Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.mft
File:                     16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.mft (raw, json)
Hash identifier:          EhHV8bra/5pavcvBaLQddEkoGlsQttxk/Ol4BueNUN4=
Subject key identifier:   AE:ED:DD:84:A7:67:C3:F6:7D:96:2C:59:36:DE:F6:2F:34:19:33:87
Authority key identifier: 16:DB:25:C6:0A:69:26:C5:8A:F5:C7:D7:7D:A6:93:B1:7A:DA:0D:55
Certificate issuer:       /CN=16DB25C60A6926C58AF5C7D77DA693B17ADA0D55
Certificate serial:       6AF47736F27C3994FDE202D95DF68888BDA36BAC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.mft
Manifest number:          64
Signing time:             Mon 03 Nov 2025 12:48:35 +0000
Manifest this update:     Mon 03 Nov 2025 12:43:35 +0000
Manifest next update:     Tue 04 Nov 2025 13:47:35 +0000
Files and hashes:         1: 3136382e3233322e38342e302f32322d3234203d3e20323634353632.roa (hash: IrLDPBwNqYH0lDDCms/8VMBkI4vSmDFchMeEj1fvtuE=)
                          2: 34352e3137342e3138382e302f32322d3234203d3e20323634353632.roa (hash: rzzECidksqaevhLMENQLk+ux4RcMC0cAN/wAl1ftuQE=)
                          3: 3138372e34392e3137362e302f32322d3234203d3e20323634353632.roa (hash: qFKQxWlMbgl/r+3Z7txrgOI0nrdt+GjcJRKIwv+lqFk=)
                          4: 16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.crl (hash: z3hIjJS+coG953GXlkbIo4Pp/eYgaTLB7OpG5HJpWrs=)
                          5: 34352e3233392e382e302f32322d3234203d3e20323634353632.roa (hash: kWZtsWaO4KwUMQaVyJbEGnQtDVoym238WkoDoSRKYZI=)
                          6: 323830343a323139303a3a2f33322d3634203d3e20323634353632.roa (hash: zlSA6X8xym9nADcxgsEGBLQrJDc3E80RmIKc1sMT+eI=)
                          7: 3133382e33362e302e302f32322d3234203d3e20323634353632.roa (hash: L0w/ziI3yH7kZid4khk3HPopdj8H0s1w9d12n6L7orc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.crl
                          rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 13:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f4:77:36:f2:7c:39:94:fd:e2:02:d9:5d:f6:88:88:bd:a3:6b:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16DB25C60A6926C58AF5C7D77DA693B17ADA0D55
        Validity
            Not Before: Nov  3 12:43:35 2025 GMT
            Not After : Nov  4 13:47:35 2025 GMT
        Subject: CN=AEEDDD84A767C3F67D962C5936DEF62F34193387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:99:62:77:18:cb:2a:68:8f:66:5f:0c:84:8c:
                    ed:45:27:d7:13:bf:8a:e9:c9:fe:5a:4f:8e:c8:93:
                    a5:27:e1:12:9d:e5:f9:78:14:9f:1b:3d:73:b8:f3:
                    45:21:48:9b:ee:c3:5c:ce:ac:99:22:f9:16:a4:b9:
                    0e:18:01:62:4f:48:ad:4c:54:bc:3f:62:31:62:43:
                    00:b9:62:aa:d6:8e:b0:df:8d:cb:7f:49:d3:37:02:
                    bb:59:5c:34:3e:22:4e:0f:ec:d5:45:08:96:1d:02:
                    00:ca:7f:93:ec:b6:5e:4e:c2:2f:9f:45:5b:78:5f:
                    f6:63:08:e0:1b:c6:62:bb:bf:80:f4:b3:9a:08:c3:
                    9e:49:14:80:5c:28:e8:e4:f0:15:c3:2c:a5:5f:5f:
                    1e:66:68:42:aa:47:9c:a1:0a:02:b3:d9:43:8a:88:
                    46:a7:b4:9f:55:e3:3c:39:45:40:95:44:5a:e7:50:
                    f4:4d:72:c6:cd:5b:a6:75:17:84:f5:d8:9b:75:4a:
                    4c:70:c7:27:f6:90:67:f4:bf:19:d8:c5:27:1a:07:
                    8b:85:e6:06:99:d8:45:5e:c7:a1:d9:a0:6b:42:ea:
                    f0:f1:eb:45:c8:28:05:54:5b:37:44:6f:1a:d1:b5:
                    b3:10:ec:76:9d:34:6a:cf:42:57:ae:92:76:5f:c7:
                    6b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:ED:DD:84:A7:67:C3:F6:7D:96:2C:59:36:DE:F6:2F:34:19:33:87
            X509v3 Authority Key Identifier:
                keyid:16:DB:25:C6:0A:69:26:C5:8A:F5:C7:D7:7D:A6:93:B1:7A:DA:0D:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:58:99:41:95:98:9a:18:6d:60:ae:5d:42:66:12:16:21:a6:
         b3:c1:61:cf:97:ea:74:c8:23:19:f5:37:d7:c8:df:c7:78:bf:
         7f:72:ce:7e:5a:c1:cd:12:e7:75:42:19:ab:23:2a:b1:74:0d:
         32:3f:2b:5e:30:a9:f4:24:4c:9b:56:c8:62:28:9d:5f:ba:38:
         d6:c1:a3:9d:f3:f9:ee:13:b1:07:ca:02:47:6b:61:a0:cd:4e:
         5c:02:21:6c:3d:54:06:f4:e7:1a:e1:35:ea:18:0b:98:4b:fc:
         06:bb:34:9c:c4:86:cb:ac:d8:ad:1e:dc:f0:37:71:0a:02:fc:
         48:cb:3b:61:d1:54:55:a6:56:14:cf:4a:28:ba:84:9d:5e:5c:
         6c:ba:fc:a7:09:5b:01:b5:8c:96:e8:6a:6a:70:62:34:dc:51:
         ed:af:b6:dc:a2:c0:d2:83:e8:c7:be:9d:2e:52:7d:0d:7b:4b:
         52:8b:dd:27:7b:fd:44:c4:7e:07:12:bb:59:ca:23:ef:97:9d:
         aa:21:42:d7:c2:a4:6f:51:c5:f2:45:05:08:4e:24:84:3a:ab:
         52:4a:15:0f:7f:86:75:14:4e:51:88:03:36:7c:d7:eb:42:37:
         1f:6f:15:48:3b:93:75:95:a1:61:cc:bc:47:5b:c9:8b:0f:d4:
         08:e5:d3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 00:26:19 2025 by rpki-client