Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
File:                     16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft (raw, json)
Hash identifier:          +Itu+rWBgubbWCNfUTE26CnM4kBChPAe10x6xfGjrdg=
Subject key identifier:   2A:5F:E1:34:DF:59:59:C0:51:5B:A5:FD:09:3C:82:50:C2:9D:D1:C7
Authority key identifier: 16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9
Certificate issuer:       /CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
Certificate serial:       5B52D59C968E51C24EEC4E840D03A8098D16A3B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
Manifest number:          02D0
Signing time:             Wed 17 Sep 2025 23:18:37 +0000
Manifest this update:     Wed 17 Sep 2025 23:13:37 +0000
Manifest next update:     Fri 19 Sep 2025 03:13:37 +0000
Files and hashes:         1: 3139302e38392e37362e302f32342d3234203d3e20323730333539.roa (hash: tuVDtcdFxKONVT2+GLGWlZHFRJDcc0yTqn2fUN2ij+A=)
                          2: 3139302e38392e37382e302f32342d3234203d3e20323730333539.roa (hash: lF19hSDOAfm2tNSd3NVzFWZnlumzBq/D5ZYnb4zYymc=)
                          3: 3139302e38392e37392e302f32342d3234203d3e20323730333539.roa (hash: dgPf8F9riZQ0wWlarREqQfDLK6a5wB6E1MPWGP5VCK8=)
                          4: 16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl (hash: BewTum2I8eGwvoxjwcHCl8bOtHE3XiG6cqI2E+ea9FQ=)
                          5: 323830343a366163633a3a2f33322d313238203d3e20323730333539.roa (hash: tNv76tmUvA6C0GcCWj3mDrtKqjPENo+bQVWJyRlab48=)
                          6: 3139302e38392e37372e302f32342d3234203d3e20323730333539.roa (hash: QNXaTHbuy09y26RAoh1BBTOZMC9YeakPjxvy5mnSQZM=)
                          7: 3139302e38392e37362e302f32322d3234203d3e20323730333539.roa (hash: ATz5erBvp9f3K2BIGTfKnKQsJZditnJDPYBEhEwGZzI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl
                          rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 03:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:52:d5:9c:96:8e:51:c2:4e:ec:4e:84:0d:03:a8:09:8d:16:a3:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
        Validity
            Not Before: Sep 17 23:13:37 2025 GMT
            Not After : Sep 19 03:13:37 2025 GMT
        Subject: CN=2A5FE134DF5959C0515BA5FD093C8250C29DD1C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f9:67:5a:fb:60:a9:21:fa:2b:4b:3a:96:b0:
                    21:17:5b:8d:5f:05:76:9d:39:b7:cc:9c:44:b4:9c:
                    07:76:34:a8:b6:a5:8a:ab:45:fd:e9:e9:fa:e4:4f:
                    64:1d:b1:c7:ed:40:41:ea:b6:e7:98:38:86:3a:c5:
                    ea:b6:5a:8c:c5:04:e8:df:75:16:e1:aa:54:13:e1:
                    67:6e:12:de:97:40:b3:89:f4:14:19:eb:e6:a6:43:
                    26:da:9c:3b:a5:bf:be:a0:bb:c8:b6:3e:a0:40:eb:
                    32:5d:d2:00:54:e7:fe:80:c3:64:48:bd:59:ba:63:
                    f4:07:90:d9:60:2b:ad:26:2d:a8:cb:81:02:41:ff:
                    0e:bb:54:52:25:d4:94:86:70:3c:73:34:f4:e3:70:
                    94:cf:04:26:a5:e9:f8:f4:6f:34:09:f6:07:d3:aa:
                    6d:a2:b1:1b:d3:5d:09:87:2f:08:56:93:67:4b:e8:
                    6f:0b:76:dc:b3:6a:7b:51:2a:e1:75:5b:58:fd:6d:
                    80:b1:84:1b:69:c8:ed:27:dc:a9:b5:6b:41:6a:76:
                    26:94:3b:fd:43:8e:09:fb:0e:d1:60:ae:3c:82:c6:
                    8b:5a:f0:0f:49:49:69:0e:7a:b0:48:ab:ca:4a:b4:
                    25:95:f2:93:81:17:c9:6f:95:b3:3e:bb:b7:05:06:
                    df:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:5F:E1:34:DF:59:59:C0:51:5B:A5:FD:09:3C:82:50:C2:9D:D1:C7
            X509v3 Authority Key Identifier:
                keyid:16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:9e:a1:9b:95:36:ce:89:0f:1c:a3:fb:58:05:d4:b3:5b:06:
         dd:34:0b:d9:3d:b0:6e:7d:18:55:82:cd:d0:bd:c3:bb:e3:93:
         6f:65:42:7b:5f:b5:b7:01:c9:3d:f7:16:a4:9a:a2:8c:f2:34:
         05:8c:5f:6d:51:93:f1:a3:d5:5f:96:c2:d4:19:7e:85:ef:1e:
         22:fe:60:9c:6b:dc:ba:e0:89:f0:29:b7:01:ad:e3:c7:7a:f3:
         0c:26:be:5f:18:bb:5a:05:a8:ad:db:f6:8c:1f:f0:21:78:0e:
         81:a8:20:e4:fc:c4:60:67:07:cc:63:93:fb:4c:49:3a:da:2c:
         bf:e1:91:0b:20:42:e1:d7:d6:7d:5d:aa:fe:a9:74:61:70:e8:
         76:12:ac:9b:a4:a7:6a:5b:ed:f0:cc:27:87:b4:33:a9:9c:25:
         bd:14:c8:36:6b:66:09:27:73:b4:08:c8:c9:3c:10:67:2f:10:
         70:7e:81:a4:77:80:90:1a:47:cf:a2:5b:9d:1a:a7:20:65:0f:
         dd:63:7c:44:9b:ea:3b:40:56:f7:8c:ec:b7:03:bc:48:e2:17:
         c4:33:3d:cc:c9:61:e5:9e:3e:66:d9:21:99:ff:ed:4f:78:2c:
         93:df:d8:65:7b:d2:04:41:a2:48:ec:81:71:a3:02:ff:93:ee:
         79:65:7e:bf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUW1LVnJaOUcJO7E6EDQOoCY0Wo7cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZGODFERjA2MzE5RDAxRUI2NzZDOEI3RDY4RDMxQUQz
NjY0QjNCOTAeFw0yNTA5MTcyMzEzMzdaFw0yNTA5MTkwMzEzMzdaMDMxMTAvBgNV
BAMTKDJBNUZFMTM0REY1OTU5QzA1MTVCQTVGRDA5M0M4MjUwQzI5REQxQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0+Wda+2CpIforSzqWsCEXW41f
BXadObfMnES0nAd2NKi2pYqrRf3p6frkT2QdscftQEHqtueYOIY6xeq2WozFBOjf
dRbhqlQT4WduEt6XQLOJ9BQZ6+amQybanDulv76gu8i2PqBA6zJd0gBU5/6Aw2RI
vVm6Y/QHkNlgK60mLajLgQJB/w67VFIl1JSGcDxzNPTjcJTPBCal6fj0bzQJ9gfT
qm2isRvTXQmHLwhWk2dL6G8LdtyzantRKuF1W1j9bYCxhBtpyO0n3Km1a0FqdiaU
O/1Djgn7DtFgrjyCxota8A9JSWkOerBIq8pKtCWV8pOBF8lvlbM+u7cFBt9pAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKl/hNN9ZWcBRW6X9CTyCUMKd0ccwHwYDVR0j
BBgwFoAUFvgd8GMZ0B62dsi31o0xrTZks7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWtSTWo3NFRTd1REdzZHS2RMcG5IMjd6c3pOTXNjVnNaY3pEd3ZZcWIx
Um0vMi8xNkY4MURGMDYzMTlEMDFFQjY3NkM4QjdENjhEMzFBRDM2NjRCM0I5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2RjgxREYwNjMxOUQwMUVC
Njc2QzhCN0Q2OEQzMUFEMzY2NEIzQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NWtSTWo3NFRTd1REdzZHS2RMcG5IMjd6c3pOTXNjVnNaY3pEd3ZZcWIxUm0vMi8x
NkY4MURGMDYzMTlEMDFFQjY3NkM4QjdENjhEMzFBRDM2NjRCM0I5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhp6hm5U2zokPHKP7WAXUs1sG3TQL2T2wbn0YVYLN0L3Du+OTb2VCe1+1twHJ
PfcWpJqijPI0BYxfbVGT8aPVX5bC1Bl+he8eIv5gnGvcuuCJ8Cm3Aa3jx3rzDCa+
Xxi7WgWordv2jB/wIXgOgagg5PzEYGcHzGOT+0xJOtosv+GRCyBC4dfWfV2q/ql0
YXDodhKsm6Snalvt8Mwnh7QzqZwlvRTINmtmCSdztAjIyTwQZy8QcH6BpHeAkBpH
z6JbnRqnIGUP3WN8RJvqO0BW94zstwO8SOIXxDM9zMlh5Z4+Ztkhmf/tT3gsk9/Y
ZXvSBEGiSOyBcaMC/5PueWV+vw==
-----END CERTIFICATE-----
Generated at Thu Sep 18 19:30:49 2025 by rpki-client