Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.mft
File:                     BB28C577DF924111463D0D089EB3700DB6333A08.mft (raw, json)
Hash identifier:          mrWqQVvqF61hK08BZgsiOzbGKE1CBaiI9aPid3DtZ5Y=
Subject key identifier:   D6:6E:84:0F:F1:3E:3E:24:02:D4:04:95:ED:90:CC:34:1F:5C:33:00
Authority key identifier: BB:28:C5:77:DF:92:41:11:46:3D:0D:08:9E:B3:70:0D:B6:33:3A:08
Certificate issuer:       /CN=BB28C577DF924111463D0D089EB3700DB6333A08
Certificate serial:       016302AD1A45849BA7C52D50B32D8685D7A69929
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.mft
Manifest number:          018A
Signing time:             Tue 04 Nov 2025 22:44:32 +0000
Manifest this update:     Tue 04 Nov 2025 22:39:32 +0000
Manifest next update:     Thu 06 Nov 2025 01:15:32 +0000
Files and hashes:         1: 323830343a373633303a3a2f33322d3332203d3e20323731303935.roa (hash: kOaelJSbrawNGUj8SHViCcp4NpZdOn1Ab0xJJJsOHrU=)
                          2: 3137392e34382e3138342e302f32322d3232203d3e20323731303935.roa (hash: mf5kOnGLinzLoK2P/Age80BdVk/qTly4H6v3aFtSNSc=)
                          3: 3137392e34382e3138372e302f32342d3234203d3e20323731303935.roa (hash: SavhPxPE5Lyf7T0B4MpwnGMSqHRjb2lI5Yxz3msUeYc=)
                          4: 3137392e34382e3138352e302f32342d3234203d3e20323731303935.roa (hash: qwQzXDvA/TR6rEcBF3MKa/9LCG7ymfe1c48+OCzzsOE=)
                          5: 3137392e34382e3138342e302f32342d3234203d3e20323731303935.roa (hash: rxXWlnG9uSrzj/oTEfd1aQfeZWUr6LNsK2YLrN23yqg=)
                          6: BB28C577DF924111463D0D089EB3700DB6333A08.crl (hash: PRCdtAJvpP6UktAML4sJ/lG+QrvvnJ0Yp3oh5JCYmnI=)
                          7: 3137392e34382e3138362e302f32342d3234203d3e20323731303935.roa (hash: 3k9Wk5BftPyULW/+XZwhH81s3yMlae2T/feE4Z166ZI=)
                          8: 3137392e34382e3138342e302f32332d3233203d3e20323731303935.roa (hash: hkmXaAW54tx3D58QrdDkfMXZVkhFpkSCBOUaBNTviWk=)
                          9: 323830343a373633303a3a2f33332d3333203d3e20323731303935.roa (hash: rMLm5hkY3lLZTv23WMtyompaxAN9MdvbPHahAcydOtI=)
                          10: 3137392e34382e3138362e302f32332d3233203d3e20323731303935.roa (hash: UK1FVjUUS4NN95+sbBGz7vOGXmhAugdySF3Yo3LFggk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.crl
                          rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 01:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:63:02:ad:1a:45:84:9b:a7:c5:2d:50:b3:2d:86:85:d7:a6:99:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB28C577DF924111463D0D089EB3700DB6333A08
        Validity
            Not Before: Nov  4 22:39:32 2025 GMT
            Not After : Nov  6 01:15:32 2025 GMT
        Subject: CN=D66E840FF13E3E2402D40495ED90CC341F5C3300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:81:4d:9c:4a:55:3d:4f:f7:04:58:c7:ea:a0:
                    47:a6:f1:ed:4a:65:43:22:22:de:62:58:5d:84:e7:
                    dd:f9:de:a7:73:13:f3:70:67:4b:62:e9:86:f9:55:
                    6a:b4:df:31:0b:cd:ff:62:9c:07:83:1d:7e:ec:ea:
                    6d:59:6e:6d:09:38:ed:9a:e8:d2:65:09:9e:de:2f:
                    08:67:f7:d6:8f:b6:19:9e:09:2e:29:3c:83:fb:ea:
                    60:b9:d9:b7:d3:c1:7a:8e:3d:bd:a9:f3:d5:f8:2d:
                    fb:d4:62:20:c4:ca:d3:59:35:39:db:dd:3b:27:2a:
                    6b:3c:a1:59:72:07:c1:dc:8a:16:44:dd:f1:72:60:
                    f6:95:a2:57:79:c6:36:57:7f:ce:3e:fd:49:1d:66:
                    71:cb:db:5a:74:a1:05:b5:4f:49:73:a2:a7:bb:c0:
                    6f:4e:3e:7f:cf:4c:20:63:66:95:ca:8e:c3:21:f9:
                    a7:fe:e3:8d:62:8f:c8:cf:af:83:69:56:51:53:fc:
                    55:80:fd:d5:d0:28:15:1c:ff:4e:e9:29:9e:88:ee:
                    35:34:fa:e7:ce:23:a3:15:07:81:37:df:90:35:44:
                    d7:c7:55:f4:59:af:9b:85:cb:e9:43:5f:93:12:98:
                    80:8b:2f:e5:1d:75:89:77:57:e3:1e:0b:b6:c3:32:
                    59:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6E:84:0F:F1:3E:3E:24:02:D4:04:95:ED:90:CC:34:1F:5C:33:00
            X509v3 Authority Key Identifier:
                keyid:BB:28:C5:77:DF:92:41:11:46:3D:0D:08:9E:B3:70:0D:B6:33:3A:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:bb:b4:6e:f8:50:cc:ed:d9:bd:b4:0c:56:84:34:e9:6a:e7:
         97:b3:ea:87:f8:70:6a:cb:a9:ef:c3:58:77:e6:8d:43:40:11:
         51:af:b5:eb:d9:6d:1f:1f:c2:d3:90:d3:44:95:8b:37:5c:fd:
         d0:ad:8a:18:80:e8:93:ef:0a:b8:04:4d:d0:4e:78:06:03:70:
         d5:16:bb:ff:a8:f2:ef:cd:29:4f:18:60:2e:86:21:d4:8f:94:
         fe:26:40:af:9d:d9:92:02:93:63:15:9a:eb:c5:b7:1d:e4:db:
         06:04:7f:23:bb:98:a9:1a:f5:54:cf:ca:3f:18:30:74:99:39:
         4b:1a:ec:29:ae:3e:6f:ee:c9:5b:81:9d:3b:c6:d4:96:57:aa:
         07:15:72:d9:e0:6d:59:bc:18:60:f4:ce:b0:fe:b6:aa:c6:be:
         29:ec:c9:65:63:0c:73:7d:63:a6:4a:94:f9:9d:67:83:5a:f5:
         fd:91:2a:4b:a5:c6:ee:39:4f:c5:a7:2a:8a:31:05:ec:83:4f:
         cf:ff:7a:ca:1b:29:44:f8:c1:b3:09:b3:25:c5:c0:46:e8:90:
         b6:f8:63:dc:1c:62:8e:48:b2:48:52:5b:94:33:78:39:36:d5:
         a0:04:fe:c5:ec:4f:f3:d3:55:08:95:22:4d:bc:b3:84:77:3b:
         1b:24:e9:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAWMCrRpFhJunxS1Qsy2GhdemmSkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIyOEM1NzdERjkyNDExMTQ2M0QwRDA4OUVCMzcwMERC
NjMzM0EwODAeFw0yNTExMDQyMjM5MzJaFw0yNTExMDYwMTE1MzJaMDMxMTAvBgNV
BAMTKEQ2NkU4NDBGRjEzRTNFMjQwMkQ0MDQ5NUVEOTBDQzM0MUY1QzMzMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxgU2cSlU9T/cEWMfqoEem8e1K
ZUMiIt5iWF2E59353qdzE/NwZ0ti6Yb5VWq03zELzf9inAeDHX7s6m1Zbm0JOO2a
6NJlCZ7eLwhn99aPthmeCS4pPIP76mC52bfTwXqOPb2p89X4LfvUYiDEytNZNTnb
3TsnKms8oVlyB8HcihZE3fFyYPaVold5xjZXf84+/UkdZnHL21p0oQW1T0lzoqe7
wG9OPn/PTCBjZpXKjsMh+af+441ij8jPr4NpVlFT/FWA/dXQKBUc/07pKZ6I7jU0
+ufOI6MVB4E335A1RNfHVfRZr5uFy+lDX5MSmICLL+UddYl3V+MeC7bDMllxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1m6ED/E+PiQC1ASV7ZDMNB9cMwAwHwYDVR0j
BBgwFoAUuyjFd9+SQRFGPQ0InrNwDbYzOggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEhWS2JzaG9RVnVGR2pmZWdrSFNDazJOMkhIbzVic2hYelFNZTNHYmNO
WUcvMC9CQjI4QzU3N0RGOTI0MTExNDYzRDBEMDg5RUIzNzAwREI2MzMzQTA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCMjhDNTc3REY5MjQxMTE0
NjNEMEQwODlFQjM3MDBEQjYzMzNBMDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEhWS2JzaG9RVnVGR2pmZWdrSFNDazJOMkhIbzVic2hYelFNZTNHYmNOWUcvMC9C
QjI4QzU3N0RGOTI0MTExNDYzRDBEMDg5RUIzNzAwREI2MzMzQTA4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW7u0bvhQzO3ZvbQMVoQ06Wrnl7Pqh/hwasup78NYd+aNQ0ARUa+169ltHx/C
05DTRJWLN1z90K2KGIDok+8KuARN0E54BgNw1Ra7/6jy780pTxhgLoYh1I+U/iZA
r53ZkgKTYxWa68W3HeTbBgR/I7uYqRr1VM/KPxgwdJk5SxrsKa4+b+7JW4GdO8bU
lleqBxVy2eBtWbwYYPTOsP62qsa+KezJZWMMc31jpkqU+Z1ng1r1/ZEqS6XG7jlP
xacqijEF7INPz/96yhspRPjBswmzJcXARuiQtvhj3BxijkiySFJblDN4OTbVoAT+
xexP89NVCJUiTbyzhHc7GyTpDg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:12:08 2025 by rpki-client