Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.mft
File:                     D3B2B50FFE147528A6BDBFA97590C52FA78DB496.mft (raw, json)
Hash identifier:          8cwujT+6klSuGuFtecptmzmdkBe1oUZfatvuILVq0XY=
Subject key identifier:   CB:9A:E9:D6:C0:E4:F6:95:2B:1A:C4:31:A0:DD:EF:33:E4:EA:D0:3A
Authority key identifier: D3:B2:B5:0F:FE:14:75:28:A6:BD:BF:A9:75:90:C5:2F:A7:8D:B4:96
Certificate issuer:       /CN=D3B2B50FFE147528A6BDBFA97590C52FA78DB496
Certificate serial:       15DACC80110B7CA14F587A2878CFFE6371E7F6DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.mft
Manifest number:          4D
Signing time:             Tue 04 Nov 2025 10:51:37 +0000
Manifest this update:     Tue 04 Nov 2025 10:46:37 +0000
Manifest next update:     Wed 05 Nov 2025 13:31:37 +0000
Files and hashes:         1: 3138312e3233322e3231362e302f32322d3234203d3e20323731353532.roa (hash: DAsPXz3A80BnXBgtlMV/UqMhkaUVOx80TZ4k+723/xU=)
                          2: D3B2B50FFE147528A6BDBFA97590C52FA78DB496.crl (hash: LBhyewQIwE2+AyrbkDQIPNVQxdL0Rib7ssroT0bQ7CY=)
                          3: 323830343a376434633a3a2f33322d3430203d3e20323731353532.roa (hash: f+bA54ZvwvVgVSPvClxP3LCYVr08a+q/y2ITfpwob68=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.crl
                          rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 13:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:da:cc:80:11:0b:7c:a1:4f:58:7a:28:78:cf:fe:63:71:e7:f6:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3B2B50FFE147528A6BDBFA97590C52FA78DB496
        Validity
            Not Before: Nov  4 10:46:37 2025 GMT
            Not After : Nov  5 13:31:37 2025 GMT
        Subject: CN=CB9AE9D6C0E4F6952B1AC431A0DDEF33E4EAD03A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c8:6b:03:2b:f4:86:34:1d:ef:6e:dd:f9:89:
                    98:c0:27:fe:9a:12:9b:1b:dd:c6:15:3e:01:78:9c:
                    de:47:a3:d3:10:0c:5a:49:0e:9a:c4:e1:5b:b9:f9:
                    f6:4a:9a:bb:70:dd:31:4e:9a:3b:6b:a6:2f:8f:d5:
                    2a:56:2d:0b:54:70:ac:55:ca:84:fa:61:a3:91:c0:
                    ac:08:b5:9d:4e:d8:87:4e:2b:2a:b2:16:0e:8b:9e:
                    26:08:ac:0f:89:b2:dd:95:4e:eb:a6:f2:e8:39:63:
                    15:43:ca:16:86:cf:4b:51:c2:7a:1c:11:d7:51:89:
                    d6:f8:3c:14:96:d5:85:c0:31:41:27:7c:9d:4d:cf:
                    f8:3c:e0:76:d7:50:29:e4:5d:a4:15:e4:43:bb:cd:
                    58:e2:66:a3:26:af:70:fb:4f:44:29:a8:4b:0c:b3:
                    5c:f6:e1:36:e0:63:5b:43:2e:33:bd:0f:d7:ba:bb:
                    c6:16:4b:63:cc:53:d9:ab:7f:3b:5d:c1:c8:4b:2a:
                    52:63:68:82:07:5e:fe:a8:c6:82:5f:11:62:22:56:
                    97:69:b4:0a:b7:67:d8:3a:59:46:18:8d:40:21:c8:
                    1b:40:79:f9:a2:0e:44:3d:0b:88:1b:f7:b9:b9:f1:
                    ce:0e:33:a2:c7:49:80:41:dd:00:6c:c1:b9:aa:1d:
                    8e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9A:E9:D6:C0:E4:F6:95:2B:1A:C4:31:A0:DD:EF:33:E4:EA:D0:3A
            X509v3 Authority Key Identifier:
                keyid:D3:B2:B5:0F:FE:14:75:28:A6:BD:BF:A9:75:90:C5:2F:A7:8D:B4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a0:d8:6e:6e:2d:65:55:3e:d1:1c:e8:ee:a7:ce:ba:bf:7e:
         04:c6:04:82:32:82:c9:47:f2:0a:b7:be:67:12:b1:d9:48:54:
         0e:c6:56:18:dc:d5:95:48:73:86:36:91:23:ca:69:6a:1b:bd:
         99:f8:f6:45:5c:e1:76:3f:4b:88:08:93:34:cd:f6:13:d1:63:
         32:ba:d5:78:ee:13:fc:0c:51:f9:0a:08:f6:e4:9c:80:d3:e4:
         1d:fa:30:ce:70:23:fe:42:96:21:dc:05:d3:9c:12:d2:48:73:
         5d:d7:4e:a9:f7:f5:e0:b6:57:db:69:13:c3:42:a2:b5:f4:09:
         e0:ec:c5:0b:eb:e1:a7:e0:ee:16:e9:bb:a2:12:1d:8c:9b:c6:
         94:9f:89:06:23:e1:b7:3a:e2:19:27:af:26:85:f5:44:9d:e5:
         41:37:f5:a1:2a:72:29:7b:07:96:64:5b:80:d5:07:ef:95:d3:
         6a:d0:6c:94:60:81:5d:55:69:28:85:ff:b7:86:87:19:6f:e7:
         cb:50:23:24:6e:11:dd:3b:e7:f2:36:d4:62:3c:61:12:a2:e7:
         2b:47:e5:05:38:93:98:fd:fb:5d:b8:25:7a:1f:cb:c7:7d:11:
         16:54:81:e2:3e:c9:14:6e:ae:be:02:a9:68:26:ae:4c:8d:0c:
         8e:e2:d9:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFdrMgBELfKFPWHooeM/+Y3Hn9towDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNCMkI1MEZGRTE0NzUyOEE2QkRCRkE5NzU5MEM1MkZB
NzhEQjQ5NjAeFw0yNTExMDQxMDQ2MzdaFw0yNTExMDUxMzMxMzdaMDMxMTAvBgNV
BAMTKENCOUFFOUQ2QzBFNEY2OTUyQjFBQzQzMUEwRERFRjMzRTRFQUQwM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmyGsDK/SGNB3vbt35iZjAJ/6a
Epsb3cYVPgF4nN5Ho9MQDFpJDprE4Vu5+fZKmrtw3TFOmjtrpi+P1SpWLQtUcKxV
yoT6YaORwKwItZ1O2IdOKyqyFg6LniYIrA+Jst2VTuum8ug5YxVDyhaGz0tRwnoc
EddRidb4PBSW1YXAMUEnfJ1Nz/g84HbXUCnkXaQV5EO7zVjiZqMmr3D7T0QpqEsM
s1z24TbgY1tDLjO9D9e6u8YWS2PMU9mrfztdwchLKlJjaIIHXv6oxoJfEWIiVpdp
tAq3Z9g6WUYYjUAhyBtAefmiDkQ9C4gb97m58c4OM6LHSYBB3QBswbmqHY45AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUy5rp1sDk9pUrGsQxoN3vM+Tq0DowHwYDVR0j
BBgwFoAU07K1D/4UdSimvb+pdZDFL6eNtJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnJjQlBzTG1oTXQycWlyazhmd3ZuNTFpSERHU1Z4bnVVczFBZmZnMWFz
TEYvMC9EM0IyQjUwRkZFMTQ3NTI4QTZCREJGQTk3NTkwQzUyRkE3OERCNDk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzQjJCNTBGRkUxNDc1MjhB
NkJEQkZBOTc1OTBDNTJGQTc4REI0OTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NnJjQlBzTG1oTXQycWlyazhmd3ZuNTFpSERHU1Z4bnVVczFBZmZnMWFzTEYvMC9E
M0IyQjUwRkZFMTQ3NTI4QTZCREJGQTk3NTkwQzUyRkE3OERCNDk2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGqDYbm4tZVU+0Rzo7qfOur9+BMYEgjKCyUfyCre+ZxKx2UhUDsZWGNzVlUhz
hjaRI8ppahu9mfj2RVzhdj9LiAiTNM32E9FjMrrVeO4T/AxR+QoI9uScgNPkHfow
znAj/kKWIdwF05wS0khzXddOqff14LZX22kTw0KitfQJ4OzFC+vhp+DuFum7ohId
jJvGlJ+JBiPhtzriGSevJoX1RJ3lQTf1oSpyKXsHlmRbgNUH75XTatBslGCBXVVp
KIX/t4aHGW/ny1AjJG4R3Tvn8jbUYjxhEqLnK0flBTiTmP37Xbgleh/Lx30RFlSB
4j7JFG6uvgKpaCauTI0MjuLZ0w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:47:48 2025 by rpki-client