Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
File:                     3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft (raw, json)
Hash identifier:          tpx/iYNLNs3wJhgdiR3/ND8rAbzsYonjtIThB4C4rDI=
Subject key identifier:   5C:1B:D7:A8:3D:47:27:D6:A1:9B:F0:A3:54:44:48:04:73:F4:90:3C
Authority key identifier: 3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Certificate issuer:       /CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
Certificate serial:       725ABE85B3EABC5178D87EBB89571C943271E67A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
Manifest number:          02EF
Signing time:             Sun 19 Oct 2025 17:40:00 +0000
Manifest this update:     Sun 19 Oct 2025 17:35:00 +0000
Manifest next update:     Mon 20 Oct 2025 20:50:00 +0000
Files and hashes:         1: 3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl (hash: LR5LnEMdpzRoJv+9odYd/6kF846Z5ugkxu+zEqtplaI=)
                          2: 323830343a353839343a633030303a3a2f33342d3334203d3e20323638313337.roa (hash: JVC/u3FRdrND4dm0UTY3BsYwshuc3phA3+UmF203Vjg=)
                          3: 34352e3136392e3230302e302f32342d3234203d3e20323638313337.roa (hash: 4cwBoGO5u7hU98/s5wTNDyZ1Fsf/hsPwm87bc/KCyUw=)
                          4: 34352e3136392e3230312e302f32342d3234203d3e20323638313337.roa (hash: X9NRdaPA/67Q3rg40/uJRlEJG3ESvFv49iLV4v0EXoI=)
                          5: 34352e3136392e3230322e302f32342d3234203d3e20323638313337.roa (hash: 8sE3+lB4qTVhhtM1NIU4VQWHMQtlI35NvIrHgZOfEwY=)
                          6: 323830343a353839343a343030303a3a2f33342d3334203d3e20323638313337.roa (hash: p1/VmojSdIc1qQpUP18UbyYfNp+p/paRq33apEp/AjE=)
                          7: 34352e3136392e3230302e302f32332d3233203d3e20323638313337.roa (hash: PqhuJKMxhknh/zSUWtlU58E7lJnTuQM0XRIQnd5fkWs=)
                          8: 34352e3136392e3230302e302f32322d3232203d3e20323638313337.roa (hash: FvWmITQ8RemY4i4QO5Cy/WeYmWvU4PgTXnv7ANkNIac=)
                          9: 34352e3136392e3230322e302f32332d3233203d3e20323638313337.roa (hash: +EmvEpwlzci+3qxsGRNVmMt9dMHW0tFOyBr4jcr9pKE=)
                          10: 323830343a353839343a3a2f33342d3334203d3e20323638313337.roa (hash: EsH33qZ0n5WHemEgPltsCizFjkzBHpHH/BQRdbVjCYU=)
                          11: 323830343a353839343a383030303a3a2f33342d3334203d3e20323638313337.roa (hash: ibpKzGLBhdMOnQXrZXah2wzdNkXLRH1QXQLXsrxUGUI=)
                          12: 323830343a353839343a3a2f33322d3332203d3e20323638313337.roa (hash: ZncDmcAcmVngk0k7rmyCWcOwvgcmWcP/2o1TDjTZmhw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl
                          rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 20:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5a:be:85:b3:ea:bc:51:78:d8:7e:bb:89:57:1c:94:32:71:e6:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Validity
            Not Before: Oct 19 17:35:00 2025 GMT
            Not After : Oct 20 20:50:00 2025 GMT
        Subject: CN=5C1BD7A83D4727D6A19BF0A35444480473F4903C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a6:ff:6c:22:6d:42:aa:39:1e:38:e5:d4:a7:
                    1a:6d:bd:da:fb:59:e8:69:93:b3:7d:c4:e1:dc:ee:
                    f4:96:08:d1:e5:97:ff:04:b1:01:28:b9:19:7f:9f:
                    09:53:c6:a2:15:6a:b9:62:8a:bd:30:c4:e5:5c:c7:
                    cb:2b:98:66:38:e5:b0:81:2f:b7:fb:5d:bb:78:8f:
                    e9:cf:d8:ef:f1:60:fd:5c:31:df:e7:4b:85:d8:ab:
                    35:58:54:5e:12:e4:c2:76:1c:9e:7a:8e:5a:37:27:
                    15:2e:fd:3a:8e:f2:55:da:2d:a8:43:69:03:01:76:
                    ae:6b:96:86:87:14:53:81:c3:dd:5a:53:43:92:5b:
                    43:19:dd:ba:74:cd:bc:96:37:7e:26:ff:fe:3c:05:
                    ed:2c:43:22:15:74:59:48:5f:f2:b1:f9:3a:1c:a5:
                    18:6a:3c:6b:23:f2:fd:ba:33:11:a0:ad:1e:00:d0:
                    8f:f8:2c:4f:ab:46:af:08:e5:25:2b:9d:6a:70:22:
                    8e:ff:e0:6a:3d:c4:63:a9:30:c4:1b:13:ed:65:10:
                    0d:71:aa:0e:53:3e:88:36:81:75:a2:9b:e8:d8:b2:
                    b0:3d:00:16:34:a7:4d:1b:16:72:04:0f:b1:37:5f:
                    e3:f9:96:94:c8:32:6f:b3:e8:73:4b:40:f2:36:50:
                    6a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1B:D7:A8:3D:47:27:D6:A1:9B:F0:A3:54:44:48:04:73:F4:90:3C
            X509v3 Authority Key Identifier:
                keyid:3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:63:10:25:42:40:23:b8:cc:5b:1d:75:6e:f6:db:86:c9:ad:
         68:e3:d0:9d:8c:e3:15:77:b4:0f:f7:8c:4b:78:e4:31:a3:0a:
         91:07:cb:35:48:ea:5f:a1:c5:14:5a:86:b4:31:32:45:56:f6:
         38:33:b9:ae:51:13:d9:cb:00:b9:eb:9c:13:eb:fe:e9:a9:13:
         7c:24:42:7b:0c:00:b4:e4:76:6e:7a:6e:f4:ad:ef:f9:f8:eb:
         89:55:98:e3:b2:5c:14:2c:85:8b:f8:0a:b9:02:ea:27:31:ad:
         0e:6f:35:51:88:ed:ff:71:4c:78:7d:cb:ea:ac:07:77:41:d0:
         b0:a3:2b:3e:e0:84:f4:5c:7e:89:33:47:06:f7:d5:3c:78:0c:
         d3:ed:eb:84:d9:54:89:58:79:66:d4:6d:ea:47:45:b7:9f:44:
         49:3e:ab:d5:e6:af:9a:50:7b:83:5a:7c:91:92:d8:78:57:12:
         85:e2:e0:54:ee:e1:db:71:97:de:15:dd:f7:55:dc:6e:43:84:
         ee:bf:33:a5:be:c2:8c:56:fc:cc:00:ef:12:2e:70:a8:ad:1d:
         61:3f:83:10:4f:e6:ee:32:76:28:0d:00:97:19:55:07:3a:b8:
         05:7b:8b:b0:9b:81:9c:de:95:5e:99:6f:a4:98:43:15:e5:1e:
         06:d3:f5:c4
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUclq+hbPqvFF42H67iVcclDJx5nowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0RDNjkwQzBERTgwMTMxQjIyM0JFRTcwRDdGNkZGOTkw
QTE1RjM0MTAeFw0yNTEwMTkxNzM1MDBaFw0yNTEwMjAyMDUwMDBaMDMxMTAvBgNV
BAMTKDVDMUJEN0E4M0Q0NzI3RDZBMTlCRjBBMzU0NDQ0ODA0NzNGNDkwM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1pv9sIm1CqjkeOOXUpxptvdr7
Wehpk7N9xOHc7vSWCNHll/8EsQEouRl/nwlTxqIVarliir0wxOVcx8srmGY45bCB
L7f7Xbt4j+nP2O/xYP1cMd/nS4XYqzVYVF4S5MJ2HJ56jlo3JxUu/TqO8lXaLahD
aQMBdq5rloaHFFOBw91aU0OSW0MZ3bp0zbyWN34m//48Be0sQyIVdFlIX/Kx+Toc
pRhqPGsj8v26MxGgrR4A0I/4LE+rRq8I5SUrnWpwIo7/4Go9xGOpMMQbE+1lEA1x
qg5TPog2gXWim+jYsrA9ABY0p00bFnIED7E3X+P5lpTIMm+z6HNLQPI2UGqTAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUXBvXqD1HJ9ahm/CjVERIBHP0kDwwHwYDVR0j
BBgwFoAUPcaQwN6AExsiO+5w1/b/mQoV80EwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KdVlMSFBkS1k1WTFwaEY1TW9xcVdCa00yVjVQQW9uYmtyY3VQdTJSZUgy
LzEvM0RDNjkwQzBERTgwMTMxQjIyM0JFRTcwRDdGNkZGOTkwQTE1RjM0MS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zREM2OTBDMERFODAxMzFCMjIz
QkVFNzBEN0Y2RkY5OTBBMTVGMzQxLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0p1
WUxIUGRLWTVZMXBoRjVNb3FxV0JrTTJWNVBBb25ia3JjdVB1MlJlSDIvMS8zREM2
OTBDMERFODAxMzFCMjIzQkVFNzBEN0Y2RkY5OTBBMTVGMzQxLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
FGMQJUJAI7jMWx11bvbbhsmtaOPQnYzjFXe0D/eMS3jkMaMKkQfLNUjqX6HFFFqG
tDEyRVb2ODO5rlET2csAueucE+v+6akTfCRCewwAtOR2bnpu9K3v+fjriVWY47Jc
FCyFi/gKuQLqJzGtDm81UYjt/3FMeH3L6qwHd0HQsKMrPuCE9Fx+iTNHBvfVPHgM
0+3rhNlUiVh5ZtRt6kdFt59EST6r1eavmlB7g1p8kZLYeFcSheLgVO7h23GX3hXd
91XcbkOE7r8zpb7CjFb8zADvEi5wqK0dYT+DEE/m7jJ2KA0AlxlVBzq4BXuLsJuB
nN6VXplvpJhDFeUeBtP1xA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:57:32 2025 by rpki-client