Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.mft
File:                     16149638FCC37EDB923C5F2AFF854155C7486481.mft (raw, json)
Hash identifier:          /kNFmcs4e5wS9C+NFDgZKZ0kR9iGYfJQl/hNCfCit8E=
Subject key identifier:   5F:05:E0:3A:7A:4E:D0:C5:3B:92:53:2A:73:A6:B4:98:17:C2:4C:DB
Authority key identifier: 16:14:96:38:FC:C3:7E:DB:92:3C:5F:2A:FF:85:41:55:C7:48:64:81
Certificate issuer:       /CN=16149638FCC37EDB923C5F2AFF854155C7486481
Certificate serial:       1D120CB65C98EF80297096BEE312608A9BE5793D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16149638FCC37EDB923C5F2AFF854155C7486481.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.mft
Manifest number:          6E
Signing time:             Mon 03 Nov 2025 03:09:41 +0000
Manifest this update:     Mon 03 Nov 2025 03:04:41 +0000
Manifest next update:     Tue 04 Nov 2025 06:39:41 +0000
Files and hashes:         1: 34352e3232342e33352e302f32342d3234203d3e20323636393234.roa (hash: BaklOCUX2/7AEqVb9APvliCg/IBaqKvZ41hnd72XFoE=)
                          2: 323830343a343536383a3a2f33322d3332203d3e20323636393234.roa (hash: laJYiJ87zwjmHurZ74zyf8JwjNPE74GPAkodpTq8GtY=)
                          3: 34352e3232342e33322e302f32322d3232203d3e20323636393234.roa (hash: YuDAqFbDopuYUJatHhs5zqdckb1n36tKOhAu53zFPwk=)
                          4: 16149638FCC37EDB923C5F2AFF854155C7486481.crl (hash: N9t7kt5099DuTI9oioaR4c7hpvF5qi0HknreCZ+p9lI=)
                          5: 34352e3232342e33342e302f32332d3233203d3e20323636393234.roa (hash: aa2f1/JjiEtOH2iLz1Mh1JcGxp60RpAzVRtNHvjwUck=)
                          6: 34352e3232342e33322e302f32342d3234203d3e20323636393234.roa (hash: NWec7YMpl0OfbJhkXqXCRQu7t/+5uYVycElpfAyd4Tk=)
                          7: 34352e3232342e33322e302f32332d3233203d3e20323636393234.roa (hash: SQpPZBsBN3O1LpptuNmrD50V+6SEruwpO8dl+O1NH8A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.crl
                          rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16149638FCC37EDB923C5F2AFF854155C7486481.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 06:39:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:12:0c:b6:5c:98:ef:80:29:70:96:be:e3:12:60:8a:9b:e5:79:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16149638FCC37EDB923C5F2AFF854155C7486481
        Validity
            Not Before: Nov  3 03:04:41 2025 GMT
            Not After : Nov  4 06:39:41 2025 GMT
        Subject: CN=5F05E03A7A4ED0C53B92532A73A6B49817C24CDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f2:eb:ff:79:b9:90:81:c8:e3:8d:82:4f:2c:
                    b4:3d:09:fa:14:c1:c6:e8:43:ff:80:09:79:96:8c:
                    57:b5:1c:1d:b9:e1:e9:59:96:ee:4f:ad:75:58:1d:
                    94:1b:9c:5e:17:92:15:1b:c0:b3:87:3b:da:23:d5:
                    52:13:0b:90:a4:13:a5:32:30:0f:16:a4:0b:be:82:
                    f9:ba:f9:1f:0f:c4:ab:1b:62:2e:42:da:13:d7:73:
                    bc:49:9c:8c:59:d9:95:f6:33:be:92:5c:fd:af:47:
                    30:8a:41:55:b6:4d:39:a2:a9:43:55:4e:30:93:b7:
                    e7:3b:60:bc:94:6d:63:52:ef:fc:64:63:96:d9:4e:
                    1c:04:5c:af:a1:b2:0c:53:53:13:0c:0d:91:fc:cb:
                    dc:82:a7:4c:85:cb:9b:3c:19:99:c7:46:7b:b5:76:
                    c0:03:8c:36:bc:7d:55:a0:4e:44:87:c5:e2:cc:98:
                    23:7f:9e:5d:8c:8c:41:03:df:52:32:e2:aa:98:3d:
                    92:ee:6c:42:53:bf:52:1f:d3:5c:93:5b:82:80:a4:
                    a9:63:7e:4f:b4:66:bc:18:c0:28:bc:56:19:26:4a:
                    57:84:54:c4:1d:84:9d:20:f0:09:99:8d:77:30:ee:
                    3f:e2:d7:90:e4:86:bd:05:50:b6:89:9a:c3:9b:af:
                    59:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:05:E0:3A:7A:4E:D0:C5:3B:92:53:2A:73:A6:B4:98:17:C2:4C:DB
            X509v3 Authority Key Identifier:
                keyid:16:14:96:38:FC:C3:7E:DB:92:3C:5F:2A:FF:85:41:55:C7:48:64:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16149638FCC37EDB923C5F2AFF854155C7486481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:52:9c:82:06:50:ff:3a:d8:2c:36:06:ad:21:0c:bd:e2:69:
         36:4f:de:1f:f7:26:0a:e5:43:2a:c4:17:c3:7b:38:4b:18:38:
         3f:32:a1:2f:8d:c8:95:4e:df:92:ff:d2:58:5c:33:5f:c2:04:
         1c:b7:bf:0d:8f:fa:b9:4d:3d:60:df:96:67:cf:40:9e:5e:0f:
         b7:85:e8:aa:7a:f8:87:e0:cc:31:53:bd:0b:c8:d9:d9:3b:1b:
         59:ef:d6:5b:c7:af:88:c5:c8:89:dd:fb:c2:19:ce:dd:b5:cd:
         4f:1f:ba:f0:a0:c7:ef:da:86:09:67:22:42:25:79:06:c6:ca:
         9c:79:08:61:21:79:32:c1:b3:2c:4c:6c:d5:99:bf:b0:75:df:
         02:31:b6:ce:6b:41:e0:f9:5c:46:f4:3f:e7:6b:0b:9f:97:20:
         b0:97:08:d6:cc:ab:d4:64:41:4a:d7:c4:0d:9a:fc:af:32:c0:
         cb:6e:1c:d6:e6:2b:a2:4c:be:84:25:76:fc:03:24:63:ec:b9:
         b7:9d:86:9d:ea:5f:b5:bf:f5:50:23:d0:4c:15:23:7f:87:72:
         6b:59:79:26:11:01:ff:43:4d:18:a5:99:38:51:1e:6d:34:61:
         9f:c9:57:08:aa:e5:51:b7:bd:f4:b3:83:07:f3:22:24:d0:62:
         f2:a3:57:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:38:13 2025 by rpki-client