Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
File:                     59286C095D010494BBABEA22C9AEC94874E4F3C0.mft (raw, json)
Hash identifier:          1jvch5hCybqwmp8X9APo5MMxx2PTOKIK5RHvS1PtDfk=
Subject key identifier:   86:E1:E9:BF:5E:1D:E0:09:B3:9C:1A:20:25:FD:AB:5E:AC:16:7A:03
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       326D9E438E3C0B439DEF28CC927D26319439369C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
Manifest number:          0369
Signing time:             Wed 05 Nov 2025 02:10:00 +0000
Manifest this update:     Wed 05 Nov 2025 02:05:00 +0000
Manifest next update:     Thu 06 Nov 2025 02:10:00 +0000
Files and hashes:         1: 323830343a343837303a3a2f33322d3332203d3e20323637313231.roa (hash: wBg7OLAC+U5rb0dz2JZauuXhMzmWVbds76u/zhua/YE=)
                          2: 34352e3232392e3130342e302f32322d3234203d3e20323637313231.roa (hash: ccCrOPO+fniR7wGL9nAJb4TbiYc08AJ9vqTsfD1PrJw=)
                          3: 323830343a343837303a333030303a3a2f34302d3430203d3e20323637313231.roa (hash: PsG/KbNUa3nKz87y+qnxaBmbAh/4v58jK3L06h+VOiI=)
                          4: 323830343a343837303a3162303a3a2f34382d3438203d3e20323637313231.roa (hash: 8tcPtbeFADqn7j5wPgEV/xkungZIxf0p1KKa9Fv9kro=)
                          5: 323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa (hash: YkiMOKlXUfp39jAbnOanM0KLPuwUcDBAVWsGF1xqc/E=)
                          6: 323830343a343837303a373030303a3a2f33382d3338203d3e20323637313231.roa (hash: K6MwIK+3msfBTjd+nDj6vx1bhEf6yAKnBKiZuf/G4hg=)
                          7: 323830343a343837303a343430303a3a2f33382d3338203d3e20323637313231.roa (hash: MuLCu/ebtGTRQdFTtxwflEFsRUPY8b2YKd2KzoWHrGI=)
                          8: 323830343a343837303a3163323a3a2f34382d3438203d3e20323637313231.roa (hash: 7z7st9VExUOxO1HPQ6IHGyHiaeWv0sgAdWNGW8vEHnI=)
                          9: 323830343a343837303a3162323a3a2f34382d3438203d3e20323637313231.roa (hash: YHcOeZAppI0yBQHU5VaAv9v49jpZW7BbBaBFcagKeAo=)
                          10: 323830343a343837303a326630303a3a2f34302d3430203d3e20323637313231.roa (hash: +MxwWMlz9S9ev8gjiYaaRI7n12W9bpBHWTXxklmRXcg=)
                          11: 59286C095D010494BBABEA22C9AEC94874E4F3C0.crl (hash: MiL0pi4ClpLi1Jq+gqolP/gyIq+a3sW1DEyKhackgjI=)
                          12: 323830343a343837303a323030303a3a2f34302d3430203d3e20323637313231.roa (hash: WZr+/Q54cg2mZtFayzv8bTTykV+0uhwUu5vv3XCe91s=)
                          13: 323830343a343837303a3162313a3a2f34382d3438203d3e20323637313231.roa (hash: w5Aup+NkUiSPGJOkgm0D2pt62dq35BDv6u3R+EXF5Y4=)
                          14: 323830343a343837303a3163303a3a2f34382d3438203d3e20323637313231.roa (hash: jNre954ylBKqBfqOR7sW+4P/02andW5wroDJrSD+LJw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 02:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:6d:9e:43:8e:3c:0b:43:9d:ef:28:cc:92:7d:26:31:94:39:36:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Nov  5 02:05:00 2025 GMT
            Not After : Nov 12 02:10:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:94:f2:bf:b5:d6:c1:3f:46:74:4e:ad:e0:0d:
                    48:d7:f1:28:7f:b7:01:3c:4a:93:e7:33:95:43:49:
                    d3:75:eb:41:bd:30:ce:eb:c2:44:ba:c3:2a:d3:e2:
                    4e:27:29:ed:76:ec:97:cc:e0:f7:ef:f1:71:5b:d4:
                    fe:42:19:03:5b:bf:c8:01:7c:8d:2f:8c:9b:de:41:
                    db:a1:96:5b:f0:fc:c9:72:0c:b1:23:82:34:23:70:
                    18:0a:d7:59:f8:88:9b:a7:08:4e:97:31:58:6a:5f:
                    c3:e9:0e:67:da:96:2b:0e:a2:ac:af:b6:f5:91:9d:
                    d2:b1:ff:84:f2:76:77:3e:08:f1:05:29:9a:e8:54:
                    fe:28:42:84:46:69:83:c7:e7:5a:88:e9:bc:e5:33:
                    2d:ce:30:1d:88:9c:45:a5:c6:fc:50:22:98:1b:ec:
                    24:8c:c4:03:83:12:3c:b6:c1:e3:0f:a3:6c:4d:17:
                    4e:a6:54:b1:6c:0c:41:ae:a1:01:ac:e4:de:12:2b:
                    51:a7:a1:59:7e:7c:7e:8e:25:a1:26:cd:d2:14:84:
                    db:e7:77:b7:4f:c0:92:fc:0e:fe:f1:aa:e2:83:7b:
                    ac:eb:40:74:8e:8f:1a:3a:47:cd:4b:d5:7a:43:2a:
                    e0:d1:aa:e4:93:89:19:82:d2:ad:c9:01:7b:b5:80:
                    8e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E1:E9:BF:5E:1D:E0:09:B3:9C:1A:20:25:FD:AB:5E:AC:16:7A:03
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:78:ce:ff:ab:86:ac:eb:90:c4:27:9d:80:8b:ab:f7:82:7c:
         8a:65:86:05:5e:14:7d:35:2f:59:43:c6:8a:e5:ef:24:9d:98:
         d5:01:8e:bf:e1:60:5d:61:e6:b1:0d:cf:c8:40:12:91:dc:92:
         47:ac:08:d5:6f:d5:52:fd:22:dc:e2:ca:4b:20:56:ee:d1:7e:
         f5:73:fb:17:dd:1a:28:75:92:3b:02:2d:b6:e7:6d:67:f3:e6:
         f5:ce:68:a2:2d:05:a7:0e:18:3f:46:d2:96:f0:21:e5:e0:d9:
         10:fd:cf:3c:22:f5:0e:6f:68:dc:b7:38:59:ee:19:5d:88:40:
         9e:74:42:55:36:e3:1c:5e:e7:a4:9f:35:9b:c4:ca:25:64:4e:
         08:30:2f:9d:cc:27:a6:92:1e:cb:d7:e6:cd:56:66:b9:ff:76:
         c0:5e:cc:58:cc:30:8d:25:85:c1:58:33:98:37:eb:b3:b2:b3:
         18:ff:b0:09:3a:85:f7:d2:c2:de:92:a7:cb:62:59:f9:b2:b4:
         f2:f1:35:51:58:08:32:84:9e:16:4f:de:46:e9:32:18:1f:61:
         57:8d:ff:ff:b4:d1:2b:1a:b7:b2:85:74:b7:85:4f:aa:e1:9d:
         17:21:1b:55:30:38:a7:56:42:6d:f1:bb:8a:5f:ac:40:9f:40:
         20:f0:ec:2b
-----BEGIN CERTIFICATE-----
MIIHSDCCBjCgAwIBAgIUMm2eQ448C0Od7yjMkn0mMZQ5NpwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTkyODZDMDk1RDAxMDQ5NEJCQUJFQTIyQzlBRUM5NDg3
NEU0RjNDMDAeFw0yNTExMDUwMjA1MDBaFw0yNTExMTIwMjEwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjc5NEYyQkZCNUQ2QzEzRjQ2
NzQ0RUFERTAwRDQ4RDdGMTI4N0ZCNzAxM0M0QTkzRTczMzk1NDM0OUQzNzVFQjQx
QkQzMENFRUJDMjQ0QkFDMzJBRDNFMjRFMjcyOUVENzZFQzk3Q0NFMEY3RUZGMTcx
NUJENEZFNDIxOTAzNUJCRkM4MDE3QzhEMkY4QzlCREU0MURCQTE5NjVCRjBGQ0M5
NzIwQ0IxMjM4MjM0MjM3MDE4MEFENzU5Rjg4ODlCQTcwODRFOTczMTU4NkE1RkMz
RTkwRTY3REE5NjJCMEVBMkFDQUZCNkY1OTE5REQyQjFGRjg0RjI3Njc3M0UwOEYx
MDUyOTlBRTg1NEZFMjg0Mjg0NDY2OTgzQzdFNzVBODhFOUJDRTUzMzJEQ0UzMDFE
ODg5QzQ1QTVDNkZDNTAyMjk4MUJFQzI0OENDNDAzODMxMjNDQjZDMUUzMEZBMzZD
NEQxNzRFQTY1NEIxNkMwQzQxQUVBMTAxQUNFNERFMTIyQjUxQTdBMTU5N0U3QzdF
OEUyNUExMjZDREQyMTQ4NERCRTc3N0I3NEZDMDkyRkMwRUZFRjFBQUUyODM3QkFD
RUI0MDc0OEU4RjFBM0E0N0NENEJENTdBNDMyQUUwRDFBQUU0OTM4OTE5ODJEMkFE
QzkwMTdCQjU4MDhFOEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt5Tyv7XWwT9GdE6t4A1I1/Eof7cBPEqT5zOVQ0nTdetBvTDO68JE
usMq0+JOJyntduyXzOD37/FxW9T+QhkDW7/IAXyNL4yb3kHboZZb8PzJcgyxI4I0
I3AYCtdZ+IibpwhOlzFYal/D6Q5n2pYrDqKsr7b1kZ3Ssf+E8nZ3PgjxBSma6FT+
KEKERmmDx+daiOm85TMtzjAdiJxFpcb8UCKYG+wkjMQDgxI8tsHjD6NsTRdOplSx
bAxBrqEBrOTeEitRp6FZfnx+jiWhJs3SFITb53e3T8CS/A7+8arig3us60B0jo8a
OkfNS9V6Qyrg0arkk4kZgtKtyQF7tYCOjQIDAQABo4ICVjCCAlIwHQYDVR0OBBYE
FIbh6b9eHeAJs5waICX9q16sFnoDMB8GA1UdIwQYMBaAFFkobAldAQSUu6vqIsmu
yUh05PPAMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8velRhbXhtaUhtVmQzR2FX
MkFLMmtrb1dheUNINmVRU1c0dERNUFJKNWE4Ny8xLzU5Mjg2QzA5NUQwMTA0OTRC
QkFCRUEyMkM5QUVDOTQ4NzRFNEYzQzAuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzEvNTkyODZDMDk1RDAxMDQ5NEJCQUJFQTIyQzlBRUM5NDg3NEU0RjND
MC5jZXIwgZwGCCsGAQUFBwELBIGPMIGMMIGJBggrBgEFBQcwC4Z9cnN5bmM6Ly9y
cGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby96VGFteG1pSG1WZDNHYVcyQUsya2tv
V2F5Q0g2ZVFTVzR0RE1QUko1YTg3LzEvNTkyODZDMDk1RDAxMDQ5NEJCQUJFQTIy
QzlBRUM5NDg3NEU0RjNDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACl4zv+rhqzrkMQnnYCLq/eCfIpl
hgVeFH01L1lDxorl7ySdmNUBjr/hYF1h5rENz8hAEpHckkesCNVv1VL9Itziyksg
Vu7RfvVz+xfdGih1kjsCLbbnbWfz5vXOaKItBacOGD9G0pbwIeXg2RD9zzwi9Q5v
aNy3OFnuGV2IQJ50QlU24xxe56SfNZvEyiVkTggwL53MJ6aSHsvX5s1WZrn/dsBe
zFjMMI0lhcFYM5g367Oysxj/sAk6hffSwt6Sp8tiWfmytPLxNVFYCDKEnhZP3kbp
MhgfYVeN//+00Ssat7KFdLeFT6rhnRchG1UwOKdWQm3xu4pfrECfQCDw7Cs=
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:20:37 2025 by rpki-client