Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
File:                     16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft (raw, json)
Hash identifier:          x52ap2VE0CAMLFoCM/AcC+wGY1p6VCkDkDw03WrwwyY=
Subject key identifier:   4B:1C:72:CF:86:14:7A:B1:8B:EC:C0:21:BF:EC:99:65:0A:05:A7:E5
Authority key identifier: 16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9
Certificate issuer:       /CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
Certificate serial:       64B0CE85993CA496B938C4EC2A678BB0C4019F80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
Manifest number:          030E
Signing time:             Mon 03 Nov 2025 14:00:06 +0000
Manifest this update:     Mon 03 Nov 2025 13:55:06 +0000
Manifest next update:     Tue 04 Nov 2025 15:26:06 +0000
Files and hashes:         1: 3139302e38392e37362e302f32322d3234203d3e20323730333539.roa (hash: ATz5erBvp9f3K2BIGTfKnKQsJZditnJDPYBEhEwGZzI=)
                          2: 3139302e38392e37372e302f32342d3234203d3e20323730333539.roa (hash: QNXaTHbuy09y26RAoh1BBTOZMC9YeakPjxvy5mnSQZM=)
                          3: 16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl (hash: I56J3DAbYqMDkaIEs5bQVlSQes+8bjBEB80CNuKCc14=)
                          4: 3139302e38392e37362e302f32342d3234203d3e20323730333539.roa (hash: tuVDtcdFxKONVT2+GLGWlZHFRJDcc0yTqn2fUN2ij+A=)
                          5: 3139302e38392e37382e302f32342d3234203d3e20323730333539.roa (hash: lF19hSDOAfm2tNSd3NVzFWZnlumzBq/D5ZYnb4zYymc=)
                          6: 3139302e38392e37392e302f32342d3234203d3e20323730333539.roa (hash: dgPf8F9riZQ0wWlarREqQfDLK6a5wB6E1MPWGP5VCK8=)
                          7: 323830343a366163633a3a2f33322d313238203d3e20323730333539.roa (hash: tNv76tmUvA6C0GcCWj3mDrtKqjPENo+bQVWJyRlab48=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl
                          rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 15:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b0:ce:85:99:3c:a4:96:b9:38:c4:ec:2a:67:8b:b0:c4:01:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
        Validity
            Not Before: Nov  3 13:55:06 2025 GMT
            Not After : Nov  4 15:26:06 2025 GMT
        Subject: CN=4B1C72CF86147AB18BECC021BFEC99650A05A7E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a5:f7:8e:28:21:1e:68:a7:9f:21:af:38:12:
                    dc:b8:bc:1f:54:34:ea:7c:50:ab:2a:e5:5d:46:18:
                    84:df:f7:41:38:a4:a9:b2:a0:1c:a9:1f:58:f6:a1:
                    ba:d4:02:01:29:10:9f:b5:9a:06:b0:e1:ae:81:79:
                    55:67:98:44:a8:cb:a2:27:fd:95:94:98:85:e5:e4:
                    77:e5:d9:84:0c:72:17:00:f6:ec:63:8d:d4:a0:68:
                    8f:a6:71:95:d5:64:3a:75:47:a5:b1:6c:8d:00:83:
                    76:db:c5:6e:c7:14:db:bf:df:8b:e2:6d:72:97:3f:
                    d4:78:c9:99:be:f8:57:fc:50:80:b9:06:ea:3c:71:
                    3d:f0:a7:1a:59:44:f1:96:1f:6f:e5:83:76:81:5c:
                    79:98:8a:d6:2d:12:3a:a6:80:6a:e0:a2:a7:da:b5:
                    5e:12:6e:01:9d:1a:66:fb:56:bf:fe:de:a2:90:cc:
                    1d:8e:fd:54:91:c0:10:dd:6e:92:3b:44:d5:42:4c:
                    2a:93:13:fd:b7:77:48:0d:5b:2e:3f:ac:6d:38:4e:
                    55:e9:be:0b:9b:9d:25:1b:54:ef:38:98:08:43:c9:
                    e3:92:13:27:b9:af:ec:28:18:73:50:3f:e0:fb:84:
                    7d:75:1b:d9:a8:5c:f4:06:2c:9b:a5:b9:58:62:96:
                    25:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1C:72:CF:86:14:7A:B1:8B:EC:C0:21:BF:EC:99:65:0A:05:A7:E5
            X509v3 Authority Key Identifier:
                keyid:16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:dc:bf:05:77:8e:4b:03:9d:e0:c8:f8:77:4a:b1:a7:26:b0:
         9b:df:a9:b3:7d:21:37:c8:29:79:db:64:f1:43:99:d1:d6:5b:
         4c:4b:54:38:9f:41:de:1a:f7:5f:a5:54:12:d1:57:17:9c:f2:
         22:7b:40:26:96:39:a9:92:69:40:a0:18:31:ba:e3:de:67:72:
         76:ca:41:22:e2:31:7c:99:b4:84:87:03:24:b8:df:8c:e7:15:
         55:77:0f:a7:ae:85:2c:85:08:0b:9c:d6:08:11:5c:20:a6:19:
         f0:3e:88:42:70:34:3e:f8:8b:81:0d:73:4a:d3:6a:a6:ca:22:
         1f:16:d7:be:9a:bc:f9:66:71:23:fb:93:84:d1:ab:db:e5:00:
         cf:49:8b:64:ec:7e:be:b8:09:94:10:b1:52:42:2e:6f:dd:44:
         e3:0a:44:c5:e4:71:e1:04:97:71:34:11:dc:58:1e:5b:92:14:
         c2:4d:2b:88:03:c8:d9:ed:5f:34:7d:c6:0e:5a:d9:9a:aa:6d:
         be:99:e2:5b:ac:d5:03:1f:43:75:15:00:1b:cb:63:2a:ac:fc:
         2e:91:f5:fd:58:31:3a:43:dc:cb:ea:6c:44:4e:e5:53:07:45:
         ac:78:37:31:d4:d8:d5:fc:0f:d4:45:57:c3:22:69:cc:0b:ef:
         be:a6:a9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:02:12 2025 by rpki-client