Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft
File:                     643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft (raw, json)
Hash identifier:          uX0zix3YdizTJf/tJUWEhwpg5ALcyt4WKds/v8e0xK8=
Subject key identifier:   ED:54:78:10:C4:0B:A8:47:49:F2:A3:A7:EF:7E:3F:C5:E9:35:BC:98
Authority key identifier: 64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC
Certificate issuer:       /CN=643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC
Certificate serial:       5882735BBD127A48982F229E41391B3FF9E9BA17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft
Manifest number:          01DD
Signing time:             Wed 05 Nov 2025 12:16:57 +0000
Manifest this update:     Wed 05 Nov 2025 12:11:57 +0000
Manifest next update:     Thu 06 Nov 2025 15:40:57 +0000
Files and hashes:         1: 323830343a343036633a3a2f33322d3334203d3e20323635393538.roa (hash: nwZpfdiD9lmHVEfGr7y7ft3lumKfAxBvAzwQfB72Avg=)
                          2: 643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl (hash: 6ekC/or0oqPYpMWxoWnXMnG5VPwkm+1AIzb1AsdY75U=)
                          3: 3136342e3136332e33322e302f32322d3234203d3e20323635393538.roa (hash: 0v/IQuZRt8fOahBYOamSIWRCnGJvUKoedCirRCLNEWE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl
                          rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 15:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:82:73:5b:bd:12:7a:48:98:2f:22:9e:41:39:1b:3f:f9:e9:ba:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC
        Validity
            Not Before: Nov  5 12:11:57 2025 GMT
            Not After : Nov  6 15:40:57 2025 GMT
        Subject: CN=ED547810C40BA84749F2A3A7EF7E3FC5E935BC98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:63:52:e5:d1:f9:75:fd:5c:b2:5c:43:3b:8b:
                    58:ef:1f:80:4d:a8:3d:fe:b4:04:33:a9:65:6d:70:
                    2d:db:cd:d9:f7:85:b5:40:ce:32:64:e2:de:54:56:
                    81:27:c8:00:a5:da:55:47:7b:29:6b:d2:fb:67:60:
                    96:17:e5:0c:8f:62:e0:5f:1e:37:54:cd:4a:4a:db:
                    c1:e5:02:ab:7c:13:5a:b3:ed:d7:a9:c6:78:63:8c:
                    f0:15:2a:8e:19:e1:ac:b1:89:36:5f:c0:34:34:6d:
                    2e:c1:8e:27:1f:04:13:06:18:52:b6:74:5d:71:9e:
                    a2:7a:f0:9f:b6:25:3f:f0:57:74:6b:6e:dd:0a:11:
                    13:fe:18:db:51:56:bf:84:e2:d9:7a:09:a4:1a:96:
                    0c:4a:36:f5:02:34:06:12:67:92:db:b6:30:0c:2c:
                    93:e1:bc:86:36:6b:88:11:77:b8:b0:82:7e:57:f5:
                    bf:67:67:0b:04:76:51:34:e8:5b:17:db:b7:ca:8c:
                    e1:a9:ca:44:62:c6:aa:8c:2f:5f:71:31:89:97:c8:
                    5e:0a:be:dc:df:4c:db:f8:23:9f:b2:72:95:99:5d:
                    f9:9f:e2:32:dd:cf:ca:b1:b1:27:7d:f7:29:ae:d9:
                    55:4f:65:f3:c2:4c:eb:b5:88:99:33:d8:7d:44:69:
                    d9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:54:78:10:C4:0B:A8:47:49:F2:A3:A7:EF:7E:3F:C5:E9:35:BC:98
            X509v3 Authority Key Identifier:
                keyid:64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:bd:82:f0:c7:6e:d8:03:a5:93:ac:dc:f3:47:30:e0:d7:0d:
         56:ac:81:d6:a4:0a:c7:83:f8:a1:41:eb:3e:d7:0c:f4:55:79:
         67:af:74:6d:d3:52:ee:b1:37:94:d6:f1:9a:f6:59:61:1c:e7:
         75:6e:82:11:bf:f4:7a:48:58:f5:80:c1:92:91:f7:bf:5c:7f:
         67:12:b4:04:03:16:44:e4:10:92:b0:9d:3b:29:8a:6d:d3:3a:
         31:32:f4:0b:9a:b1:36:37:35:29:68:37:e8:d9:d0:f8:0c:dc:
         20:81:4e:45:69:bf:3e:0f:cc:89:e1:8d:fa:bc:5d:75:6f:43:
         7d:55:0e:66:68:c7:2c:64:71:ec:33:66:05:e0:4e:59:3d:d9:
         a6:d1:03:f8:b6:6a:2e:ac:6e:f7:e4:3c:ef:71:2d:9b:56:1f:
         d4:4e:4f:6c:7b:5f:40:8e:09:bb:01:06:61:be:9c:a1:2d:1a:
         5a:48:c8:f0:fa:89:11:76:a1:2d:ce:dd:37:c1:6c:7f:23:3d:
         d9:8b:cd:94:74:32:35:85:49:6d:2a:21:35:29:25:a5:48:c5:
         26:c9:37:9d:87:ea:ea:e4:77:07:1f:a6:a6:34:a7:e4:9b:c1:
         9a:d4:3e:09:29:ae:cc:35:ff:c3:d3:3f:2a:ab:08:2e:4c:da:
         9b:68:30:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:15:31 2025 by rpki-client