Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.mft
File:                     BAE765972DA3D51F7AB70A1D27716AF50D94C94B.mft (raw, json)
Hash identifier:          qoaZZXpWybfkx2jCIi6CBc6694R3q4ePYcRSietBqRs=
Subject key identifier:   62:96:77:1A:5C:79:49:AB:06:BE:1E:45:12:A9:BC:BA:37:C9:3C:BF
Authority key identifier: BA:E7:65:97:2D:A3:D5:1F:7A:B7:0A:1D:27:71:6A:F5:0D:94:C9:4B
Certificate issuer:       /CN=BAE765972DA3D51F7AB70A1D27716AF50D94C94B
Certificate serial:       3C07C80B7585FED7270CC75D9EBAE775A6685EA2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.mft
Manifest number:          02FD
Signing time:             Tue 04 Nov 2025 14:49:01 +0000
Manifest this update:     Tue 04 Nov 2025 14:44:01 +0000
Manifest next update:     Wed 05 Nov 2025 17:07:01 +0000
Files and hashes:         1: 3230312e37312e3139362e302f32322d3234203d3e20323730323933.roa (hash: +woHqi4S02qYsndDmBIC44C12sC9kcQaw7T+Djoj0jI=)
                          2: BAE765972DA3D51F7AB70A1D27716AF50D94C94B.crl (hash: sVRmMI/rWkre3/fvqjJbl8c7hHzcHfRU/QkNbG77MNM=)
                          3: 323830343a363964303a3a2f33322d3438203d3e20323730323933.roa (hash: c9KK7yqJRfubf3nXR5Dujim3I1vJxYAO/dOdW2fuxxw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.crl
                          rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 17:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:07:c8:0b:75:85:fe:d7:27:0c:c7:5d:9e:ba:e7:75:a6:68:5e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE765972DA3D51F7AB70A1D27716AF50D94C94B
        Validity
            Not Before: Nov  4 14:44:01 2025 GMT
            Not After : Nov  5 17:07:01 2025 GMT
        Subject: CN=6296771A5C7949AB06BE1E4512A9BCBA37C93CBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bc:3f:3f:74:53:1f:1f:61:e1:e8:ad:80:0a:
                    c0:ba:5a:ed:b1:75:d9:1b:22:c4:4a:94:58:06:ea:
                    5a:af:a8:85:65:34:2c:d4:4e:3a:21:5f:1a:92:9f:
                    37:68:d5:6f:ba:f4:5b:b2:14:7a:9d:f6:a7:95:69:
                    7f:ea:32:64:14:78:fe:f1:f6:12:3e:b9:d8:b5:20:
                    ee:41:b5:76:98:b2:67:9a:91:0c:cc:f0:8d:7e:48:
                    e1:8b:0f:bf:94:74:fb:6c:c0:b6:3e:64:05:18:87:
                    cd:fa:2a:2f:f5:88:9e:bd:42:2c:33:67:5f:9f:d8:
                    2b:5b:2c:fb:84:84:de:7f:e8:12:67:52:e8:dd:d4:
                    f2:8f:8f:64:79:ca:e9:cc:f5:2f:1d:fb:d9:30:15:
                    2c:84:4e:e1:c7:38:4f:8d:7f:74:c6:c0:a0:bb:55:
                    0c:e2:9d:e5:46:43:d9:c9:66:f4:4c:c5:5c:7a:5e:
                    69:22:27:54:62:ab:17:70:96:48:da:d8:77:0b:ba:
                    bb:68:84:3e:41:a8:aa:f4:3e:09:48:95:69:3d:12:
                    e2:70:a0:27:67:dd:37:35:39:f2:d5:3c:64:c8:db:
                    8b:49:e1:67:32:e8:df:a5:75:c0:9c:69:32:0d:4c:
                    0f:b7:3c:92:9f:41:95:91:10:39:06:66:73:3d:9c:
                    c0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:96:77:1A:5C:79:49:AB:06:BE:1E:45:12:A9:BC:BA:37:C9:3C:BF
            X509v3 Authority Key Identifier:
                keyid:BA:E7:65:97:2D:A3:D5:1F:7A:B7:0A:1D:27:71:6A:F5:0D:94:C9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:85:1f:30:76:45:2a:a9:fd:7d:1a:54:f4:b3:86:c5:6e:a2:
         cb:fa:36:43:b0:5a:5d:7e:87:db:83:de:1c:97:b6:76:2d:b7:
         ec:38:cc:b7:9f:5d:cc:92:79:d0:b9:0a:a7:8c:e8:d0:db:42:
         be:42:5e:4e:9d:59:a6:f5:62:06:dd:a3:7c:7b:6a:25:77:7f:
         4a:e4:e9:35:3f:9e:bd:84:ba:91:7f:3e:76:b5:53:22:b9:14:
         e1:9f:c5:88:e7:02:da:3c:cd:02:79:a6:d6:44:c9:42:95:c0:
         2b:33:32:b3:e1:ed:99:fc:1d:8b:81:f7:f0:05:43:d6:0b:dd:
         f1:d5:9c:cb:61:c0:df:f8:35:0b:c3:94:ec:2e:73:30:f5:d5:
         5d:ee:fe:90:1f:c4:9c:33:74:b4:3b:7b:d5:0b:c7:0b:ac:d3:
         2a:f3:27:62:f2:46:83:4e:51:83:de:b0:29:3f:3e:a8:98:9e:
         a4:f6:86:98:3d:f0:cb:69:3a:7f:f6:f7:0d:c4:cf:07:1c:f8:
         08:54:a3:e9:0a:74:70:97:66:79:05:af:e3:db:a6:b4:11:a3:
         3c:fa:38:3c:78:18:a5:41:60:fc:f6:7c:64:27:58:72:b5:67:
         b3:d3:d7:c7:0b:85:c9:c0:36:e2:de:31:26:4c:bb:ad:19:71:
         a5:be:4c:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPAfIC3WF/tcnDMddnrrndaZoXqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFFNzY1OTcyREEzRDUxRjdBQjcwQTFEMjc3MTZBRjUw
RDk0Qzk0QjAeFw0yNTExMDQxNDQ0MDFaFw0yNTExMDUxNzA3MDFaMDMxMTAvBgNV
BAMTKDYyOTY3NzFBNUM3OTQ5QUIwNkJFMUU0NTEyQTlCQ0JBMzdDOTNDQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0vD8/dFMfH2Hh6K2ACsC6Wu2x
ddkbIsRKlFgG6lqvqIVlNCzUTjohXxqSnzdo1W+69FuyFHqd9qeVaX/qMmQUeP7x
9hI+udi1IO5BtXaYsmeakQzM8I1+SOGLD7+UdPtswLY+ZAUYh836Ki/1iJ69Qiwz
Z1+f2CtbLPuEhN5/6BJnUujd1PKPj2R5yunM9S8d+9kwFSyETuHHOE+Nf3TGwKC7
VQzineVGQ9nJZvRMxVx6XmkiJ1Riqxdwlkja2HcLurtohD5BqKr0PglIlWk9EuJw
oCdn3Tc1OfLVPGTI24tJ4Wcy6N+ldcCcaTINTA+3PJKfQZWREDkGZnM9nMBvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUYpZ3Glx5SasGvh5FEqm8ujfJPL8wHwYDVR0j
BBgwFoAUuudlly2j1R96twodJ3Fq9Q2UyUswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHVMcHNiRnRQblFNWkdOREZZcWJIZDFrUktLRnFvSmhMYWU5NTd0UVF0
UHgvMS9CQUU3NjU5NzJEQTNENTFGN0FCNzBBMUQyNzcxNkFGNTBEOTRDOTRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRTc2NTk3MkRBM0Q1MUY3
QUI3MEExRDI3NzE2QUY1MEQ5NEM5NEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OHVMcHNiRnRQblFNWkdOREZZcWJIZDFrUktLRnFvSmhMYWU5NTd0UVF0UHgvMS9C
QUU3NjU5NzJEQTNENTFGN0FCNzBBMUQyNzcxNkFGNTBEOTRDOTRCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkoUfMHZFKqn9fRpU9LOGxW6iy/o2Q7BaXX6H24PeHJe2di237DjMt59dzJJ5
0LkKp4zo0NtCvkJeTp1ZpvViBt2jfHtqJXd/SuTpNT+evYS6kX8+drVTIrkU4Z/F
iOcC2jzNAnmm1kTJQpXAKzMys+Htmfwdi4H38AVD1gvd8dWcy2HA3/g1C8OU7C5z
MPXVXe7+kB/EnDN0tDt71QvHC6zTKvMnYvJGg05Rg96wKT8+qJiepPaGmD3wy2k6
f/b3DcTPBxz4CFSj6Qp0cJdmeQWv49umtBGjPPo4PHgYpUFg/PZ8ZCdYcrVns9PX
xwuFycA24t4xJky7rRlxpb5MOQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:47:32 2025 by rpki-client