Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.mft
File:                     68048497B89FF318156BA3D021C73EDE420ED5C8.mft (raw, json)
Hash identifier:          TT8XLUKA2ym8xhZ+cdgMQ56MUWOmXHWJfdh665v7fyA=
Subject key identifier:   41:64:70:C0:42:47:02:44:BB:A8:23:9A:21:59:ED:F8:10:E2:37:BF
Authority key identifier: 68:04:84:97:B8:9F:F3:18:15:6B:A3:D0:21:C7:3E:DE:42:0E:D5:C8
Certificate issuer:       /CN=68048497B89FF318156BA3D021C73EDE420ED5C8
Certificate serial:       1E1BB5071CD5F2C3BA0EECA3AE80D527CA9AB550
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.mft
Manifest number:          0309
Signing time:             Wed 05 Nov 2025 08:07:36 +0000
Manifest this update:     Wed 05 Nov 2025 08:02:36 +0000
Manifest next update:     Thu 06 Nov 2025 12:03:36 +0000
Files and hashes:         1: 68048497B89FF318156BA3D021C73EDE420ED5C8.crl (hash: dHmny4RwUn60/iRtK08D7SzficVzsw5mo24eFnRcrgU=)
                          2: 34352e3136302e3136342e302f32342d3234203d3e20323638343132.roa (hash: EFAAfLHhaSGskSG36FZfL9nh7gbQ9EfmEXc7/d6Lu8o=)
                          3: 34352e3136302e3136342e302f32322d3232203d3e20323638343132.roa (hash: l/BlsMgnfa1bRI5NgM0G+32kjQVC/UYSH/5L+9atE3g=)
                          4: 34352e3136302e3136372e302f32342d3234203d3e20323638343132.roa (hash: ZNQFYxPOowprSSoYqXoyNYoB8X1AOQSXt+4SBmHB5jQ=)
                          5: 34352e3136302e3136352e302f32342d3234203d3e20323638343132.roa (hash: uiFtqYU0pNI4h1+p/ntIlmzaKOyA1Z8UVXFfFnJ2+Yc=)
                          6: 34352e3136302e3136362e302f32342d3234203d3e20323638343132.roa (hash: nvTQOWfo4JxyXdtriO9W5mVu9ZLZJ2g7cfC0H3xw91E=)
                          7: 323830343a353064303a3a2f33322d313238203d3e20323638343132.roa (hash: EVTCCPMow/XxD14/BuWI9yzSTaEFUWlibmt9Kak3OCA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.crl
                          rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 12:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1b:b5:07:1c:d5:f2:c3:ba:0e:ec:a3:ae:80:d5:27:ca:9a:b5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68048497B89FF318156BA3D021C73EDE420ED5C8
        Validity
            Not Before: Nov  5 08:02:36 2025 GMT
            Not After : Nov  6 12:03:36 2025 GMT
        Subject: CN=416470C042470244BBA8239A2159EDF810E237BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b8:3b:89:e2:af:40:79:2c:bf:c3:58:00:8b:
                    cc:1a:a5:ef:69:b4:44:5a:a4:a9:1c:3f:d5:d2:de:
                    8f:98:47:66:8c:d8:3f:f0:a9:8d:8d:65:3d:cd:4c:
                    c8:74:1b:20:aa:bc:d6:9b:9e:8b:70:21:09:69:f8:
                    db:97:f1:2e:84:93:96:18:e4:6d:69:77:f7:50:9a:
                    20:7d:c1:cc:bb:ac:29:63:a5:5d:99:30:3a:47:14:
                    d2:6c:76:63:15:f1:02:3c:ca:23:05:86:62:25:57:
                    47:da:88:86:70:40:60:bc:96:f0:34:b9:5d:80:c6:
                    8f:31:83:3f:ff:14:52:98:e1:18:84:de:e1:5e:f6:
                    f4:3e:20:42:2b:ba:13:35:39:4f:b3:90:b8:3a:af:
                    48:c8:27:cc:cd:7e:85:12:f8:79:ea:d9:71:4e:25:
                    40:b7:28:df:9c:78:4d:10:3f:20:54:2b:6e:62:75:
                    57:1e:9f:52:7a:0e:62:a2:db:e3:67:9a:34:d2:a4:
                    9e:b4:cc:a4:45:f8:ad:6b:b5:b0:bf:d5:ff:0c:6b:
                    67:26:c1:cb:0d:a2:90:1e:fd:ee:b6:2a:bf:aa:2c:
                    89:03:c3:28:22:c5:89:d3:5c:db:80:b1:fe:77:a5:
                    bc:7a:63:8e:c5:2e:11:b2:7c:cf:81:31:10:ee:7e:
                    bc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:64:70:C0:42:47:02:44:BB:A8:23:9A:21:59:ED:F8:10:E2:37:BF
            X509v3 Authority Key Identifier:
                keyid:68:04:84:97:B8:9F:F3:18:15:6B:A3:D0:21:C7:3E:DE:42:0E:D5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:ca:52:64:c4:c2:23:89:9f:40:69:45:84:a8:09:23:c0:a9:
         ff:50:b2:47:0b:bd:14:65:a1:d0:cf:bf:ee:82:f1:37:0a:17:
         85:fb:3e:0d:59:97:60:ec:a3:41:2f:b5:d1:37:99:ac:99:c1:
         fe:ff:da:73:00:ac:93:49:f3:60:0f:2e:90:b4:98:7f:ad:0e:
         4c:9a:0b:37:b5:9c:4d:23:bd:ca:41:3b:81:5d:6d:d6:b4:96:
         45:44:71:b6:5d:0a:e4:2b:d8:a2:f0:2f:59:fc:5c:b8:f9:40:
         ea:80:60:c4:ac:2a:41:09:18:32:97:b4:01:04:50:45:69:db:
         c9:1e:0e:87:ac:22:15:b9:b7:de:90:e2:dc:60:74:95:80:32:
         58:ea:bf:54:86:11:c6:1e:04:b7:ae:87:3b:cc:ce:a9:d6:f3:
         40:c6:dc:0f:6b:48:5b:43:8b:82:57:f5:63:6f:47:72:6a:b7:
         fa:de:13:fd:c0:6a:74:c4:ce:4d:c2:e3:0e:fc:14:e4:79:cb:
         28:2c:f1:03:c5:16:3d:92:58:ad:d6:90:89:f8:0b:ee:e7:18:
         68:6e:a5:c1:24:3f:70:a1:5a:aa:a2:e5:79:0a:1d:82:a0:bb:
         ee:0d:8f:59:2d:d7:16:1e:a9:99:aa:fb:a9:b0:83:24:45:8b:
         da:7d:ad:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHhu1BxzV8sO6DuyjroDVJ8qatVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjgwNDg0OTdCODlGRjMxODE1NkJBM0QwMjFDNzNFREU0
MjBFRDVDODAeFw0yNTExMDUwODAyMzZaFw0yNTExMDYxMjAzMzZaMDMxMTAvBgNV
BAMTKDQxNjQ3MEMwNDI0NzAyNDRCQkE4MjM5QTIxNTlFREY4MTBFMjM3QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6uDuJ4q9AeSy/w1gAi8wape9p
tERapKkcP9XS3o+YR2aM2D/wqY2NZT3NTMh0GyCqvNabnotwIQlp+NuX8S6Ek5YY
5G1pd/dQmiB9wcy7rCljpV2ZMDpHFNJsdmMV8QI8yiMFhmIlV0faiIZwQGC8lvA0
uV2Axo8xgz//FFKY4RiE3uFe9vQ+IEIruhM1OU+zkLg6r0jIJ8zNfoUS+Hnq2XFO
JUC3KN+ceE0QPyBUK25idVcen1J6DmKi2+NnmjTSpJ60zKRF+K1rtbC/1f8Ma2cm
wcsNopAe/e62Kr+qLIkDwygixYnTXNuAsf53pbx6Y47FLhGyfM+BMRDufrxbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQWRwwEJHAkS7qCOaIVnt+BDiN78wHwYDVR0j
BBgwFoAUaASEl7if8xgVa6PQIcc+3kIO1cgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzNDUDI1WTdxeXU0dGs3SGtMNk1LcDZSQUhZeGg1WHNzSmlISko3VzI1
aEgvMS82ODA0ODQ5N0I4OUZGMzE4MTU2QkEzRDAyMUM3M0VERTQyMEVENUM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4MDQ4NDk3Qjg5RkYzMTgx
NTZCQTNEMDIxQzczRURFNDIwRUQ1QzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NzNDUDI1WTdxeXU0dGs3SGtMNk1LcDZSQUhZeGg1WHNzSmlISko3VzI1aEgvMS82
ODA0ODQ5N0I4OUZGMzE4MTU2QkEzRDAyMUM3M0VERTQyMEVENUM4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArcpSZMTCI4mfQGlFhKgJI8Cp/1CyRwu9FGWh0M+/7oLxNwoXhfs+DVmXYOyj
QS+10TeZrJnB/v/acwCsk0nzYA8ukLSYf60OTJoLN7WcTSO9ykE7gV1t1rSWRURx
tl0K5CvYovAvWfxcuPlA6oBgxKwqQQkYMpe0AQRQRWnbyR4Oh6wiFbm33pDi3GB0
lYAyWOq/VIYRxh4Et66HO8zOqdbzQMbcD2tIW0OLglf1Y29Hcmq3+t4T/cBqdMTO
TcLjDvwU5HnLKCzxA8UWPZJYrdaQifgL7ucYaG6lwSQ/cKFaqqLleQodgqC77g2P
WS3XFh6pmar7qbCDJEWL2n2tQw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:18:26 2025 by rpki-client