Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Df3Vbg1FNQqNeT3YbwDdr3SsvyDk1XgnKspdLcmoKrZP/0/339912378B69A4318260C6F2C3D6E285FC8978A5.mft
File:                     339912378B69A4318260C6F2C3D6E285FC8978A5.mft (raw, json)
Hash identifier:          3UwoL7vGInLVvlYNto35Xa6G+KfvZJpFahpaOHAtLcE=
Subject key identifier:   CA:A0:EC:2E:0E:5F:2C:D2:1C:D2:6A:50:90:06:64:80:2B:AB:DA:1D
Authority key identifier: 33:99:12:37:8B:69:A4:31:82:60:C6:F2:C3:D6:E2:85:FC:89:78:A5
Certificate issuer:       /CN=339912378B69A4318260C6F2C3D6E285FC8978A5
Certificate serial:       3B66E2E1ABD7A570FE5FC9FE52C3AA4F77E1CBD7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/339912378B69A4318260C6F2C3D6E285FC8978A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Df3Vbg1FNQqNeT3YbwDdr3SsvyDk1XgnKspdLcmoKrZP/0/339912378B69A4318260C6F2C3D6E285FC8978A5.mft
Manifest number:          02
Signing time:             Tue 04 Nov 2025 16:55:06 +0000
Manifest this update:     Tue 04 Nov 2025 16:50:06 +0000
Manifest next update:     Wed 05 Nov 2025 18:49:06 +0000
Files and hashes:         1: 323830343a393237343a3a2f33322d313238203d3e20323734373133.roa (hash: TEmq//04GXxvrmUqV+u34XfU/orZIJj5k6DBRwEaEDI=)
                          2: 339912378B69A4318260C6F2C3D6E285FC8978A5.crl (hash: Db7PRLSBXdJ+3incXqzJVxteEMD9ltPR3Q8gCFz/EeY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Df3Vbg1FNQqNeT3YbwDdr3SsvyDk1XgnKspdLcmoKrZP/0/339912378B69A4318260C6F2C3D6E285FC8978A5.crl
                          rsync://rpki-repo.registro.br/repo/Df3Vbg1FNQqNeT3YbwDdr3SsvyDk1XgnKspdLcmoKrZP/0/339912378B69A4318260C6F2C3D6E285FC8978A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/339912378B69A4318260C6F2C3D6E285FC8978A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 18:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:66:e2:e1:ab:d7:a5:70:fe:5f:c9:fe:52:c3:aa:4f:77:e1:cb:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=339912378B69A4318260C6F2C3D6E285FC8978A5
        Validity
            Not Before: Nov  4 16:50:06 2025 GMT
            Not After : Nov  5 18:49:06 2025 GMT
        Subject: CN=CAA0EC2E0E5F2CD21CD26A50900664802BABDA1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:06:c7:d1:3f:e7:c1:51:5d:30:de:cb:a0:c4:
                    39:ec:0a:b6:e2:e5:2d:e2:44:00:26:87:dd:e7:03:
                    7e:33:fa:6d:d3:61:eb:d2:da:ea:7e:d3:67:90:1a:
                    d2:8e:56:f2:a0:08:ff:50:7e:65:9a:ad:98:15:ca:
                    3e:cd:77:54:43:04:12:29:ec:90:2a:33:a7:33:51:
                    09:6d:b1:35:88:5a:d0:eb:1f:45:70:b2:10:6c:df:
                    2b:64:57:d2:30:85:cb:b0:e8:b6:34:09:7f:22:51:
                    15:da:e4:5c:61:f3:70:8d:d2:06:44:bb:ee:34:eb:
                    d1:89:7d:96:35:df:0f:f8:80:1b:f6:37:0e:a6:91:
                    fd:cd:50:b6:3e:96:df:41:f6:54:f4:3e:27:7b:ea:
                    24:2b:8f:d4:77:9d:e5:2d:b5:91:6c:d6:b7:99:b9:
                    71:77:d3:0b:70:db:0b:ef:a4:57:ce:a1:19:bc:0a:
                    26:18:a3:a7:eb:ef:ec:50:f6:89:10:1d:83:e2:b7:
                    31:ca:5c:ec:57:0d:a3:09:e1:52:fa:d6:45:3f:fc:
                    c0:b3:7b:63:9d:04:e0:29:4e:fe:cd:ce:9c:09:0c:
                    39:b2:93:b1:d4:13:0c:fd:77:0b:dd:0c:0e:49:59:
                    f0:20:b9:9c:ca:5a:0f:52:ba:f1:bd:87:0b:e6:db:
                    38:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A0:EC:2E:0E:5F:2C:D2:1C:D2:6A:50:90:06:64:80:2B:AB:DA:1D
            X509v3 Authority Key Identifier:
                keyid:33:99:12:37:8B:69:A4:31:82:60:C6:F2:C3:D6:E2:85:FC:89:78:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Df3Vbg1FNQqNeT3YbwDdr3SsvyDk1XgnKspdLcmoKrZP/0/339912378B69A4318260C6F2C3D6E285FC8978A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/339912378B69A4318260C6F2C3D6E285FC8978A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Df3Vbg1FNQqNeT3YbwDdr3SsvyDk1XgnKspdLcmoKrZP/0/339912378B69A4318260C6F2C3D6E285FC8978A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:0c:13:d0:30:99:1f:0b:b5:27:82:2a:de:3d:87:5a:a8:59:
         67:e0:5d:db:77:87:b4:bd:19:18:5c:e9:55:fc:17:ed:91:3f:
         ad:3f:a6:ff:e1:28:30:58:0e:07:44:cc:d4:c1:0c:0c:a7:2e:
         e2:53:65:46:51:42:99:e9:01:dd:93:42:f7:b0:9e:d8:3f:0c:
         3b:1f:c4:a1:b9:dd:9a:f4:72:30:1c:38:91:ba:1d:c4:a1:55:
         48:3d:29:26:a0:da:de:91:22:3c:57:76:d1:e1:90:8b:30:44:
         ea:2d:42:fe:73:78:a0:8c:39:74:49:00:b5:92:c9:17:95:f5:
         59:4f:39:2d:8d:ec:72:25:18:37:55:a7:6e:c7:3f:68:83:b2:
         61:00:99:3c:10:68:01:cb:b8:c1:ea:c3:a5:ce:59:10:17:64:
         15:6c:7c:42:5e:88:5f:a7:01:c5:ea:3a:74:b2:0a:2e:ea:2a:
         d8:c3:dd:c0:07:52:b0:56:02:4a:cf:90:db:8d:5c:74:38:1e:
         ca:db:62:1c:7c:b7:52:26:a8:dd:03:55:9e:e6:40:67:c3:79:
         8a:73:93:47:4e:d4:7f:28:f1:9d:55:1d:7f:89:e6:cb:50:0a:
         f3:e8:12:26:3a:cc:ad:c5:59:70:9b:ef:70:a2:9b:6c:08:ca:
         4b:b8:0f:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUO2bi4avXpXD+X8n+UsOqT3fhy9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM5OTEyMzc4QjY5QTQzMTgyNjBDNkYyQzNENkUyODVG
Qzg5NzhBNTAeFw0yNTExMDQxNjUwMDZaFw0yNTExMDUxODQ5MDZaMDMxMTAvBgNV
BAMTKENBQTBFQzJFMEU1RjJDRDIxQ0QyNkE1MDkwMDY2NDgwMkJBQkRBMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjBsfRP+fBUV0w3sugxDnsCrbi
5S3iRAAmh93nA34z+m3TYevS2up+02eQGtKOVvKgCP9QfmWarZgVyj7Nd1RDBBIp
7JAqM6czUQltsTWIWtDrH0VwshBs3ytkV9Iwhcuw6LY0CX8iURXa5Fxh83CN0gZE
u+4069GJfZY13w/4gBv2Nw6mkf3NULY+lt9B9lT0Pid76iQrj9R3neUttZFs1reZ
uXF30wtw2wvvpFfOoRm8CiYYo6fr7+xQ9okQHYPitzHKXOxXDaMJ4VL61kU//MCz
e2OdBOApTv7NzpwJDDmyk7HUEwz9dwvdDA5JWfAguZzKWg9SuvG9hwvm2zhzAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUyqDsLg5fLNIc0mpQkAZkgCur2h0wHwYDVR0j
BBgwFoAUM5kSN4tppDGCYMbyw9bihfyJeKUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGYzVmJnMUZOUXFOZVQzWWJ3RGRyM1NzdnlEazFYZ25Lc3BkTGNtb0ty
WlAvMC8zMzk5MTIzNzhCNjlBNDMxODI2MEM2RjJDM0Q2RTI4NUZDODk3OEE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzOTkxMjM3OEI2OUE0MzE4
MjYwQzZGMkMzRDZFMjg1RkM4OTc4QTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGYzVmJnMUZOUXFOZVQzWWJ3RGRyM1NzdnlEazFYZ25Lc3BkTGNtb0tyWlAvMC8z
Mzk5MTIzNzhCNjlBNDMxODI2MEM2RjJDM0Q2RTI4NUZDODk3OEE1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUQwT0DCZHwu1J4Iq3j2HWqhZZ+Bd23eHtL0ZGFzpVfwX7ZE/rT+m/+EoMFgO
B0TM1MEMDKcu4lNlRlFCmekB3ZNC97Ce2D8MOx/EobndmvRyMBw4kbodxKFVSD0p
JqDa3pEiPFd20eGQizBE6i1C/nN4oIw5dEkAtZLJF5X1WU85LY3sciUYN1Wnbsc/
aIOyYQCZPBBoAcu4werDpc5ZEBdkFWx8Ql6IX6cBxeo6dLIKLuoq2MPdwAdSsFYC
Ss+Q241cdDgeyttiHHy3Uiao3QNVnuZAZ8N5inOTR07UfyjxnVUdf4nmy1AK8+gS
JjrMrcVZcJvvcKKbbAjKS7gPaQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:23:42 2025 by rpki-client