Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.mft
File:                     32D842DEE7974134E5B4C88618DC7A30F4029092.mft (raw, json)
Hash identifier:          NZpwM8Wqvuo02IYW68Sc+HWQwul+v1riJCsheW2fU2A=
Subject key identifier:   16:CA:23:9C:84:8B:80:DC:4F:65:56:B6:AF:F2:2D:53:56:12:27:C5
Authority key identifier: 32:D8:42:DE:E7:97:41:34:E5:B4:C8:86:18:DC:7A:30:F4:02:90:92
Certificate issuer:       /CN=32D842DEE7974134E5B4C88618DC7A30F4029092
Certificate serial:       36B86096B0B96F11D3C54050E64AB5A3BC8F49C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D842DEE7974134E5B4C88618DC7A30F4029092.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.mft
Manifest number:          DF
Signing time:             Tue 04 Nov 2025 23:16:03 +0000
Manifest this update:     Tue 04 Nov 2025 23:11:03 +0000
Manifest next update:     Thu 06 Nov 2025 02:15:03 +0000
Files and hashes:         1: 3136382e3139372e3233322e302f32322d3234203d3e20323635343836.roa (hash: YJPbZrvwzSSWSjZuPHgpa8o7Dw9WTOzm4P+Lnl2+R5U=)
                          2: 32D842DEE7974134E5B4C88618DC7A30F4029092.crl (hash: iUsSRc6CT6AwNKWxJx4hVbrNXuvaAL/HJzwwczTbeEk=)
                          3: 323830343a333465303a3a2f33322d3336203d3e20323635343836.roa (hash: 4klcD7t5hexwDr8cLiyMtHpRwuumdH8GWpggWQVNH1A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.crl
                          rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D842DEE7974134E5B4C88618DC7A30F4029092.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 02:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b8:60:96:b0:b9:6f:11:d3:c5:40:50:e6:4a:b5:a3:bc:8f:49:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32D842DEE7974134E5B4C88618DC7A30F4029092
        Validity
            Not Before: Nov  4 23:11:03 2025 GMT
            Not After : Nov  6 02:15:03 2025 GMT
        Subject: CN=16CA239C848B80DC4F6556B6AFF22D53561227C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:95:68:6d:76:0b:de:5f:04:7c:c2:39:da:7a:
                    f4:c9:93:42:5b:fc:e5:97:6a:b2:c8:f4:11:b8:a9:
                    49:71:87:0c:4e:40:0a:63:3b:87:66:87:17:86:4e:
                    05:cf:d3:00:e5:e8:f9:0e:0f:fc:0d:fe:fc:93:8e:
                    63:ff:8d:7f:1d:ec:0d:b5:7b:72:43:0e:21:a2:6e:
                    dd:97:34:03:7f:f8:e3:54:10:1f:fc:2a:bd:67:88:
                    80:7b:52:bd:07:b7:4a:d5:1a:6a:e7:fc:65:a3:d0:
                    1f:d6:e6:90:3d:27:96:da:81:7f:93:eb:12:10:4f:
                    db:3f:df:a3:2b:e4:86:21:47:c8:0c:2d:08:02:22:
                    28:12:60:e9:fe:50:80:59:bc:4e:10:e5:53:72:a4:
                    99:16:b6:72:ed:f4:d3:6c:37:22:31:ec:0a:17:aa:
                    99:02:66:88:94:11:9f:77:ed:d6:cb:52:33:c7:8b:
                    87:d8:38:7a:2e:dd:3f:fe:58:9b:68:9e:0b:8a:83:
                    5d:07:a7:27:de:83:7b:71:68:59:2b:33:23:e7:4e:
                    f5:f7:aa:21:bf:f4:cb:59:11:2b:b2:39:7e:d9:23:
                    4c:8d:5d:95:11:44:fb:cc:33:cc:58:5b:97:30:fe:
                    55:4a:ea:86:e0:d7:23:c8:65:fc:c6:ea:bc:c2:46:
                    06:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CA:23:9C:84:8B:80:DC:4F:65:56:B6:AF:F2:2D:53:56:12:27:C5
            X509v3 Authority Key Identifier:
                keyid:32:D8:42:DE:E7:97:41:34:E5:B4:C8:86:18:DC:7A:30:F4:02:90:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D842DEE7974134E5B4C88618DC7A30F4029092.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:84:d5:64:3a:58:72:6a:29:88:fc:b9:c2:44:09:a9:ea:fe:
         75:e2:c4:7f:34:82:11:02:20:2b:c5:0c:79:7d:ee:10:d2:75:
         77:e1:56:60:59:3c:6b:17:bd:47:3b:56:63:a5:4e:bd:c1:01:
         b9:1f:54:38:4b:cf:d7:0d:56:0e:74:b8:e8:5e:9c:e0:a0:40:
         7d:4b:87:4b:fa:0e:82:2a:80:ba:81:b5:54:23:11:98:21:94:
         c4:c6:6b:1b:47:4b:86:f6:89:62:68:57:67:05:f2:9c:07:1f:
         fa:56:8a:9e:9d:cb:de:11:a7:2e:4f:b5:8e:ce:8f:0e:65:e2:
         ae:4d:aa:0d:c3:14:a5:09:89:98:78:06:40:ad:f8:01:f7:2e:
         6c:5e:79:d0:9e:98:89:16:53:32:a8:3a:37:ca:db:82:8d:21:
         a7:14:93:16:3b:39:38:f1:2e:35:51:b6:37:2d:2e:ab:92:b5:
         a3:69:3e:8e:f8:04:88:08:2c:11:10:fa:1b:4a:b4:24:57:7c:
         8d:6c:33:bd:f6:e6:b4:b1:a9:90:4c:7a:31:19:08:6e:5a:39:
         32:b4:f7:11:5b:7b:dd:50:56:01:16:d5:f5:30:23:58:c6:de:
         67:a0:9e:00:90:f9:16:d5:9d:8b:f6:2c:ae:55:2c:69:93:0c:
         a8:7a:4a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:19:11 2025 by rpki-client