Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.mft
File:                     16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.mft (raw, json)
Hash identifier:          V6EOr9BkZHXd+qTrEwhV1S7FuKJurAEutrONgKH36IU=
Subject key identifier:   23:CE:3A:EF:33:8A:A3:38:F8:57:E6:51:0B:31:5E:71:92:44:EC:12
Authority key identifier: 16:DB:25:C6:0A:69:26:C5:8A:F5:C7:D7:7D:A6:93:B1:7A:DA:0D:55
Certificate issuer:       /CN=16DB25C60A6926C58AF5C7D77DA693B17ADA0D55
Certificate serial:       14C8EB99E5E4911CE66DFA3B87D51CF0124CE528
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.mft
Manifest number:          51
Signing time:             Mon 20 Oct 2025 02:03:30 +0000
Manifest this update:     Mon 20 Oct 2025 01:58:30 +0000
Manifest next update:     Tue 21 Oct 2025 03:00:30 +0000
Files and hashes:         1: 34352e3137342e3138382e302f32322d3234203d3e20323634353632.roa (hash: rzzECidksqaevhLMENQLk+ux4RcMC0cAN/wAl1ftuQE=)
                          2: 34352e3233392e382e302f32322d3234203d3e20323634353632.roa (hash: kWZtsWaO4KwUMQaVyJbEGnQtDVoym238WkoDoSRKYZI=)
                          3: 323830343a323139303a3a2f33322d3634203d3e20323634353632.roa (hash: zlSA6X8xym9nADcxgsEGBLQrJDc3E80RmIKc1sMT+eI=)
                          4: 3138372e34392e3137362e302f32322d3234203d3e20323634353632.roa (hash: qFKQxWlMbgl/r+3Z7txrgOI0nrdt+GjcJRKIwv+lqFk=)
                          5: 16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.crl (hash: IwQ8CKs9aLUXWLX2IbFoFM6bPNDD5AWTJ7O+mrT3dPc=)
                          6: 3136382e3233322e38342e302f32322d3234203d3e20323634353632.roa (hash: IrLDPBwNqYH0lDDCms/8VMBkI4vSmDFchMeEj1fvtuE=)
                          7: 3133382e33362e302e302f32322d3234203d3e20323634353632.roa (hash: L0w/ziI3yH7kZid4khk3HPopdj8H0s1w9d12n6L7orc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.crl
                          rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c8:eb:99:e5:e4:91:1c:e6:6d:fa:3b:87:d5:1c:f0:12:4c:e5:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16DB25C60A6926C58AF5C7D77DA693B17ADA0D55
        Validity
            Not Before: Oct 20 01:58:30 2025 GMT
            Not After : Oct 21 03:00:30 2025 GMT
        Subject: CN=23CE3AEF338AA338F857E6510B315E719244EC12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bf:3f:2b:e3:36:5e:30:22:d1:a5:fc:22:23:
                    35:c1:33:c4:63:31:3c:13:47:63:08:10:75:3b:f0:
                    6d:da:59:09:94:f5:4f:54:f6:b6:50:91:d0:b0:c1:
                    22:c7:6a:c2:8a:a9:8a:a0:5e:9e:6d:ec:cd:84:31:
                    93:5a:c9:ec:3b:b7:9b:82:07:4f:a2:bc:87:ea:3d:
                    0f:e2:5b:87:39:89:41:6a:e1:66:74:20:06:07:78:
                    96:58:d4:14:3a:b0:29:33:fa:b9:25:f6:3c:7f:83:
                    b5:22:52:ea:cd:00:be:08:c2:e6:10:92:1a:4a:12:
                    d7:b4:98:9f:eb:b5:c6:f5:d0:7d:3e:00:da:bb:07:
                    b2:d4:83:87:a2:97:a8:88:30:1b:b9:81:44:92:5b:
                    b2:38:73:4d:d4:34:13:d4:ce:af:5a:4b:55:4b:3d:
                    a1:37:35:6c:0e:cd:2e:29:fd:a0:10:14:49:b1:00:
                    97:c4:c4:3b:30:ab:ea:bf:95:5a:78:7b:bd:75:a0:
                    e5:e8:27:9b:02:23:cc:8a:f4:ac:1d:9e:0f:db:65:
                    3b:af:1a:4f:c9:28:05:bf:ba:ab:d8:79:a0:f6:e4:
                    ee:13:71:0e:6f:a9:1c:45:25:aa:dd:99:6b:9b:cc:
                    81:30:31:af:e5:92:02:7c:43:13:c5:18:fc:35:f5:
                    f8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CE:3A:EF:33:8A:A3:38:F8:57:E6:51:0B:31:5E:71:92:44:EC:12
            X509v3 Authority Key Identifier:
                keyid:16:DB:25:C6:0A:69:26:C5:8A:F5:C7:D7:7D:A6:93:B1:7A:DA:0D:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:56:ed:e0:2e:06:03:66:a4:c0:fb:08:d1:60:9f:44:f8:81:
         40:7d:ff:0e:ec:3f:49:58:c2:cb:33:9f:e6:42:f9:d1:4a:b8:
         6e:89:d6:ef:d4:15:f2:c3:7e:be:5e:cb:a1:f3:13:a0:ab:2d:
         06:7c:93:e9:2b:4d:dc:d2:a0:02:f5:7f:77:89:85:53:88:7c:
         bb:5a:0f:24:d9:27:11:29:32:85:d0:b9:cd:61:27:7e:89:e3:
         9d:b7:52:a1:57:4f:a5:9f:5a:29:be:a9:d7:23:a4:39:d4:d8:
         e1:81:50:ef:42:1a:96:04:8d:f5:98:95:42:6e:23:ce:7a:c7:
         c1:b7:86:4e:47:ac:bf:e7:f5:30:e6:dd:58:1d:bc:69:d3:6d:
         cf:20:fc:bc:c3:a9:90:1d:25:3a:77:d7:ca:f0:2a:fc:82:1f:
         37:f3:94:0c:93:ae:e6:41:16:a5:69:66:2c:e8:8c:fb:f2:80:
         8f:d3:4e:4d:64:ec:d9:2e:56:0c:44:c0:be:88:ef:79:a3:22:
         0e:41:50:16:8b:58:5b:6f:ea:3b:1a:18:12:72:fa:be:fc:bc:
         48:17:f4:52:b4:05:b5:00:c0:d1:06:d0:c5:93:36:e0:ba:54:
         d9:c8:d2:c7:0d:1b:8b:59:09:78:57:6f:74:32:c0:7f:1b:ae:
         b1:ef:ac:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:41:49 2025 by rpki-client