Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/9EB4A38624F7D695FCD98CF10F4CD7185801C022.mft
File:                     9EB4A38624F7D695FCD98CF10F4CD7185801C022.mft (raw, json)
Hash identifier:          nL3dyroIKVFUxDVrjFis3KPLR/Dds2PzlD+zKk5GYGU=
Subject key identifier:   43:25:D4:32:29:2F:9C:DD:E4:16:B3:BA:63:95:7A:40:AC:B5:CF:1A
Authority key identifier: 9E:B4:A3:86:24:F7:D6:95:FC:D9:8C:F1:0F:4C:D7:18:58:01:C0:22
Certificate issuer:       /CN=9EB4A38624F7D695FCD98CF10F4CD7185801C022
Certificate serial:       415A566B52E0D26994A824420A403947528DB673
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EB4A38624F7D695FCD98CF10F4CD7185801C022.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/9EB4A38624F7D695FCD98CF10F4CD7185801C022.mft
Manifest number:          0125
Signing time:             Tue 04 Nov 2025 10:34:00 +0000
Manifest this update:     Tue 04 Nov 2025 10:29:00 +0000
Manifest next update:     Wed 05 Nov 2025 14:05:00 +0000
Files and hashes:         1: 323830343a386362343a3a2f33322d313238203d3e20323733383136.roa (hash: vR0+t5o0BErCUNY0gBOo83IO4lHKRwqHuqdJFECLRQQ=)
                          2: 9EB4A38624F7D695FCD98CF10F4CD7185801C022.crl (hash: +4oI/Ncz+MHJ4Qi2egWYCMjr0KX7hY+5jbqXcwcj7g8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/9EB4A38624F7D695FCD98CF10F4CD7185801C022.crl
                          rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/9EB4A38624F7D695FCD98CF10F4CD7185801C022.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EB4A38624F7D695FCD98CF10F4CD7185801C022.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 14:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5a:56:6b:52:e0:d2:69:94:a8:24:42:0a:40:39:47:52:8d:b6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EB4A38624F7D695FCD98CF10F4CD7185801C022
        Validity
            Not Before: Nov  4 10:29:00 2025 GMT
            Not After : Nov  5 14:05:00 2025 GMT
        Subject: CN=4325D432292F9CDDE416B3BA63957A40ACB5CF1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5e:a1:ba:19:f4:cc:f5:fc:de:48:6c:30:32:
                    ba:44:79:95:04:b2:38:56:66:c0:c6:97:65:d9:bf:
                    e6:fd:73:cd:bb:75:20:46:75:25:8b:6a:3b:ff:9a:
                    89:5d:56:cc:4d:fa:1c:48:aa:4c:04:28:c3:71:4d:
                    e7:70:ad:36:eb:6e:6e:f8:3e:75:2c:43:46:c1:d4:
                    ff:63:b7:4c:16:d1:61:fd:d0:64:91:da:ed:a7:af:
                    aa:97:77:3a:60:d8:ca:b6:49:c0:9c:b5:f4:ce:03:
                    7a:33:0e:3d:b5:01:ca:8c:f8:07:c3:ac:42:f4:47:
                    0b:95:01:62:f8:0d:17:0d:47:83:f6:91:40:a2:4d:
                    f2:58:d4:d3:9b:bb:9f:9d:94:c9:f9:7b:d7:35:43:
                    a7:fd:d9:62:93:b7:d8:6a:6a:d5:c9:7d:b4:87:4e:
                    c7:10:36:50:4f:02:7f:be:4d:89:7d:77:14:b3:aa:
                    cc:72:f3:00:50:02:18:26:f0:30:7a:24:11:52:10:
                    58:91:98:f9:e0:cd:87:7f:78:c4:99:ab:7f:1d:5b:
                    c0:35:9b:84:f0:d5:06:fe:d3:8b:9f:38:ae:1c:ba:
                    e0:bb:e6:56:6d:2c:d4:d6:fe:36:81:2d:ce:e0:cf:
                    38:5b:5a:4d:5e:e8:ca:b9:11:45:32:5e:06:a9:18:
                    c2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:25:D4:32:29:2F:9C:DD:E4:16:B3:BA:63:95:7A:40:AC:B5:CF:1A
            X509v3 Authority Key Identifier:
                keyid:9E:B4:A3:86:24:F7:D6:95:FC:D9:8C:F1:0F:4C:D7:18:58:01:C0:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/9EB4A38624F7D695FCD98CF10F4CD7185801C022.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EB4A38624F7D695FCD98CF10F4CD7185801C022.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/9EB4A38624F7D695FCD98CF10F4CD7185801C022.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:49:19:2c:1e:63:3d:c6:9e:47:e7:73:dd:f3:e5:d1:2f:1c:
         0a:b4:2d:87:2f:0e:f3:a1:20:47:52:51:47:e3:b4:d4:47:12:
         a4:45:66:db:23:d4:8c:c1:ad:ac:28:ba:08:80:05:d9:a9:43:
         e0:43:99:d8:f2:96:bf:64:fd:ac:dc:70:42:d7:99:2b:8f:1e:
         2b:a0:a6:32:cc:71:83:72:d5:95:ff:bc:aa:26:f0:a6:16:16:
         9d:13:45:09:d1:85:6d:3a:13:9f:ba:92:02:df:6e:b5:52:05:
         82:a8:95:fb:15:5d:2a:a5:27:cd:48:d0:79:4f:30:d9:24:57:
         47:16:51:f4:2d:96:78:3c:00:8f:33:38:02:49:e4:1e:e9:e2:
         d2:69:f8:12:b1:72:e5:89:c7:59:5c:06:1e:56:2c:67:fe:10:
         21:86:23:2d:5b:7d:d3:cd:ed:24:62:7e:32:3e:a8:7c:41:78:
         c7:e7:87:4c:53:fa:38:0b:55:5a:41:b3:fb:42:f7:2d:b0:0f:
         a0:98:da:f5:27:44:58:2b:dc:f1:50:4f:3b:e0:61:bf:24:c2:
         be:81:f9:58:e3:7c:73:f1:19:56:1b:a9:ff:f1:9d:a4:52:64:
         4b:7a:de:77:0a:e9:e7:22:a1:20:63:7d:af:d0:66:96:e5:a0:
         47:f0:3a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:53:32 2025 by rpki-client