Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft
File:                     B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft (raw, json)
Hash identifier:          SRy6dqJgRpQzpLVBncjVWSjI2TRpkyBMGVrE/uDoEIg=
Subject key identifier:   69:7F:81:5F:BA:96:93:54:28:97:18:56:32:50:02:6D:5C:A1:93:56
Authority key identifier: B0:9A:72:F7:DA:A1:90:5E:0B:89:C7:D8:FE:A0:3D:3E:21:E8:53:91
Certificate issuer:       /CN=B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391
Certificate serial:       10318D0048D52C2FDBF477F7ADD0C2C8A8080EBF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft
Manifest number:          01CF
Signing time:             Wed 05 Nov 2025 06:56:46 +0000
Manifest this update:     Wed 05 Nov 2025 06:51:46 +0000
Manifest next update:     Thu 06 Nov 2025 08:14:46 +0000
Files and hashes:         1: 3138312e3233322e3133362e302f32322d3234203d3e20323731333535.roa (hash: D9QppqLT7H6n7AuxOU5w0IV2pGii6IfXWxzdnP2nz5E=)
                          2: B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.crl (hash: +amDUlRv66TDGGVUIVc0bEyU7Fm300tBYZ9hOBQUpuI=)
                          3: 323830343a376133343a3a2f33322d313238203d3e20323731333535.roa (hash: awRXTG5/JiTvuAiBImObhWf3ci5YbXEW5AqPL0+mqo8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.crl
                          rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 08:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:31:8d:00:48:d5:2c:2f:db:f4:77:f7:ad:d0:c2:c8:a8:08:0e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391
        Validity
            Not Before: Nov  5 06:51:46 2025 GMT
            Not After : Nov  6 08:14:46 2025 GMT
        Subject: CN=697F815FBA969354289718563250026D5CA19356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3c:84:b9:c4:73:ec:3d:9d:59:25:b3:39:26:
                    99:d0:4e:7d:54:46:6f:b7:18:50:0a:88:e7:ad:89:
                    35:00:37:85:ea:3d:99:64:f6:e3:e2:ce:97:9d:41:
                    2a:70:9e:fd:42:cc:4e:c9:bd:1f:6c:ce:5c:5c:c5:
                    ae:70:c8:82:42:76:74:b3:df:d8:c4:70:bc:5c:a8:
                    a5:b9:78:49:ea:4d:db:f0:70:a0:3e:7f:02:9e:56:
                    df:a7:43:bb:ee:b7:ef:85:4f:1c:47:f7:40:6b:5f:
                    25:83:d2:70:1a:c5:9d:7e:b3:63:fb:1f:f5:04:3a:
                    48:e8:51:cd:31:af:cb:e6:c2:20:19:65:08:21:cb:
                    ba:51:97:f1:7c:03:e9:e0:71:8f:4e:94:68:a8:76:
                    63:27:f1:fd:0b:61:2b:1f:07:46:04:80:e6:6c:ce:
                    70:8c:d8:15:c2:9d:0d:f9:28:92:af:b1:0b:5f:0e:
                    d1:5f:a6:5b:d2:bb:8b:95:04:7f:53:e1:ee:ab:24:
                    db:32:8f:4a:7e:d2:8c:d8:55:bb:07:6f:9d:ff:ab:
                    69:c9:49:98:af:34:ba:b1:60:f1:0c:44:1f:fd:0f:
                    d0:58:48:f1:c3:9b:fe:06:de:d6:ec:26:a3:5f:5f:
                    ca:0a:64:e6:e5:60:1c:81:4d:3d:38:63:53:d6:78:
                    20:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7F:81:5F:BA:96:93:54:28:97:18:56:32:50:02:6D:5C:A1:93:56
            X509v3 Authority Key Identifier:
                keyid:B0:9A:72:F7:DA:A1:90:5E:0B:89:C7:D8:FE:A0:3D:3E:21:E8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:48:d4:98:c6:a9:26:30:e7:54:bb:16:93:f3:e2:cf:87:4e:
         8b:a0:42:81:7c:6b:2f:e5:41:1a:52:85:89:27:2e:ea:28:e9:
         c6:36:42:e9:4b:e4:93:b1:ac:dc:3d:3c:21:e9:1f:77:d6:ea:
         b4:04:a6:b4:2f:b1:de:d2:fd:33:1d:81:f8:00:8b:76:1a:68:
         24:29:ab:08:45:07:e3:ce:e4:20:ce:54:ae:2c:d0:25:fd:c4:
         46:d1:ad:8b:d3:79:2a:b1:65:d3:45:80:3e:4a:52:12:d4:56:
         ae:53:c1:34:f4:cb:2c:e2:77:27:6c:ec:d9:c7:da:f2:d0:79:
         11:e9:dd:49:4a:0b:fd:80:f7:fa:f2:a2:56:c1:ad:9c:8b:50:
         76:c9:72:e4:7d:1b:14:1c:be:ea:68:87:2f:42:83:43:5c:76:
         52:a1:56:7d:bb:43:45:ec:b7:72:48:f7:a8:44:c1:65:3c:7f:
         48:f2:cd:cc:09:66:8f:99:af:6b:3d:54:fc:35:3e:90:27:ab:
         28:2c:ed:92:93:81:62:b2:ce:3a:fc:00:a7:a7:48:37:b8:c7:
         93:29:63:04:ad:29:13:47:a5:07:23:f8:51:0d:d4:5b:06:7d:
         6f:b4:1b:98:61:0d:f8:e2:98:41:ca:80:7f:5b:e6:97:1e:07:
         90:cf:63:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEDGNAEjVLC/b9Hf3rdDCyKgIDr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA5QTcyRjdEQUExOTA1RTBCODlDN0Q4RkVBMDNEM0Uy
MUU4NTM5MTAeFw0yNTExMDUwNjUxNDZaFw0yNTExMDYwODE0NDZaMDMxMTAvBgNV
BAMTKDY5N0Y4MTVGQkE5NjkzNTQyODk3MTg1NjMyNTAwMjZENUNBMTkzNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTPIS5xHPsPZ1ZJbM5JpnQTn1U
Rm+3GFAKiOetiTUAN4XqPZlk9uPizpedQSpwnv1CzE7JvR9szlxcxa5wyIJCdnSz
39jEcLxcqKW5eEnqTdvwcKA+fwKeVt+nQ7vut++FTxxH90BrXyWD0nAaxZ1+s2P7
H/UEOkjoUc0xr8vmwiAZZQghy7pRl/F8A+ngcY9OlGiodmMn8f0LYSsfB0YEgOZs
znCM2BXCnQ35KJKvsQtfDtFfplvSu4uVBH9T4e6rJNsyj0p+0ozYVbsHb53/q2nJ
SZivNLqxYPEMRB/9D9BYSPHDm/4G3tbsJqNfX8oKZOblYByBTT04Y1PWeCBLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUaX+BX7qWk1QolxhWMlACbVyhk1YwHwYDVR0j
BBgwFoAUsJpy99qhkF4LicfY/qA9PiHoU5EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNERzYjRyQ0F1YjE2ZFR6OHVtSlc4ZjV2dGRxNWpwbWpQTVBLazhWQWN0
VHgvMC9CMDlBNzJGN0RBQTE5MDVFMEI4OUM3RDhGRUEwM0QzRTIxRTg1MzkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwOUE3MkY3REFBMTkwNUUw
Qjg5QzdEOEZFQTAzRDNFMjFFODUzOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NERzYjRyQ0F1YjE2ZFR6OHVtSlc4ZjV2dGRxNWpwbWpQTVBLazhWQWN0VHgvMC9C
MDlBNzJGN0RBQTE5MDVFMEI4OUM3RDhGRUEwM0QzRTIxRTg1MzkxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ0jUmMapJjDnVLsWk/Piz4dOi6BCgXxrL+VBGlKFiScu6ijpxjZC6Uvkk7Gs
3D08Iekfd9bqtASmtC+x3tL9Mx2B+ACLdhpoJCmrCEUH487kIM5UrizQJf3ERtGt
i9N5KrFl00WAPkpSEtRWrlPBNPTLLOJ3J2zs2cfa8tB5EendSUoL/YD3+vKiVsGt
nItQdsly5H0bFBy+6miHL0KDQ1x2UqFWfbtDRey3ckj3qETBZTx/SPLNzAlmj5mv
az1U/DU+kCerKCztkpOBYrLOOvwAp6dIN7jHkyljBK0pE0elByP4UQ3UWwZ9b7Qb
mGEN+OKYQcqAf1vmlx4HkM9jXA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:49:13 2025 by rpki-client