Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/683528643A65F1188AB7E1EF5CB5E716A5A13959.mft
File:                     683528643A65F1188AB7E1EF5CB5E716A5A13959.mft (raw, json)
Hash identifier:          eaAL8v1YKS+NGIWpHUSy6rhu0NXGXftf+caYWPdqI1M=
Subject key identifier:   D0:C4:D5:4E:BD:C3:8A:82:14:D1:09:51:9D:4C:E3:1E:A4:C2:BA:EC
Authority key identifier: 68:35:28:64:3A:65:F1:18:8A:B7:E1:EF:5C:B5:E7:16:A5:A1:39:59
Certificate issuer:       /CN=683528643A65F1188AB7E1EF5CB5E716A5A13959
Certificate serial:       78417B9CDEC5C8E85DF814FA23CA1E1690657D6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/683528643A65F1188AB7E1EF5CB5E716A5A13959.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/683528643A65F1188AB7E1EF5CB5E716A5A13959.mft
Manifest number:          016C
Signing time:             Mon 20 Oct 2025 00:13:42 +0000
Manifest this update:     Mon 20 Oct 2025 00:08:42 +0000
Manifest next update:     Tue 21 Oct 2025 02:10:42 +0000
Files and hashes:         1: 323830343a343138633a383030303a3a2f33342d3334203d3e20323637343430.roa (hash: 2bh6ar0j8X40SPeF81Y5IBtBMFr+W35muGfHtYjqVbc=)
                          2: 323830343a343138633a3a2f33332d3333203d3e20323637343430.roa (hash: knU6K8mhydkUbJzXgqwEq0Pbf7eQnYRydy+qqpZ79Mo=)
                          3: 323830343a343138633a343030303a3a2f33342d3334203d3e20323637343430.roa (hash: Q3jDbOkFZ6VlpEahDo+Nq2855B+exjRrADo0Px1mo8A=)
                          4: 323830343a343138633a383030303a3a2f33332d3333203d3e20323637343430.roa (hash: 3pSGDZLvhy9VzCXIauLXWW4AyHCKBHGR8UXJnCqoaSk=)
                          5: 323830343a343138633a633030303a3a2f33342d3334203d3e20323637343430.roa (hash: tkgFwH1N0oLwAFciYknMgYrhFdDW9K1fXNAIfURE3BQ=)
                          6: 3139322e3134312e302e302f32322d3234203d3e20323637343430.roa (hash: PzgVgX9BbuiB/jZ6yxV/vknrx4La1Gq7KAhoTaUJn8E=)
                          7: 323830343a343138633a3a2f33342d3334203d3e20323637343430.roa (hash: RBTg1NkRcVaYhxM+fFD/rKWDFN3rh27v4e7XrwlncXI=)
                          8: 323830343a343138633a3a2f33322d3332203d3e20323637343430.roa (hash: m37/XdCebkrzQgtG9m7+Xp1xCi6//MpdFHqVtBVUQfc=)
                          9: 683528643A65F1188AB7E1EF5CB5E716A5A13959.crl (hash: JZLVgxAjxhOa/uu4xFwsxKb1b7v50Bmth20xNxEWA2g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/683528643A65F1188AB7E1EF5CB5E716A5A13959.crl
                          rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/683528643A65F1188AB7E1EF5CB5E716A5A13959.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/683528643A65F1188AB7E1EF5CB5E716A5A13959.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:10:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:41:7b:9c:de:c5:c8:e8:5d:f8:14:fa:23:ca:1e:16:90:65:7d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=683528643A65F1188AB7E1EF5CB5E716A5A13959
        Validity
            Not Before: Oct 20 00:08:42 2025 GMT
            Not After : Oct 21 02:10:42 2025 GMT
        Subject: CN=D0C4D54EBDC38A8214D109519D4CE31EA4C2BAEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:32:46:fd:71:f6:de:60:ec:80:2d:f6:52:0d:
                    ef:ff:b3:64:4b:4b:62:49:fd:2d:cf:5d:d2:a7:b3:
                    98:35:b9:3a:8f:eb:1e:cc:12:21:e6:5c:21:a6:af:
                    45:ae:69:d5:0d:3b:05:0a:a0:62:04:d5:f6:44:d3:
                    c7:dd:a9:d8:2d:03:c0:a4:be:71:9c:ec:3b:85:11:
                    76:89:39:2f:8c:b9:94:03:6e:60:9c:90:3e:34:d2:
                    d5:5d:ea:d2:cf:86:95:cb:df:32:9a:64:10:3c:20:
                    1a:6f:55:8c:e2:6d:9d:47:48:2f:49:ef:58:a7:bb:
                    bd:f9:19:de:5e:4c:cd:cc:ac:80:33:30:3b:46:69:
                    71:4e:48:be:9c:03:ed:6a:f0:dc:88:af:78:5a:7f:
                    c0:44:e1:5f:bb:8c:d5:aa:e7:96:bf:4a:b3:35:16:
                    bf:ce:1e:54:83:bd:1d:a1:31:8c:b4:a2:34:7a:36:
                    ce:89:3e:ef:0e:11:da:99:16:26:08:d1:04:b1:68:
                    b1:c8:03:67:da:f6:9d:47:03:cd:cb:a0:74:6e:56:
                    27:0d:b3:49:79:de:62:b1:93:42:85:4a:96:3a:9a:
                    2b:8f:da:57:03:fc:b0:b7:5c:84:7f:4a:75:8c:74:
                    7c:e0:86:5a:58:3b:88:60:20:b0:32:c4:42:94:65:
                    8b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C4:D5:4E:BD:C3:8A:82:14:D1:09:51:9D:4C:E3:1E:A4:C2:BA:EC
            X509v3 Authority Key Identifier:
                keyid:68:35:28:64:3A:65:F1:18:8A:B7:E1:EF:5C:B5:E7:16:A5:A1:39:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/683528643A65F1188AB7E1EF5CB5E716A5A13959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/683528643A65F1188AB7E1EF5CB5E716A5A13959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/683528643A65F1188AB7E1EF5CB5E716A5A13959.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b7:06:32:84:3d:1b:b6:05:7a:ba:d8:3d:8d:30:0e:e6:e4:
         f2:3d:eb:5a:08:fd:44:3c:82:33:a0:b2:be:79:23:83:ab:65:
         e5:6c:69:13:68:f4:78:2a:97:db:eb:0b:33:fd:13:65:07:91:
         a2:97:85:c2:5d:75:fb:e7:f2:62:a9:3c:39:f2:08:43:68:63:
         6a:b4:d5:07:9c:f3:af:35:c3:51:8f:df:85:73:d3:85:a4:a1:
         75:31:4b:43:fe:a8:2c:e5:f1:e7:8d:68:16:8a:9b:03:1f:9c:
         e4:12:b2:3e:61:c8:ed:4b:11:cb:29:fb:70:bd:de:94:94:02:
         9e:4b:98:92:2a:5a:5f:7e:9d:0a:05:0e:42:1c:f7:e4:12:f2:
         e2:ff:e1:d8:34:fb:db:75:b8:63:a1:9d:c1:1d:f9:73:3e:c8:
         84:e3:90:30:09:6a:47:d2:ca:f1:35:3b:c0:8b:96:d1:69:9d:
         83:75:b2:d3:29:49:aa:b1:9c:41:5f:30:51:8a:4e:42:23:44:
         0d:68:49:7a:e0:b6:5f:fa:a4:d9:16:98:76:d4:e4:64:af:a5:
         a3:e4:2c:27:a8:90:89:67:c7:d7:f6:1b:94:fa:f4:2b:b5:da:
         f0:4f:43:27:45:f8:80:e5:0e:3a:af:8c:4b:cf:8a:64:7b:2f:
         7a:83:80:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:43:21 2025 by rpki-client