Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.mft
File:                     09B86DF2675EE46F17CF5F43330433E2F22C8432.mft (raw, json)
Hash identifier:          WAw9wdoJxFfjbF7mGn1e5WHhk5bcYMqRMWfei/d8gDI=
Subject key identifier:   A8:D3:78:B7:3E:AE:8F:55:8F:0A:16:0F:CD:35:A8:70:08:BA:4C:A7
Authority key identifier: 09:B8:6D:F2:67:5E:E4:6F:17:CF:5F:43:33:04:33:E2:F2:2C:84:32
Certificate issuer:       /CN=09B86DF2675EE46F17CF5F43330433E2F22C8432
Certificate serial:       1249316EE3C6F0AE11CE16FC182803B0610DE7A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B86DF2675EE46F17CF5F43330433E2F22C8432.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.mft
Manifest number:          01A3
Signing time:             Tue 04 Nov 2025 07:26:40 +0000
Manifest this update:     Tue 04 Nov 2025 07:21:40 +0000
Manifest next update:     Wed 05 Nov 2025 11:21:40 +0000
Files and hashes:         1: 323830343a323234633a3a2f33322d3438203d3e20323632373639.roa (hash: BDbkIOTo1z+rcsqGg8AzmzwEnhj4V4/lYattEazDYSg=)
                          2: 09B86DF2675EE46F17CF5F43330433E2F22C8432.crl (hash: suRIHJ6CE2NoDAFIu9LatKnKOGwow3VcDTT/o/I5iDI=)
                          3: 3137372e3132342e3136342e302f32322d3234203d3e20323632373639.roa (hash: fIX1rsqkrEcxfwHxtTnwZrhQYl82JOUf5vdma4FSDSQ=)
                          4: 3136382e3138312e3135362e302f32322d3234203d3e20323632373639.roa (hash: hsUqcBtrggzHi8XWKiDT4v+VWmLmwqE/MP++GHfCjxs=)
                          5: 3137372e37332e37362e302f32322d3234203d3e20323632373639.roa (hash: okRSgm6tTpjxTkb9wnxtgrY0N5qGE6icPVw38aY+vUE=)
                          6: 3138362e3233322e35362e302f32322d3234203d3e20323632373639.roa (hash: eQtF15LjNj6FDZHZkElJh6Yb4+GcGCOJMj782JJ6GaU=)
                          7: 3137372e3135352e3134342e302f32302d3234203d3e20323632373639.roa (hash: PuvRBmtSfW019bAKsmUe0+rTNxuXw1pFP0looDysGEw=)
                          8: 3137372e3132382e39362e302f32312d3234203d3e20323632373639.roa (hash: 9cmwa/EjIHXq9mMNpoYQR4n5fw0qKo7hhSMP7U2r66M=)
                          9: 3133382e35392e39322e302f32322d3234203d3e20323632373639.roa (hash: zNH2DTIGS/EMjzSeq1+poV5vX3CbHq/oe6HfJIa6Sww=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.crl
                          rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B86DF2675EE46F17CF5F43330433E2F22C8432.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 11:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:49:31:6e:e3:c6:f0:ae:11:ce:16:fc:18:28:03:b0:61:0d:e7:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B86DF2675EE46F17CF5F43330433E2F22C8432
        Validity
            Not Before: Nov  4 07:21:40 2025 GMT
            Not After : Nov  5 11:21:40 2025 GMT
        Subject: CN=A8D378B73EAE8F558F0A160FCD35A87008BA4CA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:86:ed:67:01:ed:62:4a:4f:93:eb:75:c7:ab:
                    f5:7b:33:34:7b:14:6e:d5:ce:45:c0:40:34:29:1b:
                    af:12:aa:76:8f:41:aa:54:55:63:55:ae:7b:4d:63:
                    ef:0e:a3:27:38:be:84:52:c0:9e:27:ab:fd:8e:13:
                    58:94:bb:f3:04:0b:55:a8:7c:f7:ba:cf:6d:77:ed:
                    8b:e8:91:69:f1:92:15:15:93:a5:30:f4:00:9f:fa:
                    1f:83:9a:54:e9:ad:6d:8f:be:14:48:87:a0:52:ba:
                    58:11:07:dc:b7:c0:02:12:8d:8f:03:27:47:98:98:
                    81:c2:e1:41:09:6b:20:73:7d:84:ef:02:f9:67:a7:
                    ca:14:d6:df:0f:56:ae:67:06:88:68:bd:38:ba:be:
                    22:ad:42:09:df:64:be:4b:de:23:e6:d7:48:2e:1e:
                    07:de:01:a7:d9:02:d8:78:bb:01:17:1f:2b:1f:70:
                    ab:77:bf:cc:b2:97:1e:f6:5f:ac:ad:47:7e:c8:7c:
                    17:90:03:a9:02:7e:df:a4:ee:ae:17:10:ea:a1:2b:
                    07:f6:92:df:85:2b:a3:d0:f9:35:f1:07:93:10:5a:
                    0c:2e:01:61:cf:43:b3:44:5d:fd:55:de:8f:4c:4b:
                    ca:bf:de:0f:02:b2:d6:aa:2a:c9:16:31:96:a1:bf:
                    57:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D3:78:B7:3E:AE:8F:55:8F:0A:16:0F:CD:35:A8:70:08:BA:4C:A7
            X509v3 Authority Key Identifier:
                keyid:09:B8:6D:F2:67:5E:E4:6F:17:CF:5F:43:33:04:33:E2:F2:2C:84:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B86DF2675EE46F17CF5F43330433E2F22C8432.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:62:8e:56:c7:fd:45:a0:a2:de:00:54:87:7d:7b:16:82:81:
         15:74:27:04:0e:1e:56:31:f5:26:fe:20:d7:d7:37:2c:d2:8d:
         d8:3c:ef:1f:93:50:27:55:7a:51:f7:40:df:8f:83:ca:5b:a9:
         a5:36:9c:9a:55:eb:46:a3:b6:33:bf:8f:cc:49:e8:c7:fb:a1:
         5c:a4:7e:5f:db:8f:b9:55:b0:55:e6:02:be:c2:2a:07:50:ac:
         85:98:24:66:f1:de:cd:29:b7:15:0b:19:29:16:a2:41:1f:71:
         ca:c6:bf:35:ae:88:26:64:62:65:08:ac:f0:ab:8c:33:78:df:
         f5:bb:12:dc:b9:88:cc:8a:ff:dd:9d:34:2d:54:db:51:81:2b:
         64:b7:0f:28:87:82:2d:e0:d2:05:69:fc:1b:5b:5e:e0:5d:df:
         9e:04:42:af:b4:d9:e5:2a:a1:ac:34:74:6b:93:0b:1b:35:87:
         a2:85:64:e0:f1:c5:a0:db:24:ac:e0:5d:a4:ed:8a:d5:4e:e0:
         de:d9:3d:4b:81:42:21:31:08:3c:66:e5:88:17:78:4c:f4:7f:
         a9:73:6b:8f:0c:99:0b:b3:4a:92:01:58:84:b6:49:4c:c9:62:
         d6:15:62:92:4e:25:6b:74:96:84:33:fb:7d:ce:0a:6d:ce:1a:
         e2:a1:04:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEkkxbuPG8K4Rzhb8GCgDsGEN56MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlCODZERjI2NzVFRTQ2RjE3Q0Y1RjQzMzMwNDMzRTJG
MjJDODQzMjAeFw0yNTExMDQwNzIxNDBaFw0yNTExMDUxMTIxNDBaMDMxMTAvBgNV
BAMTKEE4RDM3OEI3M0VBRThGNTU4RjBBMTYwRkNEMzVBODcwMDhCQTRDQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hu1nAe1iSk+T63XHq/V7MzR7
FG7VzkXAQDQpG68SqnaPQapUVWNVrntNY+8Ooyc4voRSwJ4nq/2OE1iUu/MEC1Wo
fPe6z2137YvokWnxkhUVk6Uw9ACf+h+DmlTprW2PvhRIh6BSulgRB9y3wAISjY8D
J0eYmIHC4UEJayBzfYTvAvlnp8oU1t8PVq5nBohovTi6viKtQgnfZL5L3iPm10gu
HgfeAafZAth4uwEXHysfcKt3v8yylx72X6ytR37IfBeQA6kCft+k7q4XEOqhKwf2
kt+FK6PQ+TXxB5MQWgwuAWHPQ7NEXf1V3o9MS8q/3g8CstaqKskWMZahv1clAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUqNN4tz6uj1WPChYPzTWocAi6TKcwHwYDVR0j
BBgwFoAUCbht8mde5G8Xz19DMwQz4vIshDIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFFyeVhxUDlYcTRDVFJxNFMydkdIWWZwQmFkUEJ6dDhScTJNVEN5NGRW
S3QvMC8wOUI4NkRGMjY3NUVFNDZGMTdDRjVGNDMzMzA0MzNFMkYyMkM4NDMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5Qjg2REYyNjc1RUU0NkYx
N0NGNUY0MzMzMDQzM0UyRjIyQzg0MzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NFFyeVhxUDlYcTRDVFJxNFMydkdIWWZwQmFkUEJ6dDhScTJNVEN5NGRWS3QvMC8w
OUI4NkRGMjY3NUVFNDZGMTdDRjVGNDMzMzA0MzNFMkYyMkM4NDMyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoGKOVsf9RaCi3gBUh317FoKBFXQnBA4eVjH1Jv4g19c3LNKN2DzvH5NQJ1V6
UfdA34+DyluppTacmlXrRqO2M7+PzEnox/uhXKR+X9uPuVWwVeYCvsIqB1CshZgk
ZvHezSm3FQsZKRaiQR9xysa/Na6IJmRiZQis8KuMM3jf9bsS3LmIzIr/3Z00LVTb
UYErZLcPKIeCLeDSBWn8G1te4F3fngRCr7TZ5SqhrDR0a5MLGzWHooVk4PHFoNsk
rOBdpO2K1U7g3tk9S4FCITEIPGbliBd4TPR/qXNrjwyZC7NKkgFYhLZJTMli1hVi
kk4la3SWhDP7fc4Kbc4a4qEEcQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:19:22 2025 by rpki-client