Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.mft
File:                     BE068B06DE5C783A9921447A392452ED53F22837.mft (raw, json)
Hash identifier:          DI5Kkueq4HYto0Y6PtzrPpal8eS1kQ76G31uzrKDtsE=
Subject key identifier:   7D:47:DE:4E:54:F8:47:AC:32:96:0C:0E:B8:CE:35:B9:3B:C4:27:48
Authority key identifier: BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37
Certificate issuer:       /CN=BE068B06DE5C783A9921447A392452ED53F22837
Certificate serial:       68BBC3185D6791EEB467ACFB6AAF180AB05E7C9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.mft
Manifest number:          02AD
Signing time:             Wed 05 Nov 2025 04:38:23 +0000
Manifest this update:     Wed 05 Nov 2025 04:33:23 +0000
Manifest next update:     Thu 06 Nov 2025 06:01:23 +0000
Files and hashes:         1: 3137392e3139302e36342e302f31392d3234203d3e20323632343431.roa (hash: zsxR9VgQqwy55CrZQrl/xVkvXP5AfrQp+bxdufKz3ao=)
                          2: 3137392e3130362e3132382e302f32302d3234203d3e20323632343431.roa (hash: eiCBi8VqHNpC/9iGRGjG8ESWLMNop386uvSRuMGYccQ=)
                          3: 3137372e34342e3234302e302f32302d3234203d3e20323632343431.roa (hash: Gl6stIAf12ZE3t2sT420tJzIfvBwK7//8pAhtza4gKI=)
                          4: 323830313a38303a323830303a3a2f34302d3438203d3e20323632343431.roa (hash: Ie4OZm93/K9ULQ1FWrL9qUOVYg7X4qFltmZD3+T6LJc=)
                          5: BE068B06DE5C783A9921447A392452ED53F22837.crl (hash: X+ReUwTBwRl4shk6bxKREddXryqKr9K4OfoUYeFZiA0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.crl
                          rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 06:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:bb:c3:18:5d:67:91:ee:b4:67:ac:fb:6a:af:18:0a:b0:5e:7c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE068B06DE5C783A9921447A392452ED53F22837
        Validity
            Not Before: Nov  5 04:33:23 2025 GMT
            Not After : Nov  6 06:01:23 2025 GMT
        Subject: CN=7D47DE4E54F847AC32960C0EB8CE35B93BC42748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0f:95:cc:c7:56:3b:f5:3a:b7:a5:77:2d:80:
                    64:2e:39:4c:5e:5f:ea:ae:96:12:6b:4c:a5:e3:6a:
                    0b:c2:0f:c2:07:c1:0f:9a:95:f9:c7:c1:8b:66:ee:
                    02:c6:58:c4:e4:fe:a6:d5:5d:b0:d7:21:f5:f6:a4:
                    d1:90:16:74:65:63:a4:89:55:60:31:39:02:01:bd:
                    cf:30:34:2d:a4:95:f1:4c:39:3d:cb:9c:b8:a8:3c:
                    1e:93:39:5c:9b:c8:0b:9e:85:71:7f:32:fa:00:3d:
                    49:3d:82:c4:f3:bb:25:73:1a:36:99:df:3f:ff:03:
                    e5:9e:30:ae:19:54:be:e1:4b:9c:68:d6:5b:e0:fe:
                    90:af:c8:d8:3c:85:4a:b2:d5:db:7b:c4:45:96:d4:
                    06:c1:d3:2e:3c:25:51:2f:e1:68:07:01:94:34:ba:
                    e5:2d:d8:4a:9f:01:de:85:aa:b5:2f:2a:63:b4:57:
                    0f:42:9b:26:08:42:9e:7d:a2:27:4d:7e:c3:da:a5:
                    18:cc:da:54:30:1e:0f:44:db:76:a4:80:0b:5c:ac:
                    8c:9d:1d:b1:e0:50:e1:1a:b6:a5:96:b8:0e:82:43:
                    6b:83:60:c1:cb:9e:1c:5a:08:31:a2:e4:77:b8:ca:
                    09:b5:76:72:ba:6e:fc:ef:f7:94:48:70:b9:36:92:
                    72:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:47:DE:4E:54:F8:47:AC:32:96:0C:0E:B8:CE:35:B9:3B:C4:27:48
            X509v3 Authority Key Identifier:
                keyid:BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ee:59:26:50:fb:1a:29:5e:dd:58:9b:75:46:b9:6f:3e:ba:
         c2:75:da:48:ba:a7:6f:e2:67:f2:5d:86:22:f8:51:68:a4:70:
         7e:b6:f1:4b:54:eb:0e:45:95:30:ab:eb:40:7d:f0:ba:a9:06:
         0f:69:4a:ca:4a:34:79:2a:e6:f4:0c:3f:75:c4:25:63:24:fc:
         aa:94:cc:78:34:e9:e0:50:38:37:b0:9f:0c:1b:4e:81:8a:54:
         68:33:51:40:a4:6e:57:0e:6b:4e:74:af:6c:53:3d:a9:1c:84:
         43:f7:fd:0e:8e:b3:7b:7b:8e:a7:12:bc:10:cc:b4:e3:da:5c:
         4c:a1:72:cb:82:e7:03:47:2e:2d:06:00:25:3f:af:9f:75:c5:
         ad:d7:d5:ec:42:f5:8c:e1:25:ad:2c:3c:c3:c3:42:5a:26:ac:
         cd:57:55:5f:69:3b:83:63:d2:b1:69:70:a0:87:e0:b9:fc:41:
         58:64:59:9d:c5:52:9e:eb:88:f0:34:45:e1:b8:5f:ce:cc:91:
         ef:ac:04:aa:49:7c:a0:5f:f8:66:fb:55:cc:2a:a1:a0:bb:9e:
         46:ce:d3:ad:66:25:cf:f6:a5:5b:07:4b:84:10:af:9f:41:88:
         db:fb:54:ad:2c:bf:eb:7b:4d:43:f6:40:45:dd:04:e2:a4:ee:
         ff:31:0d:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaLvDGF1nke60Z6z7aq8YCrBefJowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkUwNjhCMDZERTVDNzgzQTk5MjE0NDdBMzkyNDUyRUQ1
M0YyMjgzNzAeFw0yNTExMDUwNDMzMjNaFw0yNTExMDYwNjAxMjNaMDMxMTAvBgNV
BAMTKDdENDdERTRFNTRGODQ3QUMzMjk2MEMwRUI4Q0UzNUI5M0JDNDI3NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJD5XMx1Y79Tq3pXctgGQuOUxe
X+qulhJrTKXjagvCD8IHwQ+alfnHwYtm7gLGWMTk/qbVXbDXIfX2pNGQFnRlY6SJ
VWAxOQIBvc8wNC2klfFMOT3LnLioPB6TOVybyAuehXF/MvoAPUk9gsTzuyVzGjaZ
3z//A+WeMK4ZVL7hS5xo1lvg/pCvyNg8hUqy1dt7xEWW1AbB0y48JVEv4WgHAZQ0
uuUt2EqfAd6FqrUvKmO0Vw9CmyYIQp59oidNfsPapRjM2lQwHg9E23akgAtcrIyd
HbHgUOEatqWWuA6CQ2uDYMHLnhxaCDGi5He4ygm1dnK6bvzv95RIcLk2knJPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUfUfeTlT4R6wylgwOuM41uTvEJ0gwHwYDVR0j
BBgwFoAUvgaLBt5ceDqZIUR6OSRS7VPyKDcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3VIcmU3RXdNeExnN05aVWU3b0hneXNDYXdvZjJXbzhLc2ZCTjFDVTRB
VncvMS9CRTA2OEIwNkRFNUM3ODNBOTkyMTQ0N0EzOTI0NTJFRDUzRjIyODM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFMDY4QjA2REU1Qzc4M0E5
OTIxNDQ3QTM5MjQ1MkVENTNGMjI4MzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M3VIcmU3RXdNeExnN05aVWU3b0hneXNDYXdvZjJXbzhLc2ZCTjFDVTRBVncvMS9C
RTA2OEIwNkRFNUM3ODNBOTkyMTQ0N0EzOTI0NTJFRDUzRjIyODM3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaO5ZJlD7Gile3VibdUa5bz66wnXaSLqnb+Jn8l2GIvhRaKRwfrbxS1TrDkWV
MKvrQH3wuqkGD2lKyko0eSrm9Aw/dcQlYyT8qpTMeDTp4FA4N7CfDBtOgYpUaDNR
QKRuVw5rTnSvbFM9qRyEQ/f9Do6ze3uOpxK8EMy049pcTKFyy4LnA0cuLQYAJT+v
n3XFrdfV7EL1jOElrSw8w8NCWiaszVdVX2k7g2PSsWlwoIfgufxBWGRZncVSnuuI
8DRF4bhfzsyR76wEqkl8oF/4ZvtVzCqhoLueRs7TrWYlz/alWwdLhBCvn0GI2/tU
rSy/63tNQ/ZARd0E4qTu/zENmw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:37:53 2025 by rpki-client