Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.mft
File:                     6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.mft (raw, json)
Hash identifier:          qaStADMdTwFsZhLmskjEm7u51wsYgAjxRpp8DcexPO8=
Subject key identifier:   4F:C5:3A:F0:A4:20:FA:06:87:F8:7B:1E:F6:44:83:82:B1:93:27:3E
Authority key identifier: 6C:B0:79:67:DE:3E:15:D1:96:7D:5C:3D:97:2F:CC:73:4D:13:D1:D9
Certificate issuer:       /CN=6CB07967DE3E15D1967D5C3D972FCC734D13D1D9
Certificate serial:       31198DE3B7BF6B3982775C6295D3CA75E21A03D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.mft
Manifest number:          021B
Signing time:             Sun 19 Oct 2025 23:29:41 +0000
Manifest this update:     Sun 19 Oct 2025 23:24:41 +0000
Manifest next update:     Tue 21 Oct 2025 00:52:41 +0000
Files and hashes:         1: 3138392e35302e3231312e302f32342d3332203d3e20323730363232.roa (hash: iM2J6PIcGAuL/947QFGlr4dSfY0KmUCrS8BW7m1k1i8=)
                          2: 323830343a366564383a3a2f33322d313238203d3e20323730363232.roa (hash: o8pJ0S0SVLmapT/YxgRLeH7Z6obiu+i7qVJ8EoBrS5Y=)
                          3: 6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.crl (hash: A9XMUTighUR3ewx2jIfgiBVGcWoGzSuUzqH5ar1kp5I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.crl
                          rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:52:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:19:8d:e3:b7:bf:6b:39:82:77:5c:62:95:d3:ca:75:e2:1a:03:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CB07967DE3E15D1967D5C3D972FCC734D13D1D9
        Validity
            Not Before: Oct 19 23:24:41 2025 GMT
            Not After : Oct 21 00:52:41 2025 GMT
        Subject: CN=4FC53AF0A420FA0687F87B1EF6448382B193273E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:10:83:54:28:fe:47:11:a6:26:ca:54:ed:a4:
                    3d:dd:7e:91:22:0a:48:0e:36:af:cd:12:22:08:0b:
                    00:3b:e6:fc:a2:26:7a:32:31:e1:42:06:e3:7e:93:
                    76:31:8c:1f:83:a9:71:c0:b8:c8:e5:03:6d:dd:70:
                    64:58:ab:4b:23:04:26:64:81:0b:60:7a:b1:c8:34:
                    cb:35:7e:4a:34:2a:57:e1:73:e5:2c:36:e3:d0:db:
                    b5:82:b2:30:3c:08:ab:57:f2:a2:65:f4:76:15:24:
                    75:34:58:79:d5:32:6e:b5:9d:5b:ab:d2:dd:d2:8f:
                    d2:b4:3c:52:f2:b7:3b:9c:ba:3e:86:c8:ac:b1:37:
                    67:00:f2:79:6c:3b:d0:4b:b3:65:32:57:88:8e:fc:
                    c5:4f:3e:2b:43:66:46:0e:bc:46:d3:66:b8:d0:c1:
                    af:de:ed:2b:ed:8f:cd:8c:bd:46:c0:cb:37:a2:82:
                    6b:d9:96:59:95:aa:f7:b0:b1:b2:6e:1b:56:0d:ff:
                    0c:49:22:68:b1:3c:d2:df:3e:b6:6a:d5:36:49:72:
                    e5:27:de:c4:b8:3c:a5:89:a1:be:05:fc:b4:fa:de:
                    c3:83:ff:17:56:59:86:39:0f:aa:5f:7f:0d:5b:4b:
                    1d:8d:57:dc:d7:46:01:c2:5c:bd:5c:4d:0c:1a:13:
                    36:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C5:3A:F0:A4:20:FA:06:87:F8:7B:1E:F6:44:83:82:B1:93:27:3E
            X509v3 Authority Key Identifier:
                keyid:6C:B0:79:67:DE:3E:15:D1:96:7D:5C:3D:97:2F:CC:73:4D:13:D1:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:45:7b:fe:d2:48:02:ce:17:79:d3:ab:49:24:da:82:14:f5:
         65:63:37:4e:9f:cb:86:07:ef:e1:da:13:53:ee:62:4f:6d:d1:
         86:84:da:d4:7f:9c:4d:20:b0:07:00:4f:cc:a8:b6:b7:c0:41:
         ae:7e:31:d8:f5:11:85:60:64:2e:d7:e3:ee:db:59:2c:cb:d3:
         20:80:f8:fa:72:84:a6:e5:0b:a4:26:ed:f4:3d:d4:4e:5c:70:
         ed:23:a8:6e:ce:26:42:f5:65:e1:a8:94:60:fd:2c:1d:76:be:
         ca:c2:cd:4b:d8:f2:23:d7:43:2c:c2:ff:c9:07:9e:bd:c1:1a:
         f7:dd:e7:c2:1a:1c:c3:cb:53:98:19:a8:7e:41:54:65:7c:5f:
         73:8c:fb:71:8d:33:a3:95:38:20:f4:70:68:d5:04:06:84:f1:
         d2:23:58:67:5e:4a:cd:18:4e:91:e7:57:fe:ab:27:2d:90:98:
         7d:bb:ae:e4:23:42:20:60:52:c6:59:94:fe:08:cf:50:74:d3:
         5f:8b:a3:bd:b2:f2:72:ae:9a:cb:ca:a9:53:d6:94:0f:0f:9d:
         84:6a:0d:ad:56:1a:e6:6f:45:d3:b8:3a:20:a0:ec:77:5f:39:
         0b:64:6c:34:15:95:e1:be:61:1a:42:da:90:8f:8d:95:e3:06:
         44:36:80:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMRmN47e/azmCd1xildPKdeIaA9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNCMDc5NjdERTNFMTVEMTk2N0Q1QzNEOTcyRkNDNzM0
RDEzRDFEOTAeFw0yNTEwMTkyMzI0NDFaFw0yNTEwMjEwMDUyNDFaMDMxMTAvBgNV
BAMTKDRGQzUzQUYwQTQyMEZBMDY4N0Y4N0IxRUY2NDQ4MzgyQjE5MzI3M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EINUKP5HEaYmylTtpD3dfpEi
CkgONq/NEiIICwA75vyiJnoyMeFCBuN+k3YxjB+DqXHAuMjlA23dcGRYq0sjBCZk
gQtgerHINMs1fko0Klfhc+UsNuPQ27WCsjA8CKtX8qJl9HYVJHU0WHnVMm61nVur
0t3Sj9K0PFLytzucuj6GyKyxN2cA8nlsO9BLs2UyV4iO/MVPPitDZkYOvEbTZrjQ
wa/e7Svtj82MvUbAyzeigmvZllmVqvewsbJuG1YN/wxJImixPNLfPrZq1TZJcuUn
3sS4PKWJob4F/LT63sOD/xdWWYY5D6pffw1bSx2NV9zXRgHCXL1cTQwaEzZ5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUT8U68KQg+gaH+Hse9kSDgrGTJz4wHwYDVR0j
BBgwFoAUbLB5Z94+FdGWfVw9ly/Mc00T0dkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNpdzZEYnlpMjN0dTNqaXdTUUFLVVlCc1NSSmZ2TkZUWlA2RUVRZk5B
OUMvMC82Q0IwNzk2N0RFM0UxNUQxOTY3RDVDM0Q5NzJGQ0M3MzREMTNEMUQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDQjA3OTY3REUzRTE1RDE5
NjdENUMzRDk3MkZDQzczNEQxM0QxRDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RFNpdzZEYnlpMjN0dTNqaXdTUUFLVVlCc1NSSmZ2TkZUWlA2RUVRZk5BOUMvMC82
Q0IwNzk2N0RFM0UxNUQxOTY3RDVDM0Q5NzJGQ0M3MzREMTNEMUQ5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG0V7/tJIAs4XedOrSSTaghT1ZWM3Tp/Lhgfv4doTU+5iT23RhoTa1H+cTSCw
BwBPzKi2t8BBrn4x2PURhWBkLtfj7ttZLMvTIID4+nKEpuULpCbt9D3UTlxw7SOo
bs4mQvVl4aiUYP0sHXa+ysLNS9jyI9dDLML/yQeevcEa993nwhocw8tTmBmofkFU
ZXxfc4z7cY0zo5U4IPRwaNUEBoTx0iNYZ15KzRhOkedX/qsnLZCYfbuu5CNCIGBS
xlmU/gjPUHTTX4ujvbLycq6ay8qpU9aUDw+dhGoNrVYa5m9F07g6IKDsd185C2Rs
NBWV4b5hGkLakI+NleMGRDaAog==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:25:46 2025 by rpki-client