Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
File:                     D1171AF24520C9934655F1D0B335CC88750F0C2F.mft (raw, json)
Hash identifier:          fsfhmgZW/zfa8Kl8mx/apxt5tNvbhgsp63bKzFvIrG4=
Subject key identifier:   EF:C4:F8:48:92:67:AD:D5:F4:3A:A3:B7:9E:C5:20:9C:34:BC:1B:C5
Authority key identifier: D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F
Certificate issuer:       /CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
Certificate serial:       1F3AC5EC77F9644B8B710709522781D235031A47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
Manifest number:          0111
Signing time:             Wed 05 Nov 2025 01:29:44 +0000
Manifest this update:     Wed 05 Nov 2025 01:24:44 +0000
Manifest next update:     Thu 06 Nov 2025 02:34:44 +0000
Files and hashes:         1: 323830343a373732633a3a2f33332d3333203d3e20323731313630.roa (hash: 7qbfjGwinlfawR0X//sZeHGiCnVc4qfkZRjUARdD6XY=)
                          2: 3137392e34382e31322e302f32332d3233203d3e20323731313630.roa (hash: IInVxv3kcMa5vG/U4cTD9sr87/Sbsyr6ChFNUDZQdGI=)
                          3: 3137392e34382e31342e302f32332d3233203d3e20323731313630.roa (hash: Ck0jPPfwVnJ7yIjXh5w3w6LjDjZUSDneN0x/3hVn1AI=)
                          4: 323830343a373732633a3a2f33322d3332203d3e20323731313630.roa (hash: 1lj+3sFMNB4egkilmG1GQjAutsJHZiknJoxF8YP/VHY=)
                          5: 3137392e34382e31322e302f32322d3232203d3e20323731313630.roa (hash: rskIrxxYUExi7PHLwav+dE62vtLiBrj7a6GYBNV+wTI=)
                          6: 323830343a373732633a383030303a3a2f33332d3333203d3e20323731313630.roa (hash: nbN4ukyce754UAe7rihr7N/UFNah0kB8NkqYIQh4yFQ=)
                          7: D1171AF24520C9934655F1D0B335CC88750F0C2F.crl (hash: w8QKAo78VAlsJJqR4dpuRWwuVqAKXBvcty/ZsOk6btw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl
                          rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 02:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:3a:c5:ec:77:f9:64:4b:8b:71:07:09:52:27:81:d2:35:03:1a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
        Validity
            Not Before: Nov  5 01:24:44 2025 GMT
            Not After : Nov  6 02:34:44 2025 GMT
        Subject: CN=EFC4F8489267ADD5F43AA3B79EC5209C34BC1BC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:44:b8:f4:d2:b6:e0:56:30:ef:23:ba:72:92:
                    7a:5f:15:ca:05:8b:12:d3:e2:0f:90:94:8e:e8:b2:
                    48:4c:66:cd:6d:0d:b0:36:03:10:fc:77:74:c2:84:
                    79:09:b0:c1:59:ac:e0:eb:53:a3:c1:69:fa:77:71:
                    ee:3f:0d:79:69:72:57:46:15:ab:d9:c1:8a:97:e5:
                    7c:29:3b:22:19:ac:af:e1:ed:79:db:24:1d:43:00:
                    58:b2:24:63:48:b2:32:4e:a2:0c:07:a7:40:34:98:
                    fb:b9:e1:b8:f7:21:ca:a4:1c:ec:a7:86:8f:ca:8c:
                    09:c5:89:e9:64:a2:38:de:88:67:df:fa:70:f8:d7:
                    f3:99:35:1d:3c:d8:10:b3:e6:94:d2:90:ee:9d:17:
                    03:f8:b5:8c:73:45:a5:27:b0:3e:ea:0d:34:74:6b:
                    8d:73:87:8a:09:21:e4:30:8b:d4:dd:1a:76:83:2d:
                    a3:95:01:ee:e3:c4:55:de:c2:50:60:08:fa:ad:76:
                    73:3b:5b:a3:b9:85:31:c4:3a:9c:60:3d:be:05:ff:
                    6b:32:b5:f6:94:c4:e1:78:f9:6e:8c:fa:d6:a3:1b:
                    6f:c2:fc:2e:e3:7c:9c:fa:0b:81:aa:e0:35:a3:c4:
                    5c:d4:8e:9a:a1:74:33:3b:b8:d0:a7:4e:34:a0:ba:
                    96:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C4:F8:48:92:67:AD:D5:F4:3A:A3:B7:9E:C5:20:9C:34:BC:1B:C5
            X509v3 Authority Key Identifier:
                keyid:D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b9:ad:b6:02:dd:e6:d6:92:20:7a:9f:76:7f:32:7b:8c:84:
         59:f8:03:ce:34:11:cd:27:b2:3b:a4:25:a9:cc:a5:d4:8b:e1:
         c9:ba:80:7a:ed:1d:f3:7d:12:bf:3b:59:34:41:56:6e:ac:4c:
         cf:f9:57:2b:aa:03:3b:22:0a:88:77:e8:8a:31:47:d7:1c:78:
         f1:41:24:58:e9:75:06:f2:de:39:b0:e4:e1:da:d9:57:82:47:
         33:fa:0b:46:d2:f1:55:a9:8c:1a:8e:0c:ee:3e:cb:98:6b:9b:
         69:ce:1a:e3:b9:07:52:b5:41:3a:91:ac:30:23:96:46:14:fd:
         d6:51:19:c9:41:ba:4b:c9:1e:69:49:33:9f:dc:1e:c6:46:f2:
         4f:11:8f:22:38:18:8c:ab:63:4f:83:d6:cc:69:d8:90:6a:92:
         c1:c6:8c:88:2e:f8:e7:b0:31:51:ea:2c:1d:72:a3:1e:6d:0e:
         ba:30:42:04:8e:c2:fc:a7:83:ce:0a:7a:37:fa:f6:67:0b:76:
         13:3e:14:b0:26:f3:3c:b7:01:6c:19:f2:06:cd:53:da:82:6c:
         7a:3b:8f:44:a5:e4:34:c5:d6:db:20:d2:d8:13:24:48:fb:89:
         8d:9e:62:d2:14:5f:fd:a6:8b:43:ce:95:59:01:a1:4d:93:5a:
         8f:67:36:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:13:33 2025 by rpki-client