Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.mft
File:                     D478C8921C1F9837BE0DD110D7EC974DA1766D1D.mft (raw, json)
Hash identifier:          VhL0GukpVpRrkmivCk9cEYy5f+b4LIjRan00DzP2MNs=
Subject key identifier:   D6:E6:31:CC:81:F2:72:36:1E:EC:B6:F9:F8:56:A4:3B:BF:BD:65:FF
Authority key identifier: D4:78:C8:92:1C:1F:98:37:BE:0D:D1:10:D7:EC:97:4D:A1:76:6D:1D
Certificate issuer:       /CN=D478C8921C1F9837BE0DD110D7EC974DA1766D1D
Certificate serial:       7CE78614624B5B32EE59E468904A868FDEECD31B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.mft
Manifest number:          38
Signing time:             Tue 04 Nov 2025 17:22:50 +0000
Manifest this update:     Tue 04 Nov 2025 17:17:50 +0000
Manifest next update:     Wed 05 Nov 2025 19:23:50 +0000
Files and hashes:         1: 323830343a373636303a3a2f33332d3333203d3e20323731313038.roa (hash: V9b7q9gECkaWuu23rVc5V0kKpVe+wQoD70LNjbbovrk=)
                          2: 34352e3232382e3230302e302f32342d3234203d3e20323731313038.roa (hash: zMSIQdOiom0FPUB0OvDinl32jCLKMWbLd2xkaWW2Fj8=)
                          3: D478C8921C1F9837BE0DD110D7EC974DA1766D1D.crl (hash: 00Camp4bGHjpWOuXLq8D4Kw5Na4HAAEs5LcLw7dWc0k=)
                          4: 323830343a373636303a3a2f33322d3332203d3e20323731313038.roa (hash: btT0wr3nqBs1vGKDX21iK7zeOzmlLlMSisg42lvKamw=)
                          5: 323830343a373636303a383030303a3a2f33332d3333203d3e20323731313038.roa (hash: Tq2w23tqhH8NlzWdagW7yRpqVM6rEwmtngKPgWdEvwE=)
                          6: 34352e3232382e3230312e302f32342d3234203d3e20323731313038.roa (hash: 8dtrpBI/POxiVdW0xIrftHdRpTo6NQcBQcgG3PgxzMY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.crl
                          rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 19:23:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e7:86:14:62:4b:5b:32:ee:59:e4:68:90:4a:86:8f:de:ec:d3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D478C8921C1F9837BE0DD110D7EC974DA1766D1D
        Validity
            Not Before: Nov  4 17:17:50 2025 GMT
            Not After : Nov  5 19:23:50 2025 GMT
        Subject: CN=D6E631CC81F272361EECB6F9F856A43BBFBD65FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2a:63:02:ea:d8:10:03:a4:cc:37:07:b6:c9:
                    70:6b:bd:03:60:36:b9:1e:44:01:da:b6:bf:74:0b:
                    35:e3:24:f8:8f:2c:20:33:1a:4c:1f:8a:b2:c9:17:
                    fd:7c:c0:02:a5:ba:91:40:68:8c:a4:78:bf:c0:a7:
                    46:af:4b:64:54:a6:f9:57:8c:83:b9:39:18:ba:e5:
                    27:39:a6:60:0d:00:e5:b1:0e:35:a7:64:0d:18:67:
                    18:53:a1:5c:9f:ec:cf:d5:81:33:f5:de:db:e7:1c:
                    ad:f5:a0:45:e1:50:95:6f:31:91:b5:74:f8:50:40:
                    78:d2:0e:b4:d3:c2:e6:2c:d4:73:5c:64:73:4d:0f:
                    cf:fb:d4:9b:0b:c9:75:c6:7c:d5:65:09:78:50:a4:
                    e1:25:c7:f2:f4:38:4f:9f:db:46:47:be:90:f3:8d:
                    6d:65:c2:32:13:5d:4e:e6:37:7a:37:62:d1:d1:cc:
                    84:97:28:b3:a7:13:7a:be:ae:7d:9b:63:a7:f5:fb:
                    84:18:d1:86:4b:3f:71:de:8f:cc:61:f6:6b:9e:4b:
                    92:d6:8a:c7:6b:5b:e0:4a:83:3c:c8:1e:65:5e:59:
                    26:c7:3f:3d:5a:c4:0d:ee:d0:43:a2:d4:15:6b:85:
                    ab:92:f1:6f:fe:45:7f:77:13:01:78:d1:96:57:b5:
                    73:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E6:31:CC:81:F2:72:36:1E:EC:B6:F9:F8:56:A4:3B:BF:BD:65:FF
            X509v3 Authority Key Identifier:
                keyid:D4:78:C8:92:1C:1F:98:37:BE:0D:D1:10:D7:EC:97:4D:A1:76:6D:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:c8:48:8c:63:33:9b:c2:79:35:35:e9:c6:b7:57:3c:0e:40:
         e9:ef:fd:3d:1f:40:e3:56:f5:92:1b:42:8b:27:7e:b6:1b:5c:
         fb:24:17:25:6c:55:df:02:0d:73:10:db:4b:54:ab:df:f6:7d:
         a6:26:ce:34:44:e5:26:9f:c2:f3:ce:ed:a5:2f:0a:ad:22:c2:
         99:36:d7:0f:c9:07:07:a9:d4:43:77:0a:de:f5:ee:4f:6f:7d:
         91:a3:3d:eb:00:17:f8:cb:87:ad:86:1a:03:4a:e7:62:90:a2:
         8d:29:66:6f:bf:0f:8c:81:79:3a:10:f2:86:3a:dc:14:ae:7c:
         37:76:28:ad:e3:0f:1c:bb:16:03:d5:a7:8c:35:aa:19:d5:91:
         85:0f:b0:39:ed:bd:4d:65:09:9e:8c:6f:ca:27:7e:02:fa:23:
         76:7c:2b:53:5f:03:4c:fb:fb:3a:ad:18:e2:fb:89:70:b6:a1:
         84:ed:fd:f2:b9:ae:d5:a7:12:7e:07:0d:a5:50:68:a5:02:27:
         b1:3d:52:f5:33:73:00:52:d4:df:1c:eb:42:ec:06:91:52:6a:
         06:83:f8:3d:bc:14:34:59:73:a8:e8:0c:92:35:df:34:c2:da:
         23:cd:ab:e7:11:61:53:a2:a4:4c:eb:3f:8d:45:0e:49:a2:84:
         2f:97:75:66
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUfOeGFGJLWzLuWeRokEqGj97s0xswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ3OEM4OTIxQzFGOTgzN0JFMEREMTEwRDdFQzk3NERB
MTc2NkQxRDAeFw0yNTExMDQxNzE3NTBaFw0yNTExMDUxOTIzNTBaMDMxMTAvBgNV
BAMTKEQ2RTYzMUNDODFGMjcyMzYxRUVDQjZGOUY4NTZBNDNCQkZCRDY1RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpKmMC6tgQA6TMNwe2yXBrvQNg
NrkeRAHatr90CzXjJPiPLCAzGkwfirLJF/18wAKlupFAaIykeL/Ap0avS2RUpvlX
jIO5ORi65Sc5pmANAOWxDjWnZA0YZxhToVyf7M/VgTP13tvnHK31oEXhUJVvMZG1
dPhQQHjSDrTTwuYs1HNcZHNND8/71JsLyXXGfNVlCXhQpOElx/L0OE+f20ZHvpDz
jW1lwjITXU7mN3o3YtHRzISXKLOnE3q+rn2bY6f1+4QY0YZLP3Hej8xh9mueS5LW
isdrW+BKgzzIHmVeWSbHPz1axA3u0EOi1BVrhauS8W/+RX93EwF40ZZXtXOHAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU1uYxzIHycjYe7Lb5+FakO7+9Zf8wHwYDVR0j
BBgwFoAU1HjIkhwfmDe+DdEQ1+yXTaF2bR0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9VdllWUFl5bnY2QURhN3JadUtKa1VNOHNwVmpETXNUSmlucDM4VlR0QmZ2
LzAvRDQ3OEM4OTIxQzFGOTgzN0JFMEREMTEwRDdFQzk3NERBMTc2NkQxRC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9ENDc4Qzg5MjFDMUY5ODM3QkUw
REQxMTBEN0VDOTc0REExNzY2RDFELmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1V2
WVZQWXludjZBRGE3clp1S0prVU04c3BWakRNc1RKaW5wMzhWVHRCZnYvMC9ENDc4
Qzg5MjFDMUY5ODM3QkUwREQxMTBEN0VDOTc0REExNzY2RDFELm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
S8hIjGMzm8J5NTXpxrdXPA5A6e/9PR9A41b1khtCiyd+thtc+yQXJWxV3wINcxDb
S1Sr3/Z9pibONETlJp/C887tpS8KrSLCmTbXD8kHB6nUQ3cK3vXuT299kaM96wAX
+MuHrYYaA0rnYpCijSlmb78PjIF5OhDyhjrcFK58N3YoreMPHLsWA9WnjDWqGdWR
hQ+wOe29TWUJnoxvyid+AvojdnwrU18DTPv7Oq0Y4vuJcLahhO398rmu1acSfgcN
pVBopQInsT1S9TNzAFLU3xzrQuwGkVJqBoP4PbwUNFlzqOgMkjXfNMLaI82r5xFh
U6KkTOs/jUUOSaKEL5d1Zg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:41:26 2025 by rpki-client