Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft
File:                     5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft (raw, json)
Hash identifier:          Jn08PG85kgzSwnAg7p7oUPrvlzWK8GjoZr9NJcondgM=
Subject key identifier:   00:E3:9C:F0:D5:60:40:AB:5B:20:A9:25:CF:F3:84:E7:74:CC:9E:95
Authority key identifier: 5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31
Certificate issuer:       /CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31
Certificate serial:       5F45C6EBD8FF0AE86F65EDD0DDA2EFE4A8CE8C74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft
Manifest number:          029A
Signing time:             Wed 05 Nov 2025 00:23:20 +0000
Manifest this update:     Wed 05 Nov 2025 00:18:20 +0000
Manifest next update:     Thu 06 Nov 2025 03:59:20 +0000
Files and hashes:         1: 3136382e3139362e3130342e302f32322d3234203d3e20323635343531.roa (hash: bm12g2NtqddE/K8ln3akRM5TUAz6D/tgPeBexY7J5sY=)
                          2: 5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl (hash: L8RjLvBljZiTTjkOBFsR3FlQwI12e9huNZmoGYXHeyw=)
                          3: 323830343a333435343a323030303a3a2f33352d3335203d3e20323635343531.roa (hash: lWPWAMy2NkMXHq4ex2mIrGhd7zdCsxdT6sdhk5ThXO0=)
                          4: 323830343a333435343a3a2f33322d3334203d3e20323635343531.roa (hash: r3bCeQ3Va1xBObYctOhmI8el+yMJ561eA1zNaJrdc6A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl
                          rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 03:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:45:c6:eb:d8:ff:0a:e8:6f:65:ed:d0:dd:a2:ef:e4:a8:ce:8c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31
        Validity
            Not Before: Nov  5 00:18:20 2025 GMT
            Not After : Nov  6 03:59:20 2025 GMT
        Subject: CN=00E39CF0D56040AB5B20A925CFF384E774CC9E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c6:26:46:f5:df:0f:47:52:3d:32:04:3c:0a:
                    0f:16:6f:d6:2e:fc:9f:0b:c2:83:21:ca:97:32:48:
                    74:63:50:08:a0:f8:8e:43:6b:6a:47:76:8a:5d:f6:
                    1a:14:2a:8f:9b:ab:f7:c4:ea:f7:48:bf:57:0a:db:
                    cc:54:57:b0:70:01:8b:ff:5e:fc:d7:f6:88:3d:85:
                    76:7a:7e:f7:71:ca:15:38:8d:9f:83:5c:64:e4:d0:
                    a6:4e:40:af:b0:85:15:34:b7:34:bf:62:95:ee:87:
                    69:36:41:27:73:6b:3d:51:01:7b:9d:65:02:a6:22:
                    e0:22:c8:5e:25:87:30:34:29:de:57:6e:7d:9a:47:
                    eb:40:df:50:69:32:ac:71:15:02:3a:37:20:be:4b:
                    5f:42:dd:69:01:80:f9:cb:72:92:6a:5c:fa:9e:ac:
                    de:7e:7f:54:44:4a:80:99:e7:46:b5:66:bc:eb:1a:
                    99:5b:91:98:53:0f:95:32:44:8d:fe:c1:06:65:9a:
                    fe:09:be:cb:61:7c:d7:d4:46:f4:2e:7a:9a:d1:be:
                    06:59:36:f3:f8:c1:2a:9c:f6:b6:fc:1d:59:3e:ee:
                    43:82:62:ae:6f:37:cc:fd:db:09:5b:2b:1c:ea:0a:
                    d9:4f:a7:f5:06:de:e4:79:45:2e:0d:e9:4e:a1:42:
                    5e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E3:9C:F0:D5:60:40:AB:5B:20:A9:25:CF:F3:84:E7:74:CC:9E:95
            X509v3 Authority Key Identifier:
                keyid:5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:5a:22:92:d7:00:87:64:11:c9:77:5a:96:da:88:18:7c:81:
         ce:2f:4e:31:c1:c8:ae:6c:48:de:19:52:66:0c:24:21:e9:93:
         1f:95:52:a5:b9:6a:f7:52:27:b7:43:89:30:d8:56:dc:df:5b:
         87:66:05:d8:be:34:a0:be:c3:91:03:78:56:b2:3c:02:1a:8b:
         d7:57:2a:9c:63:4a:1b:fd:e0:34:5d:b8:9b:c7:3a:85:b8:fb:
         42:39:f5:19:02:dd:6c:79:a4:bb:e1:7f:2a:27:41:9d:22:82:
         17:cd:6f:8f:84:64:e8:e9:30:ce:b4:19:08:6c:90:0c:97:00:
         89:3c:2b:b8:c2:da:eb:bc:d5:95:81:cf:e6:4c:ca:f0:ec:37:
         37:15:60:0a:b8:8e:91:77:e2:47:de:08:52:da:d4:0a:8a:10:
         c7:89:9c:10:53:c8:69:d8:00:99:31:0a:04:84:d4:a5:ef:94:
         2d:e1:0a:0d:32:02:2e:97:57:36:9a:50:10:c6:0c:fd:91:0a:
         99:e0:6a:48:e2:34:0c:14:f2:34:0e:c7:2d:53:c0:0e:55:ff:
         a8:13:19:36:e0:32:dc:ba:9c:d9:af:14:e6:57:b8:cd:44:d1:
         76:b3:d5:15:ca:4c:8f:3c:94:63:ad:09:84:49:b4:89:c0:e9:
         4e:6b:c0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:52:52 2025 by rpki-client