Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.mft
File:                     964DA9AAC4C916D348B028DBC19BD5C08E437560.mft (raw, json)
Hash identifier:          qSiwu2GebGDj2J7O2RJybWKDiNOpDKggB53litvhq1s=
Subject key identifier:   9F:DF:C5:69:79:A7:B3:BB:F2:EB:FB:7B:9D:B6:E7:AA:9C:DA:25:0D
Authority key identifier: 96:4D:A9:AA:C4:C9:16:D3:48:B0:28:DB:C1:9B:D5:C0:8E:43:75:60
Certificate issuer:       /CN=964DA9AAC4C916D348B028DBC19BD5C08E437560
Certificate serial:       7A0755B0B1036ABB737BEEBF5C5887BCA8B09ED4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964DA9AAC4C916D348B028DBC19BD5C08E437560.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.mft
Manifest number:          27
Signing time:             Wed 05 Nov 2025 10:19:11 +0000
Manifest this update:     Wed 05 Nov 2025 10:14:11 +0000
Manifest next update:     Thu 06 Nov 2025 13:49:11 +0000
Files and hashes:         1: 34352e3138342e3230342e302f32322d3234203d3e20323732343539.roa (hash: mA2x0qV3KIplcTlRhrF70yJUuAie/XmNs1/bE1FVb5M=)
                          2: 323830343a383138343a3a2f33322d3438203d3e20323732343539.roa (hash: nV+YnLkMXJ7NLvIA4eiIiwEhwUO0vMdc2CE6F8m39Pw=)
                          3: 964DA9AAC4C916D348B028DBC19BD5C08E437560.crl (hash: v9I6LWL69LbL1qf1PcXVZf0ITt1wCjOjcdrfK3uAFPc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.crl
                          rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964DA9AAC4C916D348B028DBC19BD5C08E437560.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 13:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:07:55:b0:b1:03:6a:bb:73:7b:ee:bf:5c:58:87:bc:a8:b0:9e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=964DA9AAC4C916D348B028DBC19BD5C08E437560
        Validity
            Not Before: Nov  5 10:14:11 2025 GMT
            Not After : Nov  6 13:49:11 2025 GMT
        Subject: CN=9FDFC56979A7B3BBF2EBFB7B9DB6E7AA9CDA250D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d9:d1:7b:56:7a:45:69:f5:56:25:36:89:f6:
                    21:4d:59:5a:e3:97:b7:8a:e0:c1:d6:2e:87:20:e2:
                    8e:3a:69:66:11:e6:9a:f1:b8:d5:26:26:53:2c:0c:
                    b0:20:46:dc:9a:bf:d8:dd:6e:6a:20:57:b1:69:4b:
                    77:44:82:12:9c:c4:6b:d8:3d:16:90:b4:eb:2b:9c:
                    fc:cc:e1:74:3a:0b:85:97:40:05:20:39:05:54:d4:
                    9e:ed:72:3a:cd:a5:a3:7f:99:9d:e5:8f:93:f8:1f:
                    27:98:a6:85:07:fb:a8:8a:43:f1:56:01:73:2d:a0:
                    b1:de:1a:ac:67:03:f4:cb:62:00:9f:ee:dd:15:62:
                    cd:dc:e8:30:d9:80:34:54:f2:0c:17:b7:b7:57:9b:
                    d9:2c:3d:91:99:df:29:2b:30:44:61:c9:52:c9:9b:
                    2f:ff:2f:7e:64:f2:d2:44:ab:ca:7d:06:3f:b6:8d:
                    64:48:d8:17:39:87:60:aa:8d:0d:24:37:78:b2:95:
                    33:19:2e:0e:81:05:3b:03:bf:ae:36:97:dd:f6:44:
                    d8:29:83:3e:28:5b:58:28:8a:b5:57:1c:7d:17:d6:
                    63:69:ad:67:d7:38:78:a2:ae:1f:72:58:c2:46:d1:
                    cb:a9:00:04:37:09:d5:cd:b2:7d:a1:a4:34:13:dd:
                    9d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DF:C5:69:79:A7:B3:BB:F2:EB:FB:7B:9D:B6:E7:AA:9C:DA:25:0D
            X509v3 Authority Key Identifier:
                keyid:96:4D:A9:AA:C4:C9:16:D3:48:B0:28:DB:C1:9B:D5:C0:8E:43:75:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964DA9AAC4C916D348B028DBC19BD5C08E437560.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:63:a1:87:1b:6f:67:20:16:f3:83:2c:53:fc:0b:27:0d:52:
         f0:25:0d:de:ff:67:46:3d:1c:72:66:8f:e6:36:57:ee:f0:9d:
         ff:fe:9d:14:d2:f2:b2:cb:a7:53:41:64:7a:dc:94:8c:14:49:
         fe:21:d1:cd:25:33:d1:28:f4:53:3c:21:70:0b:b4:75:3e:7a:
         32:69:d6:e9:37:d8:48:e8:36:3b:f0:2c:95:41:91:50:5b:d6:
         87:7b:e4:5b:43:77:a0:03:ab:ad:ac:ee:9c:46:18:85:41:c0:
         f6:34:c2:b8:16:2c:31:7e:47:e1:9c:41:5c:39:d2:f2:1e:f8:
         60:e0:33:80:e9:bd:81:34:8a:85:d9:39:54:e6:bc:7f:1e:ff:
         10:a5:30:4e:fd:8e:2a:35:3d:eb:cf:29:42:5c:b6:3f:17:02:
         4b:5a:85:8d:6d:ce:a5:84:f1:ed:26:5d:fd:75:3d:97:e4:27:
         70:30:08:cb:18:69:14:1b:f7:ac:b4:7b:b4:90:de:fb:99:34:
         f6:d5:d4:51:7d:13:7f:6c:3f:11:5e:f4:dd:c5:a4:d0:9d:da:
         94:c0:92:31:aa:fb:28:11:ed:bf:3b:63:8d:18:16:bc:9b:86:
         0a:61:c0:cf:3f:ad:fa:b4:b4:8e:15:88:1c:f9:84:79:56:2f:
         08:cf:fd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:03:53 2025 by rpki-client