Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.mft
File:                     316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.mft (raw, json)
Hash identifier:          LE6AzQTjfzbAiPKby8c4ybAC15ej/z+D76RIFqzXCCU=
Subject key identifier:   FA:EC:43:EC:2D:64:68:3A:0C:A8:85:5B:CC:7E:CC:B5:E8:DC:63:01
Authority key identifier: 31:6F:29:85:D9:3D:31:DC:FE:2F:EA:3B:FF:AD:81:E5:B6:06:F6:B1
Certificate issuer:       /CN=316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1
Certificate serial:       17E8FE06EBADB47CE08F56452282EC451ADA6BF5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.mft
Manifest number:          010B
Signing time:             Mon 03 Nov 2025 13:22:53 +0000
Manifest this update:     Mon 03 Nov 2025 13:17:53 +0000
Manifest next update:     Tue 04 Nov 2025 13:30:53 +0000
Files and hashes:         1: 3138372e3130332e36342e302f32302d3234203d3e203532393635.roa (hash: oOMb8u/hgLDBI9S1BBhGon4PYwZYeXrW9/06QiZpUTo=)
                          2: 3137372e3232312e33322e302f32302d3234203d3e203532393635.roa (hash: yej56hk3qw4nfvx1vRLitbznBrU0Dm8jyHxFnkZdsv0=)
                          3: 316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.crl (hash: 3+YMl8EgEhnu9mJ0yh0+as2bVraCAHKHY4R/MPMyBrg=)
                          4: 323830343a3362383a3a2f33322d3438203d3e203532393635.roa (hash: 3oR2L4pXAEHTFqvRgOOyoIqZYL0WKEJ+PmxxpkzVeeI=)
                          5: 3137372e33362e302e302f32302d3234203d3e203532393635.roa (hash: bmdz8to7x6XOBogCnS9FpsSgJFrAv1nxcEulY4hr29o=)
                          6: 3133312e302e3232342e302f32322d3234203d3e203532393635.roa (hash: RmIwz3dNoDeS/zs/eunZ/z4QQIKy7ONPdIMsLXcydFg=)
                          7: 3137392e3132342e3133362e302f32312d3234203d3e203532393635.roa (hash: +OdSZ12OwgGDctuu2LtIhNX/EvDd0f320T5Ix8RuqQk=)
                          8: 3137372e37322e3230382e302f32312d3234203d3e203532393635.roa (hash: cdVZlBL5/6VRlwCU7qIKtQ9eEqS+ZvDqNGIxNxhVaV8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.crl
                          rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 13:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e8:fe:06:eb:ad:b4:7c:e0:8f:56:45:22:82:ec:45:1a:da:6b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1
        Validity
            Not Before: Nov  3 13:17:53 2025 GMT
            Not After : Nov  4 13:30:53 2025 GMT
        Subject: CN=FAEC43EC2D64683A0CA8855BCC7ECCB5E8DC6301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b9:93:b3:44:5e:47:58:ad:6f:f4:bd:80:cc:
                    ed:ba:a6:1b:a4:fb:14:61:ee:22:7f:4f:15:33:aa:
                    b6:fd:09:9f:6f:ea:d8:70:2c:e3:73:72:d5:72:10:
                    44:b7:3e:fd:74:e4:59:a0:e7:15:ef:27:73:72:c2:
                    eb:16:67:3f:18:88:08:8c:00:6b:bb:c1:fc:ac:cc:
                    34:b0:47:86:fd:5c:62:0c:8e:28:9b:a4:0f:2d:18:
                    a2:fa:62:ba:50:49:5c:41:24:cf:89:07:91:75:a8:
                    8a:97:be:82:46:ce:7d:bc:59:52:38:6b:e7:fa:10:
                    d1:f1:e4:b0:9a:e5:f9:57:3b:4d:ba:50:fc:7f:72:
                    8e:6e:ad:f9:a3:e1:60:71:4d:89:4c:48:c7:10:d4:
                    00:ad:1e:01:f9:17:f0:ff:7d:c9:91:d4:da:d3:7c:
                    fa:af:e1:7b:b3:81:a1:89:91:12:f3:bd:6b:c3:14:
                    71:83:68:64:ca:9f:0f:f4:2b:bd:8d:af:a4:49:57:
                    ef:6e:13:c2:96:7f:a7:88:54:22:80:e9:be:bb:a7:
                    e5:a0:7c:0a:de:e2:af:96:77:bf:33:ca:1e:23:11:
                    bc:36:1c:9f:80:c7:dd:31:6d:3c:5a:9b:01:35:54:
                    dd:05:09:5b:da:f5:07:51:1c:5d:e6:89:0b:ab:84:
                    30:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EC:43:EC:2D:64:68:3A:0C:A8:85:5B:CC:7E:CC:B5:E8:DC:63:01
            X509v3 Authority Key Identifier:
                keyid:31:6F:29:85:D9:3D:31:DC:FE:2F:EA:3B:FF:AD:81:E5:B6:06:F6:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:90:5c:3f:ee:5a:10:7a:f4:41:63:a6:df:e1:18:72:5d:ec:
         ad:84:b7:25:1f:0f:ea:9f:ab:97:51:8a:b3:c3:3f:8b:c7:29:
         bc:0f:6b:c7:eb:3c:b7:17:2c:f2:4d:25:44:4e:b3:92:15:1e:
         2a:c2:41:30:2b:d0:38:c5:e6:47:9d:29:ca:6e:ad:09:4b:07:
         c4:41:d6:4a:64:78:ca:65:c3:b2:04:76:82:7b:fa:84:db:91:
         95:40:f5:13:d6:79:21:0c:23:60:8a:ec:d1:14:d2:97:4d:e8:
         93:90:07:8f:e1:7e:80:f9:6c:eb:bb:9c:52:d4:f0:aa:2f:2b:
         4f:b5:93:e5:f3:42:01:d8:2d:5d:21:b9:b9:47:49:1a:e9:3e:
         b2:69:d3:b0:39:d3:18:cd:41:47:7d:a8:91:32:3f:56:ce:fd:
         54:86:fe:de:80:86:48:8a:1a:4a:65:3e:3c:ee:01:9d:02:6e:
         cf:f5:9e:4f:e1:85:43:16:f1:62:a3:46:8d:f5:b0:04:8f:e6:
         f7:81:5b:16:62:fc:1d:9a:0b:70:a5:90:16:03:1f:7b:8c:f3:
         c4:f1:31:3f:de:45:91:80:f8:16:60:9e:95:21:be:78:f1:f9:
         06:5b:67:30:af:9b:53:71:17:36:03:ab:f8:c0:ba:27:db:32:
         07:f9:e5:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUF+j+BuuttHzgj1ZFIoLsRRraa/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE2RjI5ODVEOTNEMzFEQ0ZFMkZFQTNCRkZBRDgxRTVC
NjA2RjZCMTAeFw0yNTExMDMxMzE3NTNaFw0yNTExMDQxMzMwNTNaMDMxMTAvBgNV
BAMTKEZBRUM0M0VDMkQ2NDY4M0EwQ0E4ODU1QkNDN0VDQ0I1RThEQzYzMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9uZOzRF5HWK1v9L2AzO26phuk
+xRh7iJ/TxUzqrb9CZ9v6thwLONzctVyEES3Pv105Fmg5xXvJ3NywusWZz8YiAiM
AGu7wfyszDSwR4b9XGIMjiibpA8tGKL6YrpQSVxBJM+JB5F1qIqXvoJGzn28WVI4
a+f6ENHx5LCa5flXO026UPx/co5urfmj4WBxTYlMSMcQ1ACtHgH5F/D/fcmR1NrT
fPqv4XuzgaGJkRLzvWvDFHGDaGTKnw/0K72Nr6RJV+9uE8KWf6eIVCKA6b67p+Wg
fAre4q+Wd78zyh4jEbw2HJ+Ax90xbTxamwE1VN0FCVva9QdRHF3miQurhDDFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+uxD7C1kaDoMqIVbzH7MtejcYwEwHwYDVR0j
BBgwFoAUMW8phdk9Mdz+L+o7/62B5bYG9rEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR24yOHN4bVB0Z0VmcXBhSjZFdHdENHE0S3dZTWRXaDQxemIxdVpFOWFC
Q1gvMC8zMTZGMjk4NUQ5M0QzMURDRkUyRkVBM0JGRkFEODFFNUI2MDZGNkIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxNkYyOTg1RDkzRDMxRENG
RTJGRUEzQkZGQUQ4MUU1QjYwNkY2QjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R24yOHN4bVB0Z0VmcXBhSjZFdHdENHE0S3dZTWRXaDQxemIxdVpFOWFCQ1gvMC8z
MTZGMjk4NUQ5M0QzMURDRkUyRkVBM0JGRkFEODFFNUI2MDZGNkIxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAv5BcP+5aEHr0QWOm3+EYcl3srYS3JR8P6p+rl1GKs8M/i8cpvA9rx+s8txcs
8k0lRE6zkhUeKsJBMCvQOMXmR50pym6tCUsHxEHWSmR4ymXDsgR2gnv6hNuRlUD1
E9Z5IQwjYIrs0RTSl03ok5AHj+F+gPls67ucUtTwqi8rT7WT5fNCAdgtXSG5uUdJ
Guk+smnTsDnTGM1BR32okTI/Vs79VIb+3oCGSIoaSmU+PO4BnQJuz/WeT+GFQxbx
YqNGjfWwBI/m94FbFmL8HZoLcKWQFgMfe4zzxPExP95FkYD4FmCelSG+ePH5Bltn
MK+bU3EXNgOr+MC6J9syB/nl/Q==
-----END CERTIFICATE-----
Generated at Mon Nov 3 19:25:30 2025 by rpki-client