Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
File:                     DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft (raw, json)
Hash identifier:          QW9bd0WvKX29m5JM/FPOVCJOfVtYTJv2agWktHFTFKo=
Subject key identifier:   DD:57:61:FA:6F:86:BB:0F:49:EC:54:D5:B4:2F:BE:35:5B:94:AF:C7
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       4FB59AD1C23548880F689D5D03C3FD539DA1EA22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
Manifest number:          02F1
Signing time:             Mon 20 Oct 2025 13:53:47 +0000
Manifest this update:     Mon 20 Oct 2025 13:48:47 +0000
Manifest next update:     Tue 21 Oct 2025 15:11:47 +0000
Files and hashes:         1: 3138362e3233362e34382e302f32342d3234203d3e20323632373938.roa (hash: DpugJ7GpLSKPDoZ5I0wS+GYdwKWzgmBbtTChS5h65ao=)
                          2: 3138362e3233362e35342e302f32342d3234203d3e20323632373938.roa (hash: LRudLzB2T2v0PnUlyoAz0dCIY5nL6vGvCvDEW4zCraQ=)
                          3: 3138362e3233362e35362e302f32332d3233203d3e20323632373938.roa (hash: 98uev8TMqAJHIibaFIh1eUowNPW7cDkVI8tjO4GzGWo=)
                          4: 3138362e3233362e34382e302f32302d3230203d3e20323632373938.roa (hash: zre7TodWeMc2D8lWgjxTrkXw6rbytvEjuSIgr+pH/iY=)
                          5: 3138362e3233362e35322e302f32332d3233203d3e20323632373938.roa (hash: tyUwGfFcz0sxwcvQnL8YO2r8aQGm1XDquvkNB6pwiUo=)
                          6: 3137372e3132392e3136362e302f32342d3234203d3e20323632373938.roa (hash: zFlg1a1MwsorQeuv7YM+Y+7v7aSBB+kt/15XfU1eC6o=)
                          7: 3138362e3233362e35332e302f32342d3234203d3e20323632373938.roa (hash: cwWFoQLr/46GI6JeeZud+pQXwLzqcpiniVnhz4sazFk=)
                          8: 3138362e3233362e35382e302f32342d3234203d3e20323632373938.roa (hash: jgExGW1x5Zw0Emb9jdnDsYYr39ieY8ICzTb3s2IxMh4=)
                          9: 3138362e3233362e35372e302f32342d3234203d3e20323632373938.roa (hash: oUXfJkHMrexla69x7hpfVATMvlbsVr4cGFHpaVszsa0=)
                          10: 3137372e3132392e3136342e302f32322d3232203d3e20323632373938.roa (hash: 8jWhWvxUpzCFOdYm5Z2Q1Q023lxRrEy+lh28MjdYvGw=)
                          11: 3137372e3132392e3136342e302f32332d3233203d3e20323632373938.roa (hash: s9ytKAP30FHqgJpJFqWBUqL1L0ClXlg2XvyWg2b8CvE=)
                          12: 3138362e3233362e36322e302f32342d3234203d3e20323632373938.roa (hash: VGhuOzd6DeBNSkkU2Pmb+X+FEEQPXpG7LyoC/ZUWoE4=)
                          13: 3138362e3233362e35392e302f32342d3234203d3e20323632373938.roa (hash: JhEN1nNyvgrtCDiHIYow4rv/LmMsbnXCaCMfz7z5pdg=)
                          14: 3138362e3233362e36302e302f32342d3234203d3e20323632373938.roa (hash: xwoTqddVnp16cgmS7BkYQRIB9lSu/6m81Un4Cz5nxFk=)
                          15: 3138362e3233362e35322e302f32342d3234203d3e20323632373938.roa (hash: UK5+DT6jGK+1mllk3h6dv+KDSjDv8Aj3SHBQ9rFhWzY=)
                          16: 3138362e3233362e35362e302f32342d3234203d3e20323632373938.roa (hash: rcpEMpiBrHrFoSDZmUtAZmBoFA1xuFvNRIbC9Xhevbk=)
                          17: 3138362e3233362e36322e302f32332d3233203d3e20323632373938.roa (hash: CVHYokd9x/9H7O+8GOuJS+8GVC+GuVNzszz2OHaBuMw=)
                          18: 3137372e3132392e3136372e302f32342d3234203d3e20323632373938.roa (hash: 7rPy34E36/HkcxlMlq3fnxR6TyUNo8oWqNJZKLq4ekw=)
                          19: 3137372e3132392e3136362e302f32332d3233203d3e20323632373938.roa (hash: fOI/izwv8QEO/ItCudTB7UkhgJffTsARCn3X79EOdP4=)
                          20: DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl (hash: E9+DQvSft3fjBnm2/Xe+rannCTdd25J6Uld/67xZuKU=)
                          21: 3138362e3233362e36302e302f32332d3233203d3e20323632373938.roa (hash: ltmo2ayToasn3pqbbjqJzZdMvxMyMdXnRoPlMFPykXg=)
                          22: 3138362e3233362e34382e302f32332d3233203d3e20323632373938.roa (hash: 3T3ag1EBgnxbJN4WJJzlNOOdhttWK+r5lvZmIvrYndw=)
                          23: 3138362e3233362e36312e302f32342d3234203d3e20323632373938.roa (hash: sfKQeswmoHt+1UUVDNMNgwuncjoKGYWKZ0tNtRAtGzU=)
                          24: 3138362e3233362e35302e302f32332d3233203d3e20323632373938.roa (hash: MVUI3oJ/XbU+pF+qA06+POXGzHBsles2P6Dlw1YnLtU=)
                          25: 3138362e3233362e34392e302f32342d3234203d3e20323632373938.roa (hash: wnLrb2ZRU4f1nAdWCE5nqDu8GbU394Cvbygl/9hffRc=)
                          26: 3138362e3233362e34382e302f32312d3231203d3e20323632373938.roa (hash: KiPCXy4bHlh2ZsKpYn4yjQ2vxtIXGo0CmmyDEOCt/6U=)
                          27: 3137372e3132392e3136342e302f32342d3234203d3e20323632373938.roa (hash: 32OMb8gvcNjcvYg7JbxkBixWvnJY7Ncepa/5PyEginA=)
                          28: 3138362e3233362e35302e302f32342d3234203d3e20323632373938.roa (hash: 9JuGJEHNxL83SXmWvjLNnFCvsTMPVLED69Ubc9jXjV8=)
                          29: 3138362e3233362e35352e302f32342d3234203d3e20323632373938.roa (hash: NCmuoC911jUsjGuTIr5eFMDtcj7/HXiyvsRLhznNxbM=)
                          30: 3138362e3233362e35342e302f32332d3233203d3e20323632373938.roa (hash: nN/yOp2EDmNNjIIoTW1sPMz8PnxcUj4/pTZW8cBcV0c=)
                          31: 3137372e3132392e3136352e302f32342d3234203d3e20323632373938.roa (hash: wX/uSl2L1AutxsbRsrN5nXOUrtKFgmkvSAIX/lcmkcU=)
                          32: 3138362e3233362e35362e302f32312d3231203d3e20323632373938.roa (hash: sOhR+K7HAuvLhByYNoLV9oiaZ6/67cendBUpO9JP0Jc=)
                          33: 323830343a3234303a3a2f33322d3430203d3e20323632373938.roa (hash: yAgWQ2N3UuNcOGHgOFQ6XUgOL32U1mgT+CIkY7S5lFQ=)
                          34: 3138362e3233362e36332e302f32342d3234203d3e20323632373938.roa (hash: VcD14Xl1TxM2ixAuSFoQXfhtl0WRHzs70Bw7Z4GDfB8=)
                          35: 3138362e3233362e35382e302f32332d3233203d3e20323632373938.roa (hash: 5K2eCxwr94HulU1caUahm3xjeK8hbJl/if8+ZDcUZg0=)
                          36: 3138362e3233362e35312e302f32342d3234203d3e20323632373938.roa (hash: Qd8Hvf2u4x+YpA0X+NN9GX5aQkuVd68O7rA6yj5mGwg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b5:9a:d1:c2:35:48:88:0f:68:9d:5d:03:c3:fd:53:9d:a1:ea:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Oct 20 13:48:47 2025 GMT
            Not After : Oct 21 15:11:47 2025 GMT
        Subject: CN=DD5761FA6F86BB0F49EC54D5B42FBE355B94AFC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:d5:d1:7c:6f:1f:c5:2a:84:55:49:7c:f6:
                    6e:6d:44:a3:84:ff:f5:74:de:f1:cc:51:aa:09:df:
                    93:98:0c:d9:f6:49:da:4b:67:47:18:6e:c7:d6:ac:
                    61:7d:4b:37:9d:9c:21:b1:a5:11:f7:45:b7:d5:7f:
                    ef:79:6d:a8:69:d3:1d:c3:8f:7c:ed:42:ce:80:55:
                    e8:b0:c2:d5:ae:dc:db:0a:3f:19:df:a9:66:e3:5a:
                    ef:2c:d8:26:c1:45:14:fa:1a:37:b6:e9:50:dc:94:
                    93:b6:09:a9:7c:c9:c1:05:48:5d:00:2c:ac:74:05:
                    9a:c0:bc:9a:e0:a8:e7:aa:87:8c:51:b5:3b:8f:d9:
                    58:07:10:5e:ba:27:41:b9:ac:f4:66:f3:cf:6a:08:
                    a4:67:51:80:8b:0a:8a:ae:fb:f0:e4:8e:5a:a9:69:
                    98:13:53:33:04:80:2b:5a:04:b7:9a:b8:06:20:63:
                    e4:4c:2b:e5:c6:20:68:d9:12:7e:18:1d:c8:df:c5:
                    23:6e:76:da:7d:4f:90:93:14:62:1b:46:b7:f8:42:
                    92:ff:d4:dd:5f:c1:10:86:ae:f3:58:96:01:83:aa:
                    23:d6:f2:16:b0:33:7a:6e:99:fa:8d:1d:ac:61:2f:
                    7b:53:b8:73:1c:8b:07:59:2a:e3:df:80:13:59:d2:
                    d2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:57:61:FA:6F:86:BB:0F:49:EC:54:D5:B4:2F:BE:35:5B:94:AF:C7
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:92:42:2a:0a:4a:b8:d4:2f:6e:d6:3f:14:ef:78:3e:99:c2:
         2a:45:31:82:26:05:61:22:f3:d3:66:8e:b9:3e:9b:90:81:18:
         86:42:ca:0a:8b:48:47:f7:c4:71:4d:93:cd:fe:00:d8:fb:39:
         9d:34:1c:d8:98:3d:39:fd:cd:7f:51:ef:70:bc:c8:bf:0d:ed:
         a5:97:d5:c8:3b:04:06:cb:ca:70:93:15:0b:55:72:55:55:93:
         97:4a:01:12:1d:27:62:d2:2d:3a:6f:95:ec:9c:a5:4a:9d:69:
         f8:5e:ea:1d:d5:d9:4b:ab:65:00:db:6a:40:eb:e8:26:d0:a6:
         89:df:7a:88:ab:4e:c3:c1:31:d6:14:5b:9d:70:39:fd:50:a9:
         f1:d0:7b:73:5b:87:e4:87:fc:c8:66:ef:fb:78:8c:42:50:98:
         5c:2a:8b:3f:07:87:57:a1:40:50:8d:06:2b:6a:9d:7b:21:54:
         27:6f:c0:26:93:65:50:dc:f6:f8:0b:fe:44:03:23:c3:68:31:
         fe:40:1f:d8:a5:32:07:d7:93:45:b4:cc:e2:97:b8:cc:9c:a2:
         44:84:2c:83:20:a4:d2:49:e8:e8:e8:9c:33:c9:cc:23:a7:c9:
         98:95:6e:c2:d2:c2:d1:f4:85:e5:aa:42:7f:54:a0:ca:90:7b:
         d9:35:eb:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUT7Wa0cI1SIgPaJ1dA8P9U52h6iIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY4NEE1NUFERDJBMzRCQjIyOTIxNjA2NkUxNUFCQUJC
MEQ3RkY4QTAeFw0yNTEwMjAxMzQ4NDdaFw0yNTEwMjExNTExNDdaMDMxMTAvBgNV
BAMTKERENTc2MUZBNkY4NkJCMEY0OUVDNTRENUI0MkZCRTM1NUI5NEFGQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC139XRfG8fxSqEVUl89m5tRKOE
//V03vHMUaoJ35OYDNn2SdpLZ0cYbsfWrGF9SzednCGxpRH3RbfVf+95bahp0x3D
j3ztQs6AVeiwwtWu3NsKPxnfqWbjWu8s2CbBRRT6Gje26VDclJO2Cal8ycEFSF0A
LKx0BZrAvJrgqOeqh4xRtTuP2VgHEF66J0G5rPRm889qCKRnUYCLCoqu+/Dkjlqp
aZgTUzMEgCtaBLeauAYgY+RMK+XGIGjZEn4YHcjfxSNudtp9T5CTFGIbRrf4QpL/
1N1fwRCGrvNYlgGDqiPW8hawM3pumfqNHaxhL3tTuHMciwdZKuPfgBNZ0tI5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU3Vdh+m+Guw9J7FTVtC++NVuUr8cwHwYDVR0j
BBgwFoAU34SlWt0qNLsikhYGbhWrq7DX/4owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVJFVHN1bWl0VHpKblRGd2NNRHZCYUdNWXRiTDRUMkhYVDJnam1tV2Vv
OG0vMS9ERjg0QTU1QUREMkEzNEJCMjI5MjE2MDY2RTE1QUJBQkIwRDdGRjhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGODRBNTVBREQyQTM0QkIy
MjkyMTYwNjZFMTVBQkFCQjBEN0ZGOEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OVJFVHN1bWl0VHpKblRGd2NNRHZCYUdNWXRiTDRUMkhYVDJnam1tV2VvOG0vMS9E
Rjg0QTU1QUREMkEzNEJCMjI5MjE2MDY2RTE1QUJBQkIwRDdGRjhBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl5JCKgpKuNQvbtY/FO94PpnCKkUxgiYFYSLz02aOuT6bkIEYhkLKCotIR/fE
cU2Tzf4A2Ps5nTQc2Jg9Of3Nf1HvcLzIvw3tpZfVyDsEBsvKcJMVC1VyVVWTl0oB
Eh0nYtItOm+V7JylSp1p+F7qHdXZS6tlANtqQOvoJtCmid96iKtOw8Ex1hRbnXA5
/VCp8dB7c1uH5If8yGbv+3iMQlCYXCqLPweHV6FAUI0GK2qdeyFUJ2/AJpNlUNz2
+Av+RAMjw2gx/kAf2KUyB9eTRbTM4pe4zJyiRIQsgyCk0kno6OicM8nMI6fJmJVu
wtLC0fSF5apCf1SgypB72TXrig==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:37:25 2025 by rpki-client