Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft
File:                     47F932452F6354876C2CDBACA9AD34D90A502586.mft (raw, json)
Hash identifier:          dofr+rRIyyAbTSxQoyG8jr/8DYOJIV0ebvDZX9vBU4w=
Subject key identifier:   6A:E5:8C:28:3D:8D:C1:ED:F1:5B:20:E8:E8:7C:14:65:22:32:36:EF
Authority key identifier: 47:F9:32:45:2F:63:54:87:6C:2C:DB:AC:A9:AD:34:D9:0A:50:25:86
Certificate issuer:       /CN=47F932452F6354876C2CDBACA9AD34D90A502586
Certificate serial:       711A98ADD9DEC407130B4754A0DF3CBD96C4201A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft
Manifest number:          02D1
Signing time:             Wed 05 Nov 2025 13:16:17 +0000
Manifest this update:     Wed 05 Nov 2025 13:11:17 +0000
Manifest next update:     Thu 06 Nov 2025 15:45:17 +0000
Files and hashes:         1: 3138362e3139352e3131322e302f32302d3234203d3e20323632333535.roa (hash: j5Wuh+CUJlrv2XRmx6zfB9fB/F4HPmSDT+5IuOJI2eY=)
                          2: 323830343a3832633a3a2f33322d3336203d3e20323632333535.roa (hash: rL94s/lIih8apzD5jSM4GoVdRZpvy5LqwQ0Wo9KyL2o=)
                          3: 3133312e3136312e37322e302f32322d3234203d3e20323632333535.roa (hash: 6JMe7KDo8un7dKz+j7gx0Y7jJrBnCXdm9rkrC6rmfts=)
                          4: 3137372e3132352e3231362e302f32322d3234203d3e20323632333535.roa (hash: NXwOW7NVGh3xshCp15HvoOs5lQreHUVWOyZNFZbFoPk=)
                          5: 47F932452F6354876C2CDBACA9AD34D90A502586.crl (hash: rlDT+GsEpJkUwuYjzKRUFI5O0AYGiFKXaptYWEmnI7E=)
                          6: 3137372e39312e3137322e302f32322d3234203d3e20323632333535.roa (hash: qLqXLy0B76Jo01L+djXxQH/j9EOmUP1xCJozGccZfFQ=)
                          7: 3138362e3233332e3138382e302f32322d3234203d3e20323632333535.roa (hash: mttYoz3DThPN4Y0Tx9h49Jwopxzn+e9I7aY49/+TZr8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.crl
                          rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 15:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:1a:98:ad:d9:de:c4:07:13:0b:47:54:a0:df:3c:bd:96:c4:20:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F932452F6354876C2CDBACA9AD34D90A502586
        Validity
            Not Before: Nov  5 13:11:17 2025 GMT
            Not After : Nov  6 15:45:17 2025 GMT
        Subject: CN=6AE58C283D8DC1EDF15B20E8E87C1465223236EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:02:a4:c4:36:8b:14:8f:ff:c3:af:63:5d:
                    28:99:ea:82:ad:70:f5:f0:b9:d0:88:0a:3d:94:8d:
                    bc:85:59:06:dd:c4:0e:f4:02:7e:c6:e7:3c:5f:60:
                    fc:90:39:f3:60:b7:05:e1:63:22:8e:22:35:d2:83:
                    f9:cd:79:18:6d:57:84:00:e9:65:e4:d4:22:06:c1:
                    e6:be:63:3e:14:7f:6c:0a:fc:a1:f1:32:70:51:4c:
                    00:4f:84:3f:30:1d:bd:e4:a8:cf:d8:23:dc:1b:1c:
                    9a:86:90:9d:6d:7d:2c:d7:8d:87:13:d1:31:e7:bb:
                    38:c7:61:82:a4:27:a1:47:e3:04:a1:4c:ad:35:f4:
                    5b:8e:91:3a:6e:6f:d8:9d:b8:8e:68:cf:8e:cf:4f:
                    83:4b:60:81:3e:f5:a2:29:39:f7:81:d9:9b:1b:69:
                    ab:bf:04:df:79:eb:c9:66:dc:f6:33:c2:c7:7f:0f:
                    96:20:9d:f7:91:b7:52:6d:84:49:c2:b1:a6:10:06:
                    83:82:a0:c8:a6:a5:96:d1:78:04:2c:46:e1:b5:6e:
                    25:6a:35:75:3b:84:1e:e0:bf:20:ee:99:41:a6:b2:
                    29:f9:87:74:39:d5:1e:f4:b0:25:65:82:9b:ad:ba:
                    04:53:e6:5a:22:8d:bf:1a:40:56:af:04:f3:39:53:
                    a9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E5:8C:28:3D:8D:C1:ED:F1:5B:20:E8:E8:7C:14:65:22:32:36:EF
            X509v3 Authority Key Identifier:
                keyid:47:F9:32:45:2F:63:54:87:6C:2C:DB:AC:A9:AD:34:D9:0A:50:25:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d5:06:70:2c:73:22:b6:cd:c1:97:70:2c:bf:37:d8:b5:6d:
         f2:a1:16:e9:65:cb:e0:3e:7d:18:79:b9:a5:ab:ae:b9:7f:0d:
         4f:08:8e:8c:00:95:35:48:d3:03:8f:53:71:a8:ef:ea:9f:f7:
         1d:63:e3:51:cb:94:0f:ad:15:39:09:cc:5d:d8:a6:8d:0d:8a:
         eb:22:e2:4f:5e:91:e0:5a:cc:8c:96:8e:01:2d:03:5d:b4:77:
         b2:17:bc:84:9e:30:c7:f0:55:69:2d:35:4e:f3:6c:fc:8f:c2:
         41:59:54:23:a1:fb:57:27:b5:49:59:a3:74:59:14:23:59:16:
         3e:a1:4c:57:d7:96:18:f3:da:6d:80:47:4e:ef:dd:bb:fc:4a:
         63:57:94:b7:09:04:83:58:59:1d:bd:69:04:78:8f:8f:6d:d0:
         db:8c:ce:2f:d1:4d:6a:7f:75:0a:d8:88:e1:93:78:bd:d4:bd:
         60:7a:da:c0:2d:bb:e0:bf:e4:c1:14:20:3d:4e:92:7f:8e:a4:
         9a:e2:07:45:6b:d9:fb:65:63:85:43:97:a7:40:10:cb:96:80:
         b1:df:22:35:33:c4:7f:56:51:06:e8:9b:35:e1:91:05:5b:c8:
         58:77:be:b9:a0:86:cf:3e:dd:b8:7e:cb:07:de:e6:14:2b:3e:
         8a:9f:75:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:48:36 2025 by rpki-client