Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.mft
File:                     886EEAC9FB3433BE96A51A9D0154D4663682FF65.mft (raw, json)
Hash identifier:          AIY+INFrsbq/A/PTl8KJMKz+Ixx30ByfvnUN2yxB1cA=
Subject key identifier:   67:F6:BE:9B:BC:C8:98:46:88:AD:2A:11:F2:4B:EB:6C:44:AC:08:2B
Authority key identifier: 88:6E:EA:C9:FB:34:33:BE:96:A5:1A:9D:01:54:D4:66:36:82:FF:65
Certificate issuer:       /CN=886EEAC9FB3433BE96A51A9D0154D4663682FF65
Certificate serial:       1FC3F60DBFFF7FC713FA712F390CEA3B4E493DD1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.mft
Manifest number:          02EC
Signing time:             Mon 20 Oct 2025 12:53:01 +0000
Manifest this update:     Mon 20 Oct 2025 12:48:01 +0000
Manifest next update:     Tue 21 Oct 2025 15:38:01 +0000
Files and hashes:         1: 3137302e3135302e3139322e302f32322d3234203d3e20313938393439.roa (hash: yeA+fgHn9rXdVOXjdNJc1yTqbIPOt6AjOVk+OaT7CK8=)
                          2: 3137302e3135302e3139322e302f32322d3234203d3e203532373731.roa (hash: Qt3f72G/Curihajq4/YAKcNwsvu+57Wk9C2CxzdxllY=)
                          3: 3137302e3135302e3139322e302f32322d3234203d3e20323633353036.roa (hash: J9H+NlmdU6Lg875B4pxapf0DrXSxXJ/rd+gOJ9H8wys=)
                          4: 886EEAC9FB3433BE96A51A9D0154D4663682FF65.crl (hash: WAsMcy/KwlQNWTOeEWuUMv9/5Ix2c9sqUHw09M/gvYs=)
                          5: 3137372e3130372e3231362e302f32312d3234203d3e20323633353036.roa (hash: Ekp4VhO3L3LzpDKOfJpFfXjwIW1+WuHVVNbI6mk5Iho=)
                          6: 323830343a313266343a3a2f33322d3438203d3e20323633353036.roa (hash: jBul08f3jl+9WSZXItKw0BKTaVja6syJh2dwE0yUVL8=)
                          7: 3137372e3130372e3231362e302f32312d3234203d3e20313938393439.roa (hash: Hdpx0XOO9hxzW6Lw7YrK+9FzXmMIXq54BhTSoIUazjI=)
                          8: 3137372e3130372e3231362e302f32312d3234203d3e203532373731.roa (hash: HufwzZ1gx4Y6Zmw7ZVqYM6excGyyrHDIomY5tv9Lj2I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.crl
                          rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c3:f6:0d:bf:ff:7f:c7:13:fa:71:2f:39:0c:ea:3b:4e:49:3d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=886EEAC9FB3433BE96A51A9D0154D4663682FF65
        Validity
            Not Before: Oct 20 12:48:01 2025 GMT
            Not After : Oct 21 15:38:01 2025 GMT
        Subject: CN=67F6BE9BBCC8984688AD2A11F24BEB6C44AC082B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:29:c6:38:6b:1b:67:84:36:fc:ab:33:2d:f8:
                    c3:2c:0a:5c:c1:70:17:8a:92:50:6f:a6:41:15:3b:
                    58:2c:cb:11:8d:80:72:04:bb:8d:91:c2:74:0b:c6:
                    4e:57:5a:da:dd:7d:3c:12:80:f1:42:8a:ba:90:63:
                    10:82:11:b7:2e:e4:37:10:79:d3:91:38:b1:97:63:
                    12:ca:d8:ca:97:d1:78:e3:f8:cd:c4:e2:69:58:86:
                    0f:a8:6f:39:a1:e3:d6:c4:eb:c3:0e:01:f8:f8:55:
                    81:ca:0b:73:4a:c0:e6:76:ea:b4:0b:f8:2b:ec:30:
                    b7:56:70:f6:11:13:34:9f:30:c3:c6:30:40:fc:c5:
                    64:ca:5d:2e:78:93:a0:d1:52:7f:ad:31:7b:69:89:
                    67:cc:53:b1:7c:13:e3:35:11:2d:65:3c:5a:af:9d:
                    c4:c0:1b:f4:f2:3d:d7:8a:94:08:ac:9c:d4:bb:6b:
                    ee:3a:eb:d8:fe:bc:26:cd:34:a8:bf:26:9e:13:f9:
                    a3:bf:12:2e:30:cc:56:3d:b5:40:f2:5d:98:16:90:
                    07:f1:81:9a:8e:ac:54:27:a3:43:be:b7:6a:f4:06:
                    a2:d7:e3:67:d1:e9:dc:11:9e:20:27:e8:55:22:04:
                    b5:13:f8:46:69:b3:02:a6:ba:98:27:23:9a:31:4f:
                    a0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F6:BE:9B:BC:C8:98:46:88:AD:2A:11:F2:4B:EB:6C:44:AC:08:2B
            X509v3 Authority Key Identifier:
                keyid:88:6E:EA:C9:FB:34:33:BE:96:A5:1A:9D:01:54:D4:66:36:82:FF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:40:8f:26:26:62:22:ec:bf:02:c9:6b:14:db:e6:62:2d:cc:
         36:58:4c:95:80:b3:24:a1:d1:18:c7:b2:da:0d:f7:f2:f1:8c:
         b4:a0:38:ff:90:7d:3b:8e:a2:30:ba:1a:52:4f:d5:6f:35:48:
         08:11:df:cd:30:8d:5a:72:3f:9b:1f:c5:03:0d:c4:af:aa:ee:
         f7:3c:3e:78:bb:8e:12:4d:25:d3:d7:a8:0f:42:ff:29:63:ca:
         cc:96:8f:eb:7a:6e:a9:fc:24:4f:6b:7b:4d:a3:9e:49:65:18:
         0f:c5:79:e7:69:86:69:7a:0e:dd:99:71:ee:c7:e4:31:f5:e3:
         da:29:e1:a5:44:60:39:a3:15:33:26:c7:7b:ef:ae:bf:23:c2:
         cc:f9:a5:90:6f:14:5c:1c:47:7f:33:29:7b:a5:c4:ee:8f:85:
         92:1a:88:c2:33:6b:7e:51:01:df:48:a6:ff:b9:8d:78:a7:7d:
         7b:f1:bb:fd:93:fb:59:59:d8:75:d6:aa:d9:3f:ad:14:1e:09:
         5e:b7:8d:0b:d5:fb:5a:6f:77:21:d4:6b:55:e9:ae:02:79:94:
         8c:3b:c9:ab:a3:15:4d:90:1c:d4:b6:51:a1:29:bb:af:6c:c2:
         25:fc:bd:ed:84:d8:47:59:b9:95:56:d5:52:85:16:0c:49:72:
         5b:e8:8a:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUH8P2Db//f8cT+nEvOQzqO05JPdEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg2RUVBQzlGQjM0MzNCRTk2QTUxQTlEMDE1NEQ0NjYz
NjgyRkY2NTAeFw0yNTEwMjAxMjQ4MDFaFw0yNTEwMjExNTM4MDFaMDMxMTAvBgNV
BAMTKDY3RjZCRTlCQkNDODk4NDY4OEFEMkExMUYyNEJFQjZDNDRBQzA4MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKKcY4axtnhDb8qzMt+MMsClzB
cBeKklBvpkEVO1gsyxGNgHIEu42RwnQLxk5XWtrdfTwSgPFCirqQYxCCEbcu5DcQ
edOROLGXYxLK2MqX0Xjj+M3E4mlYhg+obzmh49bE68MOAfj4VYHKC3NKwOZ26rQL
+CvsMLdWcPYREzSfMMPGMED8xWTKXS54k6DRUn+tMXtpiWfMU7F8E+M1ES1lPFqv
ncTAG/TyPdeKlAisnNS7a+4669j+vCbNNKi/Jp4T+aO/Ei4wzFY9tUDyXZgWkAfx
gZqOrFQno0O+t2r0BqLX42fR6dwRniAn6FUiBLUT+EZpswKmupgnI5oxT6ChAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZ/a+m7zImEaIrSoR8kvrbESsCCswHwYDVR0j
BBgwFoAUiG7qyfs0M76WpRqdAVTUZjaC/2UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXhHaTk3VjJUY2JQN2pRb3p6emFYYUgzUnY3QTdjWXZ2a1BENURXdGEx
WWMvMS84ODZFRUFDOUZCMzQzM0JFOTZBNTFBOUQwMTU0RDQ2NjM2ODJGRjY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4NkVFQUM5RkIzNDMzQkU5
NkE1MUE5RDAxNTRENDY2MzY4MkZGNjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RXhHaTk3VjJUY2JQN2pRb3p6emFYYUgzUnY3QTdjWXZ2a1BENURXdGExWWMvMS84
ODZFRUFDOUZCMzQzM0JFOTZBNTFBOUQwMTU0RDQ2NjM2ODJGRjY1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQkCPJiZiIuy/AslrFNvmYi3MNlhMlYCzJKHRGMey2g338vGMtKA4/5B9O46i
MLoaUk/VbzVICBHfzTCNWnI/mx/FAw3Er6ru9zw+eLuOEk0l09eoD0L/KWPKzJaP
63puqfwkT2t7TaOeSWUYD8V552mGaXoO3Zlx7sfkMfXj2inhpURgOaMVMybHe++u
vyPCzPmlkG8UXBxHfzMpe6XE7o+FkhqIwjNrflEB30im/7mNeKd9e/G7/ZP7WVnY
ddaq2T+tFB4JXreNC9X7Wm93IdRrVemuAnmUjDvJq6MVTZAc1LZRoSm7r2zCJfy9
7YTYR1m5lVbVUoUWDElyW+iK6w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:40:07 2025 by rpki-client