Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft
File:                     B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft (raw, json)
Hash identifier:          Zm9cxmWaYzeqFE+zRO6bYRKSsW0mQV7J86XuYBw6vAg=
Subject key identifier:   0B:10:C7:27:66:AC:29:F0:DC:86:08:99:BB:9E:D8:76:96:CF:9A:5C
Authority key identifier: B0:33:7D:29:70:CB:09:EC:BA:6C:93:B9:F7:30:52:6E:8A:BD:17:9C
Certificate issuer:       /CN=B0337D2970CB09ECBA6C93B9F730526E8ABD179C
Certificate serial:       4DEBC6E0993510FC8F0533C1AFAEDB9ACD25C3CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft
Manifest number:          0177
Signing time:             Tue 04 Nov 2025 18:16:03 +0000
Manifest this update:     Tue 04 Nov 2025 18:11:03 +0000
Manifest next update:     Wed 05 Nov 2025 20:40:03 +0000
Files and hashes:         1: 3136382e3139362e35362e302f32322d3234203d3e20323632393038.roa (hash: CveRwIcrqNwQKM9zizyilPdp+fXc4SVnOCQsPgpHD6o=)
                          2: 3137372e33382e32382e302f32322d3234203d3e20323632393038.roa (hash: HJFC7iXGTFPZDU8AX26DfYJHqA8ZIk/nP70vX6+jQo4=)
                          3: 3137372e35322e35362e302f32322d3234203d3e20323632393038.roa (hash: CYet3kKlZMq0bVz27G5Q21l43aX4pgm4MbAST0VmGkg=)
                          4: 323830343a3363383a3a2f33322d3336203d3e20323632393038.roa (hash: 0NGsiRjwRCwvztO0HQSwZ5G2u2NyRn8qasG89BQU4fw=)
                          5: 3137372e39312e3133362e302f32322d3234203d3e20323632393038.roa (hash: MAXqeMftrDx2qfIrNZeHi1Fg5BRXYViJaP7l5pPBgyg=)
                          6: B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl (hash: 6eLNxJBekzuQ188eP8HtrrwTdk5m/lhgQw0PBArHlLc=)
                          7: 3137372e33382e32342e302f32322d3234203d3e20323632393038.roa (hash: dGUuPMBAaOXlYlzrmpRc8TAZ4SZ3d8aZsmWcWxA6jcY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl
                          rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 20:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:eb:c6:e0:99:35:10:fc:8f:05:33:c1:af:ae:db:9a:cd:25:c3:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0337D2970CB09ECBA6C93B9F730526E8ABD179C
        Validity
            Not Before: Nov  4 18:11:03 2025 GMT
            Not After : Nov  5 20:40:03 2025 GMT
        Subject: CN=0B10C72766AC29F0DC860899BB9ED87696CF9A5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a0:5b:ed:8f:c8:60:fc:45:e5:65:04:3f:0d:
                    9d:10:ed:c5:46:53:fb:60:ec:d8:d0:95:7f:3c:58:
                    3b:8f:77:1a:f2:48:aa:ee:77:f9:02:2c:c4:fb:8b:
                    53:4e:74:75:d4:18:12:1e:d2:2e:d2:ff:b7:20:ef:
                    d4:e9:ed:10:68:c3:67:e6:0b:8e:97:3c:67:17:ea:
                    ed:f8:f6:aa:d0:a8:e1:ed:34:dc:dc:ca:6d:cb:ad:
                    51:7b:35:60:c6:d4:1c:43:5b:d2:bd:ed:2c:91:cc:
                    cb:01:de:bb:5b:9f:39:d6:80:7d:79:63:a1:7b:36:
                    8f:b7:ad:dd:d7:b7:89:79:ec:1b:18:a7:40:87:27:
                    e1:11:d9:28:3a:38:93:14:77:8c:db:e5:ef:5f:ce:
                    19:74:d6:13:19:50:5a:9b:fb:c8:11:4d:6c:f1:c9:
                    92:f3:9f:4b:60:78:a4:ed:9c:9e:01:f4:f0:c8:83:
                    a3:ef:a0:51:ce:7f:fa:6f:e5:da:7e:cb:e3:8a:65:
                    4b:5b:37:29:a3:33:c6:23:0d:fe:01:53:46:57:27:
                    d8:fe:1f:60:7e:ed:0e:c9:13:7a:57:0b:50:20:9e:
                    7a:20:19:aa:0e:ec:21:a2:a7:59:f2:af:12:6f:a5:
                    32:9a:f5:88:2f:86:ee:a0:ff:bd:ac:76:78:f9:ea:
                    c7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:10:C7:27:66:AC:29:F0:DC:86:08:99:BB:9E:D8:76:96:CF:9A:5C
            X509v3 Authority Key Identifier:
                keyid:B0:33:7D:29:70:CB:09:EC:BA:6C:93:B9:F7:30:52:6E:8A:BD:17:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:04:7a:df:ad:5c:40:c6:4e:cb:61:ca:13:5f:52:e6:3e:de:
         1a:4d:3a:e6:21:d5:a4:98:6b:6c:1b:d4:68:26:15:79:74:12:
         80:43:44:a2:3d:0e:cd:55:67:20:f3:46:00:b2:ff:30:dd:48:
         fd:5c:a1:58:92:49:22:30:bc:1b:91:ff:ca:9f:89:d9:73:6d:
         74:1d:7d:6f:86:6c:87:d3:9b:93:8b:be:b6:e6:42:52:f2:47:
         7c:ed:28:70:ec:d8:11:08:51:53:7b:f6:60:ce:96:b7:df:7d:
         28:1c:2b:f9:e5:ba:17:9b:21:48:b6:2d:b7:31:e5:94:08:62:
         91:71:ab:0a:ae:59:c5:9c:2c:1d:01:ee:76:df:bb:79:b5:67:
         d9:97:c2:2b:11:c3:27:3f:48:90:91:5b:e8:0d:d9:84:c0:c9:
         5c:8b:26:01:a4:0e:8f:6b:a8:a5:6b:54:52:20:bd:37:4b:1e:
         b5:f6:cc:e0:f8:ac:75:d8:f8:02:1d:3f:e2:59:c3:65:9d:4a:
         12:50:61:e5:cd:53:1f:44:d3:3e:31:97:40:f5:75:0f:f0:f4:
         28:84:59:f9:e5:ac:cd:37:37:7d:f6:fb:bc:61:e0:88:91:58:
         67:e5:ec:60:5f:f4:f1:e5:9e:48:d2:c9:20:a7:d3:3d:5d:e3:
         87:53:13:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:12:53 2025 by rpki-client