Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4gbLmi6tRwS1koS6sa825BABAfeniStfrJ68prrgTh9d/0/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.mft
File:                     D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.mft (raw, json)
Hash identifier:          ylkX0yrIjEZeWG/+dAt76OzPkVHAv/tzPxPJ8akVW+U=
Subject key identifier:   65:C5:66:76:3D:9E:E9:12:8A:10:BF:FE:47:33:39:58:90:16:FD:16
Authority key identifier: D4:A1:B9:1A:99:31:97:A3:CE:71:A9:BE:B7:08:52:A5:C2:F3:03:7A
Certificate issuer:       /CN=D4A1B91A993197A3CE71A9BEB70852A5C2F3037A
Certificate serial:       3D4359466D94DE7BD63737EB521E0F3A8F647611
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4gbLmi6tRwS1koS6sa825BABAfeniStfrJ68prrgTh9d/0/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.mft
Manifest number:          0C
Signing time:             Tue 04 Nov 2025 20:35:37 +0000
Manifest this update:     Tue 04 Nov 2025 20:30:37 +0000
Manifest next update:     Wed 05 Nov 2025 21:06:37 +0000
Files and hashes:         1: D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.crl (hash: z63VV/oEVfkgTSL570uhZQqOwTE3zYMg6g8gauCJJ/I=)
                          2: 323830343a393236383a3a2f33322d313238203d3e20323734373039.roa (hash: rEuc4lsgPPD3i+4ht/oVW+K1az6MnIpffkS/CwB3gJg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4gbLmi6tRwS1koS6sa825BABAfeniStfrJ68prrgTh9d/0/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.crl
                          rsync://rpki-repo.registro.br/repo/4gbLmi6tRwS1koS6sa825BABAfeniStfrJ68prrgTh9d/0/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 21:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:43:59:46:6d:94:de:7b:d6:37:37:eb:52:1e:0f:3a:8f:64:76:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4A1B91A993197A3CE71A9BEB70852A5C2F3037A
        Validity
            Not Before: Nov  4 20:30:37 2025 GMT
            Not After : Nov  5 21:06:37 2025 GMT
        Subject: CN=65C566763D9EE9128A10BFFE473339589016FD16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7f:56:42:0f:eb:69:69:9d:ae:b0:83:d8:2c:
                    3e:1e:2c:7a:91:53:1c:4d:ab:46:e2:c8:fd:bd:5e:
                    97:ae:64:75:00:59:f2:68:15:25:fe:f4:58:e2:30:
                    d2:34:48:8e:57:ac:89:bd:e7:73:93:17:67:c3:ff:
                    c7:f7:33:33:5e:73:99:97:8f:24:4a:65:75:04:97:
                    0d:42:02:5f:88:c4:e0:74:7d:bd:6a:d2:76:96:9d:
                    e3:1d:93:df:43:2a:96:f4:7a:5b:0a:3e:c9:5e:ae:
                    c1:53:23:f3:0c:97:95:2d:e0:73:33:80:0e:c0:68:
                    0e:41:94:f6:d7:63:95:a5:f0:64:a4:7e:e5:6b:b7:
                    fb:80:10:05:48:f5:40:2f:10:03:f6:4e:6f:a4:d8:
                    dc:a4:cd:6f:ff:c0:9b:76:99:e9:d2:63:3c:90:5f:
                    c2:7a:81:7a:17:ca:b6:15:6a:a2:a7:7c:75:7d:ee:
                    20:60:2f:db:f5:1b:02:0e:f3:13:27:a6:1b:ab:81:
                    6d:ec:46:3a:4e:3a:c1:c1:70:60:b3:46:09:b0:7b:
                    98:01:51:83:2d:df:02:02:44:d7:e6:be:6b:f4:e5:
                    ce:9a:73:37:5f:9b:d1:e0:c7:09:b0:96:66:7b:d2:
                    9e:ba:46:53:b8:59:84:7b:8f:d6:4d:8d:38:c4:f1:
                    3e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C5:66:76:3D:9E:E9:12:8A:10:BF:FE:47:33:39:58:90:16:FD:16
            X509v3 Authority Key Identifier:
                keyid:D4:A1:B9:1A:99:31:97:A3:CE:71:A9:BE:B7:08:52:A5:C2:F3:03:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4gbLmi6tRwS1koS6sa825BABAfeniStfrJ68prrgTh9d/0/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gbLmi6tRwS1koS6sa825BABAfeniStfrJ68prrgTh9d/0/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:1f:62:aa:1f:55:eb:5b:15:92:ef:be:95:24:8e:de:2b:64:
         b6:93:c3:e0:64:3a:30:c5:8b:aa:23:b9:52:8a:e1:65:d4:f4:
         21:85:ed:db:c8:a1:eb:48:58:cd:25:f4:4c:86:54:68:55:23:
         1b:6b:c1:7a:4b:c1:6c:70:a9:cc:f8:29:b2:97:6f:27:73:05:
         4b:9e:81:19:8c:5f:dc:f9:56:b6:ff:7d:f3:8d:7f:7a:56:78:
         ff:e1:15:71:cc:38:fc:ee:59:28:94:76:03:90:d4:1c:a1:0f:
         6f:9c:fe:b6:10:c4:9c:62:35:84:1f:7c:44:9a:d1:ea:04:59:
         33:33:cb:bd:46:75:2d:37:62:53:37:87:0b:90:3d:b8:80:41:
         93:db:54:ee:10:e0:76:4b:82:d1:a2:e6:d0:75:90:c5:b4:7e:
         e2:81:58:78:94:f8:81:1d:7c:9d:a1:6f:84:de:b3:53:e3:09:
         9e:60:c2:33:20:21:2b:2c:06:f2:fa:32:d4:cf:05:e7:6d:3d:
         ff:7c:e2:c9:6d:91:2b:65:73:37:0d:ca:90:39:fd:af:d7:2d:
         ef:3e:eb:a2:36:63:0e:43:b7:ab:b4:2f:8b:f9:e6:5c:c9:c7:
         d2:82:68:9d:c8:51:27:19:ed:85:90:13:4e:a7:74:13:5e:aa:
         23:c6:ec:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:23:55 2025 by rpki-client