Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
File:                     03981ED1B457034CCBAC00F384454B3A021E294E.mft (raw, json)
Hash identifier:          oqRqu0/Kpmtmx8K18YepBurAEm+v5DolUBWhRN7aPfA=
Subject key identifier:   33:59:C5:F9:AF:D0:05:6B:2A:A5:21:36:CB:EB:BA:EB:CB:5C:E5:01
Authority key identifier: 03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E
Certificate issuer:       /CN=03981ED1B457034CCBAC00F384454B3A021E294E
Certificate serial:       104A3CA5406132CA4C3BEA7E97516DE630F2AF0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
Manifest number:          0304
Signing time:             Wed 05 Nov 2025 04:22:32 +0000
Manifest this update:     Wed 05 Nov 2025 04:17:32 +0000
Manifest next update:     Thu 06 Nov 2025 06:32:32 +0000
Files and hashes:         1: 323830343a3137303a3a2f33322d3332203d3e203238313331.roa (hash: 1rGuIDzWKdjZ8sfNRuNpir5rQPE8te1SMicTdAZMSHU=)
                          2: 323830343a3137303a343930303a3a2f34302d3430203d3e203238313331.roa (hash: 51gh5cZvKcku/HTCN3fV9dVatQeeJSDnbxCgtyYWsmE=)
                          3: 3136372e3234392e3131322e302f32322d3234203d3e203238313331.roa (hash: 1e1SPcAYyTs/4zRRsl9Nm8a/dhbju6PGdFzy/xxo8BU=)
                          4: 3137302e302e3234302e302f32322d3234203d3e203238313331.roa (hash: HKbLS7E+Az6NGi4/iA6D4cS57BiWvM5NlPyC844QPL8=)
                          5: 323830343a3137303a343430303a3a2f34302d3430203d3e203238313331.roa (hash: MIP4Ct7Qyn5a6eX6N12gAe7wtTAtwUTqEAsb/1llNfM=)
                          6: 323830343a3137303a343330303a3a2f34302d3430203d3e203238313331.roa (hash: YDLbq6/nkVVu74XQcp7zVk8Cwt/9A79mVa60Ys2rVrQ=)
                          7: 3133382e302e3139322e302f32322d3234203d3e203238313331.roa (hash: MWVxqT61yiEzzjMFTCposX7gtE+sEQ7wd0IdrYcsZ9Q=)
                          8: 3138362e3230382e3232342e302f32302d3234203d3e203238313331.roa (hash: nJEBpBK1Y4aLUQIWVqdqrcvZIS6tSwnE500dFXpgXrM=)
                          9: 03981ED1B457034CCBAC00F384454B3A021E294E.crl (hash: dZWHnBrWm2gybvOd+vZVTXpQyMYdCWQSk0rBwUZox0M=)
                          10: 323830343a3137303a343830303a3a2f34302d3430203d3e203238313331.roa (hash: F6mWoNxivsjy49EpdLR1loouYSZizuLjad8AnzE3j0o=)
                          11: 3137302e38312e3137362e302f32322d3234203d3e203238313331.roa (hash: JXSG2lFnsu0PgtPridDb9NXhPAdDzZRlfq4SjRqbuJg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl
                          rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 06:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:4a:3c:a5:40:61:32:ca:4c:3b:ea:7e:97:51:6d:e6:30:f2:af:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03981ED1B457034CCBAC00F384454B3A021E294E
        Validity
            Not Before: Nov  5 04:17:32 2025 GMT
            Not After : Nov  6 06:32:32 2025 GMT
        Subject: CN=3359C5F9AFD0056B2AA52136CBEBBAEBCB5CE501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:78:14:a8:75:40:db:ea:20:80:55:99:5a:
                    6c:47:e7:f9:ce:8a:4d:e8:69:1b:3b:f0:81:e7:9f:
                    df:f8:a0:25:bf:7f:d0:fb:70:0b:f5:d2:5a:7c:79:
                    cc:8d:da:d7:4c:15:07:ad:76:89:6e:de:e7:71:c8:
                    e0:83:b4:06:77:23:c7:d7:92:1e:71:81:e2:16:47:
                    c7:34:68:08:81:52:8b:3e:68:b8:ab:b7:58:14:1d:
                    08:fa:74:ec:47:21:1a:2e:c1:3e:49:95:86:bc:c4:
                    c0:92:9d:4b:a5:df:8d:f5:50:25:92:b0:a9:9d:fc:
                    b9:fd:ea:02:54:04:32:1c:35:90:85:41:17:ac:05:
                    07:34:81:ef:31:e7:da:46:98:2a:e6:15:53:5a:d0:
                    dd:62:fe:4f:46:13:1d:46:f4:85:bd:c8:f6:42:79:
                    92:85:1e:d1:82:b4:c5:51:de:3a:2a:75:1a:65:ac:
                    9c:3e:46:ee:cc:76:aa:5f:17:6e:a4:c6:5e:33:6e:
                    e1:13:d8:ec:97:83:b2:79:da:ab:85:3f:aa:6e:ac:
                    0c:c0:59:31:bc:2b:7c:bc:a2:2a:5a:99:c6:ea:5d:
                    66:86:6e:5b:82:d0:ed:5a:81:bf:db:24:57:1f:ba:
                    78:45:7f:da:d0:7b:2a:ac:6c:6d:59:b2:7e:3a:2e:
                    46:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:59:C5:F9:AF:D0:05:6B:2A:A5:21:36:CB:EB:BA:EB:CB:5C:E5:01
            X509v3 Authority Key Identifier:
                keyid:03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:e8:3e:a6:d0:16:3e:fc:96:09:47:3a:2a:6a:96:ca:ff:65:
         de:e6:50:8b:23:bc:39:93:16:b1:8a:98:b9:ac:c5:22:c8:11:
         69:11:a9:b0:0d:08:5f:4e:5f:1b:59:56:fa:b0:28:e3:bc:97:
         57:5a:4f:9f:30:b0:75:be:bd:1c:b5:16:57:d0:97:02:c3:fb:
         c0:d0:35:bd:1a:d8:6f:45:d7:9b:cf:81:00:14:57:46:16:ff:
         76:1d:e2:cd:83:23:a5:86:0b:e4:7e:04:a3:8d:d1:9d:cf:ce:
         18:51:ee:31:25:8b:22:83:d4:87:dd:41:e3:0f:ae:1c:b7:01:
         50:91:ae:dc:e5:4a:b2:6e:35:54:79:04:c7:87:29:d5:e1:d4:
         95:3a:08:42:73:ce:a5:b0:8f:43:4e:eb:14:c9:74:53:bc:d0:
         ec:a6:c9:ea:18:0b:28:87:73:cc:ce:74:0b:99:69:3d:0f:4e:
         19:ad:ab:0f:f8:b7:a4:ec:f8:80:1d:ed:a7:77:49:c5:c6:c8:
         0d:cb:70:80:96:bb:11:bb:93:b8:56:a5:74:0e:a2:e3:ab:a5:
         43:7b:48:a3:61:e9:7d:48:9f:5c:45:2f:55:1d:a1:8d:1e:c6:
         01:36:53:e2:6c:1d:ea:1d:65:8d:a4:a4:1c:74:e9:11:b7:d9:
         59:97:94:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:39:47 2025 by rpki-client