Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.mft
File:                     EC28538427BF2A4CA218209DB9A2008B4E587ABA.mft (raw, json)
Hash identifier:          yz9q/9KfOxg7jhFU4vC4vFIMwKPG2S6jwE4yjJEadPc=
Subject key identifier:   40:D0:A8:F8:3E:D1:53:55:DC:AD:69:D7:6C:DB:7A:1C:A9:13:F6:66
Authority key identifier: EC:28:53:84:27:BF:2A:4C:A2:18:20:9D:B9:A2:00:8B:4E:58:7A:BA
Certificate issuer:       /CN=EC28538427BF2A4CA218209DB9A2008B4E587ABA
Certificate serial:       4B077B484A485A4E7EC4DE102C2D26C1CCFD96B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.mft
Manifest number:          15
Signing time:             Tue 04 Nov 2025 13:51:49 +0000
Manifest this update:     Tue 04 Nov 2025 13:46:49 +0000
Manifest next update:     Wed 05 Nov 2025 17:44:49 +0000
Files and hashes:         1: 3137302e3233312e3231362e302f32322d3332203d3e20323633393133.roa (hash: LGJFtoJ/5f7kUhBbqipv9aqZxJXmU86VDJYfKYZzSGE=)
                          2: EC28538427BF2A4CA218209DB9A2008B4E587ABA.crl (hash: 4BNV789Zk7XW2KNf3XLPWN8IVss2R4XpydPdQM0vcyQ=)
                          3: 3133382e3230342e3234302e302f32322d3332203d3e20323633393133.roa (hash: x8UabOroN6QkGpYnEDPdNa/H+X5n/UmweHIEJlXFBNo=)
                          4: 323830343a323739633a3a2f33322d313238203d3e20323633393133.roa (hash: kTwsM8Qiq2gQcGD2lqZ52qnePWS12dJFhK/7Q5LGcUg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.crl
                          rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 17:44:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:07:7b:48:4a:48:5a:4e:7e:c4:de:10:2c:2d:26:c1:cc:fd:96:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC28538427BF2A4CA218209DB9A2008B4E587ABA
        Validity
            Not Before: Nov  4 13:46:49 2025 GMT
            Not After : Nov  5 17:44:49 2025 GMT
        Subject: CN=40D0A8F83ED15355DCAD69D76CDB7A1CA913F666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:36:ec:22:83:4f:b3:ed:74:13:36:0e:c1:44:
                    b4:ff:7f:20:30:e8:31:33:1b:b4:79:e1:69:f7:35:
                    4f:3b:44:74:13:46:72:06:cc:f4:20:26:74:82:b6:
                    7e:88:0d:f2:7e:72:9b:5b:54:4e:56:7a:2e:1c:b9:
                    48:79:b9:05:68:57:70:00:be:88:9e:49:28:9b:87:
                    38:e1:af:7b:d2:58:49:7f:47:03:48:00:54:fd:4f:
                    e5:42:67:19:40:a9:18:b1:17:90:c3:0d:20:c2:5b:
                    ee:67:2e:1d:b0:3f:0d:1c:31:41:45:34:25:db:f6:
                    75:69:97:31:15:43:77:7d:6e:bc:3f:5c:86:1f:d6:
                    92:30:9b:77:0f:69:0b:d4:e5:c2:06:06:4e:a7:d6:
                    e5:a9:35:85:f0:94:f1:44:4f:ae:88:4d:14:5d:4c:
                    f7:b7:16:9c:54:2e:87:17:71:cc:af:dc:00:93:58:
                    0e:c6:78:31:99:c2:e8:43:24:5a:71:56:97:88:35:
                    7e:29:17:c8:4e:e3:a6:1c:13:99:01:02:6f:51:09:
                    f5:5c:68:97:10:bd:fe:de:3a:15:07:df:ec:e6:55:
                    58:e1:fa:d6:16:3a:4e:a1:71:51:c9:3d:65:a2:a0:
                    4e:c3:b1:cd:c0:db:44:48:0c:73:14:64:92:0a:a2:
                    4e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D0:A8:F8:3E:D1:53:55:DC:AD:69:D7:6C:DB:7A:1C:A9:13:F6:66
            X509v3 Authority Key Identifier:
                keyid:EC:28:53:84:27:BF:2A:4C:A2:18:20:9D:B9:A2:00:8B:4E:58:7A:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:20:16:87:d6:f7:48:70:a3:e0:a7:6d:4b:dd:55:c6:5b:bf:
         f1:8a:7e:3c:eb:61:65:c1:c8:fc:99:47:ca:cb:09:7d:0c:c9:
         36:1f:1d:f2:ff:a3:e2:01:a3:1a:7f:07:4a:a1:72:88:0d:a9:
         b2:75:f0:6e:e3:de:11:71:dd:53:7a:22:96:c6:4f:84:ca:8a:
         1b:9b:9e:d0:d7:ec:1c:58:82:60:f4:f2:a2:ab:69:d5:b6:7f:
         c4:ab:1a:89:64:a7:9c:84:df:ca:ab:79:b6:c9:11:34:9c:92:
         1a:4d:ed:51:10:53:ad:e7:ea:4c:5b:78:68:a6:16:95:57:2f:
         a2:02:0e:71:02:e0:19:e4:5b:04:ca:f5:e3:e6:60:56:91:8a:
         27:57:13:b0:bc:5f:62:53:8e:65:7e:1e:2c:84:3d:40:57:c8:
         56:90:e3:5a:90:5b:e4:3a:aa:a1:4d:f9:7c:54:6e:bb:29:d2:
         17:91:7b:d9:44:a2:86:de:ab:36:cb:98:ac:2f:bf:2a:ce:4f:
         9d:09:6f:d8:86:5d:45:6d:ac:99:ab:f5:28:95:c9:45:b3:9c:
         14:e6:c2:6d:7e:1c:4f:8a:22:7b:66:5f:93:08:d6:68:16:c2:
         a7:c3:00:66:14:f2:11:28:c1:b0:e6:9b:59:8f:f3:84:16:ea:
         a1:be:2d:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSwd7SEpIWk5+xN4QLC0mwcz9lrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMyODUzODQyN0JGMkE0Q0EyMTgyMDlEQjlBMjAwOEI0
RTU4N0FCQTAeFw0yNTExMDQxMzQ2NDlaFw0yNTExMDUxNzQ0NDlaMDMxMTAvBgNV
BAMTKDQwRDBBOEY4M0VEMTUzNTVEQ0FENjlENzZDREI3QTFDQTkxM0Y2NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKNuwig0+z7XQTNg7BRLT/fyAw
6DEzG7R54Wn3NU87RHQTRnIGzPQgJnSCtn6IDfJ+cptbVE5Wei4cuUh5uQVoV3AA
voieSSibhzjhr3vSWEl/RwNIAFT9T+VCZxlAqRixF5DDDSDCW+5nLh2wPw0cMUFF
NCXb9nVplzEVQ3d9brw/XIYf1pIwm3cPaQvU5cIGBk6n1uWpNYXwlPFET66ITRRd
TPe3FpxULocXccyv3ACTWA7GeDGZwuhDJFpxVpeINX4pF8hO46YcE5kBAm9RCfVc
aJcQvf7eOhUH3+zmVVjh+tYWOk6hcVHJPWWioE7Dsc3A20RIDHMUZJIKok4pAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQNCo+D7RU1XcrWnXbNt6HKkT9mYwHwYDVR0j
BBgwFoAU7ChThCe/KkyiGCCduaIAi05YerowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1dUOWlvM3JtTVBOTWVVdURTdW9kaDR6UWM2V282cktXeDZ4OHFzSGh3
aFcvMC9FQzI4NTM4NDI3QkYyQTRDQTIxODIwOURCOUEyMDA4QjRFNTg3QUJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDMjg1Mzg0MjdCRjJBNENB
MjE4MjA5REI5QTIwMDhCNEU1ODdBQkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1dUOWlvM3JtTVBOTWVVdURTdW9kaDR6UWM2V282cktXeDZ4OHFzSGh3aFcvMC9F
QzI4NTM4NDI3QkYyQTRDQTIxODIwOURCOUEyMDA4QjRFNTg3QUJBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAyAWh9b3SHCj4KdtS91Vxlu/8Yp+POthZcHI/JlHyssJfQzJNh8d8v+j4gGj
Gn8HSqFyiA2psnXwbuPeEXHdU3oilsZPhMqKG5ue0NfsHFiCYPTyoqtp1bZ/xKsa
iWSnnITfyqt5tskRNJySGk3tURBTrefqTFt4aKYWlVcvogIOcQLgGeRbBMr14+Zg
VpGKJ1cTsLxfYlOOZX4eLIQ9QFfIVpDjWpBb5DqqoU35fFRuuynSF5F72USiht6r
NsuYrC+/Ks5PnQlv2IZdRW2smav1KJXJRbOcFObCbX4cT4oie2ZfkwjWaBbCp8MA
ZhTyESjBsOabWY/zhBbqob4tGQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:25:03 2025 by rpki-client