Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft
File:                     88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft (raw, json)
Hash identifier:          Yfzo5w76pKALbAoDyvdOF5oqUxQqmrsFg9LfDefse7o=
Subject key identifier:   93:DA:FA:03:3F:D4:6C:AD:D9:C0:28:28:38:94:82:8B:69:57:E5:FC
Authority key identifier: 88:D1:B2:07:D5:AA:97:28:17:32:04:A8:DC:EB:8A:A6:E4:5B:BC:0A
Certificate issuer:       /CN=88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A
Certificate serial:       2514CA7EED4AAA70699F3A738C9B16484539AA3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft
Manifest number:          16
Signing time:             Mon 20 Oct 2025 09:06:12 +0000
Manifest this update:     Mon 20 Oct 2025 09:01:12 +0000
Manifest next update:     Tue 21 Oct 2025 12:03:12 +0000
Files and hashes:         1: 88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl (hash: gXb0/SVc/zYbFRcdaPGEK60jAsZjOVsjY49bAm2ISnA=)
                          2: 34352e3137352e3234342e302f32322d3234203d3e20313938393439.roa (hash: iSOokv3jMzPeBY9ADgHRNBxwlvxvdXV1IcX7gZrelOU=)
                          3: 34352e3137352e3234342e302f32322d3332203d3e20323638393233.roa (hash: Qdy1QzKRsq9JYXWTrNZjwInIzn0toipLNQD8MA3MD+g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl
                          rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:14:ca:7e:ed:4a:aa:70:69:9f:3a:73:8c:9b:16:48:45:39:aa:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A
        Validity
            Not Before: Oct 20 09:01:12 2025 GMT
            Not After : Oct 21 12:03:12 2025 GMT
        Subject: CN=93DAFA033FD46CADD9C028283894828B6957E5FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:61:be:c7:86:ef:71:bd:b5:17:b6:ef:08:
                    53:08:87:96:79:98:83:28:89:db:3d:f2:79:aa:19:
                    42:63:89:7e:df:31:63:5b:f3:1f:25:0b:39:a9:9b:
                    2d:41:d3:b4:8a:cc:30:fb:5c:a4:10:32:49:8b:dd:
                    4b:3f:9f:3e:a4:04:4f:a7:8e:2b:0e:cb:2d:2a:91:
                    61:ab:4a:c9:19:d4:d7:95:3e:34:20:06:e2:e0:c7:
                    9f:32:a3:24:4a:65:8a:ad:df:a6:37:8a:8e:de:cc:
                    58:73:64:e4:1d:2c:d1:98:04:4e:60:af:83:32:56:
                    11:a8:48:bf:ec:66:4e:62:49:27:76:e6:73:a7:ac:
                    66:69:07:19:6e:4a:70:e5:48:8b:74:83:46:4c:a1:
                    7f:7f:dc:0c:71:d4:98:0a:81:1c:45:52:40:f1:d2:
                    59:79:6e:40:c0:34:d9:93:b0:56:f2:a2:0b:3f:07:
                    fd:a4:da:5d:bf:87:7a:6f:2f:7b:b4:ee:ff:e2:d6:
                    c8:26:3d:95:af:81:49:22:ac:09:40:b8:65:5f:d7:
                    10:b0:ac:ab:f6:d4:ee:70:c3:7b:f9:8e:41:d0:50:
                    97:31:53:a3:b5:68:59:d8:bb:68:ef:99:28:32:cb:
                    2f:7b:92:f0:4e:61:bb:14:d7:d0:eb:a0:fd:ee:6b:
                    48:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DA:FA:03:3F:D4:6C:AD:D9:C0:28:28:38:94:82:8B:69:57:E5:FC
            X509v3 Authority Key Identifier:
                keyid:88:D1:B2:07:D5:AA:97:28:17:32:04:A8:DC:EB:8A:A6:E4:5B:BC:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:df:27:e2:3d:45:29:e6:9e:92:fa:18:80:b8:6e:8a:1b:01:
         c0:1a:6a:7c:f4:83:7b:8a:ed:e6:a9:cd:18:26:e6:65:40:c9:
         22:49:61:2c:f9:22:31:5c:21:7b:31:3f:bf:d6:e6:52:09:b8:
         b3:b9:70:97:9e:76:0d:ea:e7:2a:84:fd:95:a0:a1:e0:be:8d:
         60:27:c0:e1:26:d0:3f:89:4c:8b:b7:a7:ed:a6:6f:0e:f7:e0:
         75:18:a8:16:48:09:38:96:f4:cc:ff:86:a4:07:99:f0:d8:96:
         21:87:36:e7:5e:3e:39:7f:03:58:11:76:b3:62:31:a9:e7:42:
         30:3d:7d:07:2b:3f:78:9a:37:59:c9:4e:45:eb:66:e1:1a:6c:
         35:48:e1:75:db:60:78:d6:51:52:50:a3:3a:63:4a:51:31:8f:
         0e:dc:48:6b:60:9e:d7:0d:b2:40:ef:00:4d:98:1d:7c:2c:53:
         74:b0:c3:d4:cb:d6:bd:6b:85:7c:14:8a:0d:13:2f:58:75:4d:
         03:5d:85:e4:40:1c:6e:7e:38:34:2c:f7:cd:8f:33:53:14:63:
         b1:99:35:e2:e6:25:1d:2e:c2:e1:b7:4e:bd:f3:f9:6a:fe:88:
         63:75:ec:d0:93:7d:98:6e:25:84:f0:17:9f:ac:74:87:ea:2a:
         e7:02:4f:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJRTKfu1KqnBpnzpzjJsWSEU5qj4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhEMUIyMDdENUFBOTcyODE3MzIwNEE4RENFQjhBQTZF
NDVCQkMwQTAeFw0yNTEwMjAwOTAxMTJaFw0yNTEwMjExMjAzMTJaMDMxMTAvBgNV
BAMTKDkzREFGQTAzM0ZENDZDQUREOUMwMjgyODM4OTQ4MjhCNjk1N0U1RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnvGG+x4bvcb21F7bvCFMIh5Z5
mIMoids98nmqGUJjiX7fMWNb8x8lCzmpmy1B07SKzDD7XKQQMkmL3Us/nz6kBE+n
jisOyy0qkWGrSskZ1NeVPjQgBuLgx58yoyRKZYqt36Y3io7ezFhzZOQdLNGYBE5g
r4MyVhGoSL/sZk5iSSd25nOnrGZpBxluSnDlSIt0g0ZMoX9/3Axx1JgKgRxFUkDx
0ll5bkDANNmTsFbyogs/B/2k2l2/h3pvL3u07v/i1sgmPZWvgUkirAlAuGVf1xCw
rKv21O5ww3v5jkHQUJcxU6O1aFnYu2jvmSgyyy97kvBOYbsU19DroP3ua0hvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUk9r6Az/UbK3ZwCgoOJSCi2lX5fwwHwYDVR0j
BBgwFoAUiNGyB9WqlygXMgSo3OuKpuRbvAowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOG5nd1ZHcm9ma1V6enE1aTY2a1M3bXhwaW04ZmM4SGNxRWZRNkxubktl
eFEvMC84OEQxQjIwN0Q1QUE5NzI4MTczMjA0QThEQ0VCOEFBNkU0NUJCQzBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4RDFCMjA3RDVBQTk3Mjgx
NzMyMDRBOERDRUI4QUE2RTQ1QkJDMEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OG5nd1ZHcm9ma1V6enE1aTY2a1M3bXhwaW04ZmM4SGNxRWZRNkxubktleFEvMC84
OEQxQjIwN0Q1QUE5NzI4MTczMjA0QThEQ0VCOEFBNkU0NUJCQzBBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKt8n4j1FKeaekvoYgLhuihsBwBpqfPSDe4rt5qnNGCbmZUDJIklhLPkiMVwh
ezE/v9bmUgm4s7lwl552DernKoT9laCh4L6NYCfA4SbQP4lMi7en7aZvDvfgdRio
FkgJOJb0zP+GpAeZ8NiWIYc2514+OX8DWBF2s2IxqedCMD19Bys/eJo3WclORetm
4RpsNUjhddtgeNZRUlCjOmNKUTGPDtxIa2Ce1w2yQO8ATZgdfCxTdLDD1MvWvWuF
fBSKDRMvWHVNA12F5EAcbn44NCz3zY8zUxRjsZk14uYlHS7C4bdOvfP5av6IY3Xs
0JN9mG4lhPAXn6x0h+oq5wJPWA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:02:02 2025 by rpki-client