Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.mft
File:                     16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.mft (raw, json)
Hash identifier:          FW9EEpFjUQGfpMLIyWJmz7KZ54KsFq9Iscv5R8cHwC0=
Subject key identifier:   7B:B8:A3:BD:A5:F4:CF:3B:22:33:90:45:D7:D2:BF:50:02:47:C8:A3
Authority key identifier: 16:DB:25:C6:0A:69:26:C5:8A:F5:C7:D7:7D:A6:93:B1:7A:DA:0D:55
Certificate issuer:       /CN=16DB25C60A6926C58AF5C7D77DA693B17ADA0D55
Certificate serial:       2F2DA169E92BC40CF404C1645AC7036E928BB043
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.mft
Manifest number:          0134
Signing time:             Wed 08 Apr 2026 19:49:06 +0000
Manifest this update:     Wed 08 Apr 2026 19:44:06 +0000
Manifest next update:     Thu 09 Apr 2026 22:52:06 +0000
Files and hashes:         1: 3133382e33362e302e302f32322d3234203d3e20323634353632.roa (hash: L0w/ziI3yH7kZid4khk3HPopdj8H0s1w9d12n6L7orc=)
                          2: 34352e3233392e382e302f32322d3234203d3e20323634353632.roa (hash: kWZtsWaO4KwUMQaVyJbEGnQtDVoym238WkoDoSRKYZI=)
                          3: 16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.crl (hash: HQGw5NnyklovW2YyW1qvVnr0CKRVGWaOMq3xogiaII8=)
                          4: 3138372e34392e3137362e302f32322d3234203d3e20323634353632.roa (hash: qFKQxWlMbgl/r+3Z7txrgOI0nrdt+GjcJRKIwv+lqFk=)
                          5: 323830343a323139303a3a2f33322d3634203d3e20323634353632.roa (hash: zlSA6X8xym9nADcxgsEGBLQrJDc3E80RmIKc1sMT+eI=)
                          6: 34352e3137342e3138382e302f32322d3234203d3e20323634353632.roa (hash: rzzECidksqaevhLMENQLk+ux4RcMC0cAN/wAl1ftuQE=)
                          7: 3136382e3233322e38342e302f32322d3234203d3e20323634353632.roa (hash: IrLDPBwNqYH0lDDCms/8VMBkI4vSmDFchMeEj1fvtuE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.crl
                          rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 22:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:2d:a1:69:e9:2b:c4:0c:f4:04:c1:64:5a:c7:03:6e:92:8b:b0:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16DB25C60A6926C58AF5C7D77DA693B17ADA0D55
        Validity
            Not Before: Apr  8 19:44:06 2026 GMT
            Not After : Apr  9 22:52:06 2026 GMT
        Subject: CN=7BB8A3BDA5F4CF3B22339045D7D2BF500247C8A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3c:09:59:c5:0c:56:3d:eb:21:f6:4b:af:3b:
                    72:70:eb:0b:65:00:4a:74:35:0e:aa:53:55:40:56:
                    31:76:2a:a2:f1:69:13:2c:ef:3f:19:f8:f9:42:4d:
                    8b:56:04:9e:77:b2:69:b6:a7:3d:d8:13:66:2f:fd:
                    85:dd:c4:c6:6e:1b:97:1f:18:76:72:f7:ab:a9:13:
                    8b:9e:f6:f8:5b:14:a1:65:33:45:0c:88:3b:e1:4c:
                    c2:73:9b:73:4a:a5:30:24:f8:c1:e2:77:6c:6d:be:
                    42:12:89:00:4a:09:af:d5:26:e2:11:e4:25:c5:d3:
                    66:71:e2:22:74:05:1b:19:b7:02:28:56:20:32:ca:
                    92:bc:8b:e6:58:98:f8:65:d7:d5:76:77:c7:3b:96:
                    bf:24:92:93:15:80:db:df:f0:02:f8:ae:23:b9:23:
                    53:88:33:fa:87:1b:ad:82:79:aa:25:d4:42:be:66:
                    57:e2:55:a6:c3:c8:ba:1e:b6:ba:9d:0d:cc:20:2b:
                    38:12:26:68:71:b7:bb:e7:ea:72:15:9f:1a:10:5d:
                    1c:4b:9b:9b:73:a1:b0:1d:87:0d:aa:38:43:32:45:
                    5c:36:67:df:e9:39:50:d8:26:02:21:86:a0:52:1d:
                    e0:1b:50:d5:5d:e8:63:80:5d:36:a4:4a:fd:32:cf:
                    f9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B8:A3:BD:A5:F4:CF:3B:22:33:90:45:D7:D2:BF:50:02:47:C8:A3
            X509v3 Authority Key Identifier:
                keyid:16:DB:25:C6:0A:69:26:C5:8A:F5:C7:D7:7D:A6:93:B1:7A:DA:0D:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:62:53:cd:74:e7:32:b9:1c:a5:42:f1:03:81:18:e7:99:55:
         19:97:b0:32:60:70:c7:d3:63:39:2d:74:89:5a:09:dc:13:77:
         1a:ba:5f:92:48:1e:ee:a7:40:e5:fc:3a:8b:75:a3:6e:8f:b4:
         b4:cd:c9:53:6d:b6:43:1a:cf:59:4f:1c:04:d6:89:dc:38:da:
         cc:ce:9b:de:ae:2f:4e:8e:1c:30:8c:aa:ee:d3:c9:cf:d8:d2:
         56:c7:d5:16:58:be:c7:39:4d:8c:4f:d0:14:79:72:9d:97:d7:
         35:a2:26:ff:91:7c:f2:ef:d1:80:45:1f:b9:32:6c:5f:04:27:
         42:5f:96:e9:55:63:62:d4:de:fc:21:35:05:fe:d1:06:9a:34:
         c1:ff:38:ee:b8:3c:7f:bf:58:cb:11:6a:43:b9:99:20:db:4a:
         68:1e:d6:71:0b:99:05:7a:bf:b1:70:94:fd:40:7f:b5:f6:c0:
         d4:e0:4f:86:a8:24:06:3d:20:86:b4:37:06:6b:bf:bd:24:87:
         4c:3a:3f:7d:ba:8d:b5:6f:b1:ef:b2:89:ba:9d:9d:59:17:7c:
         ba:0e:74:44:b7:11:6c:a6:07:6a:bc:38:e9:46:a0:37:1f:81:
         61:be:68:da:52:e0:20:62:01:48:33:0e:a5:3c:e4:1d:47:23:
         31:09:91:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULy2haekrxAz0BMFkWscDbpKLsEMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZEQjI1QzYwQTY5MjZDNThBRjVDN0Q3N0RBNjkzQjE3
QURBMEQ1NTAeFw0yNjA0MDgxOTQ0MDZaFw0yNjA0MDkyMjUyMDZaMDMxMTAvBgNV
BAMTKDdCQjhBM0JEQTVGNENGM0IyMjMzOTA0NUQ3RDJCRjUwMDI0N0M4QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdPAlZxQxWPesh9kuvO3Jw6wtl
AEp0NQ6qU1VAVjF2KqLxaRMs7z8Z+PlCTYtWBJ53smm2pz3YE2Yv/YXdxMZuG5cf
GHZy96upE4ue9vhbFKFlM0UMiDvhTMJzm3NKpTAk+MHid2xtvkISiQBKCa/VJuIR
5CXF02Zx4iJ0BRsZtwIoViAyypK8i+ZYmPhl19V2d8c7lr8kkpMVgNvf8AL4riO5
I1OIM/qHG62Ceaol1EK+ZlfiVabDyLoetrqdDcwgKzgSJmhxt7vn6nIVnxoQXRxL
m5tzobAdhw2qOEMyRVw2Z9/pOVDYJgIhhqBSHeAbUNVd6GOAXTakSv0yz/kPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUe7ijvaX0zzsiM5BF19K/UAJHyKMwHwYDVR0j
BBgwFoAUFtslxgppJsWK9cfXfaaTsXraDVUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0wxblBzbTNNRFlIU1FMUDVndjg5c1ZrRDZCNXhDUnBRYnlaUFRQS1VE
Qm0vMC8xNkRCMjVDNjBBNjkyNkM1OEFGNUM3RDc3REE2OTNCMTdBREEwRDU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2REIyNUM2MEE2OTI2QzU4
QUY1QzdENzdEQTY5M0IxN0FEQTBENTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M0wxblBzbTNNRFlIU1FMUDVndjg5c1ZrRDZCNXhDUnBRYnlaUFRQS1VEQm0vMC8x
NkRCMjVDNjBBNjkyNkM1OEFGNUM3RDc3REE2OTNCMTdBREEwRDU1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUGJTzXTnMrkcpULxA4EY55lVGZewMmBwx9NjOS10iVoJ3BN3Grpfkkge7qdA
5fw6i3Wjbo+0tM3JU222QxrPWU8cBNaJ3DjazM6b3q4vTo4cMIyq7tPJz9jSVsfV
Fli+xzlNjE/QFHlynZfXNaIm/5F88u/RgEUfuTJsXwQnQl+W6VVjYtTe/CE1Bf7R
Bpo0wf847rg8f79YyxFqQ7mZINtKaB7WcQuZBXq/sXCU/UB/tfbA1OBPhqgkBj0g
hrQ3Bmu/vSSHTDo/fbqNtW+x77KJup2dWRd8ug50RLcRbKYHarw46UagNx+BYb5o
2lLgIGIBSDMOpTzkHUcjMQmRpg==
-----END CERTIFICATE-----
Generated at Thu Apr 9 14:27:12 2026 by rpki-client