Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.mft
File:                     86B2810A6C4EB421987C3396698910082BEA85F9.mft (raw, json)
Hash identifier:          wGRwwF0A9XkKIEG/HqB1pIyubqq+Dl+pfjgLgBuy7V8=
Subject key identifier:   9B:F9:24:46:23:3A:D2:29:1D:F9:1C:40:C1:B8:F9:33:0E:00:38:C5
Authority key identifier: 86:B2:81:0A:6C:4E:B4:21:98:7C:33:96:69:89:10:08:2B:EA:85:F9
Certificate issuer:       /CN=86B2810A6C4EB421987C3396698910082BEA85F9
Certificate serial:       0A93D2A05DEF697558A112B4DCBEF39D956B3814
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.mft
Manifest number:          29
Signing time:             Thu 18 Sep 2025 11:11:47 +0000
Manifest this update:     Thu 18 Sep 2025 11:06:47 +0000
Manifest next update:     Fri 19 Sep 2025 11:22:47 +0000
Files and hashes:         1: 86B2810A6C4EB421987C3396698910082BEA85F9.crl (hash: 4TkEFtnStaK+npu90UJUs3vYgwuoUxoECnjcS6/B3BY=)
                          2: 323830343a353134633a383030303a3a2f33332d3333203d3e20323638343434.roa (hash: 4mt7dYfRonQTs8kzD6Da1koeoE+EpGvEsW9spYMZ1H4=)
                          3: 34352e3136312e36342e302f32332d3233203d3e20323638343434.roa (hash: 1YqklDYP/n1RZgRlYx1W7MOZlkN40BrMgtxRYCtmFUc=)
                          4: 34352e3136312e36372e302f32342d3234203d3e20323638343434.roa (hash: 0egYk00yhfNAsWtX77B7UJzjpdWYJzXm9OxeJpA2exg=)
                          5: 34352e3136312e36352e302f32342d3234203d3e20323638343434.roa (hash: 7voV/3P555pp8E4DYMA5jgT8xfe9H+nHMPMTXozVC4c=)
                          6: 323830343a353134633a343030303a3a2f33342d3334203d3e20323638343434.roa (hash: WM24ggMzIvL1akgaP6TBXJL88cMabi0mQ4JHzGJT/kQ=)
                          7: 34352e3136312e36362e302f32342d3234203d3e20323638343434.roa (hash: ItEyvd0bBA6hnfxLg9xzL3gGae4YFWM05KJfBAFfRCA=)
                          8: 323830343a353134633a3a2f33332d3333203d3e20323638343434.roa (hash: 0tKT0hmw4ukQ0+/EyfsQekM38ZKvZKpvXHeczBv3RtU=)
                          9: 323830343a353134633a3a2f33322d3332203d3e20323638343434.roa (hash: MkNwHyBeHjjx6MrP4jlNocS//YBZt/fyVgQGGoUV9W8=)
                          10: 323830343a353134633a633030303a3a2f33342d3334203d3e20323638343434.roa (hash: AEKRQ/5XfHq7feFa23x6BNuywuCE4831EZnSnQ1ej9g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.crl
                          rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 11:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:93:d2:a0:5d:ef:69:75:58:a1:12:b4:dc:be:f3:9d:95:6b:38:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86B2810A6C4EB421987C3396698910082BEA85F9
        Validity
            Not Before: Sep 18 11:06:47 2025 GMT
            Not After : Sep 19 11:22:47 2025 GMT
        Subject: CN=9BF92446233AD2291DF91C40C1B8F9330E0038C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:45:f3:63:1b:c4:c4:1d:6e:c3:01:07:be:e3:
                    b1:70:1a:90:a9:97:72:cc:d8:ab:f9:10:38:1b:8c:
                    3e:ca:5f:6c:f7:ae:f3:5e:a8:9c:7b:cd:c0:47:30:
                    85:7e:d8:7e:84:e1:d0:2a:bd:b6:2d:a5:0e:11:e9:
                    28:b3:59:63:a3:44:c7:86:28:86:f6:fe:b1:59:70:
                    31:03:76:5c:e4:28:ce:41:f0:60:1b:c8:2a:26:79:
                    c3:4a:35:77:61:95:23:71:b9:1f:cc:85:0d:6b:07:
                    d2:66:b9:9e:c4:b7:dd:4f:15:0a:5a:65:ce:8f:07:
                    d8:fe:1e:3e:68:d3:19:04:c5:20:97:9a:ee:15:57:
                    c1:e6:4f:57:66:2d:90:2e:fc:27:3b:df:1f:31:f5:
                    a3:11:b1:c4:b8:41:57:fd:dc:71:bd:2b:25:a8:64:
                    ba:26:99:4b:94:4a:2a:ab:e6:3d:25:f8:d7:d3:ab:
                    2c:b9:90:0d:76:35:d3:4e:12:43:31:7c:52:c1:9e:
                    03:84:43:a9:23:72:75:d3:c7:b2:4e:9c:1b:7c:16:
                    9d:cb:50:90:02:c2:db:99:73:3f:1a:6e:3c:6d:a0:
                    4c:93:8c:c7:23:19:c7:da:7c:55:d4:7c:6c:31:02:
                    57:e6:b6:da:7c:df:33:9f:2c:ea:ed:bc:74:c3:cf:
                    51:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F9:24:46:23:3A:D2:29:1D:F9:1C:40:C1:B8:F9:33:0E:00:38:C5
            X509v3 Authority Key Identifier:
                keyid:86:B2:81:0A:6C:4E:B4:21:98:7C:33:96:69:89:10:08:2B:EA:85:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c7:1e:2e:5a:11:fe:b4:8a:c2:b7:d5:6e:ec:45:34:ac:66:
         26:ab:87:6b:d5:87:af:c4:19:c9:fa:26:dc:85:e8:8a:ce:88:
         bf:05:52:6d:f5:1b:03:46:b4:ad:7c:02:ff:32:7d:bb:2b:71:
         14:1d:e7:b0:75:41:18:40:79:90:04:a2:30:d7:e6:4a:d1:1b:
         da:8f:b3:56:41:5c:fc:48:da:39:fe:7d:23:aa:00:3f:71:ce:
         34:a2:72:44:15:90:0b:98:94:d4:6f:9f:44:86:9f:9e:34:f2:
         91:06:9c:d2:0a:cc:1a:a1:9e:67:7b:fb:e6:50:5b:e4:26:08:
         a1:69:bf:12:e4:97:4f:9f:b3:e4:53:a0:25:0e:1a:44:71:b9:
         36:85:7d:43:3c:39:0c:39:ad:eb:f5:60:ca:db:f4:f7:19:01:
         da:cb:6f:25:27:25:a3:b6:1c:05:8a:62:f7:87:a9:1d:b3:7f:
         a3:6d:94:ed:e5:c0:49:91:ee:83:2a:73:0f:ac:f9:a9:54:f6:
         1d:64:98:0a:b2:4a:70:aa:ca:87:25:c1:8f:66:bc:09:4f:5c:
         14:ce:15:87:93:b8:bc:d0:6c:68:b6:b7:73:00:50:69:9a:ec:
         b6:5e:de:21:d4:42:d6:90:28:0b:10:73:d7:03:21:56:32:39:
         c9:b8:af:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCpPSoF3vaXVYoRK03L7znZVrOBQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODZCMjgxMEE2QzRFQjQyMTk4N0MzMzk2Njk4OTEwMDgy
QkVBODVGOTAeFw0yNTA5MTgxMTA2NDdaFw0yNTA5MTkxMTIyNDdaMDMxMTAvBgNV
BAMTKDlCRjkyNDQ2MjMzQUQyMjkxREY5MUM0MEMxQjhGOTMzMEUwMDM4QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIRfNjG8TEHW7DAQe+47FwGpCp
l3LM2Kv5EDgbjD7KX2z3rvNeqJx7zcBHMIV+2H6E4dAqvbYtpQ4R6SizWWOjRMeG
KIb2/rFZcDEDdlzkKM5B8GAbyComecNKNXdhlSNxuR/MhQ1rB9JmuZ7Et91PFQpa
Zc6PB9j+Hj5o0xkExSCXmu4VV8HmT1dmLZAu/Cc73x8x9aMRscS4QVf93HG9KyWo
ZLommUuUSiqr5j0l+NfTqyy5kA12NdNOEkMxfFLBngOEQ6kjcnXTx7JOnBt8Fp3L
UJACwtuZcz8abjxtoEyTjMcjGcfafFXUfGwxAlfmttp83zOfLOrtvHTDz1FBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUm/kkRiM60ikd+RxAwbj5Mw4AOMUwHwYDVR0j
BBgwFoAUhrKBCmxOtCGYfDOWaYkQCCvqhfkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkxOcnZUOVo2dXRpS0hiQkNBUmtTWENqQjNpVktYVnF4RnZYNHZSTlBw
NW4vMC84NkIyODEwQTZDNEVCNDIxOTg3QzMzOTY2OTg5MTAwODJCRUE4NUY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2QjI4MTBBNkM0RUI0MjE5
ODdDMzM5NjY5ODkxMDA4MkJFQTg1RjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkxOcnZUOVo2dXRpS0hiQkNBUmtTWENqQjNpVktYVnF4RnZYNHZSTlBwNW4vMC84
NkIyODEwQTZDNEVCNDIxOTg3QzMzOTY2OTg5MTAwODJCRUE4NUY5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPsceLloR/rSKwrfVbuxFNKxmJquHa9WHr8QZyfom3IXois6IvwVSbfUbA0a0
rXwC/zJ9uytxFB3nsHVBGEB5kASiMNfmStEb2o+zVkFc/EjaOf59I6oAP3HONKJy
RBWQC5iU1G+fRIafnjTykQac0grMGqGeZ3v75lBb5CYIoWm/EuSXT5+z5FOgJQ4a
RHG5NoV9Qzw5DDmt6/Vgytv09xkB2stvJSclo7YcBYpi94epHbN/o22U7eXASZHu
gypzD6z5qVT2HWSYCrJKcKrKhyXBj2a8CU9cFM4Vh5O4vNBsaLa3cwBQaZrstl7e
IdRC1pAoCxBz1wMhVjI5ybivqQ==
-----END CERTIFICATE-----
Generated at Thu Sep 18 18:31:21 2025 by rpki-client