Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.mft
File:                     36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.mft (raw, json)
Hash identifier:          z1zx/PhOq1n2PJ5VIbVApQfmdKF/aIAYkfMuP0D2Sj8=
Subject key identifier:   F6:54:AA:1C:68:C8:B2:75:B1:CD:99:CC:79:FE:20:3E:E7:EC:FB:DD
Authority key identifier: 36:AC:D4:4E:2E:3E:16:38:8F:A2:90:1E:5B:C9:BB:79:A8:81:BF:80
Certificate issuer:       /CN=36ACD44E2E3E16388FA2901E5BC9BB79A881BF80
Certificate serial:       0CEDE385CBA8F151F37F8598E1F0B9B5A6969446
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.mft
Manifest number:          1B
Signing time:             Sun 19 Oct 2025 16:58:22 +0000
Manifest this update:     Sun 19 Oct 2025 16:53:22 +0000
Manifest next update:     Mon 20 Oct 2025 20:39:22 +0000
Files and hashes:         1: 3136382e3138312e3130342e302f32322d3332203d3e20323635333334.roa (hash: Q8UBRh0hTfSCsd4RiacAAKcPqzHAfv45lX+zztg4Brw=)
                          2: 36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.crl (hash: RG7lkyN2YGP17t5tp0CifHnf5Uj04C5ca8Oo0+niYX8=)
                          3: 323830343a326533633a3a2f33322d313238203d3e20323635333334.roa (hash: QF8VQwARJKuaS0v6ROc9Wa6I26Qc9yQxM436sBW0P3o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.crl
                          rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 20:39:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ed:e3:85:cb:a8:f1:51:f3:7f:85:98:e1:f0:b9:b5:a6:96:94:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ACD44E2E3E16388FA2901E5BC9BB79A881BF80
        Validity
            Not Before: Oct 19 16:53:22 2025 GMT
            Not After : Oct 20 20:39:22 2025 GMT
        Subject: CN=F654AA1C68C8B275B1CD99CC79FE203EE7ECFBDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d0:e4:1b:d4:1a:f1:7d:38:a5:b7:ae:2c:cc:
                    d1:9d:fa:03:a2:a6:ba:76:93:49:05:84:6e:61:56:
                    2b:b7:86:f5:c4:f6:60:43:4e:bb:aa:b2:c7:0a:89:
                    8b:e8:b9:82:88:7f:83:8f:0b:17:c2:4c:ff:2f:aa:
                    9c:db:ae:b3:3a:2c:43:3c:0d:e4:1f:11:c8:a3:84:
                    70:ac:92:2a:4b:9f:47:26:da:dc:a0:f8:9c:7c:7b:
                    22:45:5e:d7:20:91:c3:02:2b:d5:f4:af:fc:24:96:
                    aa:87:b1:85:46:be:4c:88:4a:7a:95:ca:cf:ba:f1:
                    f7:64:ca:a1:5e:05:c2:5a:2a:84:ff:de:0f:6c:f1:
                    85:2b:f1:b8:a7:41:3f:e5:99:1b:1b:6a:80:72:48:
                    70:74:65:db:9a:27:3f:53:cf:49:bb:52:fb:65:e1:
                    fa:b4:b2:b2:dc:78:d9:e0:74:f7:06:4f:f4:53:23:
                    b9:20:fa:3f:a3:4b:95:9d:d8:01:8c:76:73:06:50:
                    e6:46:8b:b6:bc:87:a8:4a:3e:1e:7f:21:13:03:9d:
                    6b:b3:71:a5:66:25:f4:a2:dc:54:09:66:77:ea:b7:
                    0f:68:f8:5f:91:33:10:f8:49:42:ed:8d:39:56:e7:
                    22:db:39:b5:19:ad:08:69:cf:2f:e6:15:1b:3d:01:
                    0b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:54:AA:1C:68:C8:B2:75:B1:CD:99:CC:79:FE:20:3E:E7:EC:FB:DD
            X509v3 Authority Key Identifier:
                keyid:36:AC:D4:4E:2E:3E:16:38:8F:A2:90:1E:5B:C9:BB:79:A8:81:BF:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:86:8c:44:7f:04:c0:a6:2f:80:f9:42:1c:d8:ec:b0:47:3b:
         3e:14:b1:8e:f9:b1:cc:1d:ea:53:83:1a:f4:86:18:a2:c8:44:
         52:e3:41:5c:87:3e:79:d3:4b:75:89:7e:ce:f8:d7:2c:fd:15:
         3f:e1:f1:98:f7:a3:3a:ac:f9:60:77:d3:7a:11:22:8b:d4:a3:
         a7:e0:b1:93:4d:c5:21:dd:36:c6:13:7d:2d:39:73:17:94:b5:
         21:a5:00:0b:1a:80:c0:12:18:b3:23:f4:e7:5f:af:9b:7f:9b:
         29:31:38:79:91:01:6d:31:9a:38:29:04:9c:d6:47:dc:a3:22:
         aa:c5:1d:d6:02:26:97:06:9d:94:d1:bb:c0:33:85:59:a1:76:
         06:05:c0:05:d7:2c:6b:cc:32:19:10:7e:b8:f4:7d:7c:83:72:
         59:85:79:d3:ee:14:63:3e:cb:23:5b:43:83:98:54:ec:d6:7b:
         bb:05:3a:0c:28:75:9b:97:04:b4:68:ab:5e:dc:b4:97:43:42:
         a2:18:3f:70:06:4a:65:7b:fb:1b:8b:af:d3:0a:30:dc:f5:00:
         65:72:9b:dd:27:d7:47:a5:1d:b0:22:43:9d:56:ce:e3:3d:ca:
         56:fe:c2:8d:13:3e:54:b6:c0:5c:bd:09:83:f5:81:a9:4a:a9:
         41:92:f8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:17:46 2025 by rpki-client