Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.mft
File:                     DD271F242DF0D8617E8D7597283EB60BDB86C2FD.mft (raw, json)
Hash identifier:          rJX05dmA6kgXHN1oyk2wFGUF1cbHPoLyuUUnbS12/qE=
Subject key identifier:   06:79:F4:EB:9F:51:B8:98:71:6C:51:3F:DE:73:8E:3D:2F:50:EB:71
Authority key identifier: DD:27:1F:24:2D:F0:D8:61:7E:8D:75:97:28:3E:B6:0B:DB:86:C2:FD
Certificate issuer:       /CN=DD271F242DF0D8617E8D7597283EB60BDB86C2FD
Certificate serial:       3C108E6F583474DBD09A74E9886DEBAD92C4FBD9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.mft
Manifest number:          016F
Signing time:             Wed 05 Nov 2025 09:01:35 +0000
Manifest this update:     Wed 05 Nov 2025 08:56:35 +0000
Manifest next update:     Thu 06 Nov 2025 10:33:35 +0000
Files and hashes:         1: 3137392e34392e38302e302f32332d3233203d3e20323731333934.roa (hash: tiN3JLDpyh8ux0ztxshAtwrJCwnMAQEqgedA1qkpF/I=)
                          2: 3137392e34392e38302e302f32332d3234203d3e20323731333934.roa (hash: GYSfMdIJgrs3ZbkaqRtcXgLBW5PEhr0QLq9H3n1FhC0=)
                          3: 3137392e34392e38332e302f32342d3234203d3e20323731333934.roa (hash: Mg9Zcqspzoin6iGc2XAjGJRGsEIgiTq1CHs50SSJeN4=)
                          4: 323830343a376164343a6530303a3a2f34302d3430203d3e20323731333934.roa (hash: +8w56QY0I+5gGDHFJDnhGGwQlO/2Woo75Fn5wRWnrIU=)
                          5: DD271F242DF0D8617E8D7597283EB60BDB86C2FD.crl (hash: tfw3zX4nWgG80XlmvRyPyRYrH6dMpWXg6GKG/icfUOQ=)
                          6: 3137392e34392e38322e302f32342d3234203d3e20323731333934.roa (hash: g1y4gagU2GAenpO/rDVhQZQcFxsI23b4LYFWNXj/QZk=)
                          7: 323830343a376164343a3a2f33322d3332203d3e20323731333934.roa (hash: n6Zv7/e5Bv7Hkk4KpGUgjfLGyoQKbjVhQif7AaGKKsA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.crl
                          rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 10:33:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:10:8e:6f:58:34:74:db:d0:9a:74:e9:88:6d:eb:ad:92:c4:fb:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD271F242DF0D8617E8D7597283EB60BDB86C2FD
        Validity
            Not Before: Nov  5 08:56:35 2025 GMT
            Not After : Nov  6 10:33:35 2025 GMT
        Subject: CN=0679F4EB9F51B898716C513FDE738E3D2F50EB71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:fd:39:be:e1:6b:16:a0:a0:ef:3d:03:4e:
                    91:b3:e5:06:cf:49:bb:b7:ae:f7:b8:ed:f3:db:1c:
                    7c:80:16:e7:8d:42:cf:84:28:41:bf:aa:fb:9b:8b:
                    45:f9:6e:ce:cc:e7:a5:5c:03:4e:67:75:4d:fd:55:
                    30:07:98:47:2d:c8:6a:65:f4:96:58:f7:7f:c8:9e:
                    b2:ff:cc:f2:93:80:e4:00:8f:86:ab:e0:b4:ec:c8:
                    44:dd:4e:78:07:ed:48:29:92:c4:cf:5c:fc:e7:82:
                    81:04:95:52:c1:e2:66:99:0d:53:54:79:f8:c5:f0:
                    4c:48:03:7c:15:d5:4e:b9:55:e7:20:a8:a6:7e:58:
                    00:d6:a3:79:49:e9:92:63:08:24:84:ce:d0:b9:d6:
                    97:67:b5:7c:e1:1d:53:25:cb:8a:5a:9e:e4:c2:34:
                    38:ca:2d:4c:20:d7:68:57:35:c7:fe:f2:09:0b:53:
                    bc:60:d6:c8:72:52:9f:e5:3c:38:00:96:e7:7c:33:
                    2d:74:63:46:95:8a:e4:70:12:04:34:0c:91:1b:8f:
                    3a:3d:84:ed:27:6c:4e:57:36:fe:f8:a3:b6:d3:3b:
                    bc:54:6c:0c:1c:3b:c0:d0:42:0f:4d:40:d1:f9:92:
                    2b:a9:9f:cd:03:b8:c9:97:23:eb:2e:e4:e3:c7:f4:
                    8e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:79:F4:EB:9F:51:B8:98:71:6C:51:3F:DE:73:8E:3D:2F:50:EB:71
            X509v3 Authority Key Identifier:
                keyid:DD:27:1F:24:2D:F0:D8:61:7E:8D:75:97:28:3E:B6:0B:DB:86:C2:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7innpnSxgy6Ra6kkGd6vf4evxdXgHX9s5VuGTg8xsQnH/0/DD271F242DF0D8617E8D7597283EB60BDB86C2FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:bf:8e:25:61:f1:d7:71:43:06:20:b2:ab:c4:68:c6:d6:51:
         b5:a5:8d:85:9a:fc:86:ef:a8:0e:77:dd:24:0c:a9:71:9e:05:
         c5:5a:b8:7d:97:48:b4:56:ae:74:d5:5d:91:96:e8:be:8f:b3:
         f4:08:c1:a1:08:d1:8c:16:20:e9:fa:12:df:fa:2b:24:2e:6c:
         fd:fc:f2:b3:07:47:04:82:88:3b:5b:4e:14:e8:d7:63:8a:39:
         95:7b:3f:e0:12:e6:d4:20:ec:33:f9:32:f9:2e:cb:24:b7:dc:
         90:87:b6:a3:53:e7:74:52:6d:e0:26:d5:be:a4:b1:32:05:ac:
         71:dd:ec:1e:f0:c0:16:8f:29:9e:44:19:51:60:de:bc:2e:1f:
         17:f6:d9:d3:32:8f:4f:04:48:48:ee:c0:82:2b:fc:2a:3b:23:
         c2:b7:05:93:19:17:ba:3b:1e:8d:6b:9c:ee:6b:da:93:47:95:
         1a:45:d9:18:d4:fa:69:97:0c:62:49:02:bb:df:df:3b:6c:a5:
         65:26:c0:d8:46:51:42:b1:cc:9e:c8:a0:90:c4:73:93:d9:97:
         53:b2:b9:73:b7:4d:c1:0f:26:8c:bc:79:b1:db:a9:60:6c:dc:
         23:79:87:81:3c:58:f1:a2:1b:45:15:4c:1a:54:fe:b3:4c:dd:
         6a:53:c3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:56:44 2025 by rpki-client