:a7:99:59:31:46:51:87:a9:
                    2d:ad:67:fc:f0:7d:4d:1a:bb:e1:92:8d:4a:3f:14:
                    fa:74:a9:89:16:00:33:8e:2f:82:b7:27:52:f3:ad:
                    a9:bb:25:f9:52:b2:63:c5:90:5b:22:bc:b6:29:0a:
                    ed:8a:ab:23:b1:9b:50:6c:58:28:d8:50:9c:6c:54:
                    50:d5:47:d9:4a:6c:6c:e5:b1:c6:52:fd:9e:7f:0b:
                    90:c1:50:30:2e:c5:66:60:2a:48:cb:e1:93:7a:6b:
                    9d:4b:c8:4a:bf:82:77:1f:12:52:4f:84:1e:f4:6b:
                    b5:ec:ae:f7:01:4b:3d:e6:21:e6:35:da:68:39:39:
                    54:e8:c3:2b:9c:3c:3b:3a:a0:53:e8:e0:24:55:cb:
                    0f:a7:b3:d9:ed:76:af:21:88:ad:78:a2:62:8b:fa:
                    25:71:ec:34:1e:c8:04:5a:37:53:d9:27:da:16:2f:
                    76:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AE:58:15:D0:30:9C:93:40:9A:FE:9D:17:49:0A:A1:29:8A:DF:5E
            X509v3 Authority Key Identifier:
                keyid:66:D5:AB:14:A6:87:F8:0E:7A:5A:36:98:F1:3E:2B:24:21:40:5A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:40:18:96:46:77:91:be:6b:d5:b5:8b:d9:ee:0a:fa:b6:c0:
         62:d5:a2:c8:73:91:07:02:3e:e2:9d:2b:20:b0:93:6c:9d:f7:
         1c:3d:86:78:fa:8b:fc:70:45:19:e7:2e:7f:c3:08:72:e5:aa:
         b3:70:15:fe:9d:ea:30:47:bc:f2:59:22:36:fb:fc:03:87:c1:
         41:3e:51:c4:34:83:bf:ce:1d:40:fe:ed:84:9b:d6:35:28:cf:
         9f:28:51:e1:16:d0:9d:01:dc:80:a1:1b:d1:c2:00:c5:ba:5a:
         af:a0:8e:a6:54:b8:29:e6:e0:9c:a4:67:be:d9:d1:fb:66:c0:
         1b:bf:31:30:37:b8:b8:4c:c9:f8:3b:10:68:a9:45:84:46:71:
         24:4d:0a:da:30:df:2b:90:01:ac:7b:b9:5e:3e:3a:8c:8c:9a:
         df:e7:d8:35:55:53:c3:5e:31:41:a4:f8:17:50:69:d1:ce:b0:
         3b:0c:e9:18:e5:6a:50:a0:a7:44:e2:40:16:9b:7a:9c:2f:c2:
         68:25:79:f6:a7:a3:49:bb:e8:d0:4e:70:89:aa:fc:12:fe:55:
         32:ec:9e:1d:26:78:1b:73:54:ef:fa:81:ba:1b:2c:24:2c:44:
         75:15:cd:45:16:f1:f6:67:57:c2:7d:30:9f:48:27:4f:e1:de:
         25:6a:59:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:38:17 2025 by rpki-client