Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
File:                     4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft (raw, json)
Hash identifier:          JH0T8gDHLrnHeRXL5/edZvlSO3c9YPAqKbqLtBKKIkk=
Subject key identifier:   50:F5:EF:AF:01:1E:92:03:69:59:C6:9F:D0:AE:D6:B5:02:BE:02:BC
Authority key identifier: 41:87:E8:F9:FB:3C:C3:D2:48:54:67:1C:5A:8C:08:30:63:D7:BC:87
Certificate issuer:       /CN=4187E8F9FB3CC3D24854671C5A8C083063D7BC87
Certificate serial:       46FBF05BAF2F4A5626F76CB9744C4BA4FA563580
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
Manifest number:          5A
Signing time:             Tue 05 Aug 2025 22:10:21 +0000
Manifest this update:     Tue 05 Aug 2025 22:05:21 +0000
Manifest next update:     Thu 07 Aug 2025 02:07:21 +0000
Files and hashes:         1: 3230302e3231352e3136302e302f32322d3234203d3e20323633363536.roa (hash: DW/B5dATBRcxOk64vZZlom9Nt7hZJEF1qo3K9/Df50s=)
                          2: 3136382e3139372e37362e302f32322d3234203d3e20323633363536.roa (hash: LFEgWICXHnee4/bGPrqW2v3LYv3dbDv2jg2lbR5xrCI=)
                          3: 4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl (hash: 1O89gxnU34Ya5yvTrMtEjr2GajHYXOFEOPyeXq5OVKk=)
                          4: 3137372e36362e32382e302f32322d3234203d3e20323633363536.roa (hash: AByqAu5aFAKkVdIxOZPc9IFOefmyvDsFDw/jy1fUyFk=)
                          5: 323830343a313066633a3a2f33322d3438203d3e20323633363536.roa (hash: CNvb3KkAA8j3AXGUz/JU+MGKpekSazqUKaqrLKdRZTg=)
                          6: 3230312e3133392e38342e302f32322d3234203d3e20323633363536.roa (hash: R7MIKUFJ61JnpNcf/kEfY1SDTgaGtaQruSRJo+oewXw=)
                          7: 3137372e35322e3134342e302f32312d3234203d3e20323633363536.roa (hash: q/AvzbSaNaOyUM2kP8iTR4vF99TrI5L54LVhzTBdHSE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 02:07:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fb:f0:5b:af:2f:4a:56:26:f7:6c:b9:74:4c:4b:a4:fa:56:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4187E8F9FB3CC3D24854671C5A8C083063D7BC87
        Validity
            Not Before: Aug  5 22:05:21 2025 GMT
            Not After : Aug  7 02:07:21 2025 GMT
        Subject: CN=50F5EFAF011E92036959C69FD0AED6B502BE02BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:43:37:24:ce:86:0d:f8:8c:25:10:94:60:b7:
                    2c:c4:dd:1a:90:4d:b6:c3:09:0b:50:f0:ac:33:33:
                    56:c1:cd:86:94:dd:9d:57:0c:8f:e1:7d:41:94:b0:
                    48:78:33:fd:92:cf:5a:03:7b:a6:6f:90:30:f7:5b:
                    f1:ac:3b:ec:72:98:00:38:20:5e:bb:20:97:a0:bc:
                    b8:50:52:5c:7b:47:00:3a:82:96:fc:f2:f1:32:b6:
                    e1:6f:8e:a5:3a:07:80:2b:11:c0:8e:1a:f5:00:81:
                    80:c3:76:48:d7:6a:8d:d4:ab:5f:7e:24:47:80:0f:
                    78:41:08:e1:7d:61:0f:7a:47:1c:9a:3b:a8:f6:d0:
                    9d:ed:a5:fb:05:30:85:58:fd:9f:4e:2b:43:77:5a:
                    be:72:35:cf:4a:34:4e:d3:aa:4a:a0:8a:f1:b3:cf:
                    dc:10:b0:ad:f7:9b:d8:8a:25:d1:6a:29:19:af:08:
                    ab:6d:81:76:e7:2e:d4:7e:a9:1d:ac:61:ed:14:f9:
                    fe:0e:26:25:fc:7f:ff:35:3d:24:53:b8:d4:d4:cb:
                    c7:cf:6c:d6:cd:8c:59:0a:6a:b0:7f:a9:70:ad:43:
                    fd:8a:74:9f:4d:fc:82:5f:12:72:36:86:b3:18:93:
                    d7:b0:99:29:6d:5c:17:35:2c:d5:61:c7:25:ec:72:
                    aa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F5:EF:AF:01:1E:92:03:69:59:C6:9F:D0:AE:D6:B5:02:BE:02:BC
            X509v3 Authority Key Identifier:
                keyid:41:87:E8:F9:FB:3C:C3:D2:48:54:67:1C:5A:8C:08:30:63:D7:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:2a:e6:63:50:fd:27:bd:db:27:be:11:85:df:ee:f1:29:30:
         a9:06:0a:4d:4f:a2:8f:0d:1c:0e:15:16:68:3f:bd:25:a1:bb:
         ae:f4:85:e9:14:1a:17:71:62:f5:ca:37:4d:09:a2:3d:4f:89:
         aa:ce:da:46:78:5b:9a:e2:bd:6b:19:3a:6e:4d:b8:57:4d:09:
         f0:e0:28:c8:46:db:1f:38:f6:ba:a2:c1:4e:b4:e0:74:0a:97:
         d4:c4:bb:4e:2b:3e:8e:c7:d3:cc:c4:1f:e4:cb:88:b6:40:31:
         68:5e:73:de:e0:dc:1c:62:60:29:77:a0:f0:49:cb:2f:c3:7d:
         67:e2:40:ee:af:0e:2c:7f:2c:5f:1b:c0:30:e7:0b:a9:3a:0d:
         03:5f:32:1c:36:7f:9e:c9:06:ee:d0:d1:6b:16:b1:3d:a1:f8:
         04:75:e0:3c:e4:46:25:a9:45:6d:cf:a1:a7:f4:21:30:e4:9f:
         bd:ce:a0:a5:32:d6:f9:fe:3c:90:a5:50:21:10:e2:59:41:4e:
         14:da:a3:72:ac:90:f3:68:af:4f:8d:ae:43:78:a8:41:06:08:
         4c:eb:9f:de:7f:a2:04:53:22:49:3f:cf:0c:88:74:da:bb:f6:
         3a:f3:b4:e7:f3:8c:cb:c5:1b:f3:c3:12:ce:2d:18:fb:f7:38:
         6d:0c:25:60
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIURvvwW68vSlYm92y5dExLpPpWNYAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE4N0U4RjlGQjNDQzNEMjQ4NTQ2NzFDNUE4QzA4MzA2
M0Q3QkM4NzAeFw0yNTA4MDUyMjA1MjFaFw0yNTA4MDcwMjA3MjFaMDMxMTAvBgNV
BAMTKDUwRjVFRkFGMDExRTkyMDM2OTU5QzY5RkQwQUVENkI1MDJCRTAyQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYQzckzoYN+IwlEJRgtyzE3RqQ
TbbDCQtQ8KwzM1bBzYaU3Z1XDI/hfUGUsEh4M/2Sz1oDe6ZvkDD3W/GsO+xymAA4
IF67IJegvLhQUlx7RwA6gpb88vEytuFvjqU6B4ArEcCOGvUAgYDDdkjXao3Uq19+
JEeAD3hBCOF9YQ96RxyaO6j20J3tpfsFMIVY/Z9OK0N3Wr5yNc9KNE7TqkqgivGz
z9wQsK33m9iKJdFqKRmvCKttgXbnLtR+qR2sYe0U+f4OJiX8f/81PSRTuNTUy8fP
bNbNjFkKarB/qXCtQ/2KdJ9N/IJfEnI2hrMYk9ewmSltXBc1LNVhxyXscqrLAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUUPXvrwEekgNpWcaf0K7WtQK+ArwwHwYDVR0j
BBgwFoAUQYfo+fs8w9JIVGccWowIMGPXvIcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9LaUVrUDV6eTJkbnZ4cDNaZUdkRzFhUEFoQTZzNVpZeGp1SlloOHZDVkJ4
LzAvNDE4N0U4RjlGQjNDQzNEMjQ4NTQ2NzFDNUE4QzA4MzA2M0Q3QkM4Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80MTg3RThGOUZCM0NDM0QyNDg1
NDY3MUM1QThDMDgzMDYzRDdCQzg3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0tp
RWtQNXp5MmRudnhwM1plR2RHMWFQQWhBNnM1Wll4anVKWWg4dkNWQngvMC80MTg3
RThGOUZCM0NDM0QyNDg1NDY3MUM1QThDMDgzMDYzRDdCQzg3Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
ayrmY1D9J73bJ74Rhd/u8SkwqQYKTU+ijw0cDhUWaD+9JaG7rvSF6RQaF3Fi9co3
TQmiPU+Jqs7aRnhbmuK9axk6bk24V00J8OAoyEbbHzj2uqLBTrTgdAqX1MS7Tis+
jsfTzMQf5MuItkAxaF5z3uDcHGJgKXeg8EnLL8N9Z+JA7q8OLH8sXxvAMOcLqToN
A18yHDZ/nskG7tDRaxaxPaH4BHXgPORGJalFbc+hp/QhMOSfvc6gpTLW+f48kKVQ
IRDiWUFOFNqjcqyQ82ivT42uQ3ioQQYITOuf3n+iBFMiST/PDIh02rv2OvO05/OM
y8Ub88MSzi0Y+/c4bQwlYA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:16:19 2025 by rpki-client