Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft
File:                     2431B5DDF8166029A0033562C55895BEC665B28A.mft (raw, json)
Hash identifier:          kU48e73OPlQjpyJo8Myx1B3qjVS7Uj5bkXVUvQdhslo=
Subject key identifier:   0E:9D:54:CB:8F:1A:C8:0F:75:C5:96:EF:8F:02:2E:65:91:87:48:6D
Authority key identifier: 24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A
Certificate issuer:       /CN=2431B5DDF8166029A0033562C55895BEC665B28A
Certificate serial:       682E216CF8F04BF02D1F2B61FAE58C6DE8E91225
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft
Manifest number:          01C1
Signing time:             Wed 05 Nov 2025 02:55:10 +0000
Manifest this update:     Wed 05 Nov 2025 02:50:10 +0000
Manifest next update:     Thu 06 Nov 2025 03:35:10 +0000
Files and hashes:         1: 323830343a3964633a3a2f33322d3332203d3e20323632393938.roa (hash: 2UBG7d+bHwFW2FQvesDKoYV9SA5Z+hJVwX3I2WUsCkE=)
                          2: 3138362e3232342e38332e302f32342d3234203d3e20323632393938.roa (hash: mFUm1wFbrB7vKcngHZCRhhCN5g1DTPFQpJqftmtVKgM=)
                          3: 3138362e3232342e38302e302f32342d3234203d3e20323632393938.roa (hash: 2kz4LIFLN85yZUgis3ptm+jWa2pLEzTOV44AlKX2mWM=)
                          4: 3138362e3232342e38312e302f32342d3234203d3e20323632393938.roa (hash: nhvgT2W2XZeOE4hWrQx6ZuaEM7BevykoJaZ3mrzlafM=)
                          5: 3138362e3232342e38302e302f32322d3232203d3e20323632393938.roa (hash: 6z3Jvn11u7WpggXzPyX3eztV00Cy6MKkHbiddjUnBHg=)
                          6: 3138362e3232342e38342e302f32322d3234203d3e20323632393938.roa (hash: jp7m+hi+KoBsfG3clAu9CPNSCYaNR5ai9lgzM1Y89VY=)
                          7: 2431B5DDF8166029A0033562C55895BEC665B28A.crl (hash: /Mg4v6GSUNubhmeREw0fUxtDOhyYrVd+2ygFL59df5k=)
                          8: 3138362e3232342e38302e302f32312d3231203d3e20323632393938.roa (hash: 799mqDcBHmOpNJcFzHH4u8XHP1EAJbMtaVWcjtNUFMk=)
                          9: 3138362e3232342e38322e302f32342d3234203d3e20323632393938.roa (hash: 3StsKczt/UfxOpNfPOOnS9kOYhYaRu0pzgmOVeKkvAk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl
                          rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 03:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2e:21:6c:f8:f0:4b:f0:2d:1f:2b:61:fa:e5:8c:6d:e8:e9:12:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2431B5DDF8166029A0033562C55895BEC665B28A
        Validity
            Not Before: Nov  5 02:50:10 2025 GMT
            Not After : Nov  6 03:35:10 2025 GMT
        Subject: CN=0E9D54CB8F1AC80F75C596EF8F022E659187486D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:10:b7:1a:37:12:d9:e7:df:91:31:d6:d7:30:
                    a2:df:34:62:3f:de:97:f5:0d:e7:dd:83:d4:7c:fe:
                    bc:19:fa:79:2a:e0:ec:d8:45:5d:9d:5d:f6:91:4c:
                    e3:27:6c:38:73:71:12:8b:99:23:30:45:f2:67:7b:
                    9c:58:d4:d7:49:6c:d3:f8:92:66:cf:a6:74:60:99:
                    b7:b2:1c:ec:7d:29:bb:9a:c3:12:2c:0c:f4:8a:7b:
                    5e:c2:33:5f:ed:75:e7:07:72:43:19:4f:b0:6a:4a:
                    52:8a:f1:8f:6c:89:ce:bc:f4:e5:26:82:22:02:3a:
                    37:d3:a9:9d:1d:b8:34:6d:d5:06:ef:64:dc:17:79:
                    09:f9:ca:c3:9f:35:69:14:4c:c5:4d:3d:2e:8e:75:
                    fc:28:a2:ee:4b:7a:c1:6f:97:44:fb:b5:8a:9f:2f:
                    78:e4:e3:d6:2e:61:d5:52:f3:c4:6f:fc:08:b2:00:
                    a7:d7:80:a8:26:87:c9:52:dd:c5:78:56:54:d8:f2:
                    d7:db:d2:a9:ec:77:c1:f7:eb:ef:16:4d:9f:96:b9:
                    90:26:74:2c:a8:81:8c:34:5b:b3:d1:88:35:76:cc:
                    ed:22:7b:3c:40:d5:57:ca:d9:f0:cb:d9:1a:8b:3b:
                    1d:2f:37:a3:27:61:22:83:a5:02:61:3f:0b:76:65:
                    a8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9D:54:CB:8F:1A:C8:0F:75:C5:96:EF:8F:02:2E:65:91:87:48:6D
            X509v3 Authority Key Identifier:
                keyid:24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:6d:05:37:77:ae:e1:27:b3:9b:cd:f0:d8:b9:fb:90:b1:ca:
         fb:1c:8a:6d:1e:92:3e:03:2b:a1:3c:88:2a:c0:07:9a:09:53:
         8a:45:1c:40:63:69:8b:f5:32:53:e3:8a:86:99:7d:b6:cb:14:
         d0:15:d7:d5:59:8e:e2:65:4a:b8:46:fd:a7:0a:d3:dd:1a:39:
         9c:b3:1f:b1:5a:13:cd:9f:0b:36:71:fd:0e:a7:42:ba:49:85:
         5d:35:e2:2b:5c:fd:54:03:f5:aa:ad:cb:d7:94:9a:20:be:5b:
         dd:6e:90:f0:a2:5c:77:0e:e2:3b:e2:ff:f4:44:30:0e:b1:c0:
         d0:90:c8:a3:b1:02:a5:34:31:8c:15:22:6a:3c:2a:02:bd:f5:
         7a:50:a1:09:d3:92:0a:eb:f2:7e:c4:c3:42:6f:66:9d:fb:b6:
         ff:ef:62:ef:81:d0:d9:dd:a0:e2:cd:b7:98:83:e7:c9:10:6d:
         34:11:44:6c:69:43:de:92:a0:3d:07:f6:16:1d:0e:ea:0f:2d:
         83:a7:79:1c:66:62:80:1f:9a:ab:12:6e:eb:d2:48:32:59:e1:
         18:b4:19:3e:ee:f6:0f:55:34:7b:47:29:c9:8a:64:79:1c:93:
         21:9f:40:fd:09:25:3b:d4:b0:67:b5:11:a8:b8:9e:12:5e:3b:
         72:8c:43:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaC4hbPjwS/AtHyth+uWMbejpEiUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQzMUI1RERGODE2NjAyOUEwMDMzNTYyQzU1ODk1QkVD
NjY1QjI4QTAeFw0yNTExMDUwMjUwMTBaFw0yNTExMDYwMzM1MTBaMDMxMTAvBgNV
BAMTKDBFOUQ1NENCOEYxQUM4MEY3NUM1OTZFRjhGMDIyRTY1OTE4NzQ4NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBELcaNxLZ59+RMdbXMKLfNGI/
3pf1Defdg9R8/rwZ+nkq4OzYRV2dXfaRTOMnbDhzcRKLmSMwRfJne5xY1NdJbNP4
kmbPpnRgmbeyHOx9KbuawxIsDPSKe17CM1/tdecHckMZT7BqSlKK8Y9sic689OUm
giICOjfTqZ0duDRt1QbvZNwXeQn5ysOfNWkUTMVNPS6Odfwoou5LesFvl0T7tYqf
L3jk49YuYdVS88Rv/AiyAKfXgKgmh8lS3cV4VlTY8tfb0qnsd8H36+8WTZ+WuZAm
dCyogYw0W7PRiDV2zO0iezxA1VfK2fDL2RqLOx0vN6MnYSKDpQJhPwt2ZailAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUDp1Uy48ayA91xZbvjwIuZZGHSG0wHwYDVR0j
BBgwFoAUJDG13fgWYCmgAzVixViVvsZlsoowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3hnSGJYcXZ2U3I4Q0FKZWNEdDZhN0c3dFNqVzRKYlVmeEZDaXg1amtw
UlUvMC8yNDMxQjVEREY4MTY2MDI5QTAwMzM1NjJDNTU4OTVCRUM2NjVCMjhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0MzFCNURERjgxNjYwMjlB
MDAzMzU2MkM1NTg5NUJFQzY2NUIyOEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q3hnSGJYcXZ2U3I4Q0FKZWNEdDZhN0c3dFNqVzRKYlVmeEZDaXg1amtwUlUvMC8y
NDMxQjVEREY4MTY2MDI5QTAwMzM1NjJDNTU4OTVCRUM2NjVCMjhBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT20FN3eu4Sezm83w2Ln7kLHK+xyKbR6SPgMroTyIKsAHmglTikUcQGNpi/Uy
U+OKhpl9tssU0BXX1VmO4mVKuEb9pwrT3Ro5nLMfsVoTzZ8LNnH9DqdCukmFXTXi
K1z9VAP1qq3L15SaIL5b3W6Q8KJcdw7iO+L/9EQwDrHA0JDIo7ECpTQxjBUiajwq
Ar31elChCdOSCuvyfsTDQm9mnfu2/+9i74HQ2d2g4s23mIPnyRBtNBFEbGlD3pKg
PQf2Fh0O6g8tg6d5HGZigB+aqxJu69JIMlnhGLQZPu72D1U0e0cpyYpkeRyTIZ9A
/QklO9SwZ7URqLieEl47coxDsQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:12:08 2025 by rpki-client