Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft
File:                     9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft (raw, json)
Hash identifier:          bifuQkJUbe7F7ozkjRJ//D5QlOeqD6TDdOld0bDRt3w=
Subject key identifier:   DA:CF:C4:4B:23:38:69:2F:C8:94:53:8D:2B:3D:C6:E4:7E:2E:64:1E
Authority key identifier: 9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0
Certificate issuer:       /CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0
Certificate serial:       107FDDC72F36DBB1AD9A8DB504C0D7650A036650
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft
Manifest number:          0222
Signing time:             Wed 17 Sep 2025 22:27:16 +0000
Manifest this update:     Wed 17 Sep 2025 22:22:16 +0000
Manifest next update:     Fri 19 Sep 2025 01:33:16 +0000
Files and hashes:         1: 323830343a343864633a3a2f33322d3430203d3e203238333237.roa (hash: E1XoywGDOSssXFy2GAns/rcsG06KGYaYnzhvqTT1kT0=)
                          2: 34352e3232392e3230382e302f32322d3332203d3e203238333237.roa (hash: rGy1ehE/Bn0XuecpILb0jzzs4yEVA5Ng7V6ILLU8ggI=)
                          3: 3133312e302e32302e302f32322d3332203d3e203238333237.roa (hash: s2/kAKjnFX6aRyyXodEUttWXr6XdHhQ5QyULnEcQnAU=)
                          4: 3133312e302e32302e302f32322d3332203d3e20313938393439.roa (hash: fTd/5cBG9mlz6n9KlIjz6g6nXkqHzbKoyPgp4g5+LNU=)
                          5: 323830343a343864633a3a2f33322d3430203d3e20313938393439.roa (hash: T5PQk+XSOonG3g2hvRrDdrLKKD/SDyNap/J/IcWp2/E=)
                          6: 9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl (hash: q5T/7dI8HaYz5JXQgHQm6bTZx7EKKVpD6f1wIry0LFE=)
                          7: 3138392e35302e38302e302f32302d3332203d3e20313938393439.roa (hash: PULtCWH4amDpwqJMX/vVa/ZBJqkPcmfTwYJzuPne7qM=)
                          8: 3138392e35302e38302e302f32302d3332203d3e203238333237.roa (hash: e9HZymDCqJKW/MrGNjfZUewWACYFm0DkCf9m7cTv/cY=)
                          9: 34352e3232392e3230382e302f32322d3332203d3e20313938393439.roa (hash: 46RSHOwSye0wh+PL5ysBB7nSfbqmEzYaKYMLvcSziSs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl
                          rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 01:33:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7f:dd:c7:2f:36:db:b1:ad:9a:8d:b5:04:c0:d7:65:0a:03:66:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0
        Validity
            Not Before: Sep 17 22:22:16 2025 GMT
            Not After : Sep 19 01:33:16 2025 GMT
        Subject: CN=DACFC44B2338692FC894538D2B3DC6E47E2E641E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:70:fa:6c:d2:7a:7a:53:59:3f:1a:3d:3e:e8:
                    25:31:31:c3:28:18:bf:03:ed:44:9d:86:f3:00:f4:
                    3b:f1:7e:f0:3f:47:44:99:1a:03:e5:4e:3d:09:16:
                    22:74:cf:1f:fe:1c:b1:89:71:e6:bc:5d:0a:43:1c:
                    37:ef:72:d2:c9:04:2d:90:e9:54:e7:47:72:8d:4d:
                    1f:ad:39:3d:5f:bc:90:e7:a5:73:1a:dc:90:1f:7b:
                    33:b0:47:f1:db:67:01:be:c2:dd:f3:53:d4:f0:58:
                    df:da:35:4a:86:6b:1c:60:93:cb:ff:82:3b:13:53:
                    9a:8a:c5:93:3b:6b:9c:79:15:8d:60:70:46:48:2b:
                    60:0a:7e:ee:b9:f8:98:d0:e6:c4:96:a1:89:d2:fb:
                    b0:c5:37:08:74:bf:bd:f5:3d:5f:2d:09:64:ca:4f:
                    2c:b2:fe:6c:82:a3:e1:5e:ba:af:76:ca:3a:47:4c:
                    33:c9:62:42:40:c7:b4:7f:0f:6b:a5:8b:c7:91:1b:
                    65:0e:24:24:c1:dc:07:0a:40:3d:23:f0:29:41:eb:
                    18:aa:06:14:a8:3b:b6:21:1c:2f:a1:53:79:94:bf:
                    84:b1:49:5b:90:a1:5f:d9:6f:f6:b1:52:3d:a4:46:
                    dc:a0:c8:ae:42:19:62:4f:63:95:55:59:4b:e1:c4:
                    30:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CF:C4:4B:23:38:69:2F:C8:94:53:8D:2B:3D:C6:E4:7E:2E:64:1E
            X509v3 Authority Key Identifier:
                keyid:9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:1e:43:ae:bb:4a:4f:91:40:42:f9:04:83:12:a9:cb:9a:5d:
         1c:39:d5:b3:5c:45:53:49:65:f8:40:41:10:21:b8:9e:70:c4:
         c1:b6:98:9a:7c:ed:e7:7a:42:23:81:fa:4b:8b:1e:54:83:4c:
         4e:ed:63:b4:33:06:ee:cc:72:24:9d:3a:8c:f2:7c:e7:aa:22:
         b2:31:75:78:b0:cc:27:17:fb:7a:42:9a:e1:5a:1d:d1:1b:51:
         9e:4d:ea:52:f6:39:d4:de:c3:38:4b:78:5a:4e:33:1e:e3:00:
         c9:f1:f8:24:e4:74:b1:b7:5f:82:eb:48:cb:82:e9:0a:44:1c:
         b7:f7:fc:70:35:95:2a:cb:c0:2c:25:66:a0:c3:a2:fc:43:3b:
         78:88:65:4a:ac:c4:3d:41:bf:9c:ff:86:87:8f:d0:03:79:f4:
         a0:6c:a8:10:f7:35:68:92:c9:73:7e:47:4c:33:01:06:58:0e:
         50:88:fc:3f:6a:3c:e4:ba:ae:46:92:43:48:ae:99:70:eb:3a:
         8d:0b:c8:70:a9:13:fc:df:aa:7e:56:de:9b:3e:e0:5a:fe:31:
         31:74:32:10:5a:75:95:f0:8d:f9:89:b6:a8:a8:69:f7:a6:9e:
         13:dc:58:43:47:53:85:e0:81:33:a9:e9:71:ee:da:38:67:b5:
         63:82:d0:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEH/dxy8227Gtmo21BMDXZQoDZlAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY4NUM5RkVCRjgxNTE1NUM2RDQ0Nzk4NjY5RkIzQkZC
OUZENDlFMDAeFw0yNTA5MTcyMjIyMTZaFw0yNTA5MTkwMTMzMTZaMDMxMTAvBgNV
BAMTKERBQ0ZDNDRCMjMzODY5MkZDODk0NTM4RDJCM0RDNkU0N0UyRTY0MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzcPps0np6U1k/Gj0+6CUxMcMo
GL8D7USdhvMA9DvxfvA/R0SZGgPlTj0JFiJ0zx/+HLGJcea8XQpDHDfvctLJBC2Q
6VTnR3KNTR+tOT1fvJDnpXMa3JAfezOwR/HbZwG+wt3zU9TwWN/aNUqGaxxgk8v/
gjsTU5qKxZM7a5x5FY1gcEZIK2AKfu65+JjQ5sSWoYnS+7DFNwh0v731PV8tCWTK
Tyyy/myCo+Feuq92yjpHTDPJYkJAx7R/D2uli8eRG2UOJCTB3AcKQD0j8ClB6xiq
BhSoO7YhHC+hU3mUv4SxSVuQoV/Zb/axUj2kRtygyK5CGWJPY5VVWUvhxDDzAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2s/ESyM4aS/IlFONKz3G5H4uZB4wHwYDVR0j
BBgwFoAUn4XJ/r+BUVXG1EeYZp+zv7n9SeAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQU53M0FpaXE4TG1DR1pHSnY0NDFZcHZqUjFkcGVmYVJqRWRjcllzVjd4
aEgvMC85Rjg1QzlGRUJGODE1MTU1QzZENDQ3OTg2NjlGQjNCRkI5RkQ0OUUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGODVDOUZFQkY4MTUxNTVD
NkQ0NDc5ODY2OUZCM0JGQjlGRDQ5RTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QU53M0FpaXE4TG1DR1pHSnY0NDFZcHZqUjFkcGVmYVJqRWRjcllzVjd4aEgvMC85
Rjg1QzlGRUJGODE1MTU1QzZENDQ3OTg2NjlGQjNCRkI5RkQ0OUUwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVR5DrrtKT5FAQvkEgxKpy5pdHDnVs1xFU0ll+EBBECG4nnDEwbaYmnzt53pC
I4H6S4seVINMTu1jtDMG7sxyJJ06jPJ856oisjF1eLDMJxf7ekKa4Vod0RtRnk3q
UvY51N7DOEt4Wk4zHuMAyfH4JOR0sbdfgutIy4LpCkQct/f8cDWVKsvALCVmoMOi
/EM7eIhlSqzEPUG/nP+Gh4/QA3n0oGyoEPc1aJLJc35HTDMBBlgOUIj8P2o85Lqu
RpJDSK6ZcOs6jQvIcKkT/N+qflbemz7gWv4xMXQyEFp1lfCN+Ym2qKhp96aeE9xY
Q0dTheCBM6npce7aOGe1Y4LQDA==
-----END CERTIFICATE-----
Generated at Thu Sep 18 13:40:14 2025 by rpki-client