Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.mft
File:                     749E21CDD000362F14CB5C6E5B975EFE08776886.mft (raw, json)
Hash identifier:          bXdYM7ahnbiSYSLPTvlBP8G0BtJUqb1LbzS3JnmguBw=
Subject key identifier:   7D:A0:62:A0:EE:86:44:D5:2B:49:15:1D:6F:5A:90:0E:69:43:9A:11
Authority key identifier: 74:9E:21:CD:D0:00:36:2F:14:CB:5C:6E:5B:97:5E:FE:08:77:68:86
Certificate issuer:       /CN=749E21CDD000362F14CB5C6E5B975EFE08776886
Certificate serial:       255D376766D2C3AB305CBBBE21FDC7D68D8C2D83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.mft
Manifest number:          020E
Signing time:             Wed 05 Nov 2025 05:12:46 +0000
Manifest this update:     Wed 05 Nov 2025 05:07:46 +0000
Manifest next update:     Thu 06 Nov 2025 05:17:46 +0000
Files and hashes:         1: 3137302e38312e3130302e302f32322d3331203d3e203631363138.roa (hash: klxIkq24dC06dQqQrVmYzW4DdcPrBS3GBKnOhaGAkYQ=)
                          2: 323830343a333736633a3a2f33322d3336203d3e203631363138.roa (hash: sA2O8uiPk/s1EPSiPdzofX2q8DADpRoryw5dLYbynGM=)
                          3: AS61618.asa (hash: MxJE1Jup65iItrtyYAJAIUO1QK8S5KSOsOEt6bm3qQ4=)
                          4: 749E21CDD000362F14CB5C6E5B975EFE08776886.crl (hash: pns7/lv8mFze1ri+dWitXL/zlI09NIUQ28Ar+iyQsU0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.crl
                          rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 05:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5d:37:67:66:d2:c3:ab:30:5c:bb:be:21:fd:c7:d6:8d:8c:2d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749E21CDD000362F14CB5C6E5B975EFE08776886
        Validity
            Not Before: Nov  5 05:07:46 2025 GMT
            Not After : Nov  6 05:17:46 2025 GMT
        Subject: CN=7DA062A0EE8644D52B49151D6F5A900E69439A11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:12:9a:03:48:ed:df:40:10:91:1c:76:91:14:
                    ea:be:18:1c:95:69:f7:c3:c5:09:fd:49:0f:a7:ab:
                    ba:00:e1:f7:ac:2e:21:c9:a3:80:dd:10:26:bb:28:
                    f8:a4:22:83:8a:21:d5:86:cb:9a:8b:1c:67:f8:8f:
                    34:17:78:9a:dc:37:55:4a:9d:2f:83:e0:0d:8d:32:
                    cc:44:e1:cb:53:d7:8b:fe:74:62:4b:ed:10:6e:61:
                    02:4e:aa:58:9f:e1:61:6a:36:89:3a:be:dd:53:2f:
                    c7:8a:01:d2:47:3c:57:86:92:b7:b9:7d:23:ec:ba:
                    b0:22:7d:82:7d:cd:ed:63:a1:1d:20:ee:e8:81:74:
                    04:7d:21:f2:6a:0d:f0:95:e9:da:8e:a5:49:a2:78:
                    13:07:e4:fe:72:48:7a:20:e5:31:fc:80:e1:cb:43:
                    6b:89:c4:59:ff:6b:b4:ae:64:60:64:ae:ad:52:17:
                    0f:f7:e9:69:f1:28:0d:83:ae:7e:39:b5:fb:f4:4d:
                    27:72:f6:6a:c7:0b:cf:ca:1e:c5:c4:49:50:c3:4c:
                    ad:51:ff:0f:4d:ff:7e:13:ee:d2:48:f2:a5:6e:f5:
                    24:62:0f:7e:b2:90:e2:57:74:94:2b:3b:e5:f4:7c:
                    e3:6e:80:40:77:25:17:45:72:78:81:5d:03:a3:0d:
                    cb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A0:62:A0:EE:86:44:D5:2B:49:15:1D:6F:5A:90:0E:69:43:9A:11
            X509v3 Authority Key Identifier:
                keyid:74:9E:21:CD:D0:00:36:2F:14:CB:5C:6E:5B:97:5E:FE:08:77:68:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:95:f5:0f:7e:21:d9:3f:e6:f7:6d:17:47:14:5a:e1:dd:92:
         35:3f:d8:35:55:b5:40:c4:01:9f:cf:b6:73:bb:2c:8d:1f:a6:
         1d:39:ea:d8:c3:18:8d:ce:78:6f:37:bc:b1:d4:81:fd:df:04:
         84:1e:01:57:2c:5f:75:36:27:08:5a:89:64:29:aa:0e:b3:2b:
         3e:cb:ef:d4:15:69:85:18:b5:b0:7c:50:40:24:ee:d4:2f:3e:
         5f:3c:67:65:56:48:bb:21:54:d4:75:3b:6c:c2:34:3b:76:a1:
         1a:61:ac:da:19:9d:4f:07:17:eb:ed:36:89:23:17:9d:42:4c:
         70:0f:e2:8f:b3:f8:1e:cc:9c:e2:36:3e:4e:d5:5e:9c:e4:46:
         92:e6:1d:ac:9f:32:ea:43:73:15:aa:54:3e:cf:57:07:71:76:
         bd:84:c7:97:53:f4:6e:1f:d4:1f:87:38:52:4c:5a:d6:f9:03:
         34:f4:1d:09:04:12:50:1d:cb:5f:dd:72:f0:9a:0b:b4:be:73:
         e6:5c:49:1b:49:40:93:64:8c:d3:ab:55:4d:d5:ee:e7:c8:9f:
         7a:16:ce:15:4a:55:e2:63:05:7a:35:68:02:b6:07:4f:23:53:
         0e:cb:af:20:1a:12:c8:83:0e:8e:d8:81:98:0a:42:27:f1:06:
         e2:a9:18:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:58:04 2025 by rpki-client