Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.mft
File:                     916B2689E54D248C6020BC30FDA122F25B14FE87.mft (raw, json)
Hash identifier:          Dr6Vt0AMNveo2slcPoiStwVh0pOKS2St+aFwZiWfVJM=
Subject key identifier:   A4:BA:44:FC:40:67:75:D2:F7:5B:E2:1A:16:DE:72:D7:97:FE:E0:C2
Authority key identifier: 91:6B:26:89:E5:4D:24:8C:60:20:BC:30:FD:A1:22:F2:5B:14:FE:87
Certificate issuer:       /CN=916B2689E54D248C6020BC30FDA122F25B14FE87
Certificate serial:       35C724042591150CA8345F01DEEA04EBB3A5FD92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.mft
Manifest number:          0238
Signing time:             Tue 04 Nov 2025 23:51:27 +0000
Manifest this update:     Tue 04 Nov 2025 23:46:27 +0000
Manifest next update:     Thu 06 Nov 2025 00:40:27 +0000
Files and hashes:         1: 3133382e39392e3136352e302f32342d3234203d3e20323634323131.roa (hash: G9QYHKtG1b/FD4OKh0W8lfESPs/T76L3qU+hSSZzmNE=)
                          2: 916B2689E54D248C6020BC30FDA122F25B14FE87.crl (hash: qLd/dS+KCT1BRmiavpf8SsV+BPysI9z1B8GdmaOjKmY=)
                          3: 3133382e39392e3136362e302f32342d3234203d3e20323634323131.roa (hash: sNgxlZk2ma9RmJkEps2bSn9FSgfaDK8Ywb+EDJLYvMA=)
                          4: 323830343a323434343a3a2f33322d3332203d3e20323634323131.roa (hash: 9ed2JFaJptF6w/4jjsk9rf1QktzLx6uqKTzV4IfnOrQ=)
                          5: 3133382e39392e3136342e302f32322d3232203d3e20323634323131.roa (hash: FH/wpQ6R5lCkFep5GRAIeDcbe9vJlLdIaV9ertdhuo0=)
                          6: 3133382e39392e3136372e302f32342d3234203d3e20323634323131.roa (hash: 8/3/Jz531j+zm4zjm/xc9iYqXxP54iuPwN+2PS8SL7Y=)
                          7: 3133382e39392e3136342e302f32342d3234203d3e20323634323131.roa (hash: 1shZQAh0rsI9mi+d02qBsFebJ2WdpCnTR4u4H6v+zOQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.crl
                          rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 00:40:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c7:24:04:25:91:15:0c:a8:34:5f:01:de:ea:04:eb:b3:a5:fd:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916B2689E54D248C6020BC30FDA122F25B14FE87
        Validity
            Not Before: Nov  4 23:46:27 2025 GMT
            Not After : Nov  6 00:40:27 2025 GMT
        Subject: CN=A4BA44FC406775D2F75BE21A16DE72D797FEE0C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:79:69:ca:3d:cd:51:54:ab:0d:37:22:ac:98:
                    78:24:6e:44:87:ef:d2:01:74:de:98:88:a2:3b:3b:
                    26:bd:f9:65:3b:e8:ff:2d:db:20:1c:37:a9:53:f5:
                    a1:9a:f5:47:e2:9e:68:37:81:69:dd:69:2d:59:df:
                    8b:b3:9a:53:3c:cd:39:70:1e:fb:45:5d:1e:7b:22:
                    c5:4d:52:74:97:79:07:10:3b:13:45:60:2e:23:b2:
                    17:21:45:ad:30:58:58:4a:48:1f:6b:70:05:08:12:
                    ee:87:ec:1b:c5:39:b9:7e:36:e0:ee:a6:69:d4:5b:
                    bc:69:0f:da:be:83:13:a4:03:27:da:6f:ca:7b:76:
                    fc:ba:77:4a:a0:ef:db:54:ae:c0:34:28:87:90:03:
                    91:f8:e6:4c:53:b7:90:72:2a:4b:52:34:8a:32:40:
                    7f:60:17:45:24:d0:04:1b:76:f9:9f:75:2d:05:05:
                    9a:38:14:59:82:95:2d:f2:1f:aa:75:63:31:38:1e:
                    ed:18:15:09:99:36:ab:c9:63:db:13:61:8a:a8:0d:
                    84:ce:7a:90:11:7f:8f:b5:5b:1f:7e:af:71:e6:a4:
                    2d:46:10:a0:8c:28:9c:77:f6:92:04:0d:19:ad:c3:
                    dc:25:f4:16:65:e0:2f:86:d6:89:1e:26:a2:3c:e7:
                    cf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BA:44:FC:40:67:75:D2:F7:5B:E2:1A:16:DE:72:D7:97:FE:E0:C2
            X509v3 Authority Key Identifier:
                keyid:91:6B:26:89:E5:4D:24:8C:60:20:BC:30:FD:A1:22:F2:5B:14:FE:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:c3:f9:72:ef:22:0d:75:e3:24:62:76:dc:93:41:3c:10:fc:
         0f:46:fd:f7:cb:d1:29:ee:92:5a:9a:26:94:43:be:75:a0:07:
         bd:cf:e8:af:26:98:e7:0c:a4:71:84:64:e0:f8:c8:79:94:b4:
         a4:d0:a0:1b:c5:9b:39:eb:1f:13:7b:8c:83:c2:06:61:ac:03:
         25:08:8f:a2:6e:80:18:c7:43:e7:89:87:af:14:ea:3a:0f:fd:
         f4:87:0a:79:a9:88:3f:c2:b6:75:5f:90:f7:56:de:0c:0f:d3:
         c4:cf:82:e4:1a:0e:8d:7c:ea:0e:d7:e0:14:3a:6a:ac:78:03:
         8d:e5:f2:3b:09:fb:47:ce:56:19:ee:8b:53:b1:92:91:c2:87:
         76:98:5c:0c:e4:a9:27:d0:29:c4:52:cc:43:af:13:47:c1:f2:
         c5:44:36:8c:28:52:c6:e3:0e:66:8c:48:b5:a8:c0:38:c2:84:
         ff:d9:50:3f:c9:3b:51:0e:bf:d2:b6:e6:47:1b:9e:e2:23:69:
         27:44:16:c6:5c:07:15:04:bc:a1:14:e1:82:60:58:a2:1c:68:
         c0:8e:02:9d:62:ce:b2:f6:c9:e4:a6:df:ca:3e:ac:86:70:34:
         70:4e:0d:b8:35:c5:d5:68:e9:8d:5a:b7:ff:2b:be:b1:e1:98:
         c9:3b:ca:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:11:23 2025 by rpki-client