Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.mft
File:                     E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.mft (raw, json)
Hash identifier:          va2Co4kusk9q3MhXEoRSeOOZk+cPkI87mwyaRkDlYQ8=
Subject key identifier:   1A:5E:91:9F:2D:C3:50:E9:30:D3:5E:FE:0E:63:6A:29:17:F1:75:E9
Authority key identifier: E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B
Certificate issuer:       /CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
Certificate serial:       69F47A31B4FE0258944F8E8DD08F4BC67738EC3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.mft
Manifest number:          32
Signing time:             Wed 05 Nov 2025 00:40:40 +0000
Manifest this update:     Wed 05 Nov 2025 00:35:40 +0000
Manifest next update:     Thu 06 Nov 2025 04:26:40 +0000
Files and hashes:         1: 3138312e3139312e3139322e302f32322d3332203d3e20323637303033.roa (hash: HqWe8buUMSqbp3alWOkDGtGwT+ExAYh8P2CIBWIytIM=)
                          2: 34352e3232352e3133362e302f32322d3332203d3e20323637303033.roa (hash: 6FczHtkx7T+NSuypo3Fmnb3I+gQoKA0rG1mPUpfm4BQ=)
                          3: 3134332e3230322e3233322e302f32322d3332203d3e20323637303033.roa (hash: QInAZJHOKDo8IYE3bjn2eUM4bc8hiByZJFollhVPo+E=)
                          4: 323830343a343661383a3a2f33322d313238203d3e20323637303033.roa (hash: o5a7RA1yY3vqJgpTqI6f/c1/6/ajxZ9bIZF62aHJWAU=)
                          5: E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl (hash: onejYpN+T9yfoa8gd6FFpvcFtegOH7Zkhc6yfwDndrQ=)
                          6: 34352e3137382e3132302e302f32322d3332203d3e20323637303033.roa (hash: YPyFEHlG/8hqiItGFIYqnaQQ3UrGwW5uXRiQ8cIo2Lo=)
                          7: 3138372e34392e34382e302f32302d3332203d3e20323637303033.roa (hash: paEezRGTE1flBI5b/gN1D5Azq6i2fHuD9YMw3JQZdwE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl
                          rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 04:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f4:7a:31:b4:fe:02:58:94:4f:8e:8d:d0:8f:4b:c6:77:38:ec:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
        Validity
            Not Before: Nov  5 00:35:40 2025 GMT
            Not After : Nov  6 04:26:40 2025 GMT
        Subject: CN=1A5E919F2DC350E930D35EFE0E636A2917F175E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:6b:ed:ca:62:36:04:ef:c6:cf:30:f8:58:
                    dd:07:f1:6d:b3:f3:7b:79:51:fd:d4:2a:2e:5e:c6:
                    76:bf:ef:3e:82:49:4c:33:48:a7:41:f3:5e:11:94:
                    e5:32:16:c4:96:d9:fa:84:8a:a0:31:4e:74:e2:32:
                    4f:15:82:aa:94:5e:8c:ef:79:a2:c5:9f:14:58:c3:
                    9d:9c:e8:fa:76:56:96:ed:32:74:b9:59:82:be:cd:
                    0d:d4:07:48:a9:9e:56:be:c3:94:ba:97:fb:45:2f:
                    2c:51:6e:16:1f:36:20:c3:67:66:61:bd:f3:2c:d7:
                    3d:80:a4:77:ab:84:cb:fc:54:ab:e2:a0:64:34:0b:
                    50:4b:a7:ef:0e:0a:d7:1b:16:d6:16:9f:1e:19:f6:
                    ce:38:c3:3b:d2:1d:a3:e8:42:67:d2:cf:44:49:6e:
                    de:44:7a:93:fc:85:bc:80:f9:f6:68:a8:bd:28:d7:
                    8a:07:50:b0:61:4f:98:6e:43:dc:cc:3a:06:ea:57:
                    0a:bc:c3:08:2e:c6:87:b2:e7:c9:e4:47:8a:d5:32:
                    4f:91:2b:24:51:d5:db:c2:58:2c:34:60:94:70:12:
                    a4:0f:8f:fe:94:11:a0:ef:c5:96:21:03:14:1a:dc:
                    db:35:35:45:09:87:02:47:e1:c5:06:8d:89:c4:b2:
                    40:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5E:91:9F:2D:C3:50:E9:30:D3:5E:FE:0E:63:6A:29:17:F1:75:E9
            X509v3 Authority Key Identifier:
                keyid:E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:3c:d3:b4:3c:f2:94:c1:bf:93:29:b4:af:22:b6:3f:21:12:
         3c:b7:dc:d2:b8:f5:12:2a:3b:35:dc:27:0a:5e:89:c2:68:e2:
         05:23:c0:1c:f2:15:5f:0b:d5:99:65:ba:8e:96:e1:5e:0a:e3:
         4e:ae:df:ff:82:b3:21:04:41:c9:17:6d:5d:7d:4d:53:f6:8d:
         48:49:98:08:29:45:af:87:73:f3:3b:6b:91:36:c0:0a:e1:be:
         e1:ae:e2:0e:77:a0:45:06:6f:51:b1:a7:55:c5:29:95:06:4f:
         46:0e:86:1a:4a:17:02:9d:8f:c2:7a:d8:b0:38:d9:b3:07:b0:
         bd:8a:2c:09:b6:2f:d1:bd:59:7e:35:e4:59:f9:01:39:6f:12:
         51:b5:fe:e3:63:f9:ed:d2:3c:8b:01:7a:1d:32:19:61:79:db:
         77:9d:8c:bc:fc:70:34:ea:18:29:8a:81:c5:4b:b1:9b:82:0b:
         e2:8c:44:72:58:5a:6c:1a:9a:aa:2d:f8:9d:89:c0:d1:6c:b4:
         e2:97:ae:7c:c8:fa:44:c2:b3:3f:d7:30:58:36:cc:31:44:7b:
         77:cb:ea:ef:f6:aa:9e:74:2d:aa:20:d7:b2:f0:f6:21:61:00:
         b1:2c:85:a5:48:6f:92:fa:be:79:56:d6:c3:81:f1:f5:3d:68:
         a3:b0:ef:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUafR6MbT+AliUT46N0I9Lxnc47DwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlBRUE0MDRBRkRBQzdENUE5QTE3NTVGM0EyN0ZGNUNB
RTEyREE3QjAeFw0yNTExMDUwMDM1NDBaFw0yNTExMDYwNDI2NDBaMDMxMTAvBgNV
BAMTKDFBNUU5MTlGMkRDMzUwRTkzMEQzNUVGRTBFNjM2QTI5MTdGMTc1RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxbGvtymI2BO/GzzD4WN0H8W2z
83t5Uf3UKi5exna/7z6CSUwzSKdB814RlOUyFsSW2fqEiqAxTnTiMk8VgqqUXozv
eaLFnxRYw52c6Pp2VpbtMnS5WYK+zQ3UB0ipnla+w5S6l/tFLyxRbhYfNiDDZ2Zh
vfMs1z2ApHerhMv8VKvioGQ0C1BLp+8OCtcbFtYWnx4Z9s44wzvSHaPoQmfSz0RJ
bt5EepP8hbyA+fZoqL0o14oHULBhT5huQ9zMOgbqVwq8wwguxoey58nkR4rVMk+R
KyRR1dvCWCw0YJRwEqQPj/6UEaDvxZYhAxQa3Ns1NUUJhwJH4cUGjYnEskAZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUGl6Rny3DUOkw017+DmNqKRfxdekwHwYDVR0j
BBgwFoAU6a6kBK/ax9WpoXVfOif/XK4S2nswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1NCdEVXbTJrRWJFc0VpeVpYZlRGMmJjMTRpVHpDem1NOFNUaWgxakp2
VHYvMC9FOUFFQTQwNEFGREFDN0Q1QTlBMTc1NUYzQTI3RkY1Q0FFMTJEQTdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5QUVBNDA0QUZEQUM3RDVB
OUExNzU1RjNBMjdGRjVDQUUxMkRBN0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1NCdEVXbTJrRWJFc0VpeVpYZlRGMmJjMTRpVHpDem1NOFNUaWgxakp2VHYvMC9F
OUFFQTQwNEFGREFDN0Q1QTlBMTc1NUYzQTI3RkY1Q0FFMTJEQTdCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZzzTtDzylMG/kym0ryK2PyESPLfc0rj1Eio7NdwnCl6JwmjiBSPAHPIVXwvV
mWW6jpbhXgrjTq7f/4KzIQRByRdtXX1NU/aNSEmYCClFr4dz8ztrkTbACuG+4a7i
DnegRQZvUbGnVcUplQZPRg6GGkoXAp2PwnrYsDjZswewvYosCbYv0b1ZfjXkWfkB
OW8SUbX+42P57dI8iwF6HTIZYXnbd52MvPxwNOoYKYqBxUuxm4IL4oxEclhabBqa
qi34nYnA0Wy04peufMj6RMKzP9cwWDbMMUR7d8vq7/aqnnQtqiDXsvD2IWEAsSyF
pUhvkvq+eVbWw4Hx9T1oo7DvrQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:13:31 2025 by rpki-client