Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.mft
File:                     1384276F75D360EFCBAAAF9FB493DF045DE4D26B.mft (raw, json)
Hash identifier:          0bVwCMP9X+mqVw6i3SIBrttSspljHmhP5HsiwRU8aI4=
Subject key identifier:   1E:FD:81:AB:8D:1A:A7:1C:BE:D4:11:8D:04:0C:DC:37:06:87:2E:2C
Authority key identifier: 13:84:27:6F:75:D3:60:EF:CB:AA:AF:9F:B4:93:DF:04:5D:E4:D2:6B
Certificate issuer:       /CN=1384276F75D360EFCBAAAF9FB493DF045DE4D26B
Certificate serial:       59C37EB4180C193E644E66451217B64E7FAFF56F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.mft
Manifest number:          02A4
Signing time:             Wed 05 Nov 2025 07:27:06 +0000
Manifest this update:     Wed 05 Nov 2025 07:22:06 +0000
Manifest next update:     Thu 06 Nov 2025 07:42:06 +0000
Files and hashes:         1: 323830343a386335343a3a2f33322d3438203d3e20323733373936.roa (hash: RPnK8OExflfK+wdX/BgkUGzHwijxLxrJaFkQUjaRVps=)
                          2: 1384276F75D360EFCBAAAF9FB493DF045DE4D26B.crl (hash: lg2aNSre1xnogjbxfQCZZyhV6Cg1Ip1KTmXUn1ETvpA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.crl
                          rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 06:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c3:7e:b4:18:0c:19:3e:64:4e:66:45:12:17:b6:4e:7f:af:f5:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1384276F75D360EFCBAAAF9FB493DF045DE4D26B
        Validity
            Not Before: Nov  5 07:22:06 2025 GMT
            Not After : Nov  6 07:42:06 2025 GMT
        Subject: CN=1EFD81AB8D1AA71CBED4118D040CDC3706872E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:07:70:61:0d:bd:21:50:4d:95:b1:4f:3b:b2:
                    55:65:ae:eb:30:d2:24:04:10:78:67:d7:1f:b6:fc:
                    d7:39:d6:d1:b2:7e:6b:37:85:52:b3:8f:67:de:d4:
                    6f:70:5c:66:17:2f:0b:95:a7:ce:59:84:8e:a2:67:
                    3b:5b:c9:43:eb:74:fc:ab:f9:db:f4:9f:cf:07:bc:
                    fa:2b:b2:8a:55:a0:b2:fb:4e:a0:de:05:d6:8f:a3:
                    bc:34:bd:0b:8f:13:11:52:27:c6:ee:97:d4:9c:5b:
                    4f:cb:b2:21:3b:00:5f:07:b8:82:7e:11:f9:24:e5:
                    69:8e:18:9b:d2:ad:a8:af:80:9d:61:74:c2:3a:0d:
                    d7:a4:4a:7f:66:41:58:c5:06:5e:1b:40:ca:d8:f1:
                    58:64:71:fd:94:e2:bc:bc:cb:76:05:e4:28:89:87:
                    d6:20:50:c7:ec:4b:b9:d5:5e:f0:3e:97:d0:f0:9c:
                    b8:95:4f:94:f7:c3:5f:fb:92:08:80:db:ac:17:cc:
                    ca:be:7e:22:07:53:5c:54:2b:03:fc:a2:50:72:de:
                    81:1f:42:5a:3d:03:46:f6:0d:c3:8c:14:7b:c8:0e:
                    23:31:36:c9:c4:ff:8b:ec:cf:52:88:23:0e:38:51:
                    ba:77:96:19:4c:5b:51:f0:ae:50:bb:53:0e:89:a0:
                    62:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FD:81:AB:8D:1A:A7:1C:BE:D4:11:8D:04:0C:DC:37:06:87:2E:2C
            X509v3 Authority Key Identifier:
                keyid:13:84:27:6F:75:D3:60:EF:CB:AA:AF:9F:B4:93:DF:04:5D:E4:D2:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:23:18:c1:24:c2:bf:d4:fe:c8:99:0e:78:a1:60:c1:ea:1d:
         b5:68:d4:fc:5b:a0:4b:dc:97:be:f2:ff:75:d3:f7:5e:00:e2:
         f3:c6:73:27:47:a2:bd:df:06:0c:0e:a7:de:f8:2c:8e:d4:0c:
         60:59:d0:0e:9d:62:0e:a9:f1:06:b7:37:f4:6e:d6:60:9e:ca:
         ad:57:ee:8b:8f:81:12:81:2e:0c:56:99:f7:2a:90:f2:68:32:
         7b:ac:e7:36:15:85:6c:a2:77:72:49:13:53:e4:59:32:e0:2b:
         16:48:84:37:8c:bc:40:0f:ad:b3:4e:82:ff:e9:71:ea:09:75:
         b4:d7:f4:74:a9:98:50:5c:7a:a1:50:cd:44:e6:77:7a:e5:43:
         45:bc:fd:f0:db:1f:ef:06:ee:f5:08:f2:24:d7:59:90:63:24:
         35:d7:a0:4e:91:5b:dc:7d:96:cf:e8:e4:d5:e7:f2:72:40:45:
         9a:d0:29:03:36:cd:ad:6a:fc:52:3c:09:7d:b2:ed:75:5c:57:
         1d:35:a3:ab:69:d2:c1:c5:91:50:b0:d2:61:d9:8f:70:31:95:
         58:a3:0f:0e:85:b5:d5:01:ec:9b:29:98:2b:c7:82:27:5f:9c:
         9c:fb:97:7f:1d:b3:32:a7:44:38:a4:ff:2a:1d:5d:1d:dc:96:
         06:13:98:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWcN+tBgMGT5kTmZFEhe2Tn+v9W8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM4NDI3NkY3NUQzNjBFRkNCQUFBRjlGQjQ5M0RGMDQ1
REU0RDI2QjAeFw0yNTExMDUwNzIyMDZaFw0yNTExMDYwNzQyMDZaMDMxMTAvBgNV
BAMTKDFFRkQ4MUFCOEQxQUE3MUNCRUQ0MTE4RDA0MENEQzM3MDY4NzJFMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzB3BhDb0hUE2VsU87slVlrusw
0iQEEHhn1x+2/Nc51tGyfms3hVKzj2fe1G9wXGYXLwuVp85ZhI6iZztbyUPrdPyr
+dv0n88HvPorsopVoLL7TqDeBdaPo7w0vQuPExFSJ8bul9ScW0/LsiE7AF8HuIJ+
Efkk5WmOGJvSraivgJ1hdMI6DdekSn9mQVjFBl4bQMrY8Vhkcf2U4ry8y3YF5CiJ
h9YgUMfsS7nVXvA+l9DwnLiVT5T3w1/7kgiA26wXzMq+fiIHU1xUKwP8olBy3oEf
Qlo9A0b2DcOMFHvIDiMxNsnE/4vsz1KIIw44Ubp3lhlMW1HwrlC7Uw6JoGKVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHv2Bq40apxy+1BGNBAzcNwaHLiwwHwYDVR0j
BBgwFoAUE4Qnb3XTYO/Lqq+ftJPfBF3k0mswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3NzV01UWXlLd0pQeks0VkhnVnhwYWFMb1BqVEVtWWdOQzk1cnE5VGJm
MWkvMC8xMzg0Mjc2Rjc1RDM2MEVGQ0JBQUFGOUZCNDkzREYwNDVERTREMjZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzODQyNzZGNzVEMzYwRUZD
QkFBQUY5RkI0OTNERjA0NURFNEQyNkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R3NzV01UWXlLd0pQeks0VkhnVnhwYWFMb1BqVEVtWWdOQzk1cnE5VGJmMWkvMC8x
Mzg0Mjc2Rjc1RDM2MEVGQ0JBQUFGOUZCNDkzREYwNDVERTREMjZCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMCMYwSTCv9T+yJkOeKFgweodtWjU/FugS9yXvvL/ddP3XgDi88ZzJ0eivd8G
DA6n3vgsjtQMYFnQDp1iDqnxBrc39G7WYJ7KrVfui4+BEoEuDFaZ9yqQ8mgye6zn
NhWFbKJ3ckkTU+RZMuArFkiEN4y8QA+ts06C/+lx6gl1tNf0dKmYUFx6oVDNROZ3
euVDRbz98Nsf7wbu9QjyJNdZkGMkNdegTpFb3H2Wz+jk1efyckBFmtApAzbNrWr8
UjwJfbLtdVxXHTWjq2nSwcWRULDSYdmPcDGVWKMPDoW11QHsmymYK8eCJ1+cnPuX
fx2zMqdEOKT/Kh1dHdyWBhOYNA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:42:38 2025 by rpki-client