Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.mft
File:                     73D43FEADED592156D29C67CCC13A030541CD25A.mft (raw, json)
Hash identifier:          lmtoYS4hwYyNyqaZ0/Z4d9PqO/8KrT5zQjou+XAqUpg=
Subject key identifier:   80:86:EE:67:01:3D:68:49:AB:12:64:C7:4B:DD:C5:B4:50:6F:1C:1F
Authority key identifier: 73:D4:3F:EA:DE:D5:92:15:6D:29:C6:7C:CC:13:A0:30:54:1C:D2:5A
Certificate issuer:       /CN=73D43FEADED592156D29C67CCC13A030541CD25A
Certificate serial:       021E26598619256A0F8D9040290228CA010BF8D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D43FEADED592156D29C67CCC13A030541CD25A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.mft
Manifest number:          F6
Signing time:             Wed 05 Nov 2025 03:03:09 +0000
Manifest this update:     Wed 05 Nov 2025 02:58:09 +0000
Manifest next update:     Thu 06 Nov 2025 06:08:09 +0000
Files and hashes:         1: 3138372e36322e37322e302f32322d3234203d3e203532353634.roa (hash: jikdQ29cn0nPG35AKmYx84HCkVwCjzRQyWSQ0gjrPH0=)
                          2: 73D43FEADED592156D29C67CCC13A030541CD25A.crl (hash: pvQEoTi5c2U+AsO5ynA6y+PiNbHuVaHcVQB9w2Q15Yk=)
                          3: 3133382e3231392e3134342e302f32322d3234203d3e203532353634.roa (hash: OELlR2mkeHJMSjCDa14qi1nKMpWhg+xJGIybHOq+gPQ=)
                          4: 3133312e3136312e33362e302f32322d3234203d3e203532353634.roa (hash: uqHm6KJdK1pvKvy0CuTIXotwXXgMhIUxRd6ej5Ho2L0=)
                          5: 323830343a316562383a3a2f33322d3536203d3e203532353634.roa (hash: s9qbeek2fSTEjSVmUQU7vWuWcPksV6u6dEUnuyWi9Xo=)
                          6: 3137372e38352e3135362e302f32322d3234203d3e203532353634.roa (hash: JwPHUe/eVdO6bAYhYAIUNqAZxpWG8GDsedsKIz7hB0Q=)
                          7: 3137372e39312e3233362e302f32322d3234203d3e203532353634.roa (hash: swm2J5uROSFAXEvTonVKASOTeaR8WgMZC5ItpoA7oPQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.crl
                          rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D43FEADED592156D29C67CCC13A030541CD25A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 06:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1e:26:59:86:19:25:6a:0f:8d:90:40:29:02:28:ca:01:0b:f8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73D43FEADED592156D29C67CCC13A030541CD25A
        Validity
            Not Before: Nov  5 02:58:09 2025 GMT
            Not After : Nov  6 06:08:09 2025 GMT
        Subject: CN=8086EE67013D6849AB1264C74BDDC5B4506F1C1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fc:ff:95:fc:ce:58:6b:c0:ad:06:70:1b:4a:
                    70:cf:e6:30:c2:ae:8a:eb:3f:e3:4b:eb:03:1c:2d:
                    a5:69:a1:fc:75:d0:65:66:ce:ae:c0:46:fd:d5:65:
                    aa:94:61:56:4e:c9:7a:7d:9d:f4:57:61:a1:1f:fd:
                    eb:5d:19:9a:0a:ac:b4:f3:11:d8:50:ee:97:4e:cd:
                    e1:59:f2:69:f1:7e:d5:c3:10:ec:f2:21:b8:54:48:
                    fb:34:a5:f3:0c:97:51:bf:f7:4e:93:19:d7:67:3d:
                    1d:5f:b2:2b:07:6e:64:16:4d:9e:04:54:48:f8:b2:
                    af:46:2e:f7:3c:91:91:af:34:d1:18:2a:ac:59:0f:
                    7d:44:48:e2:34:1c:a1:6c:47:a3:58:f1:58:fc:70:
                    68:c5:63:36:a9:73:e8:8c:05:34:f3:da:33:ed:c3:
                    44:68:d6:f2:c5:c9:b6:e3:3d:15:37:64:d4:6e:36:
                    a3:95:2b:29:0e:d7:a5:3d:6a:32:06:55:19:c6:fb:
                    4e:e1:c0:27:c4:91:43:fa:5e:33:3c:c4:e2:7c:c0:
                    af:f1:67:22:41:13:42:4d:f2:97:de:bf:cc:06:95:
                    98:84:6f:fb:e3:b0:f8:70:67:27:35:fc:11:05:62:
                    ee:78:e1:cb:85:6b:5c:5b:06:e2:76:74:3e:76:0c:
                    a9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:86:EE:67:01:3D:68:49:AB:12:64:C7:4B:DD:C5:B4:50:6F:1C:1F
            X509v3 Authority Key Identifier:
                keyid:73:D4:3F:EA:DE:D5:92:15:6D:29:C6:7C:CC:13:A0:30:54:1C:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D43FEADED592156D29C67CCC13A030541CD25A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:4c:cd:b9:a9:b7:91:ca:86:98:e9:f8:31:88:e3:2c:51:68:
         54:43:e9:2b:1e:94:74:4f:bd:d2:0a:31:33:25:b6:55:74:83:
         4a:10:ae:9e:2d:c1:04:da:66:b2:bf:f2:03:6c:c6:cb:82:e0:
         c0:0d:66:9d:2a:51:86:35:7b:bb:a1:28:01:39:fb:0d:3c:a2:
         da:8e:71:04:5f:7d:92:d1:d4:04:5d:1d:ab:7e:87:53:2b:b1:
         03:c7:7e:f7:f2:73:c4:40:05:7f:1c:6d:5a:2e:a3:b1:41:eb:
         30:fe:6a:f3:e1:b8:bd:24:ae:66:49:4d:d3:42:67:e6:8f:85:
         ee:ac:6e:6b:99:fb:dd:a9:24:c0:b1:c2:47:86:eb:90:7b:a9:
         93:c0:9a:46:bf:2c:72:f9:09:79:d5:e3:02:33:13:6c:eb:1e:
         ff:fa:ef:a7:87:65:cd:c5:08:ae:0c:8b:f5:5a:65:1a:ab:4f:
         18:cd:43:f9:a4:0f:37:c4:63:94:bf:87:d7:22:65:22:9e:c1:
         60:c6:89:d9:be:0e:09:b8:25:18:6f:8b:88:75:10:4c:f6:35:
         32:4e:9c:3c:73:db:7f:11:92:31:fb:0f:c5:e7:23:86:6d:68:
         70:ce:fe:d0:25:36:7b:fc:6a:e1:e8:2a:4e:70:25:95:ca:a6:
         0a:46:3e:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAh4mWYYZJWoPjZBAKQIoygEL+NAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNENDNGRUFERUQ1OTIxNTZEMjlDNjdDQ0MxM0EwMzA1
NDFDRDI1QTAeFw0yNTExMDUwMjU4MDlaFw0yNTExMDYwNjA4MDlaMDMxMTAvBgNV
BAMTKDgwODZFRTY3MDEzRDY4NDlBQjEyNjRDNzRCRERDNUI0NTA2RjFDMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/P+V/M5Ya8CtBnAbSnDP5jDC
rorrP+NL6wMcLaVpofx10GVmzq7ARv3VZaqUYVZOyXp9nfRXYaEf/etdGZoKrLTz
EdhQ7pdOzeFZ8mnxftXDEOzyIbhUSPs0pfMMl1G/906TGddnPR1fsisHbmQWTZ4E
VEj4sq9GLvc8kZGvNNEYKqxZD31ESOI0HKFsR6NY8Vj8cGjFYzapc+iMBTTz2jPt
w0Ro1vLFybbjPRU3ZNRuNqOVKykO16U9ajIGVRnG+07hwCfEkUP6XjM8xOJ8wK/x
ZyJBE0JN8pfev8wGlZiEb/vjsPhwZyc1/BEFYu544cuFa1xbBuJ2dD52DKlRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUgIbuZwE9aEmrEmTHS93FtFBvHB8wHwYDVR0j
BBgwFoAUc9Q/6t7VkhVtKcZ8zBOgMFQc0lowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtkWGJnZHBGeHoxQlN1QkEydGdtUzNNZ0ZTQU5ZTldXeHlmUUU2QXly
QkwvMC83M0Q0M0ZFQURFRDU5MjE1NkQyOUM2N0NDQzEzQTAzMDU0MUNEMjVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczRDQzRkVBREVENTkyMTU2
RDI5QzY3Q0NDMTNBMDMwNTQxQ0QyNUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUtkWGJnZHBGeHoxQlN1QkEydGdtUzNNZ0ZTQU5ZTldXeHlmUUU2QXlyQkwvMC83
M0Q0M0ZFQURFRDU5MjE1NkQyOUM2N0NDQzEzQTAzMDU0MUNEMjVBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApUzNuam3kcqGmOn4MYjjLFFoVEPpKx6UdE+90goxMyW2VXSDShCuni3BBNpm
sr/yA2zGy4LgwA1mnSpRhjV7u6EoATn7DTyi2o5xBF99ktHUBF0dq36HUyuxA8d+
9/JzxEAFfxxtWi6jsUHrMP5q8+G4vSSuZklN00Jn5o+F7qxua5n73akkwLHCR4br
kHupk8CaRr8scvkJedXjAjMTbOse//rvp4dlzcUIrgyL9VplGqtPGM1D+aQPN8Rj
lL+H1yJlIp7BYMaJ2b4OCbglGG+LiHUQTPY1Mk6cPHPbfxGSMfsPxecjhm1ocM7+
0CU2e/xq4egqTnAllcqmCkY+3Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:47:33 2025 by rpki-client