Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft
File:                     D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft (raw, json)
Hash identifier:          8xv+I9ghQm5inmv+7dV/31OIWcVy5rOptkXaJVVGA34=
Subject key identifier:   19:70:46:3D:28:64:1D:73:42:44:63:B0:2F:BA:62:E0:BB:E7:D5:3B
Authority key identifier: D7:31:01:88:F9:E2:12:C8:3E:92:DE:1C:5E:BB:FE:55:EB:88:CE:9B
Certificate issuer:       /CN=D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B
Certificate serial:       173EEAD65E35E8FDCB9ECA2B2207CD9DF9CD7EAF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft
Manifest number:          8A
Signing time:             Wed 05 Nov 2025 05:25:29 +0000
Manifest this update:     Wed 05 Nov 2025 05:20:29 +0000
Manifest next update:     Thu 06 Nov 2025 08:08:29 +0000
Files and hashes:         1: 323830343a363165633a3a2f33322d3332203d3e20323639323635.roa (hash: G5uYp0ecuOs4MuZb+A34zoxhoZ/nOHhZNf5CuuFyumo=)
                          2: 34352e3138322e33322e302f32322d3232203d3e20323639323635.roa (hash: pCzDonosnG1M/FMYP6mGKnR9D//kOSapxlVj/nSW3nk=)
                          3: 34352e3138322e33352e302f32342d3234203d3e20323639323635.roa (hash: mySaU6fwlINwOm8Fs2UnMlGXQ421idH9Xpz0cducaT4=)
                          4: D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl (hash: fHC5bdknZAXfciE9zXhnibSUG7h44v6m5lOOB4uALYU=)
                          5: 34352e3138322e33322e302f32342d3234203d3e20323639323635.roa (hash: gDKF4Wwnv8nYlZMHxKheOOJRwPHFzRP2IDSa3GY2Mi4=)
                          6: 34352e3138322e33332e302f32342d3234203d3e20323639323635.roa (hash: mOXkqMNclDJ7PmlNw0yxQWbMww+lvOI6qELEBEEMLH0=)
                          7: 34352e3138322e33342e302f32342d3234203d3e20323639323635.roa (hash: xOoERlEhSi9M48UCfsW4Jh3De+JMGZNiha1TchGUW94=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl
                          rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 08:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:3e:ea:d6:5e:35:e8:fd:cb:9e:ca:2b:22:07:cd:9d:f9:cd:7e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B
        Validity
            Not Before: Nov  5 05:20:29 2025 GMT
            Not After : Nov  6 08:08:29 2025 GMT
        Subject: CN=1970463D28641D73424463B02FBA62E0BBE7D53B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:3d:3e:4a:65:6c:c8:f1:72:e9:15:f3:0c:
                    aa:8a:76:2b:78:27:e9:0f:9d:6c:46:b6:d6:a7:6d:
                    99:5e:36:46:77:1c:07:29:98:33:77:6c:5c:e7:44:
                    ee:44:99:ac:cb:46:fd:63:d0:40:12:d1:3c:ea:c7:
                    e0:a3:4b:fc:c5:45:28:11:92:3b:4e:c9:99:54:1e:
                    72:75:62:cb:5f:ce:6d:08:6b:a6:76:6a:96:f6:9e:
                    cd:5f:d1:f1:98:c7:67:8b:40:58:ae:76:b3:0d:fd:
                    6d:96:76:40:8e:61:b1:01:31:29:ef:40:5b:f9:ed:
                    a1:c6:20:b7:45:c9:7b:b1:f6:1b:ce:f3:61:8b:02:
                    73:9c:cd:0f:f1:b5:48:28:06:9e:25:76:e9:02:7a:
                    ce:b5:ed:ea:65:7d:16:38:f1:0b:d7:cb:ea:ef:78:
                    e9:9e:2c:5c:34:0c:4c:67:bc:c7:32:49:d8:51:86:
                    33:cf:28:ad:a1:a9:c5:ae:eb:73:dd:56:80:d7:42:
                    99:39:59:9e:7f:77:10:51:d1:03:0e:87:8a:8c:60:
                    e2:38:11:8a:e8:55:d2:f5:f2:56:53:a3:24:e6:6d:
                    89:8b:5b:b8:d2:5f:a7:85:b3:fa:68:05:a9:25:c1:
                    9c:a9:9f:b1:08:7f:c8:39:c3:54:82:54:97:4a:2f:
                    9a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:70:46:3D:28:64:1D:73:42:44:63:B0:2F:BA:62:E0:BB:E7:D5:3B
            X509v3 Authority Key Identifier:
                keyid:D7:31:01:88:F9:E2:12:C8:3E:92:DE:1C:5E:BB:FE:55:EB:88:CE:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:4c:fa:a4:d5:32:87:88:39:4a:56:ac:62:2c:0d:2b:4f:6c:
         90:1c:2c:14:c8:24:73:d7:ac:99:d9:87:6c:f9:dd:52:a8:38:
         f1:af:fa:ef:a9:ee:f7:c9:5a:71:1c:28:1d:0e:eb:b3:a5:ef:
         ae:93:89:a5:cb:56:d2:1c:56:99:99:b5:e0:27:f9:c4:24:3f:
         de:3e:67:7f:33:b6:af:b8:53:d6:dc:32:42:32:8a:a1:8c:0a:
         ab:37:3a:0e:12:7f:0f:49:c1:5b:ab:ab:51:f3:68:34:a4:91:
         d8:85:44:2e:87:d4:6d:9a:d1:67:6c:fe:c5:84:4f:ce:9f:52:
         2d:44:83:83:48:12:d1:38:15:89:a2:e5:d4:47:91:56:70:da:
         26:17:bd:33:85:f5:79:1d:f9:4d:bb:91:0b:a4:28:e8:d0:0f:
         7e:ca:0d:e6:2c:f2:ba:b7:2f:b8:70:9f:78:9f:7a:23:ed:b4:
         91:c0:ec:17:8b:c5:e5:b0:50:16:a9:84:32:27:b8:d3:68:fe:
         17:74:3d:a9:18:6e:61:fe:31:9b:b1:da:40:87:36:0b:57:b4:
         ef:14:b2:67:35:c7:b1:32:41:87:fe:e6:ec:8e:32:02:b5:5b:
         b6:c1:22:4a:c3:5c:53:4e:48:61:14:2d:78:ce:dd:80:1e:d1:
         15:45:b2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:32:44 2025 by rpki-client