Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.mft
File:                     7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.mft (raw, json)
Hash identifier:          YEge3IP4/s/9plzNj1Js31+OJwWJw1yOKu9ONOTWQOQ=
Subject key identifier:   36:24:00:31:EF:09:42:68:38:AF:56:BA:EA:4B:A2:59:D5:51:A8:7B
Authority key identifier: 7C:0C:EB:BA:D1:3A:69:AA:7C:9B:AD:74:9E:C4:E6:9A:AE:4D:43:CD
Certificate issuer:       /CN=7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD
Certificate serial:       75075E6DF794637D108CCA24E288D171C9962138
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.mft
Manifest number:          02F0
Signing time:             Tue 04 Nov 2025 12:47:23 +0000
Manifest this update:     Tue 04 Nov 2025 12:42:23 +0000
Manifest next update:     Wed 05 Nov 2025 14:30:23 +0000
Files and hashes:         1: 323830343a383736383a3a2f33322d3438203d3e20323732373037.roa (hash: Gf6kRHE/BYttRO2gxXuE06CMuXfyfOfoTiE+t1hg/KU=)
                          2: 7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.crl (hash: mkI2S20wAVXPyojIXjE1DARDWcAdS7XzjJPJZyPNFDc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.crl
                          rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 14:30:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:07:5e:6d:f7:94:63:7d:10:8c:ca:24:e2:88:d1:71:c9:96:21:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD
        Validity
            Not Before: Nov  4 12:42:23 2025 GMT
            Not After : Nov  5 14:30:23 2025 GMT
        Subject: CN=36240031EF09426838AF56BAEA4BA259D551A87B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3f:0d:d9:23:cf:bf:33:59:69:7b:13:35:83:
                    ca:b3:64:08:71:53:f0:2b:51:85:d9:81:13:5d:08:
                    03:ce:1d:e5:a6:e4:aa:57:57:cf:86:64:0b:31:ae:
                    60:94:0c:3e:8f:f2:9d:3b:1b:2e:60:01:d7:a4:cc:
                    09:d5:25:cb:76:e4:ca:c4:56:96:7b:c8:73:9d:54:
                    e7:e9:32:d4:13:cb:c2:f5:5b:cc:5e:24:5b:ea:0b:
                    ca:f2:9f:04:df:cb:6b:b2:67:10:e4:09:20:6b:1c:
                    5c:54:01:00:ad:c3:40:d5:59:2d:6e:12:16:80:1f:
                    f6:c4:9d:ee:4b:06:63:74:31:be:ba:0b:95:db:6f:
                    83:f2:a7:47:25:2f:83:0d:70:62:e7:9a:35:45:03:
                    b0:0d:45:2a:11:34:08:5b:fd:e7:18:44:cb:98:4a:
                    f1:50:0b:98:ee:ae:cb:5b:bb:18:be:8b:c6:53:a0:
                    24:16:3c:a1:db:88:e6:f7:31:29:9d:87:44:94:21:
                    9b:be:81:ae:09:9e:59:e8:7c:cb:59:7c:e3:14:61:
                    3f:ec:32:f7:a7:8b:28:d4:5b:43:fd:d3:44:95:da:
                    e4:23:c9:a1:03:a2:e6:46:66:82:5b:c8:cf:81:f8:
                    6b:27:ea:12:a3:76:fc:b6:8f:bd:24:f7:18:33:7f:
                    0e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:24:00:31:EF:09:42:68:38:AF:56:BA:EA:4B:A2:59:D5:51:A8:7B
            X509v3 Authority Key Identifier:
                keyid:7C:0C:EB:BA:D1:3A:69:AA:7C:9B:AD:74:9E:C4:E6:9A:AE:4D:43:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:21:7c:93:65:fe:c7:b1:44:0f:f2:78:1d:13:0d:30:7e:17:
         ff:0a:2f:d8:48:47:ed:01:04:9e:42:1f:d2:46:02:5d:48:9f:
         fc:c1:77:0b:34:44:f6:98:5f:67:61:cf:d1:12:2e:6c:18:0c:
         73:e2:bf:61:c7:be:b3:2c:e2:23:7c:cb:23:d4:23:5f:4d:09:
         ed:87:7f:44:cb:b8:46:46:01:e7:77:e3:e1:8b:0e:b2:c1:6a:
         99:de:4c:4f:8d:2f:d2:16:27:2e:29:24:cb:9d:e2:24:0d:68:
         2e:ce:c0:34:d6:95:8f:95:a5:29:e7:33:63:92:ae:ff:f3:6c:
         15:d5:fe:1c:9f:c5:69:e5:6e:15:18:6c:06:d0:d1:aa:db:54:
         00:2e:a7:73:fa:3a:4a:a0:5e:00:06:96:84:14:e2:b8:c7:ff:
         d8:be:4e:b8:05:e8:a8:14:18:21:cb:06:a4:38:ef:dd:08:dc:
         f6:53:64:40:7e:ce:88:5b:bf:43:c1:70:ee:ee:5f:84:80:65:
         4e:9b:52:c7:31:a7:e9:67:a6:7d:72:d8:0f:75:fa:b6:1e:7c:
         50:8f:ab:a7:37:7f:d1:49:2d:71:aa:ad:e4:b7:03:bb:52:fc:
         40:2b:1a:1e:81:f2:6d:ca:2f:c0:e5:b1:ad:32:78:d9:41:c9:
         50:89:3b:85
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdQdebfeUY30QjMok4ojRccmWITgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0MwQ0VCQkFEMTNBNjlBQTdDOUJBRDc0OUVDNEU2OUFB
RTRENDNDRDAeFw0yNTExMDQxMjQyMjNaFw0yNTExMDUxNDMwMjNaMDMxMTAvBgNV
BAMTKDM2MjQwMDMxRUYwOTQyNjgzOEFGNTZCQUVBNEJBMjU5RDU1MUE4N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyPw3ZI8+/M1lpexM1g8qzZAhx
U/ArUYXZgRNdCAPOHeWm5KpXV8+GZAsxrmCUDD6P8p07Gy5gAdekzAnVJct25MrE
VpZ7yHOdVOfpMtQTy8L1W8xeJFvqC8rynwTfy2uyZxDkCSBrHFxUAQCtw0DVWS1u
EhaAH/bEne5LBmN0Mb66C5Xbb4Pyp0clL4MNcGLnmjVFA7ANRSoRNAhb/ecYRMuY
SvFQC5jurstbuxi+i8ZToCQWPKHbiOb3MSmdh0SUIZu+ga4JnlnofMtZfOMUYT/s
MveniyjUW0P900SV2uQjyaEDouZGZoJbyM+B+Gsn6hKjdvy2j70k9xgzfw6hAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNiQAMe8JQmg4r1a66kuiWdVRqHswHwYDVR0j
BBgwFoAUfAzrutE6aap8m610nsTmmq5NQ80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzY4UDZvOUVib3hBajRRR3pDaWZYWVMxejZ0cWRhVDFmUFd2SkNldEpi
UmQvMC83QzBDRUJCQUQxM0E2OUFBN0M5QkFENzQ5RUM0RTY5QUFFNEQ0M0NELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDMENFQkJBRDEzQTY5QUE3
QzlCQUQ3NDlFQzRFNjlBQUU0RDQzQ0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MzY4UDZvOUVib3hBajRRR3pDaWZYWVMxejZ0cWRhVDFmUFd2SkNldEpiUmQvMC83
QzBDRUJCQUQxM0E2OUFBN0M5QkFENzQ5RUM0RTY5QUFFNEQ0M0NELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAESF8k2X+x7FED/J4HRMNMH4X/wov2EhH7QEEnkIf0kYCXUif/MF3CzRE9phf
Z2HP0RIubBgMc+K/Yce+syziI3zLI9QjX00J7Yd/RMu4RkYB53fj4YsOssFqmd5M
T40v0hYnLikky53iJA1oLs7ANNaVj5WlKeczY5Ku//NsFdX+HJ/FaeVuFRhsBtDR
qttUAC6nc/o6SqBeAAaWhBTiuMf/2L5OuAXoqBQYIcsGpDjv3Qjc9lNkQH7OiFu/
Q8Fw7u5fhIBlTptSxzGn6WemfXLYD3X6th58UI+rpzd/0Uktcaqt5LcDu1L8QCsa
HoHybcovwOWxrTJ42UHJUIk7hQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:53:01 2025 by rpki-client