Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.mft
File:                     8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.mft (raw, json)
Hash identifier:          EPJj7KW8WRumhitcm/KB/hxAZ4+cVGPTW1mSqhoFwnU=
Subject key identifier:   DD:7A:5E:66:19:21:03:AD:D9:2D:DF:98:C7:13:48:31:C7:E5:1E:7E
Authority key identifier: 8D:03:06:C2:3F:F5:64:AF:54:B7:9D:8F:98:D0:DC:DD:C9:30:B2:1F
Certificate issuer:       /CN=8D0306C23FF564AF54B79D8F98D0DCDDC930B21F
Certificate serial:       0C725699FDE65D7C8138AE9DC3861D34288C3639
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.mft
Manifest number:          02FA
Signing time:             Mon 20 Oct 2025 00:40:17 +0000
Manifest this update:     Mon 20 Oct 2025 00:35:17 +0000
Manifest next update:     Tue 21 Oct 2025 04:29:17 +0000
Files and hashes:         1: 323830343a313838303a3a2f33322d3438203d3e203631393336.roa (hash: fNkBrLz/jvFOQO/KxVfV9h3dG8yXI+1zaqYHBVObJmU=)
                          2: 3230312e3135382e31322e302f32322d3332203d3e203631393336.roa (hash: q64U3XdQiM6WKtpCEo7j7fGKyfFwMLWBdU09Qk2x/B0=)
                          3: 3230312e3135382e382e302f32322d3332203d3e203631393336.roa (hash: WpZ5sUqhiJ0BMAFBVpd5yaa8cbE2gQgKDld3O0R9kZU=)
                          4: 8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.crl (hash: t6qgjC8ZOC74tMW4Dc+bqrcZINelGUfipamgFl7KCxo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.crl
                          rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:72:56:99:fd:e6:5d:7c:81:38:ae:9d:c3:86:1d:34:28:8c:36:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0306C23FF564AF54B79D8F98D0DCDDC930B21F
        Validity
            Not Before: Oct 20 00:35:17 2025 GMT
            Not After : Oct 21 04:29:17 2025 GMT
        Subject: CN=DD7A5E66192103ADD92DDF98C7134831C7E51E7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:94:61:65:93:27:92:9c:f0:cc:70:5f:31:40:
                    c7:6b:14:3d:54:49:20:ad:87:db:8a:35:0d:a6:b0:
                    1e:f8:4a:e3:20:0b:26:69:87:c7:e6:32:01:3b:3d:
                    49:e4:b1:2a:f3:53:6b:71:82:4b:ae:49:4b:14:13:
                    6a:3d:27:6a:b1:00:59:ff:d2:f1:87:38:d2:26:3e:
                    d5:ed:9b:20:71:b1:45:38:28:7a:61:06:01:34:e1:
                    14:06:b4:13:15:d3:b5:11:55:27:f1:ec:bf:c0:a4:
                    ce:3b:bd:cd:b5:0c:bd:dc:eb:e2:d3:21:cb:de:ea:
                    8c:4b:8a:7e:2b:b9:8f:d3:7b:99:20:ca:98:13:ea:
                    27:18:14:6b:26:10:c1:b2:ce:5e:a1:9f:d0:34:ac:
                    52:ea:ab:96:ef:d0:e0:0c:4e:29:c0:bd:ba:fc:a5:
                    8e:d4:95:4d:0a:8a:e2:ba:4b:65:20:6e:29:89:02:
                    ad:9b:c8:e9:8d:ba:62:68:4f:f7:72:f5:c0:68:b3:
                    ec:30:61:4a:1f:be:98:19:85:2a:48:46:24:fb:f4:
                    d5:f2:7d:a9:a0:ba:31:f3:9e:2f:71:1f:b4:78:af:
                    04:e0:4e:2a:20:96:72:94:4f:79:83:8b:08:cc:9b:
                    b6:8b:09:0c:03:f3:40:77:5f:d6:0e:38:9a:65:a5:
                    a1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7A:5E:66:19:21:03:AD:D9:2D:DF:98:C7:13:48:31:C7:E5:1E:7E
            X509v3 Authority Key Identifier:
                keyid:8D:03:06:C2:3F:F5:64:AF:54:B7:9D:8F:98:D0:DC:DD:C9:30:B2:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:d8:11:d8:51:84:06:ac:45:92:22:1c:cb:15:5d:72:fc:ad:
         61:a7:30:97:2b:9f:07:b7:8d:01:b4:d5:c2:bd:79:7f:00:4d:
         d3:ed:2c:05:91:ff:fb:38:56:04:1d:77:d7:9c:a8:7b:7e:77:
         da:2a:d9:27:c3:6b:c5:2a:26:0e:f0:1d:a8:bc:05:1c:66:52:
         3e:1e:3c:55:37:77:46:02:91:cd:15:53:fd:27:7c:55:d3:ba:
         3c:e8:e4:63:89:65:7a:2e:ee:bd:b3:e9:cf:15:4c:11:4a:30:
         5d:2e:c2:8f:29:c2:0e:14:73:b7:e0:43:7c:05:df:a2:63:54:
         d8:67:01:5b:3f:ce:66:11:db:28:b1:ce:4d:ce:dc:7e:66:e7:
         28:0a:4d:45:68:2a:b7:ad:a4:c3:35:40:24:08:48:ff:3a:9b:
         ec:74:9a:81:55:f2:99:69:06:0d:33:a8:da:d1:b2:3d:ff:30:
         37:04:3c:d7:76:2c:fb:cd:67:d5:7d:26:77:88:0d:48:32:d8:
         03:50:c8:61:6b:ac:a1:e5:1f:30:14:3e:d6:4a:e3:bc:8e:14:
         7b:c2:4f:a8:bc:04:03:eb:51:03:cb:a2:a9:97:92:f0:6c:5e:
         ab:cb:ca:7e:ec:39:ba:ac:d0:7a:10:0e:0b:6d:21:6d:86:ad:
         64:7c:6e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:05:05 2025 by rpki-client