Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/2102F1879CA4D61251D630CB79E650FDA70A9610.mft
File:                     2102F1879CA4D61251D630CB79E650FDA70A9610.mft (raw, json)
Hash identifier:          jWcxJ1v05qbACIiLBZs4x8zS4TnR4PG2MP50K+T5Za4=
Subject key identifier:   31:B9:12:AF:D2:BD:DA:2E:8A:36:F2:F6:F2:A2:5E:6D:7D:EB:C4:4A
Authority key identifier: 21:02:F1:87:9C:A4:D6:12:51:D6:30:CB:79:E6:50:FD:A7:0A:96:10
Certificate issuer:       /CN=2102F1879CA4D61251D630CB79E650FDA70A9610
Certificate serial:       697DEF43DA03A9364BCA5D878A69AF65CB24FAC4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2102F1879CA4D61251D630CB79E650FDA70A9610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/2102F1879CA4D61251D630CB79E650FDA70A9610.mft
Manifest number:          0305
Signing time:             Tue 04 Nov 2025 21:00:57 +0000
Manifest this update:     Tue 04 Nov 2025 20:55:57 +0000
Manifest next update:     Wed 05 Nov 2025 21:48:57 +0000
Files and hashes:         1: 2102F1879CA4D61251D630CB79E650FDA70A9610.crl (hash: tWwyxEl8RnRH5M4RezZ9SqkmBgf5ELauR+6WYn8dygk=)
                          2: 323830343a383636303a3a2f33322d3332203d3e20323732363339.roa (hash: 7rrIE5OP03n9aZiR4IkJPKUOmCBVjnU3eRdX3MiZIVw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/2102F1879CA4D61251D630CB79E650FDA70A9610.crl
                          rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/2102F1879CA4D61251D630CB79E650FDA70A9610.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2102F1879CA4D61251D630CB79E650FDA70A9610.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 21:48:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:7d:ef:43:da:03:a9:36:4b:ca:5d:87:8a:69:af:65:cb:24:fa:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2102F1879CA4D61251D630CB79E650FDA70A9610
        Validity
            Not Before: Nov  4 20:55:57 2025 GMT
            Not After : Nov  5 21:48:57 2025 GMT
        Subject: CN=31B912AFD2BDDA2E8A36F2F6F2A25E6D7DEBC44A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b9:74:36:ac:e9:7e:c2:61:94:69:20:44:5e:
                    73:a6:ee:66:fd:6c:3d:04:1b:9c:9c:56:ed:15:b1:
                    19:7c:9c:05:ee:18:05:31:07:e6:41:cd:c4:97:49:
                    d5:62:4e:81:3b:d2:f1:f6:93:96:04:20:bc:0d:06:
                    6a:7c:5f:32:38:e1:c4:bc:a0:eb:b5:e8:4d:4f:49:
                    6c:a6:d4:48:3b:4f:1d:7d:f5:24:d4:5c:6d:38:d0:
                    8a:ac:82:aa:48:68:d7:00:e8:a2:26:ba:de:7f:ea:
                    78:b6:cf:e4:23:28:31:fa:11:5a:64:02:8a:74:54:
                    a0:be:17:91:b2:b8:b2:d0:6c:3b:6d:7c:25:f1:22:
                    fa:8d:1e:96:6d:00:db:00:07:e1:71:e6:90:d8:68:
                    7e:99:4f:e8:c9:de:d1:6f:e9:74:06:ca:45:b8:98:
                    57:1b:20:e4:97:8d:15:da:6f:e7:11:85:74:f4:e2:
                    a5:1a:6e:a9:9e:84:60:8f:3a:4f:29:6d:b1:7c:6a:
                    f6:24:82:20:e7:2b:83:39:91:18:87:e9:57:ed:cf:
                    e1:d8:b8:d6:37:c5:1b:84:91:e0:a9:90:ff:20:44:
                    48:64:82:b4:fe:a1:bb:3c:76:a2:90:c0:ee:eb:be:
                    dc:d4:95:db:57:ef:1d:81:1a:66:bf:df:dc:2d:12:
                    e5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B9:12:AF:D2:BD:DA:2E:8A:36:F2:F6:F2:A2:5E:6D:7D:EB:C4:4A
            X509v3 Authority Key Identifier:
                keyid:21:02:F1:87:9C:A4:D6:12:51:D6:30:CB:79:E6:50:FD:A7:0A:96:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/2102F1879CA4D61251D630CB79E650FDA70A9610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2102F1879CA4D61251D630CB79E650FDA70A9610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/2102F1879CA4D61251D630CB79E650FDA70A9610.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:da:27:31:a4:52:88:0f:fc:18:0a:86:9f:d0:16:dd:e4:01:
         9a:f6:36:f2:bf:2d:4f:dd:90:e2:4c:9b:73:f5:c1:34:33:26:
         d0:f4:b3:e1:a6:fc:cb:c0:a6:ba:5f:c0:1a:7f:e3:56:ae:8c:
         b6:21:1a:cb:45:c6:b9:28:9c:8a:0f:43:41:23:7e:c5:9a:12:
         9f:35:46:07:de:eb:a5:e2:10:72:42:a5:5c:6e:07:69:05:dd:
         db:80:d4:dc:75:49:da:e9:3e:e3:bc:cd:16:e5:a2:3b:72:83:
         56:97:0e:b0:56:c4:42:1e:2b:a4:e8:e0:ff:65:bc:1c:6a:c0:
         8b:8e:93:ee:dd:e1:35:4c:7c:e4:b9:f8:78:70:79:52:13:09:
         ae:39:7c:d1:56:6a:f5:2b:81:6f:1f:6d:aa:06:75:0a:a4:33:
         c7:fb:75:06:b3:31:10:7a:d7:d6:f3:13:dd:3d:1b:36:e1:e1:
         bb:2d:76:71:65:e3:b2:0d:90:ba:78:14:e1:02:66:3d:b9:d8:
         a7:73:f1:15:12:51:92:fa:f7:b2:28:58:73:1b:0d:5c:49:8f:
         9e:3f:1f:8f:b7:04:8a:c4:7a:4d:94:68:b3:f3:5a:c5:bc:e9:
         5d:d7:ac:54:96:3f:22:76:c8:7c:dc:bf:e8:e5:44:da:1b:1e:
         71:20:57:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaX3vQ9oDqTZLyl2HimmvZcsk+sQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjEwMkYxODc5Q0E0RDYxMjUxRDYzMENCNzlFNjUwRkRB
NzBBOTYxMDAeFw0yNTExMDQyMDU1NTdaFw0yNTExMDUyMTQ4NTdaMDMxMTAvBgNV
BAMTKDMxQjkxMkFGRDJCRERBMkU4QTM2RjJGNkYyQTI1RTZEN0RFQkM0NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDguXQ2rOl+wmGUaSBEXnOm7mb9
bD0EG5ycVu0VsRl8nAXuGAUxB+ZBzcSXSdViToE70vH2k5YEILwNBmp8XzI44cS8
oOu16E1PSWym1Eg7Tx199STUXG040IqsgqpIaNcA6KImut5/6ni2z+QjKDH6EVpk
Aop0VKC+F5GyuLLQbDttfCXxIvqNHpZtANsAB+Fx5pDYaH6ZT+jJ3tFv6XQGykW4
mFcbIOSXjRXab+cRhXT04qUabqmehGCPOk8pbbF8avYkgiDnK4M5kRiH6Vftz+HY
uNY3xRuEkeCpkP8gREhkgrT+obs8dqKQwO7rvtzUldtX7x2BGma/39wtEuWhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUMbkSr9K92i6KNvL28qJebX3rxEowHwYDVR0j
BBgwFoAUIQLxh5yk1hJR1jDLeeZQ/acKlhAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDR4aHpDanRHcWZ5SjRUUHUyZjZGQU1YaTVWVUpvS2RMbjRScmtvVjIz
RXkvMS8yMTAyRjE4NzlDQTRENjEyNTFENjMwQ0I3OUU2NTBGREE3MEE5NjEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxMDJGMTg3OUNBNEQ2MTI1
MUQ2MzBDQjc5RTY1MEZEQTcwQTk2MTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RDR4aHpDanRHcWZ5SjRUUHUyZjZGQU1YaTVWVUpvS2RMbjRScmtvVjIzRXkvMS8y
MTAyRjE4NzlDQTRENjEyNTFENjMwQ0I3OUU2NTBGREE3MEE5NjEwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA9onMaRSiA/8GAqGn9AW3eQBmvY28r8tT92Q4kybc/XBNDMm0PSz4ab8y8Cm
ul/AGn/jVq6MtiEay0XGuSicig9DQSN+xZoSnzVGB97rpeIQckKlXG4HaQXd24DU
3HVJ2uk+47zNFuWiO3KDVpcOsFbEQh4rpOjg/2W8HGrAi46T7t3hNUx85Ln4eHB5
UhMJrjl80VZq9SuBbx9tqgZ1CqQzx/t1BrMxEHrX1vMT3T0bNuHhuy12cWXjsg2Q
ungU4QJmPbnYp3PxFRJRkvr3sihYcxsNXEmPnj8fj7cEisR6TZRos/NaxbzpXdes
VJY/InbIfNy/6OVE2hsecSBXiQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:13:34 2025 by rpki-client