Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
File:                     FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft (raw, json)
Hash identifier:          4QLFRQAMIgxUqL3hDXgCpc/6EBob+r1+GhU5C7y9tXg=
Subject key identifier:   5B:BE:F0:71:DE:76:15:1F:0E:B7:35:EF:C5:93:6A:76:85:62:1B:3E
Authority key identifier: FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D
Certificate issuer:       /CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
Certificate serial:       51E509B4540C592A3371376F385DB366E663B2F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
Manifest number:          014A
Signing time:             Fri 22 Aug 2025 21:53:49 +0000
Manifest this update:     Fri 22 Aug 2025 21:48:49 +0000
Manifest next update:     Sun 24 Aug 2025 01:40:49 +0000
Files and hashes:         1: 3137302e38322e3139332e302f32342d3234203d3e20323636343436.roa (hash: SmxaKkfKqHOd8Yloavtod6j9w1RbBKjAZPKbRAXuIyE=)
                          2: 3137302e38322e3139352e302f32342d3234203d3e20323636343436.roa (hash: +KVVMcJd40fZQtXLvQJ8sBLKn1TiCqb0kXQ7+miqAxU=)
                          3: 3137302e38322e3139342e302f32332d3233203d3e20323636343436.roa (hash: pIDTOZx/tJ1WdD/eCBD4yUnkQ6vG9xe6nYcj0NzfI3M=)
                          4: 3137302e38322e3139322e302f32342d3234203d3e20323636343436.roa (hash: EOlboj3wT6mMDAXmwbGfzwxGWbjkRQ7C2jjpeWmWvl0=)
                          5: FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl (hash: XO9+4JVPd5NDN1w+Ce8FVv3OaPSjJw671n9PjaSySBo=)
                          6: 323830343a333766343a3a2f33322d3332203d3e20323636343436.roa (hash: eqxpPB5XAwja6jV+iVtvQUQ7DvtnMA9xHg8xBxaaJdw=)
                          7: 3137302e38322e3139322e302f32332d3233203d3e20323636343436.roa (hash: jKml+vsCmyH3VYhSt6DUlObhppzrFV5AHtWdFgHc6Y8=)
                          8: 3230302e38302e3131312e302f32342d3234203d3e20323636343436.roa (hash: N1pJ8ZcS9Nl6TbrNXvFkugMPx7xFs2V9bRUg8jfm0g4=)
                          9: 3137302e38322e3139342e302f32342d3234203d3e20323636343436.roa (hash: xQ43aWNNIZH99ujqoAg+zbfknfirc7BIELUncdPk2JY=)
                          10: 323830343a333766343a3a2f33332d3333203d3e20323636343436.roa (hash: 4QHp+lUdRMNPBoaGQT+18uVhEV9Be4V4HDnXA/DipBs=)
                          11: 3137302e38322e3139322e302f32322d3232203d3e20323636343436.roa (hash: 4lHsUeGIHF9o7B2qxWtWznQHrYWNguoIdRX1EKI3brE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl
                          rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 01:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e5:09:b4:54:0c:59:2a:33:71:37:6f:38:5d:b3:66:e6:63:b2:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
        Validity
            Not Before: Aug 22 21:48:49 2025 GMT
            Not After : Aug 24 01:40:49 2025 GMT
        Subject: CN=5BBEF071DE76151F0EB735EFC5936A7685621B3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cb:02:c7:c2:91:f1:fe:2c:31:64:c0:a9:7b:
                    79:ac:5b:86:04:ba:71:76:e3:d2:f0:30:fe:89:b5:
                    f5:ab:45:d8:04:5b:de:cd:aa:aa:2c:01:76:b9:fe:
                    26:8b:97:60:51:79:82:3d:03:4d:6e:80:60:7d:4e:
                    78:83:9d:4b:8c:a0:91:e0:3e:9b:77:b9:f6:f2:92:
                    59:2d:a1:f4:e5:33:b2:e0:b7:d6:7f:8b:33:99:93:
                    8a:f8:29:22:50:9e:16:6e:97:f1:0c:1f:ac:6b:42:
                    78:04:c2:ce:0a:e5:93:c2:11:54:fa:ee:10:89:fe:
                    90:67:4c:ed:4b:5d:72:51:ab:df:ca:12:38:bd:9b:
                    b2:94:dd:ba:63:45:ac:14:98:ae:60:b6:d3:a5:6e:
                    96:e8:48:d5:ba:5c:df:bd:4e:7c:1d:9b:ae:a8:07:
                    b6:89:f5:1f:b8:74:d6:12:42:97:8a:e4:8f:56:aa:
                    a8:af:68:73:49:50:af:d7:2f:68:b9:dc:a6:4f:66:
                    65:bf:9b:89:d3:4e:02:f1:f4:54:ac:16:2e:da:86:
                    19:aa:1f:22:53:00:fa:2c:ed:10:40:47:45:57:98:
                    b9:9a:19:98:d6:70:f6:29:e5:bf:06:4b:82:a0:61:
                    b1:89:73:ae:30:80:8b:9d:67:01:a3:4c:94:0a:aa:
                    58:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BE:F0:71:DE:76:15:1F:0E:B7:35:EF:C5:93:6A:76:85:62:1B:3E
            X509v3 Authority Key Identifier:
                keyid:FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:00:bd:08:cd:c4:08:d0:1d:c3:7f:dd:f5:bd:72:60:c3:a9:
         86:81:0b:f4:79:b9:1e:1f:93:0d:db:44:90:25:05:0c:13:ee:
         5d:aa:30:44:4d:1c:28:fe:99:fd:b5:4c:f5:61:d0:6c:97:a6:
         3c:f3:f7:1c:f9:7f:5a:c8:11:0f:01:31:9d:c9:38:f3:82:fb:
         81:c0:49:84:f7:9a:59:6f:11:37:c1:94:8d:57:62:70:2c:13:
         85:49:ca:5f:9d:70:16:56:7e:51:56:47:7e:57:4c:fd:50:45:
         38:e5:03:1b:3d:1f:ae:0e:9a:ec:2b:90:0e:d9:f6:50:64:d5:
         69:8d:d3:56:c2:5c:02:d7:89:e2:1b:0e:45:0c:55:32:78:d8:
         7b:22:78:80:47:c3:94:1f:f2:ad:89:4c:eb:bd:90:82:2e:41:
         d7:68:dc:a9:15:7d:b6:30:7d:89:f4:09:e4:06:1f:f4:50:cc:
         b5:5a:29:1b:76:80:a5:cf:55:c7:28:53:2f:b7:2a:22:92:82:
         b5:f5:d8:28:eb:8b:2b:90:95:bc:27:6f:bb:78:15:36:c8:e7:
         bc:00:4a:d7:e1:74:81:ff:87:25:49:c1:6a:af:e9:2e:8f:b6:
         fc:39:8f:33:a6:73:e2:27:66:13:f6:5b:43:c7:02:ca:49:a8:
         ea:2a:fd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:45 2025 by rpki-client