Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.mft
File:                     D477F47EB674BB270E21D1DF467090789AFE23F1.mft (raw, json)
Hash identifier:          st2iHS/IxiLaGLLa+1yXOLqVtC3vFZRBGYfLQ5+36xU=
Subject key identifier:   8E:19:BA:1F:35:FF:99:29:E8:2D:66:F5:43:57:CA:22:7F:6F:CB:91
Authority key identifier: D4:77:F4:7E:B6:74:BB:27:0E:21:D1:DF:46:70:90:78:9A:FE:23:F1
Certificate issuer:       /CN=D477F47EB674BB270E21D1DF467090789AFE23F1
Certificate serial:       502C760E606EEF24003460A6869D26C461415B1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D477F47EB674BB270E21D1DF467090789AFE23F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.mft
Manifest number:          0368
Signing time:             Tue 04 Nov 2025 19:10:00 +0000
Manifest this update:     Tue 04 Nov 2025 19:05:00 +0000
Manifest next update:     Wed 05 Nov 2025 19:10:00 +0000
Files and hashes:         1: 3230302e38302e3130342e302f32322d3234203d3e20323731323835.roa (hash: Urz/wdbHILR1f/MOA+bOHI7wYWyHCIoi+pb+vzL+0yU=)
                          2: D477F47EB674BB270E21D1DF467090789AFE23F1.crl (hash: j/4kkcR1Womqiig5rKqkEWWjRE9ayJucRLmdP4YoMVA=)
                          3: 323830343a373931633a3a2f33322d3334203d3e20323731323835.roa (hash: hXTYPt1Yw1sMRL5Z3ykoks6g6LwcdgvcthhRMPh0s10=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.crl
                          rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D477F47EB674BB270E21D1DF467090789AFE23F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2c:76:0e:60:6e:ef:24:00:34:60:a6:86:9d:26:c4:61:41:5b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D477F47EB674BB270E21D1DF467090789AFE23F1
        Validity
            Not Before: Nov  4 19:05:00 2025 GMT
            Not After : Nov  5 19:10:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f9:da:a3:c5:12:5c:fa:02:70:ab:e7:82:f5:
                    e7:45:80:b9:51:7e:8d:8b:a5:a6:0a:7b:86:d1:17:
                    05:ed:bb:74:5a:b2:d6:21:59:a6:89:22:14:9d:52:
                    84:93:7d:64:40:16:a0:66:20:42:ab:2d:51:ec:85:
                    c9:b0:4d:86:e1:71:47:90:72:b0:7b:f1:b6:80:04:
                    e8:e9:6b:d3:19:5c:4a:b8:59:ac:69:89:b3:4e:87:
                    c9:d8:22:62:fb:de:ba:46:00:c2:9c:19:c7:dc:d6:
                    e8:92:cf:d0:9a:25:58:81:f4:c2:03:42:c1:16:60:
                    aa:55:97:bd:e4:f3:b4:47:2c:79:14:61:35:5b:12:
                    a0:b1:96:ff:38:15:07:1f:9e:59:a5:64:7d:8b:1e:
                    49:ea:3b:ed:38:51:0e:3e:23:b3:a3:a0:80:dd:7a:
                    b4:a3:e5:e2:c1:a6:b3:bc:30:3e:f6:22:5e:4a:a1:
                    ca:20:c4:2f:33:b1:fa:a0:f1:2f:70:01:38:b3:3d:
                    fb:79:b7:fa:c7:7f:bc:ef:20:ab:4f:99:54:c0:0c:
                    67:a1:ed:e6:18:2f:28:af:e4:cb:63:b9:56:74:ee:
                    77:6d:48:25:0e:2f:ab:17:ed:df:e8:69:03:55:ca:
                    bb:93:83:f6:12:62:52:81:38:ef:dc:91:a4:ee:84:
                    da:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:19:BA:1F:35:FF:99:29:E8:2D:66:F5:43:57:CA:22:7F:6F:CB:91
            X509v3 Authority Key Identifier:
                keyid:D4:77:F4:7E:B6:74:BB:27:0E:21:D1:DF:46:70:90:78:9A:FE:23:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D477F47EB674BB270E21D1DF467090789AFE23F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:7f:12:3c:7d:06:c3:d0:a7:7c:5f:bc:6d:1b:0e:c0:92:de:
         96:de:38:3d:3a:c0:63:3b:ef:2f:d1:17:1f:bd:9a:38:34:cc:
         62:f9:86:d5:46:28:a3:87:19:da:86:b6:08:29:a9:d3:44:a3:
         32:e9:85:f2:53:22:e2:7b:ad:ad:23:b2:9e:91:11:94:42:cf:
         4a:19:25:18:ef:ed:78:ab:29:3f:aa:34:b7:39:23:5b:fe:15:
         78:4c:f1:ff:d8:24:94:3b:a3:29:b1:d8:3c:3b:88:bc:bc:81:
         4e:da:23:19:b1:64:e0:00:07:63:93:a1:9e:80:e6:d7:45:08:
         b1:93:a8:94:db:cf:98:c0:d7:40:d7:41:f0:ea:06:6f:63:35:
         cc:84:9b:84:ff:a0:9d:64:23:aa:6e:2a:3a:81:12:76:02:1a:
         92:ae:5d:5c:53:a6:30:5d:89:4d:01:b1:00:65:ee:9f:57:c7:
         02:37:49:79:24:d0:56:01:19:a7:31:b8:2b:76:28:b6:7c:a9:
         5f:29:88:58:07:19:02:3e:12:8b:68:86:37:b5:9a:50:c6:c0:
         6c:80:99:64:75:b0:48:cc:3d:33:36:41:44:9b:0c:71:c8:27:
         d7:cd:05:25:99:04:07:3d:0a:37:f8:44:1f:7b:a7:39:38:13:
         09:c1:70:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:00:48 2025 by rpki-client