Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft
File:                     28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft (raw, json)
Hash identifier:          jkX0MDb84bampUDX5IbnXZPPxRcHE4LsHBR8LM3giJ4=
Subject key identifier:   B1:1A:21:7C:8F:06:69:A8:A6:03:69:32:34:43:20:EE:FD:5E:04:7C
Authority key identifier: 28:F9:F9:FB:DF:48:9E:86:A2:CB:92:9A:47:E8:BC:0A:BC:2A:1B:1C
Certificate issuer:       /CN=28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C
Certificate serial:       2415C5EB83F8E4EFB5136D0734FAF070560C579F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft
Manifest number:          0201
Signing time:             Mon 20 Oct 2025 02:13:18 +0000
Manifest this update:     Mon 20 Oct 2025 02:08:18 +0000
Manifest next update:     Tue 21 Oct 2025 05:24:18 +0000
Files and hashes:         1: 323830343a346665303a383030303a3a2f33332d3333203d3e20323638333535.roa (hash: HFtPxATLX5EpbVFkw5GdmivQ5LTbLGy2fdMs9HhaMo0=)
                          2: 34352e3233392e37322e302f32332d3233203d3e20323638333535.roa (hash: d4TnNgLFV5QuFe7AGff4exdLMTnJ2LcNXSsUhygUe8Q=)
                          3: 28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl (hash: ahr9slYj2jlOgzsMAvaPHLU+gxpMKvYcePv47qRxvF4=)
                          4: 34352e3233392e37342e302f32332d3233203d3e20323638333535.roa (hash: 1isfo61GZF2mzPimmWN25j3nSCQYU80433KkRIbJc1s=)
                          5: 34352e3233392e37322e302f32322d3232203d3e20323638333535.roa (hash: Irtvtjw9Qn1ROshMlDhm83Na66r4xtEJQ5KfElKCj/0=)
                          6: 34352e3233392e37342e302f32342d3234203d3e20323638333535.roa (hash: Ow2VMl3N0uWYaasHq7yrM+aWOjjPSUtNQ6/TwMRQTz4=)
                          7: 34352e3233392e37332e302f32342d3234203d3e20323638333535.roa (hash: 8nLSYCsU/RguhB4raTXQB/UdGmMilCsobE34zpYNDlI=)
                          8: 323830343a346665303a3a2f33332d3333203d3e20323638333535.roa (hash: UJNsPzUGlFh3uo1vK3eQte0VyBK74waL1o+Je1X0+8k=)
                          9: 34352e3233392e37352e302f32342d3234203d3e20323638333535.roa (hash: RYW2qyUG1NHMaCSvOLymsJBIwIHtivxwWrAiV1hktWc=)
                          10: 34352e3233392e37322e302f32342d3234203d3e20323638333535.roa (hash: Ct5VU801pl/x69hQdUUaYoWlR+ugIyvMehViBYvWqsM=)
                          11: 34352e3233392e37322e302f32322d3332203d3e20313938393439.roa (hash: QhHBcgzwgektTva1wEMQkhEVRdv/pdT5zmZ0+cGwow8=)
                          12: 323830343a346665303a3a2f33322d3332203d3e20323638333535.roa (hash: 4GIAN6A0ztAgt+6zdfDVuh+yrYGA2FWm7BMrP7pPH78=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl
                          rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:15:c5:eb:83:f8:e4:ef:b5:13:6d:07:34:fa:f0:70:56:0c:57:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C
        Validity
            Not Before: Oct 20 02:08:18 2025 GMT
            Not After : Oct 21 05:24:18 2025 GMT
        Subject: CN=B11A217C8F0669A8A6036932344320EEFD5E047C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1a:b6:41:79:38:d0:c7:1e:c2:69:d7:a9:2a:
                    16:c2:00:10:69:c4:d9:e3:bb:3b:af:1e:49:db:0a:
                    8f:57:64:71:aa:b3:c7:10:6a:42:c5:2e:28:d1:97:
                    e9:74:aa:42:d6:a2:dc:02:f7:0b:16:64:60:ec:17:
                    6c:a6:6c:0c:48:d5:66:67:92:26:03:70:d3:0b:e8:
                    76:2d:c7:c1:46:a3:2e:87:aa:34:68:72:72:03:8d:
                    ab:fc:12:1d:cb:5d:58:a9:9f:00:db:19:ef:07:15:
                    27:4e:9d:de:5b:46:68:e9:e9:56:27:da:80:57:e4:
                    3b:a4:15:a8:ee:96:2f:03:7f:d3:b9:51:93:32:9d:
                    47:0f:8b:97:aa:dc:47:70:34:80:de:9c:47:a5:51:
                    33:2b:79:a9:bf:41:e5:7d:77:25:2f:e7:ea:d3:35:
                    b7:01:23:a6:35:07:d5:8f:08:52:aa:2a:1d:6d:4d:
                    e7:17:1d:97:92:94:da:89:62:c0:3b:1c:2d:12:1a:
                    b0:1c:a8:93:d5:31:01:5b:7d:b2:f3:09:48:da:57:
                    17:57:5f:84:94:84:b8:19:b1:92:5f:e2:e2:79:d9:
                    e1:0e:a0:46:94:d7:78:3a:cb:02:21:2c:19:3b:64:
                    59:fc:3f:5a:4b:27:25:0b:b7:67:91:2c:4a:62:5e:
                    c8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1A:21:7C:8F:06:69:A8:A6:03:69:32:34:43:20:EE:FD:5E:04:7C
            X509v3 Authority Key Identifier:
                keyid:28:F9:F9:FB:DF:48:9E:86:A2:CB:92:9A:47:E8:BC:0A:BC:2A:1B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:71:31:76:ea:07:75:53:c6:e6:86:f5:d5:ae:e5:05:22:ec:
         c6:bc:7d:01:86:0c:78:9f:0b:d6:7b:a2:35:f0:b1:c1:95:34:
         6d:a2:4b:60:ac:70:f7:bf:cd:e6:33:8b:37:5f:87:22:bd:88:
         d3:dd:e6:e2:4d:33:d7:52:cc:5e:2b:9e:ba:b5:82:06:f6:ea:
         44:94:52:91:6f:94:6f:9c:73:e3:96:46:d9:4a:0a:7d:1b:10:
         98:2f:a9:17:ff:5f:2e:b3:d8:ea:0c:f1:66:96:aa:d2:0d:99:
         80:51:2f:d5:23:45:cf:8a:f2:26:dd:99:a8:75:33:a4:9c:87:
         de:ef:59:ed:5f:98:f4:6d:bc:e1:f7:dc:a6:06:ae:12:cd:61:
         b3:96:54:f2:94:bc:49:f4:db:fb:79:c8:8f:35:88:3d:13:da:
         f2:f2:01:72:c4:24:14:73:1d:e3:b5:99:13:49:a2:4a:69:4b:
         e2:9c:bf:03:82:67:48:95:ba:89:32:e1:8f:a6:48:30:38:f4:
         01:64:d6:33:2e:37:99:99:8c:6f:bd:ea:e5:a3:d0:d4:44:c5:
         bd:99:bb:c7:2a:f5:85:18:98:6d:1f:81:d7:e3:3f:20:fc:60:
         4a:58:10:b5:5d:f4:3e:be:18:5b:a3:37:d6:06:a5:45:a7:16:
         fb:7d:be:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJBXF64P45O+1E20HNPrwcFYMV58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhGOUY5RkJERjQ4OUU4NkEyQ0I5MjlBNDdFOEJDMEFC
QzJBMUIxQzAeFw0yNTEwMjAwMjA4MThaFw0yNTEwMjEwNTI0MThaMDMxMTAvBgNV
BAMTKEIxMUEyMTdDOEYwNjY5QThBNjAzNjkzMjM0NDMyMEVFRkQ1RTA0N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbGrZBeTjQxx7CadepKhbCABBp
xNnjuzuvHknbCo9XZHGqs8cQakLFLijRl+l0qkLWotwC9wsWZGDsF2ymbAxI1WZn
kiYDcNML6HYtx8FGoy6HqjRocnIDjav8Eh3LXVipnwDbGe8HFSdOnd5bRmjp6VYn
2oBX5DukFajuli8Df9O5UZMynUcPi5eq3EdwNIDenEelUTMream/QeV9dyUv5+rT
NbcBI6Y1B9WPCFKqKh1tTecXHZeSlNqJYsA7HC0SGrAcqJPVMQFbfbLzCUjaVxdX
X4SUhLgZsZJf4uJ52eEOoEaU13g6ywIhLBk7ZFn8P1pLJyULt2eRLEpiXshlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUsRohfI8GaaimA2kyNEMg7v1eBHwwHwYDVR0j
BBgwFoAUKPn5+99Inoaiy5KaR+i8CrwqGxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJOVHdLVmRlblRSSzdkWFZQY0MzMVNwUnJUSFF5aXdFdnlYaFFVQll0
aTkvMC8yOEY5RjlGQkRGNDg5RTg2QTJDQjkyOUE0N0U4QkMwQUJDMkExQjFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4RjlGOUZCREY0ODlFODZB
MkNCOTI5QTQ3RThCQzBBQkMyQTFCMUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SHJOVHdLVmRlblRSSzdkWFZQY0MzMVNwUnJUSFF5aXdFdnlYaFFVQll0aTkvMC8y
OEY5RjlGQkRGNDg5RTg2QTJDQjkyOUE0N0U4QkMwQUJDMkExQjFDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlXExduoHdVPG5ob11a7lBSLsxrx9AYYMeJ8L1nuiNfCxwZU0baJLYKxw97/N
5jOLN1+HIr2I093m4k0z11LMXiueurWCBvbqRJRSkW+Ub5xz45ZG2UoKfRsQmC+p
F/9fLrPY6gzxZpaq0g2ZgFEv1SNFz4ryJt2ZqHUzpJyH3u9Z7V+Y9G284ffcpgau
Es1hs5ZU8pS8SfTb+3nIjzWIPRPa8vIBcsQkFHMd47WZE0miSmlL4py/A4JnSJW6
iTLhj6ZIMDj0AWTWMy43mZmMb73q5aPQ1ETFvZm7xyr1hRiYbR+B1+M/IPxgSlgQ
tV30Pr4YW6M31galRacW+32+0g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:40:22 2025 by rpki-client