Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft
File:                     43897DFF118E56C31A35958D9EA818504B130E11.mft (raw, json)
Hash identifier:          S7FIzCUWSXqrKzDZQlfgzkUenwjARt/qQEzGP2qVZ5g=
Subject key identifier:   34:AC:34:D1:2E:C9:2D:AB:B7:36:81:CE:B4:FC:25:07:78:3B:D6:D2
Authority key identifier: 43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11
Certificate issuer:       /CN=43897DFF118E56C31A35958D9EA818504B130E11
Certificate serial:       69833EF4EB1093CA9B217AEE5F55482EF22D1561
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft
Manifest number:          02E5
Signing time:             Tue 04 Nov 2025 15:01:05 +0000
Manifest this update:     Tue 04 Nov 2025 14:56:05 +0000
Manifest next update:     Wed 05 Nov 2025 15:50:05 +0000
Files and hashes:         1: 323830343a363935633a3a2f33322d3430203d3e20323730323635.roa (hash: 7dYPTrKAi61IYALwp4StVtHMzIcECDDN9J/7R5yuyAg=)
                          2: 43897DFF118E56C31A35958D9EA818504B130E11.crl (hash: 3nswMsam8Kh1cadcUCJqBVYZ4TlKC4gFOvS6wajeCMk=)
                          3: 3230302e3130382e3136342e302f32322d3234203d3e20323730323635.roa (hash: /O80p7I/BsID3L+7Tx/zgFUSWMrzsJTiDGJmySOhPvQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.crl
                          rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 15:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:83:3e:f4:eb:10:93:ca:9b:21:7a:ee:5f:55:48:2e:f2:2d:15:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43897DFF118E56C31A35958D9EA818504B130E11
        Validity
            Not Before: Nov  4 14:56:05 2025 GMT
            Not After : Nov  5 15:50:05 2025 GMT
        Subject: CN=34AC34D12EC92DABB73681CEB4FC2507783BD6D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:53:55:74:0d:57:70:33:05:a5:0d:12:d8:db:
                    b7:73:80:8c:98:c6:69:31:11:20:6a:e6:99:3b:58:
                    d7:ff:bc:75:7c:de:5e:ca:37:97:86:8a:12:9b:b0:
                    09:17:ef:94:81:1c:f4:4b:eb:bd:f2:a8:65:54:93:
                    31:80:01:43:9e:7a:67:e4:7d:91:d7:67:9e:ce:28:
                    7b:e6:4c:a1:56:22:6f:57:58:f3:a8:87:4d:3e:b0:
                    d5:fb:3b:05:b2:43:2d:62:b1:6f:c5:e7:02:77:63:
                    d8:63:05:e1:70:f5:b0:dd:18:47:bf:bf:b9:ee:60:
                    56:a2:af:56:a9:68:56:8e:b7:4b:0e:dc:f3:b7:47:
                    3f:b7:33:7b:b8:4b:3b:d9:d3:6c:f7:82:73:7d:8d:
                    1c:c1:92:bd:f8:15:f3:16:6b:20:f7:14:f3:c6:7a:
                    d2:5d:a2:04:29:aa:18:29:91:5e:d4:22:76:d5:98:
                    e1:da:02:e6:c2:d1:bb:0a:13:b1:bb:26:cd:b3:25:
                    e4:c5:c4:0c:43:79:94:84:70:d1:76:62:04:cf:bb:
                    35:6d:1a:60:8f:2a:bd:a8:95:58:3b:a0:dd:9b:02:
                    e7:3d:03:9f:fc:fd:2f:c1:f4:8b:d5:f8:3b:8b:a4:
                    e1:3b:0b:d2:06:60:6a:8a:c3:da:12:05:a1:84:70:
                    17:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AC:34:D1:2E:C9:2D:AB:B7:36:81:CE:B4:FC:25:07:78:3B:D6:D2
            X509v3 Authority Key Identifier:
                keyid:43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:02:1e:fe:bc:84:df:24:7e:0e:d7:b6:f4:a6:a1:38:0f:0b:
         46:c5:20:42:00:ed:d8:4e:0b:32:b3:41:37:a8:8c:cc:b8:4e:
         74:9b:67:e3:76:57:91:42:02:3d:14:a4:d0:a1:32:e1:c7:a8:
         73:d6:93:a5:41:4e:74:40:a2:2b:2d:45:a2:87:67:9c:57:0d:
         8e:8a:ee:95:14:0f:ae:7d:03:cf:3e:d9:84:92:b1:94:79:4c:
         c2:1d:46:04:76:08:99:2f:d3:05:2b:f4:07:ca:69:9d:80:92:
         b3:79:04:dc:88:b8:d2:ec:71:75:08:8c:70:2f:bd:49:4b:50:
         af:03:14:d8:17:a1:0f:03:c3:de:36:36:1b:77:06:e0:97:95:
         be:fe:64:8d:86:b5:f0:09:af:37:66:a3:c7:cc:79:ee:b3:44:
         a8:53:a7:da:d7:98:21:34:63:32:b6:01:bd:3b:68:6d:42:bf:
         27:e0:49:5e:8e:b2:05:83:ae:ee:c2:fb:55:d0:69:70:db:8f:
         aa:b8:a2:21:a5:54:43:39:68:6f:5e:ae:69:5b:da:12:5b:2c:
         88:97:fd:29:a2:3c:22:42:c0:47:73:7e:d6:2e:32:21:88:4c:
         66:c3:ce:e8:50:99:6c:c6:94:72:e0:30:a2:d8:0a:40:b6:6d:
         13:ec:cd:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaYM+9OsQk8qbIXruX1VILvItFWEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM4OTdERkYxMThFNTZDMzFBMzU5NThEOUVBODE4NTA0
QjEzMEUxMTAeFw0yNTExMDQxNDU2MDVaFw0yNTExMDUxNTUwMDVaMDMxMTAvBgNV
BAMTKDM0QUMzNEQxMkVDOTJEQUJCNzM2ODFDRUI0RkMyNTA3NzgzQkQ2RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhU1V0DVdwMwWlDRLY27dzgIyY
xmkxESBq5pk7WNf/vHV83l7KN5eGihKbsAkX75SBHPRL673yqGVUkzGAAUOeemfk
fZHXZ57OKHvmTKFWIm9XWPOoh00+sNX7OwWyQy1isW/F5wJ3Y9hjBeFw9bDdGEe/
v7nuYFair1apaFaOt0sO3PO3Rz+3M3u4SzvZ02z3gnN9jRzBkr34FfMWayD3FPPG
etJdogQpqhgpkV7UInbVmOHaAubC0bsKE7G7Js2zJeTFxAxDeZSEcNF2YgTPuzVt
GmCPKr2olVg7oN2bAuc9A5/8/S/B9IvV+DuLpOE7C9IGYGqKw9oSBaGEcBcLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNKw00S7JLau3NoHOtPwlB3g71tIwHwYDVR0j
BBgwFoAUQ4l9/xGOVsMaNZWNnqgYUEsTDhEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzlSM0NWdEVxZUdRRkRLM1I3QjVIZVZMajRhSFRxUXRVTTVyOFNWb2tp
ZTIvMC80Mzg5N0RGRjExOEU1NkMzMUEzNTk1OEQ5RUE4MTg1MDRCMTMwRTExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzODk3REZGMTE4RTU2QzMx
QTM1OTU4RDlFQTgxODUwNEIxMzBFMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MzlSM0NWdEVxZUdRRkRLM1I3QjVIZVZMajRhSFRxUXRVTTVyOFNWb2tpZTIvMC80
Mzg5N0RGRjExOEU1NkMzMUEzNTk1OEQ5RUE4MTg1MDRCMTMwRTExLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADwIe/ryE3yR+Dte29KahOA8LRsUgQgDt2E4LMrNBN6iMzLhOdJtn43ZXkUIC
PRSk0KEy4ceoc9aTpUFOdECiKy1FoodnnFcNjorulRQPrn0Dzz7ZhJKxlHlMwh1G
BHYImS/TBSv0B8ppnYCSs3kE3Ii40uxxdQiMcC+9SUtQrwMU2BehDwPD3jY2G3cG
4JeVvv5kjYa18AmvN2ajx8x57rNEqFOn2teYITRjMrYBvTtobUK/J+BJXo6yBYOu
7sL7VdBpcNuPqriiIaVUQzlob16uaVvaElssiJf9KaI8IkLAR3N+1i4yIYhMZsPO
6FCZbMaUcuAwotgKQLZtE+zNNA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:22:14 2025 by rpki-client