Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/450AC02B21B3D12F3F8A7B3E6101148947852DCC.mft
File:                     450AC02B21B3D12F3F8A7B3E6101148947852DCC.mft (raw, json)
Hash identifier:          u/zN7/4ebX/0u4QFACkcKuNEkK+mlcQ3ob85fNy8RXY=
Subject key identifier:   C3:C6:50:DD:BA:78:2D:AB:00:91:6B:C5:6D:1D:E1:15:CC:7E:5F:E7
Authority key identifier: 45:0A:C0:2B:21:B3:D1:2F:3F:8A:7B:3E:61:01:14:89:47:85:2D:CC
Certificate issuer:       /CN=450AC02B21B3D12F3F8A7B3E6101148947852DCC
Certificate serial:       3941419153F52000E76EB45BCCD36FA5A9EE9E33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450AC02B21B3D12F3F8A7B3E6101148947852DCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/450AC02B21B3D12F3F8A7B3E6101148947852DCC.mft
Manifest number:          2C
Signing time:             Tue 04 Nov 2025 18:17:34 +0000
Manifest this update:     Tue 04 Nov 2025 18:12:34 +0000
Manifest next update:     Wed 05 Nov 2025 20:17:34 +0000
Files and hashes:         1: 3137372e3132382e3136302e302f32312d3234203d3e20323632333734.roa (hash: 3oAiuYhvJ+DZt7xofUUV3n0WqVXHrbVIja37AnR0sW0=)
                          2: 3137392e3132372e3132302e302f32322d3234203d3e20323632333734.roa (hash: F4wF79VzpTSpTG5Ug/Cjn1KAMwa5cjJMX/Jh95YL4r8=)
                          3: 3137302e3235342e3131362e302f32322d3234203d3e20323632333734.roa (hash: SvGAQOD11AFblWetR1z0WTg7tw0PTIOEidfipkYQZYE=)
                          4: 450AC02B21B3D12F3F8A7B3E6101148947852DCC.crl (hash: Cgmvw2l9Ack41wu+aAygGgfSK4yQaZejQ7JL4j3g55g=)
                          5: 323830343a3837383a3a2f33322d3434203d3e20323632333734.roa (hash: 9Dq+ESk7qJpc9J5Drs5Ga5hnUi1YKQ5wXr9Vd+jr/9E=)
                          6: 3133382e39392e3234342e302f32322d3234203d3e20323632333734.roa (hash: tQ97S/LOOBJPJH2AEpMOqy2aqQUoxhnzkj2Y2XdGSKw=)
                          7: 3137372e33392e32342e302f32322d3234203d3e20323632333734.roa (hash: 5T505e0WtJeMa6Sqv42pnWvzQiCmuH/7n9r6auOBpyo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/450AC02B21B3D12F3F8A7B3E6101148947852DCC.crl
                          rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/450AC02B21B3D12F3F8A7B3E6101148947852DCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450AC02B21B3D12F3F8A7B3E6101148947852DCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 20:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:41:41:91:53:f5:20:00:e7:6e:b4:5b:cc:d3:6f:a5:a9:ee:9e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450AC02B21B3D12F3F8A7B3E6101148947852DCC
        Validity
            Not Before: Nov  4 18:12:34 2025 GMT
            Not After : Nov  5 20:17:34 2025 GMT
        Subject: CN=C3C650DDBA782DAB00916BC56D1DE115CC7E5FE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0b:2b:c7:a9:0f:94:da:74:95:2d:e7:71:f5:
                    d5:43:f8:d7:de:d9:82:73:a8:01:f2:fd:3f:54:92:
                    fe:bd:3f:5b:45:04:89:49:16:a2:43:fa:a1:33:d6:
                    f7:13:2a:d8:73:b2:d6:0d:7a:ac:dd:d0:49:1a:f9:
                    49:f1:fd:b3:de:2f:39:d9:a5:7d:4c:74:af:91:d9:
                    34:7e:00:0a:48:2d:c0:f7:55:87:62:f8:0f:9b:ea:
                    b3:07:de:a3:1a:79:b2:57:18:6c:c3:75:d5:dc:22:
                    7c:a4:84:62:18:d0:1f:b7:ee:0f:46:9a:6d:0e:85:
                    93:56:4b:a4:4d:44:a9:b1:4d:c2:bc:f4:aa:43:6b:
                    da:93:98:ce:1f:4c:80:49:c2:47:6d:da:59:c1:2b:
                    6d:b4:a4:b4:b5:a4:f6:04:de:dc:7d:db:48:93:e1:
                    24:f7:ad:40:29:7e:11:77:6c:67:7b:f8:4f:6f:65:
                    16:49:eb:43:a4:08:55:b4:f3:9f:1a:53:3c:d8:1d:
                    ba:cf:9f:54:59:e5:03:72:ed:71:09:91:fc:12:5d:
                    4e:26:3e:b6:70:0f:0d:87:28:aa:ae:e5:76:21:85:
                    6e:69:f9:cf:cb:6a:71:00:9f:cb:d8:f6:c5:88:d2:
                    5f:53:df:6a:12:84:55:c4:4b:36:33:c9:d9:29:42:
                    e8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C6:50:DD:BA:78:2D:AB:00:91:6B:C5:6D:1D:E1:15:CC:7E:5F:E7
            X509v3 Authority Key Identifier:
                keyid:45:0A:C0:2B:21:B3:D1:2F:3F:8A:7B:3E:61:01:14:89:47:85:2D:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/450AC02B21B3D12F3F8A7B3E6101148947852DCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450AC02B21B3D12F3F8A7B3E6101148947852DCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/450AC02B21B3D12F3F8A7B3E6101148947852DCC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:57:9e:f1:1d:84:8a:ec:26:13:dd:ad:e6:1f:15:9f:80:68:
         59:3f:eb:1f:48:f5:e6:de:51:89:ea:32:26:d7:de:8d:a5:0f:
         6f:44:39:ed:c3:a2:bd:fd:ff:6f:df:99:b5:ea:38:c3:5e:90:
         1c:41:cd:12:13:82:93:55:26:5d:3c:ae:4d:05:d8:3d:10:3f:
         fc:7d:fc:9a:b4:dc:8e:e2:70:15:f9:6d:00:5a:36:67:a9:8c:
         71:2e:9d:b6:45:ec:34:0d:bb:cc:62:50:6f:8a:95:72:28:2b:
         34:59:0a:60:35:84:45:1b:c2:06:45:f7:35:56:d1:65:70:6c:
         d4:0d:d2:7f:1f:c6:39:aa:16:7d:12:9a:15:36:05:b0:d9:3e:
         84:e8:7e:1c:96:79:3a:6d:29:31:96:8e:53:37:ea:61:29:42:
         b4:46:5c:b7:35:12:a8:85:5c:de:9c:88:f8:45:f4:5d:49:f6:
         f7:1d:f5:80:af:19:20:2c:cd:7c:81:a8:01:ab:2b:e4:1b:4d:
         2f:4f:d9:24:b7:e2:f0:db:0f:37:97:40:73:5f:0c:de:b7:c1:
         71:ec:de:2a:3b:56:fd:76:80:f1:44:31:ce:33:2f:c3:eb:6d:
         af:ff:fe:f1:14:c5:4f:86:62:9c:37:41:d3:d5:f2:0e:97:32:
         1a:9e:6b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:22:07 2025 by rpki-client