Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
File:                     CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft (raw, json)
Hash identifier:          12ChcAbbUulvejQs28pku25F9DUcVrm00Ln4w1Wzwgo=
Subject key identifier:   7A:3E:68:2C:4D:5F:D9:57:E4:1F:01:EC:23:DC:A1:F0:CA:58:7B:DF
Authority key identifier: CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE
Certificate issuer:       /CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
Certificate serial:       0DB36D4D792B7346565ED455BACA32F0A7175E5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
Manifest number:          0111
Signing time:             Wed 05 Nov 2025 10:52:41 +0000
Manifest this update:     Wed 05 Nov 2025 10:47:41 +0000
Manifest next update:     Thu 06 Nov 2025 11:27:41 +0000
Files and hashes:         1: 3133312e3232312e3230302e302f32322d3234203d3e20323632333136.roa (hash: o0sTCMwaYkCxWQEkq5SF4UjWyAqD9Ss8VEnXcbMp2O0=)
                          2: 3133382e3131372e3139322e302f32322d3234203d3e20323632333136.roa (hash: 3lrRZ88ALQ/YEae09+IqsEdagITWdjR3q3G5UsvfNxw=)
                          3: 3137372e37342e36342e302f32302d3235203d3e20323632333136.roa (hash: jHEp77ey3eYInyX7NnipiftUAAgDp3GkFWmhML9L1Yg=)
                          4: CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl (hash: ZgwQ2HCJzVc2I38jiiT6KTH4ZCuGTltcwIA4e7qb0l4=)
                          5: 323830343a3763303a3a2f33322d3438203d3e20323632333136.roa (hash: a6f42d45bxiLHIMWETpqkEcBoAgdph66Eltfz5OsBcc=)
                          6: 3137372e3132342e34382e302f32322d3234203d3e20323632333136.roa (hash: p5diy4Lfpp3uRqBtSPoACOQZG5XP892Xk7GyAi3svuU=)
                          7: 3136372e3235302e3135322e302f32322d3234203d3e20323632333136.roa (hash: sDn+4Uu4m4W5bslIPmCXR04C2X/8MTPWAS8yBpOzj8A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl
                          rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 11:27:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b3:6d:4d:79:2b:73:46:56:5e:d4:55:ba:ca:32:f0:a7:17:5e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
        Validity
            Not Before: Nov  5 10:47:41 2025 GMT
            Not After : Nov  6 11:27:41 2025 GMT
        Subject: CN=7A3E682C4D5FD957E41F01EC23DCA1F0CA587BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:94:8f:07:9c:b0:ab:73:c6:1f:7b:98:e2:2c:
                    07:63:fc:79:97:86:56:09:33:15:d6:3d:fa:7a:3a:
                    98:74:5f:61:eb:53:6f:4e:83:e7:4c:37:af:f6:af:
                    0a:dd:0c:c5:8d:f5:56:e2:34:cb:0f:01:63:e6:b8:
                    e4:90:c6:19:a5:f4:f1:d5:b0:cc:0b:66:fa:a7:23:
                    1f:9f:d7:7f:a9:9c:d6:53:01:17:61:8f:84:07:08:
                    68:58:7e:8d:15:30:28:03:75:c1:45:ae:ed:af:e6:
                    cc:31:36:a7:8e:85:05:7b:d4:90:74:43:3f:b0:9f:
                    8c:1c:2c:7b:b3:dd:1d:c7:2f:33:45:ae:50:63:48:
                    17:d3:08:43:ed:83:74:fc:25:18:3c:9c:64:e3:52:
                    f3:a7:2f:cb:bf:b5:f1:0b:3d:76:91:32:47:d5:9d:
                    cc:c1:c9:e6:99:8a:d7:c4:93:d8:ae:22:ae:38:ef:
                    c3:87:71:18:56:f0:44:20:06:8f:98:f5:36:90:83:
                    13:f7:0e:17:c1:b8:a7:ae:ef:24:18:ee:26:d4:a6:
                    b1:36:df:15:09:a4:40:be:9e:40:db:34:82:6a:6b:
                    98:21:6f:96:92:3c:87:c7:1a:87:f4:4e:60:a5:78:
                    46:01:bc:21:c2:39:68:79:00:ed:7f:12:d1:5b:2c:
                    f9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3E:68:2C:4D:5F:D9:57:E4:1F:01:EC:23:DC:A1:F0:CA:58:7B:DF
            X509v3 Authority Key Identifier:
                keyid:CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e6:81:dd:a9:0e:9f:20:de:05:66:78:f9:7a:1a:07:58:73:
         c8:36:8e:41:2f:6b:8b:50:dc:ac:a9:55:cd:da:25:8b:16:25:
         5c:00:95:3e:4f:da:41:44:fa:d0:6d:34:18:9d:80:85:58:fd:
         cf:f9:64:4b:5f:bc:19:9d:dd:18:6b:dc:01:3f:53:65:c3:96:
         1b:81:dd:13:68:03:01:d4:ec:ed:23:a4:ed:b3:15:5f:ae:25:
         7d:f4:47:fc:25:e2:20:38:2b:80:e1:b5:ea:03:70:f7:03:1f:
         66:ac:a0:89:cb:28:f6:21:77:47:ea:ef:82:a3:06:dc:87:45:
         5a:f2:52:fe:fa:83:38:98:01:8e:e1:70:4b:11:10:80:33:8d:
         2d:28:fe:0b:45:ac:02:21:66:53:a4:c8:39:c6:59:27:72:17:
         30:37:64:07:45:8b:70:4f:84:4d:3c:8b:77:75:57:c9:28:5e:
         9c:83:47:b5:5f:44:8b:16:d1:6b:f4:df:46:a6:5b:76:5a:dc:
         9c:4a:74:37:00:06:76:1b:7b:ee:fc:08:0a:7c:7e:16:92:b8:
         21:a0:9a:9f:2e:7a:50:c7:1e:d3:d6:64:a4:43:f9:26:4d:38:
         8f:d0:80:50:6b:07:04:02:b2:45:76:81:60:38:d7:5c:7c:41:
         cd:04:3b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:06:29 2025 by rpki-client