Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
File:                     CEA74FF3945E7508599D54A721E47B3BA75706E3.mft (raw, json)
Hash identifier:          DLB5RUhy25T/CaVWKQsvO5M+W6jhrIHb4mda+CvT54g=
Subject key identifier:   A8:5C:FF:92:1E:CF:0D:AB:E3:59:D0:CC:68:86:7B:E1:86:A7:BA:F7
Authority key identifier: CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3
Certificate issuer:       /CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
Certificate serial:       6BC0714894759909E4B6CA219AB9950311034E5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
Manifest number:          4E
Signing time:             Tue 04 Nov 2025 10:08:33 +0000
Manifest this update:     Tue 04 Nov 2025 10:03:33 +0000
Manifest next update:     Wed 05 Nov 2025 13:37:33 +0000
Files and hashes:         1: 34352e3136382e39322e302f32332d3233203d3e20323638303430.roa (hash: vXL3rBnLSmw+J/CZGJUcyYkEUODj5iau3OEYJ2GWr1k=)
                          2: 323830343a353730633a623030303a3a2f33362d3336203d3e20323638303430.roa (hash: VbbGJ8kXVWVaWgkpRfTJcqYFKwhfCrLnwCzYQO9WjaY=)
                          3: 323830343a353730633a393030303a3a2f33362d3336203d3e20323638303430.roa (hash: h+Y8VHW8KQwbGe6hDzwUUcFE6gQRTp4SniquNbqCvlw=)
                          4: 323830343a353730633a353030303a3a2f33362d3336203d3e20323638303430.roa (hash: xKOZCLzFhIukCU7Ho1bE8l21fKx8oMJdRkB6RP4zOU0=)
                          5: 323830343a353730633a613030303a3a2f33362d3336203d3e20323638303430.roa (hash: T3V/Fz/+CDSWTRlwglp3HyVdgtedfBKa6uhVQvV4HZM=)
                          6: 323830343a353730633a363030303a3a2f33362d3336203d3e20323638303430.roa (hash: K2v77Gt9NOI7lpPDfVMsT7/UdsiCfs7Bid43RGcyb+8=)
                          7: 323830343a353730633a333030303a3a2f33362d3336203d3e20323638303430.roa (hash: tGy459mLNyebpYZY+MbMekDYPXcRxv1h1TrwkkoKkFk=)
                          8: 323830343a353730633a343030303a3a2f33362d3336203d3e20323638303430.roa (hash: 9BWp1l5TIZv7ozJAknPOYmLX23z8eO7kjS9UJR1G2ac=)
                          9: 323830343a353730633a653030303a3a2f33362d3336203d3e20323638303430.roa (hash: t88Kw7BF7trQ4diDbERO9KwQHVsvIgc6sb+afFk1/oU=)
                          10: 323830343a353730633a3a2f33322d3332203d3e20323638303430.roa (hash: NPJlZoapyXgbKp6nQrUGfGeQejkrs2Sgotm/M7pu97Q=)
                          11: 323830343a353730633a643030303a3a2f33362d3336203d3e20323638303430.roa (hash: 7tiAzH2T7BZpiBdZ7h8cWjCqszI1cAHqi1AKIdwI+Ns=)
                          12: CEA74FF3945E7508599D54A721E47B3BA75706E3.crl (hash: F+YYzjFYsAV9HmRGvJVgybUbDpGCeVuyRtJbipexBSA=)
                          13: 323830343a353730633a3a2f33362d3336203d3e20323638303430.roa (hash: cX+NY4bOnb/vgPKQTr/m0/s7d+cdADKZKZxk5MIvTZE=)
                          14: 323830343a353730633a663030303a3a2f33362d3336203d3e20323638303430.roa (hash: DDqiXH4DdttjGY2bJj8hMTSCzoazExdYreFMNjG5kNw=)
                          15: 323830343a353730633a633030303a3a2f33362d3336203d3e20323638303430.roa (hash: O7Oqr//PpcCqpzqFcZFT9boA2UaSvzJGXYDNBvE/tdI=)
                          16: 323830343a353730633a383030303a3a2f33362d3336203d3e20323638303430.roa (hash: NFU0jsGK6nSlrz0zk/uZrUWGBjONw0UGc1cZM4BbMUI=)
                          17: 323830343a353730633a373030303a3a2f33362d3336203d3e20323638303430.roa (hash: qEGTNLA+KBcnLwyZCSUh18M49As5kWTLHnJHsfSSMfE=)
                          18: 34352e3136382e39332e302f32342d3234203d3e20323638303430.roa (hash: IUZPl3HABE+NbxOlmkkLFMZO5STQT9Ai+fogmJfb7iY=)
                          19: 323830343a353730633a313030303a3a2f33362d3336203d3e20323638303430.roa (hash: XX4RgqWrgK0cN07dELop4PmkV3SAb55I/eZ0jEmBII0=)
                          20: 323830343a353730633a323030303a3a2f33362d3336203d3e20323638303430.roa (hash: Q6zbgVZ9/2xEzK0l0oVACRPG06HR5I8bst3e2ItEODc=)
                          21: 34352e3136382e39322e302f32342d3234203d3e20323638303430.roa (hash: K5wxrWM8xGNa7I2Y8rel/TySV+3C7EVkaRe9ditefw4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl
                          rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 13:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c0:71:48:94:75:99:09:e4:b6:ca:21:9a:b9:95:03:11:03:4e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
        Validity
            Not Before: Nov  4 10:03:33 2025 GMT
            Not After : Nov  5 13:37:33 2025 GMT
        Subject: CN=A85CFF921ECF0DABE359D0CC68867BE186A7BAF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7d:51:bd:a4:b7:73:5c:05:8f:6c:94:26:d4:
                    36:11:14:c2:a3:12:f2:ea:d6:a3:77:aa:97:e7:4e:
                    ee:67:be:c8:76:5b:48:c6:a8:e8:aa:9a:0b:30:5c:
                    ee:03:71:a0:5b:f6:1e:b6:0b:df:a4:9c:c8:8c:fa:
                    78:98:fb:f1:4e:d2:17:c5:b6:04:e0:3d:da:37:e1:
                    81:71:00:f0:5a:55:4e:dc:3c:59:28:bf:c4:d6:71:
                    e8:3b:50:11:5b:0c:d4:8c:95:79:a9:55:27:83:8e:
                    cd:6f:63:36:08:db:8a:4d:8b:1f:b2:18:92:43:d3:
                    57:0b:40:ab:ad:ba:a6:8b:76:b9:4e:52:7f:d1:7a:
                    8c:e9:5c:f6:e8:e0:73:7e:ae:af:d7:d6:bd:70:5d:
                    7d:43:47:33:24:62:97:57:4e:1e:03:7f:24:1a:91:
                    ff:6c:f6:32:f6:ed:d2:ba:9d:14:70:16:b0:f4:41:
                    3a:84:7a:35:fd:68:01:cd:13:22:cd:eb:57:c6:ce:
                    c2:69:89:9b:e2:d1:ed:76:25:98:96:b8:dc:54:2d:
                    32:c8:71:6b:bc:c5:7d:79:85:71:bb:fd:89:f2:3e:
                    a0:18:b9:a8:3b:42:1b:70:62:98:68:b3:6a:e1:16:
                    95:2e:07:69:6b:bd:f6:f1:bb:d2:7f:32:bd:52:00:
                    12:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5C:FF:92:1E:CF:0D:AB:E3:59:D0:CC:68:86:7B:E1:86:A7:BA:F7
            X509v3 Authority Key Identifier:
                keyid:CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:94:e7:8f:49:ca:6d:a7:fe:db:e9:13:3f:46:a1:ee:e4:3f:
         a4:cd:83:e1:80:54:bd:22:d4:a5:2c:09:4c:79:44:95:24:e1:
         01:31:b7:9d:4e:98:a1:d4:19:7d:2f:9f:25:03:c9:9b:43:dc:
         9a:11:98:e0:71:9b:ef:44:1f:2d:fb:a1:60:a8:51:e6:98:f2:
         aa:e5:4b:f6:a8:9a:0f:aa:26:28:f9:9d:04:7a:7e:3b:15:e8:
         04:74:b8:49:cb:b4:3f:7b:5b:ed:11:de:18:22:88:af:b7:f1:
         f3:b9:2f:19:ca:b7:6b:03:aa:35:a5:e9:e2:68:cd:3a:33:ad:
         90:d2:b4:4b:25:e1:c0:48:5f:c1:2c:29:de:f2:b1:df:b4:89:
         25:89:13:78:d8:4a:d7:3a:c1:10:f6:ef:41:c6:78:4e:c3:29:
         3a:7b:bf:8a:3b:01:1b:ed:a8:9c:ff:2d:e1:bb:e5:48:5d:9b:
         f5:a3:83:2b:17:26:ec:4e:ad:be:97:8c:d3:ad:b5:e2:81:fa:
         d2:f2:03:99:bf:48:d8:ec:04:28:fc:54:10:9d:0a:ee:5e:b0:
         55:08:0b:8b:e1:0d:1f:fb:fb:2a:b4:6e:bc:10:ac:32:94:b6:
         ce:b8:2d:53:21:a5:bf:25:4a:56:93:34:f3:84:f3:54:24:36:
         50:d9:24:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUa8BxSJR1mQnktsohmrmVAxEDTlswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VBNzRGRjM5NDVFNzUwODU5OUQ1NEE3MjFFNDdCM0JB
NzU3MDZFMzAeFw0yNTExMDQxMDAzMzNaFw0yNTExMDUxMzM3MzNaMDMxMTAvBgNV
BAMTKEE4NUNGRjkyMUVDRjBEQUJFMzU5RDBDQzY4ODY3QkUxODZBN0JBRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCifVG9pLdzXAWPbJQm1DYRFMKj
EvLq1qN3qpfnTu5nvsh2W0jGqOiqmgswXO4DcaBb9h62C9+knMiM+niY+/FO0hfF
tgTgPdo34YFxAPBaVU7cPFkov8TWceg7UBFbDNSMlXmpVSeDjs1vYzYI24pNix+y
GJJD01cLQKutuqaLdrlOUn/ReozpXPbo4HN+rq/X1r1wXX1DRzMkYpdXTh4DfyQa
kf9s9jL27dK6nRRwFrD0QTqEejX9aAHNEyLN61fGzsJpiZvi0e12JZiWuNxULTLI
cWu8xX15hXG7/YnyPqAYuag7QhtwYphos2rhFpUuB2lrvfbxu9J/Mr1SABLNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUqFz/kh7PDavjWdDMaIZ74YanuvcwHwYDVR0j
BBgwFoAUzqdP85RedQhZnVSnIeR7O6dXBuMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzJqSDQ4OUhzWHBtelh2ZjhYV2c1RGcyRFo4NVU2RmJjVm1NUHFMRm9G
NmcvMC9DRUE3NEZGMzk0NUU3NTA4NTk5RDU0QTcyMUU0N0IzQkE3NTcwNkUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFQTc0RkYzOTQ1RTc1MDg1
OTlENTRBNzIxRTQ3QjNCQTc1NzA2RTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RzJqSDQ4OUhzWHBtelh2ZjhYV2c1RGcyRFo4NVU2RmJjVm1NUHFMRm9GNmcvMC9D
RUE3NEZGMzk0NUU3NTA4NTk5RDU0QTcyMUU0N0IzQkE3NTcwNkUzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxZTnj0nKbaf+2+kTP0ah7uQ/pM2D4YBUvSLUpSwJTHlElSThATG3nU6YodQZ
fS+fJQPJm0PcmhGY4HGb70QfLfuhYKhR5pjyquVL9qiaD6omKPmdBHp+OxXoBHS4
Scu0P3tb7RHeGCKIr7fx87kvGcq3awOqNaXp4mjNOjOtkNK0SyXhwEhfwSwp3vKx
37SJJYkTeNhK1zrBEPbvQcZ4TsMpOnu/ijsBG+2onP8t4bvlSF2b9aODKxcm7E6t
vpeM06214oH60vIDmb9I2OwEKPxUEJ0K7l6wVQgLi+ENH/v7KrRuvBCsMpS2zrgt
UyGlvyVKVpM084TzVCQ2UNkkug==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:58:18 2025 by rpki-client