Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft
File:                     9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft (raw, json)
Hash identifier:          8AMlZGzW2rZLxWrTL7jd34MmPXcVk4UNgRgX0ApRyfI=
Subject key identifier:   18:11:E0:83:FF:51:67:1D:34:8A:CD:E4:00:84:76:DE:D5:B2:A0:A2
Authority key identifier: 93:39:F7:20:CF:D0:D8:F9:1A:9A:8F:91:6D:79:32:CE:BE:30:10:CD
Certificate issuer:       /CN=9339F720CFD0D8F91A9A8F916D7932CEBE3010CD
Certificate serial:       01EED1E93F4399325B065164BBABA997FEA207D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft
Manifest number:          0305
Signing time:             Tue 04 Nov 2025 15:48:24 +0000
Manifest this update:     Tue 04 Nov 2025 15:43:24 +0000
Manifest next update:     Wed 05 Nov 2025 16:38:24 +0000
Files and hashes:         1: 9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.crl (hash: D+ERbJAOlmmy8PX6F2H0lDwKbEjvat4LNV+6FkNvHC8=)
                          2: 323830343a336232303a3a2f33322d3438203d3e20323636313331.roa (hash: BuT6SVf+q5oMKia2hb1uFcClSeTWsZZo4z0q3Ha5OtA=)
                          3: 34352e362e3131322e302f32322d3234203d3e20323636313331.roa (hash: 7Dz4w+nF0VfTfBfkOh3PyIEA3gtOe3Tz5BUNfanJK1Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.crl
                          rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 16:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ee:d1:e9:3f:43:99:32:5b:06:51:64:bb:ab:a9:97:fe:a2:07:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9339F720CFD0D8F91A9A8F916D7932CEBE3010CD
        Validity
            Not Before: Nov  4 15:43:24 2025 GMT
            Not After : Nov  5 16:38:24 2025 GMT
        Subject: CN=1811E083FF51671D348ACDE4008476DED5B2A0A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:57:a3:50:a5:09:5b:e5:2a:5e:a4:9d:b5:fa:
                    84:fc:46:79:64:fd:1e:60:a5:c1:47:ac:8e:52:13:
                    df:e4:d1:00:65:2c:31:5f:e6:d6:cb:73:5e:56:8d:
                    56:c2:9a:73:5c:0b:92:09:99:d7:a0:83:e8:46:c1:
                    97:ad:90:e0:75:0a:8f:a1:b2:0c:b0:5e:63:e3:31:
                    33:b1:5b:5e:79:0d:2e:bb:4a:19:63:97:53:59:bc:
                    30:bb:9b:e6:d9:c2:1c:21:02:03:2b:ff:1e:15:d4:
                    a7:25:96:9c:83:c6:ef:cb:5f:e6:ed:21:4f:5e:01:
                    27:15:4f:16:d9:9d:f7:a1:69:d9:85:37:88:c1:0e:
                    82:46:a7:73:a3:64:da:dd:17:34:56:f6:95:46:8c:
                    b7:52:74:38:9b:88:58:51:9b:4c:3f:ec:1e:71:47:
                    d8:c3:ce:a2:12:e0:86:cc:8f:db:dd:24:c8:5e:a4:
                    3e:ce:75:d9:4a:bf:18:9f:cc:c9:3d:27:1d:92:dc:
                    59:0d:8c:eb:d8:55:cf:14:58:c6:1d:b8:42:e4:1f:
                    f6:c9:cc:f8:69:9b:9d:0e:ec:48:90:e9:7f:6e:17:
                    b1:64:79:5c:1e:a3:94:2b:cb:c9:15:bf:0b:53:7b:
                    e8:09:39:77:bf:25:98:3d:62:5b:5d:6b:e9:13:58:
                    a6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:11:E0:83:FF:51:67:1D:34:8A:CD:E4:00:84:76:DE:D5:B2:A0:A2
            X509v3 Authority Key Identifier:
                keyid:93:39:F7:20:CF:D0:D8:F9:1A:9A:8F:91:6D:79:32:CE:BE:30:10:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e2:a9:a3:8a:21:9f:7e:57:58:da:aa:d8:d2:de:2a:c7:76:
         8e:03:09:02:3b:d3:84:97:ce:ce:6e:a3:c0:75:39:8c:9a:54:
         2e:4f:83:35:0d:3f:c8:4c:53:c3:fc:85:12:6c:c6:d8:8e:b5:
         58:2e:b5:b2:c3:07:4f:60:dc:3b:d1:c6:7f:73:f6:61:83:8a:
         74:a6:ca:df:9f:59:67:34:cf:a5:2a:04:c6:d9:03:92:0b:22:
         10:c5:45:b4:4a:e6:03:4c:92:1d:ad:55:c4:5a:f3:58:d2:c9:
         0e:44:e2:80:ec:6d:aa:01:f9:b6:30:8c:ca:26:d7:56:4b:8d:
         dc:80:d2:92:e9:ab:7a:31:79:7b:9a:b0:b9:48:d6:1d:ca:55:
         e8:6c:b3:9b:dc:4c:b4:d6:b9:b5:2b:74:70:a2:3d:bd:e7:b3:
         82:5a:f9:cc:e5:79:ca:fe:73:8e:21:ca:09:07:c7:b6:99:83:
         d7:4f:3b:73:c2:34:4a:00:8c:d5:5a:e2:4a:95:64:e8:2f:eb:
         b8:82:ac:59:94:a5:45:52:ce:3b:b3:3e:72:57:e9:ce:97:49:
         39:e3:76:d4:97:2d:b2:63:ff:cf:d7:3f:f5:ea:72:b6:f3:f5:
         1d:10:4f:39:3d:74:88:9b:e3:8e:92:70:58:ca:52:7e:d8:2a:
         37:d6:a1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:43:08 2025 by rpki-client