Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.mft
File:                     16149638FCC37EDB923C5F2AFF854155C7486481.mft (raw, json)
Hash identifier:          ay+qPyOHbcIttr1nmCJdZpkpEBWRxQJGyZUk0LN8RSQ=
Subject key identifier:   E3:78:0F:F3:EC:35:2C:84:15:7A:E0:F6:3C:8A:75:28:D1:D8:F8:FB
Authority key identifier: 16:14:96:38:FC:C3:7E:DB:92:3C:5F:2A:FF:85:41:55:C7:48:64:81
Certificate issuer:       /CN=16149638FCC37EDB923C5F2AFF854155C7486481
Certificate serial:       4C6B940AE390389388631CFF71EBDC28728387E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16149638FCC37EDB923C5F2AFF854155C7486481.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.mft
Manifest number:          5B
Signing time:             Mon 20 Oct 2025 00:14:31 +0000
Manifest this update:     Mon 20 Oct 2025 00:09:31 +0000
Manifest next update:     Tue 21 Oct 2025 02:25:31 +0000
Files and hashes:         1: 34352e3232342e33342e302f32332d3233203d3e20323636393234.roa (hash: aa2f1/JjiEtOH2iLz1Mh1JcGxp60RpAzVRtNHvjwUck=)
                          2: 34352e3232342e33322e302f32342d3234203d3e20323636393234.roa (hash: NWec7YMpl0OfbJhkXqXCRQu7t/+5uYVycElpfAyd4Tk=)
                          3: 34352e3232342e33322e302f32332d3233203d3e20323636393234.roa (hash: SQpPZBsBN3O1LpptuNmrD50V+6SEruwpO8dl+O1NH8A=)
                          4: 323830343a343536383a3a2f33322d3332203d3e20323636393234.roa (hash: laJYiJ87zwjmHurZ74zyf8JwjNPE74GPAkodpTq8GtY=)
                          5: 16149638FCC37EDB923C5F2AFF854155C7486481.crl (hash: hfjvgib2j/fylFETFIAL63RgAOpPuYA5BN5st1a1xS0=)
                          6: 34352e3232342e33322e302f32322d3232203d3e20323636393234.roa (hash: YuDAqFbDopuYUJatHhs5zqdckb1n36tKOhAu53zFPwk=)
                          7: 34352e3232342e33352e302f32342d3234203d3e20323636393234.roa (hash: BaklOCUX2/7AEqVb9APvliCg/IBaqKvZ41hnd72XFoE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.crl
                          rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16149638FCC37EDB923C5F2AFF854155C7486481.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:25:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:6b:94:0a:e3:90:38:93:88:63:1c:ff:71:eb:dc:28:72:83:87:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16149638FCC37EDB923C5F2AFF854155C7486481
        Validity
            Not Before: Oct 20 00:09:31 2025 GMT
            Not After : Oct 21 02:25:31 2025 GMT
        Subject: CN=E3780FF3EC352C84157AE0F63C8A7528D1D8F8FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7f:64:a9:21:4c:19:5f:f9:cd:75:4e:f7:07:
                    a1:1d:cd:a9:2f:2a:e0:59:bc:c3:77:86:22:e2:20:
                    06:09:38:46:69:ee:ef:80:e8:d1:27:6d:f6:5e:2a:
                    3a:3d:ba:d8:ee:22:7d:f1:1c:ef:a4:fe:0d:c7:ab:
                    30:76:08:c9:59:bb:1d:24:7c:fe:19:49:e2:4c:09:
                    01:1a:be:0c:e9:2b:bd:fc:31:3e:22:a7:1d:63:f8:
                    e9:01:d7:3b:8e:f7:b3:11:10:64:74:cd:b7:7b:79:
                    be:a2:82:53:9a:b4:b2:a2:c8:e2:27:26:23:4c:04:
                    6e:89:4f:e2:96:61:65:0e:a3:c1:a0:d1:5c:78:4f:
                    00:40:5d:39:fd:85:fb:82:60:38:36:cf:ee:69:7d:
                    2b:95:25:1c:7f:b2:57:26:d1:19:16:57:52:fe:38:
                    14:74:b5:36:94:33:1e:f4:72:9f:f6:fb:2b:7d:55:
                    55:d3:4e:89:f5:ef:1b:00:7a:ad:4e:f6:70:85:a5:
                    01:8f:46:2b:9e:47:29:57:bd:d5:e0:00:9e:db:50:
                    6f:40:46:82:02:2f:31:cf:aa:87:9e:fd:c8:2a:58:
                    1c:98:20:60:e6:d1:27:80:b6:58:37:09:0e:d7:c6:
                    73:72:fa:5c:96:ec:2c:8e:41:f4:b9:f3:9f:e7:6e:
                    82:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:78:0F:F3:EC:35:2C:84:15:7A:E0:F6:3C:8A:75:28:D1:D8:F8:FB
            X509v3 Authority Key Identifier:
                keyid:16:14:96:38:FC:C3:7E:DB:92:3C:5F:2A:FF:85:41:55:C7:48:64:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16149638FCC37EDB923C5F2AFF854155C7486481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:2d:f1:40:b8:65:19:a3:1c:88:cb:98:26:8f:3e:9f:7e:d2:
         eb:ad:f7:79:cf:67:1b:a0:60:21:eb:fa:6a:15:d7:ef:31:1b:
         da:11:59:11:bd:4d:59:b3:3e:ae:99:59:6f:8f:58:7a:47:4d:
         ba:39:65:b2:e3:9f:ac:cc:dd:da:96:ca:f4:d0:4f:06:23:ff:
         67:49:b1:4a:51:3f:36:6f:e4:ed:10:a9:24:ef:1c:41:2e:b2:
         a3:e9:aa:53:e7:3b:a9:de:c4:1a:00:88:59:9b:16:60:69:e6:
         bd:d7:0e:20:5d:06:87:91:4d:7e:eb:98:80:f0:b6:58:21:99:
         7e:8e:e7:65:58:5d:36:5a:db:0a:59:38:55:79:53:72:40:14:
         ce:aa:98:4b:6c:63:f5:5a:8b:f2:1a:b4:bd:4c:cb:1c:23:30:
         fd:15:0d:eb:03:f5:83:e6:11:f8:30:40:7d:4a:30:da:79:af:
         88:47:77:d1:4a:66:7e:47:f1:b5:db:88:3e:50:1b:09:a3:f7:
         7d:49:15:cb:07:64:0e:d8:25:d4:39:30:4f:e3:83:51:ce:fb:
         2f:17:5c:8c:bc:f7:17:88:82:b6:c5:e6:97:26:6f:6d:e6:96:
         44:0a:3a:18:3e:aa:32:30:fa:94:aa:f2:02:98:41:21:7f:d4:
         0a:3e:08:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:16:42 2025 by rpki-client