Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
File:                     A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft (raw, json)
Hash identifier:          nf+IZ70agWsq3jG95FHTB7kbpAjOX2joz2M9CA2F+DE=
Subject key identifier:   C1:F9:2F:E9:24:D7:21:2C:DE:D2:61:CD:0D:2A:B9:82:91:FE:4F:D7
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       57F9C61A2797B83472D8CFFE90EC0D4774836E4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
Manifest number:          0395
Signing time:             Tue 04 Nov 2025 21:41:04 +0000
Manifest this update:     Tue 04 Nov 2025 21:36:04 +0000
Manifest next update:     Wed 05 Nov 2025 21:46:04 +0000
Files and hashes:         1: AS268424.roa (hash: n8RFEnoUmcQ97Ze6wCHVHFaHX1QwI1zVmWthwVlxl1o=)
                          2: AS262354.roa (hash: 1pzHbllcptS7Fdlbtu0zOSMrFqlBglue0lUvRTokS1Y=)
                          3: AS266448.roa (hash: 0YbbYE8vUxmDre3zhYnpNQCRpHbsznFgmLueNc9/vFw=)
                          4: AS53125.roa (hash: c5zf4FKKPJu26fGFKZcUyWqKK3WRwr3qMkO9PeTcics=)
                          5: AS264524.roa (hash: ulsbnGOW36kVtM7xaHkMfzehX9m0QmfYcvYHNXyAJ3A=)
                          6: A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl (hash: +xIdy3715mk9h8OTfNG/sCfujmy58DrwJaOs9JM6cCg=)
                          7: AS28294.roa (hash: iigjprHjYe3hSAskm6Eldo69snNF1NgYQiVLqG/V0v8=)
                          8: AS28210.roa (hash: wYwH9XH45WaidWa7g6OJYXqY03eabFeAETSl0xDP5Ok=)
                          9: AS52613.roa (hash: fPL/sAfA8ZaWROnd7hyAi+lo34trBbOHQHpLadV+Hyo=)
                          10: AS262785.roa (hash: tgwnktyCLi7K0y+0MwnJrBccG1xAtn94n/d+P1N/lFY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 21:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f9:c6:1a:27:97:b8:34:72:d8:cf:fe:90:ec:0d:47:74:83:6e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Nov  4 21:36:04 2025 GMT
            Not After : Nov  5 21:46:04 2025 GMT
        Subject: CN=C1F92FE924D7212CDED261CD0D2AB98291FE4FD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:79:1c:55:92:3c:59:ba:c5:6a:ec:d0:4c:ef:
                    e2:c9:2f:49:92:5f:51:61:2c:c6:66:b1:7d:10:11:
                    69:7d:ce:f9:9d:d5:aa:cf:91:79:d7:0e:32:e9:df:
                    5a:de:6f:26:38:53:76:da:bb:c3:d1:da:3c:0f:6d:
                    6e:24:67:62:e3:e5:24:c7:9c:53:32:1a:13:ae:8d:
                    5f:45:f0:2f:d4:7c:01:0d:8f:8a:73:85:cb:e5:43:
                    db:b8:29:38:21:39:4a:61:40:9b:c1:af:b6:8b:ee:
                    b8:c2:20:27:0a:db:2c:89:ad:5d:47:8d:47:86:72:
                    24:93:5c:34:b7:44:02:98:1c:70:12:02:c0:8e:8b:
                    08:14:50:f0:2c:3e:a0:80:d8:7f:42:a2:bb:b4:40:
                    df:24:7f:36:bf:43:ce:32:12:48:e9:a2:21:eb:d8:
                    3b:f3:fc:9b:30:6f:63:0d:c8:d4:03:98:e3:c4:1f:
                    59:ec:1a:50:b4:17:c3:4d:95:90:c7:3a:a6:34:2a:
                    4e:35:a6:c1:40:44:5d:75:51:9f:13:7a:a8:ca:dc:
                    25:2c:eb:36:fb:7d:6d:9a:58:cc:86:e0:53:7c:38:
                    d3:79:c4:51:48:a2:17:34:5e:9a:24:6b:04:47:ef:
                    01:79:38:1d:20:8b:3a:26:6d:36:bd:2b:80:9a:3d:
                    88:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F9:2F:E9:24:D7:21:2C:DE:D2:61:CD:0D:2A:B9:82:91:FE:4F:D7
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:6a:9f:fd:d8:4e:12:31:4f:dd:e1:c5:7a:50:98:b9:9d:19:
         d6:52:14:d7:98:22:4d:ee:fb:67:3a:52:59:55:84:d8:67:f5:
         bf:b4:e3:c1:64:8e:85:59:c0:a6:67:67:24:14:09:fa:44:c5:
         c7:2d:5c:f7:0f:7b:2e:da:b7:3f:23:d8:23:3c:ee:21:31:00:
         01:70:cb:b1:36:bb:d5:59:9b:70:93:90:e0:07:aa:66:e6:72:
         ed:fc:ba:ff:f6:82:36:40:a7:45:5d:9a:be:3c:31:71:ef:93:
         00:d8:a3:06:75:82:b5:04:38:73:52:2c:53:91:ee:d6:8c:e4:
         f3:b1:0c:ea:80:d3:6b:ac:1d:3e:1d:a8:a9:4e:67:54:13:17:
         5d:b2:39:5e:f2:66:80:00:53:6e:6a:20:f9:4b:b4:23:63:21:
         3d:7d:e6:5d:1c:d6:dc:79:60:80:f5:4e:0f:32:26:ef:bf:06:
         0e:1b:ee:98:29:13:35:47:3d:5a:44:7c:23:2d:93:19:30:f9:
         56:e0:2a:1b:37:24:06:03:a1:18:dc:aa:e6:fd:65:d4:64:18:
         1a:f6:cc:18:e9:ca:8f:8e:e7:73:57:f4:97:85:ac:9c:e8:1c:
         7e:3d:32:1f:81:69:fe:7a:19:ef:62:1d:c7:17:a9:50:f2:e7:
         db:d0:9a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:17:10 2025 by rpki-client