Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
File:                     16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft (raw, json)
Hash identifier:          ePMvna6yp5AVtLdMqHo4yqJglX8952vykjAPbOtBLf0=
Subject key identifier:   DD:D0:26:8D:12:D1:DD:53:BF:6F:B0:39:A8:6C:01:40:E9:F2:54:A9
Authority key identifier: 16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9
Certificate issuer:       /CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
Certificate serial:       476AE177663FF924CCC679DFE67CF5B23ADC89F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
Manifest number:          02FA
Signing time:             Sun 19 Oct 2025 15:10:50 +0000
Manifest this update:     Sun 19 Oct 2025 15:05:50 +0000
Manifest next update:     Mon 20 Oct 2025 16:19:50 +0000
Files and hashes:         1: 3139302e38392e37382e302f32342d3234203d3e20323730333539.roa (hash: lF19hSDOAfm2tNSd3NVzFWZnlumzBq/D5ZYnb4zYymc=)
                          2: 3139302e38392e37372e302f32342d3234203d3e20323730333539.roa (hash: QNXaTHbuy09y26RAoh1BBTOZMC9YeakPjxvy5mnSQZM=)
                          3: 3139302e38392e37392e302f32342d3234203d3e20323730333539.roa (hash: dgPf8F9riZQ0wWlarREqQfDLK6a5wB6E1MPWGP5VCK8=)
                          4: 16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl (hash: z7I1AIwoauuq6l2APxieJg9tqvABuHQzT3dhWUUBAuU=)
                          5: 3139302e38392e37362e302f32322d3234203d3e20323730333539.roa (hash: ATz5erBvp9f3K2BIGTfKnKQsJZditnJDPYBEhEwGZzI=)
                          6: 3139302e38392e37362e302f32342d3234203d3e20323730333539.roa (hash: tuVDtcdFxKONVT2+GLGWlZHFRJDcc0yTqn2fUN2ij+A=)
                          7: 323830343a366163633a3a2f33322d313238203d3e20323730333539.roa (hash: tNv76tmUvA6C0GcCWj3mDrtKqjPENo+bQVWJyRlab48=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl
                          rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 16:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6a:e1:77:66:3f:f9:24:cc:c6:79:df:e6:7c:f5:b2:3a:dc:89:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
        Validity
            Not Before: Oct 19 15:05:50 2025 GMT
            Not After : Oct 20 16:19:50 2025 GMT
        Subject: CN=DDD0268D12D1DD53BF6FB039A86C0140E9F254A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dd:e4:f4:d2:ba:b6:b8:9f:bd:58:fd:94:78:
                    31:3a:f7:73:6d:3d:19:36:7e:6f:80:2a:d0:da:dc:
                    97:39:65:6f:36:6c:6c:cf:fa:e5:ab:3b:06:e7:b8:
                    57:7a:79:00:c4:83:b6:e4:01:d1:45:d3:0c:88:ca:
                    7b:ed:7d:a2:51:ed:b6:41:fe:d3:7b:e5:6e:c7:c0:
                    12:b8:90:ac:dc:94:57:e8:47:2d:57:a8:b0:37:c4:
                    37:c3:c3:d8:d9:fc:7a:ff:19:35:3b:ac:94:16:48:
                    8d:ad:97:33:99:ce:e8:63:98:ce:3e:dc:ab:47:48:
                    d5:99:5a:04:ba:ff:c9:5b:02:f6:1b:fc:a5:d0:ba:
                    39:81:44:ac:04:e1:cc:a4:cc:57:d5:e0:06:4f:18:
                    1f:59:49:d6:ff:13:25:a7:9b:07:4e:0f:78:d1:98:
                    51:2e:bd:21:30:37:24:ba:2f:4b:bc:7b:c9:08:e9:
                    dc:12:69:b1:1c:f0:49:72:72:89:ff:9a:68:02:ca:
                    2a:5d:ea:d4:77:00:fa:7d:04:ac:57:0a:8d:22:4c:
                    e6:5c:47:f6:1b:85:6a:9c:cc:d7:0f:1d:0e:30:e3:
                    f1:96:bc:43:62:69:8e:20:37:4f:56:aa:36:07:a6:
                    3e:98:aa:6c:30:c8:4f:6a:a3:8e:1c:f3:81:6e:82:
                    27:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D0:26:8D:12:D1:DD:53:BF:6F:B0:39:A8:6C:01:40:E9:F2:54:A9
            X509v3 Authority Key Identifier:
                keyid:16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:45:97:43:cf:88:aa:cf:b8:e5:a0:c7:b3:3b:fd:1b:a6:92:
         9a:4c:19:87:c1:87:a0:69:21:4d:05:f7:47:95:e1:26:e6:c7:
         57:c9:be:ec:18:f5:73:af:87:07:aa:d5:b1:4d:19:13:03:98:
         6a:ae:c7:6d:35:69:35:20:e4:4f:0c:9b:08:e1:e8:2d:10:88:
         2b:88:75:7c:29:0d:e5:b6:b9:f5:b1:ea:2e:59:1a:1b:dc:57:
         c0:27:e2:d4:3e:94:05:42:65:e7:1f:7a:73:14:0d:92:ed:c2:
         a2:46:3f:bd:2c:ba:3b:cb:f3:df:2b:91:18:c9:ef:91:ab:e6:
         a9:2d:5a:50:83:2a:91:83:21:c4:10:97:14:ce:22:fc:75:d0:
         04:68:28:36:19:a1:8d:35:97:10:77:e8:0e:17:cb:65:45:f5:
         a8:38:01:1e:00:54:6a:5c:65:c8:a2:5a:91:dd:1f:7d:d0:e8:
         32:37:5e:be:78:01:63:8d:73:64:6c:44:f4:7b:21:90:be:de:
         ec:10:0d:16:20:68:16:bf:4a:3d:94:3e:93:f3:a9:23:21:c7:
         65:1f:2c:3e:b7:70:6e:f3:f3:bb:a7:cc:57:76:02:4f:60:01:
         2d:d1:14:45:b7:71:28:05:b3:af:ce:2c:8d:5d:97:99:8d:08:
         ce:7f:ff:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:30:59 2025 by rpki-client