Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.mft
File:                     2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.mft (raw, json)
Hash identifier:          t6K8LC0CMioMO0D+luZ0QNBLKPdmUYqYOgbap/lWoVk=
Subject key identifier:   D6:63:6C:F5:EB:3F:A1:F7:63:E3:5B:E5:03:0F:21:B4:A6:CA:A9:BA
Authority key identifier: 2B:A0:F1:A2:59:4E:57:38:C3:12:26:58:FD:A5:BF:DA:F6:6D:4E:20
Certificate issuer:       /CN=2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20
Certificate serial:       400CD775D08EC238A64CC0060F69CDDEDBEF29B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.mft
Manifest number:          87
Signing time:             Wed 05 Nov 2025 12:19:44 +0000
Manifest this update:     Wed 05 Nov 2025 12:14:44 +0000
Manifest next update:     Thu 06 Nov 2025 14:28:44 +0000
Files and hashes:         1: 323830343a343464383a383030303a3a2f33332d3333203d3e20323637363537.roa (hash: 9A3cX7k7kk2IJpB44lk3hlv1TswpdFdx1DMVnvG/hKw=)
                          2: 323830343a343464383a3a2f33332d3333203d3e20323637363537.roa (hash: fofo5LEclRsN25dyqv5FM8Psn+rvWBQBv16VnCSHHKo=)
                          3: 323830343a343464383a3a2f33322d3332203d3e20323637363537.roa (hash: cuPNuR6f/unuifUQxVS0d26Own5a7oHMvIJYpooXwQ0=)
                          4: 34352e3232342e3131322e302f32322d3234203d3e20323637363537.roa (hash: u4vxwdC/Vm4BxLFrw347cV1aKyGF5wyQSZiJYKVZ51g=)
                          5: 2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.crl (hash: xJjW1cokgSpdwU/mm8q3sYtz8rvYFMoVvtkgMlbbaDk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.crl
                          rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 14:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:0c:d7:75:d0:8e:c2:38:a6:4c:c0:06:0f:69:cd:de:db:ef:29:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20
        Validity
            Not Before: Nov  5 12:14:44 2025 GMT
            Not After : Nov  6 14:28:44 2025 GMT
        Subject: CN=D6636CF5EB3FA1F763E35BE5030F21B4A6CAA9BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:95:a4:b4:62:61:19:03:73:30:32:25:56:
                    eb:a1:f9:4f:cd:4a:c8:fb:60:a6:c3:a7:2b:4f:56:
                    33:11:24:d9:c1:72:bc:ab:48:89:47:cb:b3:40:86:
                    73:9a:c6:34:02:d8:a0:9e:fc:2d:df:44:f4:08:0e:
                    5d:47:00:5a:95:18:e9:e5:16:79:de:0f:cc:45:89:
                    31:46:ed:fc:60:a8:c4:18:37:bd:14:09:3a:6f:47:
                    e3:03:7f:01:bd:85:f1:b4:e2:2b:9d:55:f0:ac:ab:
                    9a:22:a6:47:77:04:30:f0:4a:41:5c:e8:77:fe:27:
                    b4:54:7b:8e:cc:a2:b4:b6:72:53:cb:0b:a8:f7:da:
                    a8:7e:2a:ad:3b:68:15:82:fb:ce:af:5f:50:e0:e7:
                    39:a1:58:ee:42:82:c6:0b:83:5e:ef:e9:f7:9b:36:
                    c9:d9:e3:aa:b0:e2:4d:ea:d3:ce:17:24:ce:2e:04:
                    2c:60:e6:cc:09:55:79:cb:71:80:a4:a4:8e:9a:a0:
                    59:4b:33:7f:12:9b:f9:09:e7:d6:c2:9e:eb:03:f5:
                    ae:66:17:af:37:41:38:a1:ae:c4:f5:d1:fa:60:44:
                    90:ed:dd:d8:6d:e0:45:dd:2f:da:4c:82:80:87:30:
                    2e:68:2f:e5:d8:43:62:83:53:fe:3c:4f:26:f2:de:
                    2e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:63:6C:F5:EB:3F:A1:F7:63:E3:5B:E5:03:0F:21:B4:A6:CA:A9:BA
            X509v3 Authority Key Identifier:
                keyid:2B:A0:F1:A2:59:4E:57:38:C3:12:26:58:FD:A5:BF:DA:F6:6D:4E:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d7:96:21:67:6a:21:78:15:03:6d:28:57:05:23:cb:ac:0d:
         a6:07:e6:10:0a:18:69:5b:55:08:5f:51:75:c3:fb:f9:5e:8d:
         db:84:71:45:91:bc:bd:85:64:6a:43:fb:4e:05:de:5c:c2:d0:
         60:98:a1:d7:cf:d3:d2:e5:88:8b:03:1e:0a:e4:6a:ea:18:03:
         33:00:62:21:73:33:c3:bc:d5:b6:aa:a0:f8:cf:05:b0:89:3b:
         d8:67:6a:bf:b2:d5:2e:71:34:84:68:b8:3c:84:3e:32:6f:66:
         e2:1d:6a:a1:a6:4e:c8:09:7b:5c:af:7f:32:2a:7a:a7:4b:04:
         7e:f5:d0:fd:cc:9a:31:5b:da:ed:6e:be:dd:0f:3e:43:1d:8d:
         3e:e7:3f:d1:a7:d9:5e:a5:b5:c4:b3:a8:97:eb:c3:1f:46:67:
         a1:2a:9e:45:a7:82:03:71:47:3d:4c:9a:c8:e6:08:16:ef:ed:
         4f:0f:65:4f:f9:16:09:70:5c:71:31:79:f2:23:3e:35:ce:42:
         1a:95:a5:3c:ee:73:16:8a:65:11:20:1b:7e:b5:88:22:94:ae:
         f1:c0:cf:25:4a:09:4a:b0:bb:f0:97:8b:e8:e8:46:c7:e6:fd:
         b1:40:81:fc:a7:ea:10:d6:db:8a:1c:65:96:46:a0:9e:eb:7d:
         ea:9a:5d:59
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQAzXddCOwjimTMAGD2nN3tvvKbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJBMEYxQTI1OTRFNTczOEMzMTIyNjU4RkRBNUJGREFG
NjZENEUyMDAeFw0yNTExMDUxMjE0NDRaFw0yNTExMDYxNDI4NDRaMDMxMTAvBgNV
BAMTKEQ2NjM2Q0Y1RUIzRkExRjc2M0UzNUJFNTAzMEYyMUI0QTZDQUE5QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwD5WktGJhGQNzMDIlVuuh+U/N
Ssj7YKbDpytPVjMRJNnBcryrSIlHy7NAhnOaxjQC2KCe/C3fRPQIDl1HAFqVGOnl
FnneD8xFiTFG7fxgqMQYN70UCTpvR+MDfwG9hfG04iudVfCsq5oipkd3BDDwSkFc
6Hf+J7RUe47MorS2clPLC6j32qh+Kq07aBWC+86vX1Dg5zmhWO5CgsYLg17v6feb
NsnZ46qw4k3q084XJM4uBCxg5swJVXnLcYCkpI6aoFlLM38Sm/kJ59bCnusD9a5m
F683QTihrsT10fpgRJDt3dht4EXdL9pMgoCHMC5oL+XYQ2KDU/48Tyby3i7DAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1mNs9es/ofdj41vlAw8htKbKqbowHwYDVR0j
BBgwFoAUK6DxollOVzjDEiZY/aW/2vZtTiAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlhrd0t3WTV1eUFTdzhSYnpxNU14YzFqY1RpYnQxY3Jza2R1UlZLNU41
UzMvMC8yQkEwRjFBMjU5NEU1NzM4QzMxMjI2NThGREE1QkZEQUY2NkQ0RTIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQTBGMUEyNTk0RTU3MzhD
MzEyMjY1OEZEQTVCRkRBRjY2RDRFMjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Rlhrd0t3WTV1eUFTdzhSYnpxNU14YzFqY1RpYnQxY3Jza2R1UlZLNU41UzMvMC8y
QkEwRjFBMjU5NEU1NzM4QzMxMjI2NThGREE1QkZEQUY2NkQ0RTIwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXNeWIWdqIXgVA20oVwUjy6wNpgfmEAoYaVtVCF9RdcP7+V6N24RxRZG8vYVk
akP7TgXeXMLQYJih18/T0uWIiwMeCuRq6hgDMwBiIXMzw7zVtqqg+M8FsIk72Gdq
v7LVLnE0hGi4PIQ+Mm9m4h1qoaZOyAl7XK9/Mip6p0sEfvXQ/cyaMVva7W6+3Q8+
Qx2NPuc/0afZXqW1xLOol+vDH0ZnoSqeRaeCA3FHPUyayOYIFu/tTw9lT/kWCXBc
cTF58iM+Nc5CGpWlPO5zFoplESAbfrWIIpSu8cDPJUoJSrC78JeL6OhGx+b9sUCB
/KfqENbbihxllkagnut96ppdWQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:07:06 2025 by rpki-client