Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.mft
File:                     9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.mft (raw, json)
Hash identifier:          jgmFWxoGBA6iqWKTcnwxp0/66P2dcywywGYcw5r3DKs=
Subject key identifier:   46:AF:04:BA:7E:E5:81:6B:52:12:4F:C9:1A:71:52:61:7E:2C:9A:36
Authority key identifier: 9E:0E:FB:55:75:FC:61:F7:69:08:D5:AC:B6:53:9D:3F:8F:C5:F1:C0
Certificate issuer:       /CN=9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0
Certificate serial:       7E832A49BDD4C93E55D16965985773539BAA2F45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.mft
Manifest number:          B1
Signing time:             Tue 04 Nov 2025 19:25:15 +0000
Manifest this update:     Tue 04 Nov 2025 19:20:15 +0000
Manifest next update:     Wed 05 Nov 2025 20:00:15 +0000
Files and hashes:         1: 3134332e302e37342e302f32332d3233203d3e20323634303034.roa (hash: zNm/B3Y1CzpNzTlwRuiNzCX7NFzOLD4Zy0PGAms41C8=)
                          2: 323830343a323933383a633030303a3a2f33342d3334203d3e20323634303034.roa (hash: myVn1EAgj9sG6NTG4jFaH66xW+3lwM5+1+tDZfIH1K4=)
                          3: 323830343a323933383a383030303a3a2f33342d3334203d3e20323634303034.roa (hash: mCj3ujOl+nEB54+t06tAYyogUrFDIGzMOHlru86erRw=)
                          4: 323830343a323933383a3a2f33332d3333203d3e20323634303034.roa (hash: zeKUX8znB5WSnThzC3EmKSuiyPALS2hFLzW9rItBAk0=)
                          5: 3134332e302e37322e302f32342d3234203d3e20323634303034.roa (hash: ylZqcZsTbFo1ESPAFwbOVfP1nml7lzGmPamkuaey/Nc=)
                          6: 3134332e302e37332e302f32342d3234203d3e20323634303034.roa (hash: nsOkSVvVataQRa0O8ZBtjPKHBCIFBtzxgKmNdY0vO5I=)
                          7: 9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.crl (hash: h9WcXA+wGYVRUDxl3GJ/lPrZMmtNcGk+Y2mhSE8WK7U=)
                          8: 3134332e302e37322e302f32332d3233203d3e20323634303034.roa (hash: D6FCa3CQ1lDOabhazan0BweVeiMpGTyw6ZtxlvHJq/0=)
                          9: 323830343a323933383a383030303a3a2f33332d3333203d3e20323634303034.roa (hash: fOLg0qhf/zXLapk506L8znGyUujiRezPBgCcPnDisFM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.crl
                          rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:83:2a:49:bd:d4:c9:3e:55:d1:69:65:98:57:73:53:9b:aa:2f:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0
        Validity
            Not Before: Nov  4 19:20:15 2025 GMT
            Not After : Nov  5 20:00:15 2025 GMT
        Subject: CN=46AF04BA7EE5816B52124FC91A7152617E2C9A36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:a5:d6:60:64:f3:de:41:67:3b:95:a1:d0:
                    51:ec:28:e5:51:65:4b:7d:7c:6e:27:fb:ee:be:d9:
                    53:33:c0:5d:67:e5:e3:2b:29:73:9d:bc:72:73:6c:
                    22:16:fe:13:58:98:6c:38:ab:86:52:cb:30:ed:94:
                    f6:9b:f7:20:af:9e:e3:de:2d:b7:58:c0:57:b9:8b:
                    96:40:3d:66:3f:05:f0:20:c5:d4:62:f1:e2:e7:0d:
                    b2:fb:2a:09:94:b1:24:ec:ab:2c:52:f4:76:96:cf:
                    57:02:b3:1f:f6:54:a4:db:69:a1:a3:43:21:75:3a:
                    4c:d6:08:f7:88:40:9c:48:0a:a2:47:c0:2f:92:8a:
                    5c:8a:25:15:80:f8:22:93:7d:1c:17:03:3d:ed:25:
                    4b:eb:4c:85:fb:85:fc:07:ae:ad:e9:04:b2:5e:45:
                    26:ef:13:f4:77:3d:ff:a8:b7:2b:cb:87:03:bf:b7:
                    3f:61:a7:df:72:d6:d9:9a:5b:89:19:4d:60:a8:e0:
                    90:cf:17:e7:0a:4f:d5:06:ed:db:5f:93:41:43:80:
                    92:61:e4:46:a6:0b:3e:2b:53:fe:aa:7d:02:52:1f:
                    f3:83:f4:54:ca:78:94:38:4e:4c:78:db:4a:d4:b0:
                    4b:6a:b6:be:67:8b:92:11:d3:d1:89:2c:83:0a:cc:
                    06:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AF:04:BA:7E:E5:81:6B:52:12:4F:C9:1A:71:52:61:7E:2C:9A:36
            X509v3 Authority Key Identifier:
                keyid:9E:0E:FB:55:75:FC:61:F7:69:08:D5:AC:B6:53:9D:3F:8F:C5:F1:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:43:c8:06:b4:a7:72:db:11:3c:c5:be:62:9f:ec:05:92:6f:
         24:ea:21:57:ca:ad:d7:8d:09:39:36:a9:34:09:b4:f7:d7:2d:
         59:c6:1b:7a:bd:91:99:20:9c:57:2e:3b:89:6c:2c:6e:29:df:
         69:42:67:e8:d2:38:92:32:e2:8d:3f:54:ae:bd:c4:23:9c:60:
         38:92:eb:78:b8:03:1a:d5:4b:f4:f2:54:da:2b:11:b7:2f:bf:
         3e:50:88:ea:be:8b:25:46:08:56:ee:69:fa:51:56:d5:da:9d:
         81:e6:d1:f4:55:5f:a0:8e:c9:f2:7d:78:a0:23:ca:9d:67:c9:
         7d:0d:ad:23:e8:51:73:85:d8:53:e7:f2:11:9c:cf:27:b6:22:
         2d:48:b4:c9:a4:70:00:52:1e:64:d6:a7:9a:29:37:8a:7c:f0:
         0f:08:be:0d:d0:17:17:0a:31:7a:75:80:48:bc:b2:09:7f:c8:
         6a:90:8e:78:a5:1f:6c:d5:25:d6:0d:2b:c3:7a:7a:33:af:7b:
         a2:2c:e1:5f:a1:ab:4a:4e:ef:bc:8c:f1:b2:e3:64:ef:90:80:
         c3:a0:6b:0a:c6:a8:8d:7b:f4:62:79:a1:a6:94:11:74:63:6a:
         b1:70:14:2e:8f:23:b7:e1:ee:a0:07:eb:07:72:46:18:a6:55:
         98:af:a0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:41:34 2025 by rpki-client