Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.mft
File:                     DD271F242DF0D8617E8D7597283EB60BDB86C2FD.mft (raw, json)
Hash identifier:          WNTPzyGHIMYuo5tWRWxxcrAVTHkcV4DdL7V1hCZoSkQ=
Subject key identifier:   3E:C4:DB:18:67:38:53:AC:82:D0:3B:0F:46:EB:18:EA:1B:91:E8:46
Authority key identifier: DD:27:1F:24:2D:F0:D8:61:7E:8D:75:97:28:3E:B6:0B:DB:86:C2:FD
Certificate issuer:       /CN=DD271F242DF0D8617E8D7597283EB60BDB86C2FD
Certificate serial:       78127E077C3E1BDD17080C1840313A5491C82B4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.mft
Manifest number:          016C
Signing time:             Mon 03 Nov 2025 03:51:11 +0000
Manifest this update:     Mon 03 Nov 2025 03:46:11 +0000
Manifest next update:     Tue 04 Nov 2025 06:04:11 +0000
Files and hashes:         1: 3137392e34392e38302e302f32332d3233203d3e20323731333934.roa (hash: tiN3JLDpyh8ux0ztxshAtwrJCwnMAQEqgedA1qkpF/I=)
                          2: 3137392e34392e38302e302f32332d3234203d3e20323731333934.roa (hash: GYSfMdIJgrs3ZbkaqRtcXgLBW5PEhr0QLq9H3n1FhC0=)
                          3: 323830343a376164343a6530303a3a2f34302d3430203d3e20323731333934.roa (hash: +8w56QY0I+5gGDHFJDnhGGwQlO/2Woo75Fn5wRWnrIU=)
                          4: DD271F242DF0D8617E8D7597283EB60BDB86C2FD.crl (hash: hY3PtOxrCx0Jb8hvNIYIU/Vnc3WC4g/eKgCSQpVpv0s=)
                          5: 3137392e34392e38322e302f32342d3234203d3e20323731333934.roa (hash: g1y4gagU2GAenpO/rDVhQZQcFxsI23b4LYFWNXj/QZk=)
                          6: 323830343a376164343a3a2f33322d3332203d3e20323731333934.roa (hash: n6Zv7/e5Bv7Hkk4KpGUgjfLGyoQKbjVhQif7AaGKKsA=)
                          7: 3137392e34392e38332e302f32342d3234203d3e20323731333934.roa (hash: Mg9Zcqspzoin6iGc2XAjGJRGsEIgiTq1CHs50SSJeN4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.crl
                          rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 06:04:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:12:7e:07:7c:3e:1b:dd:17:08:0c:18:40:31:3a:54:91:c8:2b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD271F242DF0D8617E8D7597283EB60BDB86C2FD
        Validity
            Not Before: Nov  3 03:46:11 2025 GMT
            Not After : Nov  4 06:04:11 2025 GMT
        Subject: CN=3EC4DB18673853AC82D03B0F46EB18EA1B91E846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ff:99:08:64:1e:1d:cf:1a:fb:cc:e1:8a:2e:
                    84:17:4d:9d:e3:40:03:0d:10:98:64:31:ee:30:f8:
                    9d:74:75:5e:4b:d1:1a:9d:7b:20:79:52:8c:da:a0:
                    ff:f6:53:ee:55:07:0c:a3:9d:dd:a1:61:ff:ce:84:
                    c4:db:00:c9:5b:c7:13:5f:98:83:6d:20:43:00:34:
                    38:79:61:21:0b:db:98:d9:21:ee:1d:02:d6:ec:4e:
                    17:31:fc:b2:a9:2a:fd:59:61:3e:63:48:6b:2b:d6:
                    1e:68:ac:bd:80:df:86:95:37:e2:15:c1:a9:4f:3b:
                    34:e9:96:9f:dc:3b:a3:49:b6:46:a9:2f:26:6a:86:
                    2e:48:a7:51:8b:0a:43:d6:b1:b9:f6:5d:b9:4c:03:
                    d4:ad:0e:eb:e0:d2:f0:82:42:7c:06:94:b3:19:05:
                    2a:8b:40:ab:ef:78:9b:fe:22:16:ff:11:f5:14:6d:
                    c7:da:b7:f7:ad:b4:a0:e9:da:e0:38:40:e1:5e:ac:
                    f1:65:c0:6e:ab:27:03:b1:ca:c8:0a:67:c0:b4:3f:
                    d5:bf:77:8d:ff:28:4f:2e:e2:39:ae:bc:24:d7:66:
                    d9:db:31:ed:6f:5e:66:0d:1f:3b:d7:e7:67:55:6c:
                    8c:59:32:69:76:34:70:0c:17:10:2f:d0:c3:e6:1f:
                    98:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C4:DB:18:67:38:53:AC:82:D0:3B:0F:46:EB:18:EA:1B:91:E8:46
            X509v3 Authority Key Identifier:
                keyid:DD:27:1F:24:2D:F0:D8:61:7E:8D:75:97:28:3E:B6:0B:DB:86:C2:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f8:50:4d:00:ea:39:39:09:f9:a6:01:4c:6f:12:67:38:33:
         d2:fc:20:a5:90:03:65:cf:a2:6c:a1:49:e8:7f:8f:13:4b:ec:
         44:c1:64:67:19:14:48:fc:26:61:58:40:9d:d8:72:67:ce:11:
         c9:d5:75:31:d8:ac:67:16:03:bf:86:80:20:ef:6f:6a:55:83:
         a5:d7:b8:72:12:6a:b7:47:7d:2c:2b:52:a9:19:34:a7:86:96:
         0d:fe:34:57:17:0e:34:70:28:ba:09:2f:78:71:b5:5a:98:b3:
         7a:71:ff:4f:29:1a:cf:ef:52:d5:13:dc:b0:60:0e:7e:e0:9a:
         1b:ca:6f:a1:cf:9b:db:bc:d8:99:b2:11:f6:a8:61:53:93:f5:
         93:99:ec:8f:46:8f:ff:70:18:92:9b:6b:0a:4a:41:4f:c8:58:
         1d:30:8e:57:14:ec:48:c9:b4:89:dd:8a:25:3e:94:25:cc:4e:
         9e:98:9b:f5:ad:d5:02:44:85:b3:a7:2a:4b:c7:da:d1:a7:9e:
         1e:53:4f:b3:c3:49:55:7c:53:a6:74:52:01:26:ac:8e:a0:cd:
         02:8d:cc:ee:5e:95:d6:48:6e:4a:58:13:3c:d3:50:ab:a6:dc:
         e5:0d:e9:80:4e:24:dc:4b:9a:78:af:a0:11:d4:e7:ec:a3:48:
         34:55:32:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeBJ+B3w+G90XCAwYQDE6VJHIK0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQyNzFGMjQyREYwRDg2MTdFOEQ3NTk3MjgzRUI2MEJE
Qjg2QzJGRDAeFw0yNTExMDMwMzQ2MTFaFw0yNTExMDQwNjA0MTFaMDMxMTAvBgNV
BAMTKDNFQzREQjE4NjczODUzQUM4MkQwM0IwRjQ2RUIxOEVBMUI5MUU4NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK/5kIZB4dzxr7zOGKLoQXTZ3j
QAMNEJhkMe4w+J10dV5L0RqdeyB5UozaoP/2U+5VBwyjnd2hYf/OhMTbAMlbxxNf
mINtIEMANDh5YSEL25jZIe4dAtbsThcx/LKpKv1ZYT5jSGsr1h5orL2A34aVN+IV
walPOzTplp/cO6NJtkapLyZqhi5Ip1GLCkPWsbn2XblMA9StDuvg0vCCQnwGlLMZ
BSqLQKvveJv+Ihb/EfUUbcfat/ettKDp2uA4QOFerPFlwG6rJwOxysgKZ8C0P9W/
d43/KE8u4jmuvCTXZtnbMe1vXmYNHzvX52dVbIxZMml2NHAMFxAv0MPmH5izAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUPsTbGGc4U6yC0DsPRusY6huR6EYwHwYDVR0j
BBgwFoAU3ScfJC3w2GF+jXWXKD62C9uGwv0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2lubnBuU3hneTZSYTZra0dkNnZmNGV2eGRYZ0hYOXM1VnVHVGc4eHNR
bkgvMC9ERDI3MUYyNDJERjBEODYxN0U4RDc1OTcyODNFQjYwQkRCODZDMkZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REMjcxRjI0MkRGMEQ4NjE3
RThENzU5NzI4M0VCNjBCREI4NkMyRkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N2lubnBuU3hneTZSYTZra0dkNnZmNGV2eGRYZ0hYOXM1VnVHVGc4eHNRbkgvMC9E
RDI3MUYyNDJERjBEODYxN0U4RDc1OTcyODNFQjYwQkRCODZDMkZELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfvhQTQDqOTkJ+aYBTG8SZzgz0vwgpZADZc+ibKFJ6H+PE0vsRMFkZxkUSPwm
YVhAndhyZ84RydV1MdisZxYDv4aAIO9valWDpde4chJqt0d9LCtSqRk0p4aWDf40
VxcONHAougkveHG1WpizenH/Tykaz+9S1RPcsGAOfuCaG8pvoc+b27zYmbIR9qhh
U5P1k5nsj0aP/3AYkptrCkpBT8hYHTCOVxTsSMm0id2KJT6UJcxOnpib9a3VAkSF
s6cqS8fa0aeeHlNPs8NJVXxTpnRSASasjqDNAo3M7l6V1khuSlgTPNNQq6bc5Q3p
gE4k3EuaeK+gEdTn7KNINFUyQw==
-----END CERTIFICATE-----
Generated at Mon Nov 3 12:07:17 2025 by rpki-client