Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05.mft
File:                     22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05.mft (raw, json)
Hash identifier:          lVC2lXFShAZ+aF4FAgAdnOcZetBsI0fFoiE5EnnkQLY=
Subject key identifier:   02:86:AA:0D:C1:61:62:1A:43:55:89:3C:E7:DD:CF:F7:5F:A2:AD:1B
Authority key identifier: 22:DF:C9:57:03:9A:AE:7A:7D:C1:7B:E2:EC:7A:FD:D1:75:7D:FA:05
Certificate issuer:       /CN=22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05
Certificate serial:       1D359FF304508C7F496DC775AD11BC2DA766537C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05.mft
Manifest number:          64
Signing time:             Wed 05 Nov 2025 03:02:56 +0000
Manifest this update:     Wed 05 Nov 2025 02:57:56 +0000
Manifest next update:     Thu 06 Nov 2025 05:34:56 +0000
Files and hashes:         1: 3138312e3137342e3231322e302f32322d3332203d3e20323731353438.roa (hash: yLGSJhGkACZiO+Fj4S9IYp1b/KQHvawfenbnJTm2x58=)
                          2: 323830343a376433633a3a2f33322d313238203d3e20323731353438.roa (hash: NvJFPOK0qETcnQfcGhZP3x6owhlYyfWOJqZc0HdpzOk=)
                          3: 22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05.crl (hash: zAr+jyJgm6zDsclaTTt7WXe8ds5KdbPV3j/maCqBgVU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05.crl
                          rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 05:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:35:9f:f3:04:50:8c:7f:49:6d:c7:75:ad:11:bc:2d:a7:66:53:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05
        Validity
            Not Before: Nov  5 02:57:56 2025 GMT
            Not After : Nov  6 05:34:56 2025 GMT
        Subject: CN=0286AA0DC161621A4355893CE7DDCFF75FA2AD1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b2:76:93:e5:d1:59:5e:1f:32:f6:75:5c:88:
                    ce:bc:5e:29:de:8e:d3:93:cb:0f:4f:39:9a:1e:58:
                    12:3b:e7:87:e9:c6:65:23:2a:72:5d:67:42:78:88:
                    01:63:a3:4a:f8:89:17:cc:79:5c:9e:0b:cf:0b:a7:
                    cc:8a:cf:37:39:84:d8:e2:b1:29:c0:dd:59:72:75:
                    49:cf:d4:05:b9:cc:a4:c0:bb:20:e2:9f:b2:3a:7a:
                    0f:4f:d7:b5:93:be:02:41:67:1d:6b:e5:c3:b5:1f:
                    a5:87:72:ce:33:e1:fd:45:99:fa:13:46:af:c7:c6:
                    9e:bd:8a:ec:aa:3d:69:64:15:72:81:ab:5c:ee:8e:
                    71:22:8f:29:0b:c4:e5:e4:7a:65:bf:e2:7d:94:1b:
                    de:b3:d3:57:ed:31:d7:39:e7:1f:7d:24:84:20:2a:
                    bd:cf:e3:1e:82:05:e7:33:d8:89:67:1a:bb:27:82:
                    ed:e2:82:17:17:60:c2:dd:97:96:16:bf:22:85:16:
                    ea:e7:8b:03:7d:c2:c3:13:65:de:e0:49:8c:54:b9:
                    0e:6e:9c:47:6a:22:09:f6:6e:36:2b:45:c9:53:4a:
                    67:74:57:24:d6:83:c8:87:0c:f4:18:0c:28:dc:d7:
                    0a:8f:ff:0d:6a:fe:7b:5c:8b:6c:47:0e:ea:66:6f:
                    16:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:86:AA:0D:C1:61:62:1A:43:55:89:3C:E7:DD:CF:F7:5F:A2:AD:1B
            X509v3 Authority Key Identifier:
                keyid:22:DF:C9:57:03:9A:AE:7A:7D:C1:7B:E2:EC:7A:FD:D1:75:7D:FA:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/22DFC957039AAE7A7DC17BE2EC7AFDD1757DFA05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:5a:e1:28:f8:81:83:db:c6:ac:df:c5:4f:61:ed:49:d3:db:
         44:61:72:77:8e:cc:b0:ca:39:0e:d5:b9:7c:83:c6:7b:cc:68:
         5f:14:4e:6f:2d:22:8f:2f:57:47:96:eb:a6:2f:ee:5e:34:e5:
         7b:91:e4:97:ef:3f:af:ae:6e:40:2a:a4:04:fd:37:89:d6:0b:
         81:7f:3e:2e:49:3e:cd:5c:43:dc:8a:d8:3f:08:6a:b4:9d:68:
         a0:bd:ec:58:20:25:b6:64:b3:74:6b:59:85:92:15:dc:f1:f4:
         03:63:5d:51:83:69:5d:c3:15:c5:c4:0c:2f:1b:1c:66:b3:6e:
         12:2f:c1:dd:54:e2:0d:4e:3c:f8:25:d8:fb:68:cb:6b:60:d6:
         0a:2c:da:15:08:7e:51:bc:2c:01:13:cf:51:52:e9:35:34:d8:
         17:8d:da:1b:13:b5:3c:9b:49:46:b4:fe:e0:8f:c8:4e:af:47:
         7c:29:ae:e1:59:35:bc:be:9f:67:e8:29:d0:60:c8:fe:2d:dc:
         10:27:b8:35:95:20:43:4b:b7:ad:4c:d1:88:8b:27:98:b2:30:
         c1:b4:30:b4:20:92:10:da:4b:a8:a1:f4:48:ee:08:26:bb:43:
         1b:80:db:09:4d:b6:73:22:41:60:90:e7:54:e1:b5:33:3b:37:
         01:d0:93:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:00:00 2025 by rpki-client