Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6YraE5Qbd1C4bVzqnU3yr3FxevFaJ8V6RTffwgXa5ZMi/1/DB613224E23644FA8E07FCFF041E61E5F92034E5.mft
File:                     DB613224E23644FA8E07FCFF041E61E5F92034E5.mft (raw, json)
Hash identifier:          iMVchnwJFJEh7rqs6YZyt3gqOf81lkY+Qmw9U8pHAzA=
Subject key identifier:   20:E1:ED:92:75:A6:00:C5:B7:DE:74:9E:53:9B:9F:3F:A8:F1:9B:ED
Authority key identifier: DB:61:32:24:E2:36:44:FA:8E:07:FC:FF:04:1E:61:E5:F9:20:34:E5
Certificate issuer:       /CN=DB613224E23644FA8E07FCFF041E61E5F92034E5
Certificate serial:       403CCF25F4B15EDE326230342EFB93320B8D14FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB613224E23644FA8E07FCFF041E61E5F92034E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YraE5Qbd1C4bVzqnU3yr3FxevFaJ8V6RTffwgXa5ZMi/1/DB613224E23644FA8E07FCFF041E61E5F92034E5.mft
Manifest number:          030A
Signing time:             Wed 05 Nov 2025 01:59:10 +0000
Manifest this update:     Wed 05 Nov 2025 01:54:10 +0000
Manifest next update:     Thu 06 Nov 2025 03:56:10 +0000
Files and hashes:         1: DB613224E23644FA8E07FCFF041E61E5F92034E5.crl (hash: NBIAhAdPwRdii2GqhdZ1FsHrE7qRIePzOFFRHxPsRvk=)
                          2: 323830343a336530633a3a2f33322d313238203d3e20323636353730.roa (hash: asG31nf7xi1Ii9/mHLSKNx95ThmDCHDrD3qiXYp9WOM=)
                          3: 34352e372e37322e302f32322d3332203d3e20323636353730.roa (hash: 0S0Yy2MQxayv7N3RaSL+NwHd7yrXrBMqAgijWdBOCto=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YraE5Qbd1C4bVzqnU3yr3FxevFaJ8V6RTffwgXa5ZMi/1/DB613224E23644FA8E07FCFF041E61E5F92034E5.crl
                          rsync://rpki-repo.registro.br/repo/6YraE5Qbd1C4bVzqnU3yr3FxevFaJ8V6RTffwgXa5ZMi/1/DB613224E23644FA8E07FCFF041E61E5F92034E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB613224E23644FA8E07FCFF041E61E5F92034E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 03:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:3c:cf:25:f4:b1:5e:de:32:62:30:34:2e:fb:93:32:0b:8d:14:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB613224E23644FA8E07FCFF041E61E5F92034E5
        Validity
            Not Before: Nov  5 01:54:10 2025 GMT
            Not After : Nov  6 03:56:10 2025 GMT
        Subject: CN=20E1ED9275A600C5B7DE749E539B9F3FA8F19BED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:df:71:31:9c:5b:a9:21:fa:1a:ef:5e:4b:27:
                    5e:0f:6d:85:24:46:cc:ab:1a:2f:ec:36:4f:12:3a:
                    58:ec:9b:87:aa:8c:6a:56:3e:21:90:e4:93:87:6c:
                    78:c4:d0:6d:9d:fd:c6:ea:5d:0f:b3:28:e1:93:47:
                    61:e3:5b:39:17:13:20:5f:27:5b:fd:12:c6:9e:ad:
                    00:ae:73:a5:ca:61:41:86:8f:d9:27:e0:f0:d0:2f:
                    e3:6d:ac:89:ea:60:6d:3e:28:8c:29:e5:0c:10:68:
                    a9:1c:70:e1:a1:38:d4:94:06:1d:9a:d7:2c:74:1a:
                    5d:76:6b:1e:21:c9:a9:cb:a8:f5:2c:c4:7a:65:c3:
                    24:f7:68:58:68:da:14:6c:0f:5f:42:7e:10:bd:f5:
                    a6:9e:5c:28:fa:fd:fc:30:a2:39:5a:73:76:25:08:
                    20:db:22:f3:8e:c6:cc:8a:f0:2c:87:8b:c2:9e:93:
                    3b:b9:4c:b6:eb:ff:f3:d4:79:84:21:5e:95:d4:43:
                    12:4e:ce:67:aa:0e:64:60:39:bb:14:be:5b:0d:a6:
                    ce:75:80:90:86:d6:63:a0:ce:a0:f2:bb:a2:31:fe:
                    48:2b:65:42:4e:a4:02:c3:f2:f7:9f:e8:e9:9c:50:
                    b9:23:29:e0:5e:53:c1:3b:bb:2c:83:e8:6c:b9:2a:
                    85:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E1:ED:92:75:A6:00:C5:B7:DE:74:9E:53:9B:9F:3F:A8:F1:9B:ED
            X509v3 Authority Key Identifier:
                keyid:DB:61:32:24:E2:36:44:FA:8E:07:FC:FF:04:1E:61:E5:F9:20:34:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YraE5Qbd1C4bVzqnU3yr3FxevFaJ8V6RTffwgXa5ZMi/1/DB613224E23644FA8E07FCFF041E61E5F92034E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB613224E23644FA8E07FCFF041E61E5F92034E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YraE5Qbd1C4bVzqnU3yr3FxevFaJ8V6RTffwgXa5ZMi/1/DB613224E23644FA8E07FCFF041E61E5F92034E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:1e:b2:ab:8b:c7:14:90:ad:63:a8:a8:c8:35:42:c2:7e:d8:
         72:a9:37:a2:93:d4:26:5a:76:b5:db:60:47:46:e1:6a:5a:5e:
         cb:e0:4e:2b:5e:75:e2:30:40:79:10:84:82:80:67:c1:bf:30:
         4b:26:db:67:01:6b:bb:06:0b:fa:82:20:59:f0:dc:9e:29:fe:
         8a:ae:63:f1:b3:b9:61:8e:6d:97:f1:c0:70:f8:a1:86:f3:75:
         1c:02:da:d6:73:fa:b6:36:f7:8f:b5:a5:a1:c8:c1:4e:ac:51:
         84:6a:e8:dd:83:bb:99:44:83:0c:2c:be:38:0b:af:b1:ea:bc:
         44:14:01:c2:17:5d:4f:42:76:41:0f:67:ef:c8:14:d2:f2:2d:
         80:51:08:5e:18:d9:fc:c2:d1:e2:43:23:13:63:a6:36:d4:58:
         8d:a6:2c:fb:cc:09:bf:34:3b:e9:cd:9d:db:39:7e:f0:4e:b4:
         ad:7d:fa:79:15:b5:e4:25:26:36:b1:6f:2c:9a:7f:66:07:e4:
         5f:a3:68:d2:a6:26:70:10:d0:44:2c:68:40:8a:6f:12:82:34:
         48:00:06:f0:e6:6e:8b:9c:ac:8a:de:e0:0f:93:29:f4:d9:0f:
         e8:b6:4a:0f:5b:b9:ad:c1:99:0d:7e:59:bb:4c:f0:1f:ca:18:
         20:ae:f9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:59:22 2025 by rpki-client