Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.mft
File:                     16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.mft (raw, json)
Hash identifier:          YLQRX8o3nMNhtudjCwzBLEShUjiefANYxdQnIs9H2x4=
Subject key identifier:   CF:23:73:B2:D6:A9:32:00:42:D2:B2:86:1B:B4:D1:18:31:D7:C0:F1
Authority key identifier: 16:DB:25:C6:0A:69:26:C5:8A:F5:C7:D7:7D:A6:93:B1:7A:DA:0D:55
Certificate issuer:       /CN=16DB25C60A6926C58AF5C7D77DA693B17ADA0D55
Certificate serial:       35CE2D5935C3F9F67025E451321351EE26E18B9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.mft
Manifest number:          66
Signing time:             Wed 05 Nov 2025 01:33:35 +0000
Manifest this update:     Wed 05 Nov 2025 01:28:35 +0000
Manifest next update:     Thu 06 Nov 2025 02:16:35 +0000
Files and hashes:         1: 3136382e3233322e38342e302f32322d3234203d3e20323634353632.roa (hash: IrLDPBwNqYH0lDDCms/8VMBkI4vSmDFchMeEj1fvtuE=)
                          2: 34352e3233392e382e302f32322d3234203d3e20323634353632.roa (hash: kWZtsWaO4KwUMQaVyJbEGnQtDVoym238WkoDoSRKYZI=)
                          3: 3133382e33362e302e302f32322d3234203d3e20323634353632.roa (hash: L0w/ziI3yH7kZid4khk3HPopdj8H0s1w9d12n6L7orc=)
                          4: 34352e3137342e3138382e302f32322d3234203d3e20323634353632.roa (hash: rzzECidksqaevhLMENQLk+ux4RcMC0cAN/wAl1ftuQE=)
                          5: 3138372e34392e3137362e302f32322d3234203d3e20323634353632.roa (hash: qFKQxWlMbgl/r+3Z7txrgOI0nrdt+GjcJRKIwv+lqFk=)
                          6: 323830343a323139303a3a2f33322d3634203d3e20323634353632.roa (hash: zlSA6X8xym9nADcxgsEGBLQrJDc3E80RmIKc1sMT+eI=)
                          7: 16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.crl (hash: JfLiaboDe1VnzXNaDHpUujwmNlDjfRdLBIDMl7W75rc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.crl
                          rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 02:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ce:2d:59:35:c3:f9:f6:70:25:e4:51:32:13:51:ee:26:e1:8b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16DB25C60A6926C58AF5C7D77DA693B17ADA0D55
        Validity
            Not Before: Nov  5 01:28:35 2025 GMT
            Not After : Nov  6 02:16:35 2025 GMT
        Subject: CN=CF2373B2D6A9320042D2B2861BB4D11831D7C0F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e9:fe:46:2b:a2:8e:b3:35:34:a2:b1:a6:a7:
                    44:e5:ab:dc:3c:48:15:ac:6e:27:92:16:b3:18:5b:
                    9d:ce:31:4d:89:e1:23:78:94:08:a5:ed:14:21:6c:
                    17:dc:05:49:c4:e6:63:66:95:36:3d:66:c2:7f:b1:
                    b4:fe:6b:30:8e:f7:1f:27:ca:c1:2e:6d:c3:d3:27:
                    c1:1a:ee:2f:86:33:88:ad:4a:33:c6:ca:00:87:f2:
                    ed:f1:4f:f4:f3:f6:87:a8:f6:ee:de:23:1e:46:c3:
                    57:3a:1e:07:2c:15:59:2c:22:48:6c:7e:b8:10:6f:
                    62:d4:58:24:fd:54:48:92:40:4d:3c:d7:15:55:12:
                    22:12:99:33:df:ef:5d:a8:ba:54:c9:ed:84:8a:f1:
                    2b:7b:b1:a9:bd:69:ee:5d:93:8b:4c:ff:c1:36:99:
                    d0:0e:09:75:ed:09:4f:5c:1b:38:dc:3d:5e:d1:32:
                    32:f6:8e:d7:1d:74:b3:ee:e1:84:de:56:b1:ae:36:
                    0a:28:b6:8b:51:bf:a2:3c:64:93:fc:2b:dc:ae:8e:
                    fb:2a:ec:d5:e6:5a:b6:d6:18:b1:ec:77:ac:a7:7d:
                    12:10:3a:a0:c1:60:52:7d:65:df:b0:81:99:2d:3c:
                    99:ee:1f:ee:57:e4:51:ad:85:9d:5f:5e:8c:6d:9c:
                    e8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:23:73:B2:D6:A9:32:00:42:D2:B2:86:1B:B4:D1:18:31:D7:C0:F1
            X509v3 Authority Key Identifier:
                keyid:16:DB:25:C6:0A:69:26:C5:8A:F5:C7:D7:7D:A6:93:B1:7A:DA:0D:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:52:fc:13:3b:09:ee:5b:5b:18:6a:32:f8:a9:70:8f:38:99:
         67:51:e4:1c:b1:c8:65:87:88:a4:82:d8:ed:5f:14:36:7f:f6:
         fa:30:3b:df:31:af:7b:eb:eb:ed:73:6c:69:70:bd:d6:85:0d:
         be:43:c2:cf:c8:c1:1e:36:87:86:a5:8a:d6:98:9a:aa:73:7f:
         14:1e:22:dc:ec:82:6e:d7:7f:11:52:86:61:b7:6f:4f:3f:3f:
         ee:cb:aa:69:4a:cb:a2:c8:01:e4:d1:04:ef:59:2d:55:0c:b6:
         a8:bb:9e:da:a6:23:51:8c:80:f6:c9:12:f3:4b:39:94:bb:84:
         d3:fb:c3:e4:49:0c:13:88:55:ae:a3:e7:f7:73:6e:7b:1f:0d:
         4f:9c:d5:66:1c:e0:3d:34:cb:b6:75:ad:28:e5:e4:aa:12:5c:
         c3:a4:d9:73:a6:12:67:5f:6e:0e:89:08:6e:db:11:35:e3:9c:
         ee:00:c0:33:40:36:a9:f8:ce:20:f7:c7:5b:33:08:c5:52:91:
         c1:f3:48:3b:15:3d:bf:a2:06:04:fc:a4:4c:59:0d:32:31:f5:
         f9:c2:c5:36:99:9b:2d:8b:4a:6c:18:b3:ff:81:95:96:e9:17:
         7f:ab:99:de:4c:be:72:9e:ae:c7:73:cc:d1:16:3f:3c:e8:b0:
         c7:9e:64:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:39:09 2025 by rpki-client