Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
File:                     FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft (raw, json)
Hash identifier:          ohtohKz7drsz5nMpXQ6V4FhQBbr2MW231cLsxwrxGZw=
Subject key identifier:   42:5D:8E:61:4F:F9:DE:4E:6C:A1:CB:D7:AD:D3:1B:2C:5C:36:3D:37
Authority key identifier: FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D
Certificate issuer:       /CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
Certificate serial:       1D117893A952F3BF9153A70D120A387781E790EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
Manifest number:          0198
Signing time:             Mon 20 Oct 2025 09:03:40 +0000
Manifest this update:     Mon 20 Oct 2025 08:58:40 +0000
Manifest next update:     Tue 21 Oct 2025 12:45:40 +0000
Files and hashes:         1: 3137302e38322e3139342e302f32332d3233203d3e20323636343436.roa (hash: pIDTOZx/tJ1WdD/eCBD4yUnkQ6vG9xe6nYcj0NzfI3M=)
                          2: 3137302e38322e3139322e302f32322d3232203d3e20323636343436.roa (hash: 4lHsUeGIHF9o7B2qxWtWznQHrYWNguoIdRX1EKI3brE=)
                          3: 3230302e38302e3131312e302f32342d3234203d3e20323636343436.roa (hash: N1pJ8ZcS9Nl6TbrNXvFkugMPx7xFs2V9bRUg8jfm0g4=)
                          4: 3137302e38322e3139342e302f32342d3234203d3e20323636343436.roa (hash: xQ43aWNNIZH99ujqoAg+zbfknfirc7BIELUncdPk2JY=)
                          5: FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl (hash: tpsyPm+cYhXV6z1ktKWQki73rJjmbga3Jy+6AOiRHR4=)
                          6: 323830343a333766343a3a2f33332d3333203d3e20323636343436.roa (hash: 4QHp+lUdRMNPBoaGQT+18uVhEV9Be4V4HDnXA/DipBs=)
                          7: 3137302e38322e3139322e302f32332d3233203d3e20323636343436.roa (hash: jKml+vsCmyH3VYhSt6DUlObhppzrFV5AHtWdFgHc6Y8=)
                          8: 323830343a333766343a3a2f33322d3332203d3e20323636343436.roa (hash: eqxpPB5XAwja6jV+iVtvQUQ7DvtnMA9xHg8xBxaaJdw=)
                          9: 3137302e38322e3139352e302f32342d3234203d3e20323636343436.roa (hash: +KVVMcJd40fZQtXLvQJ8sBLKn1TiCqb0kXQ7+miqAxU=)
                          10: 3137302e38322e3139322e302f32342d3234203d3e20323636343436.roa (hash: EOlboj3wT6mMDAXmwbGfzwxGWbjkRQ7C2jjpeWmWvl0=)
                          11: 3137302e38322e3139332e302f32342d3234203d3e20323636343436.roa (hash: SmxaKkfKqHOd8Yloavtod6j9w1RbBKjAZPKbRAXuIyE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl
                          rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:45:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:11:78:93:a9:52:f3:bf:91:53:a7:0d:12:0a:38:77:81:e7:90:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
        Validity
            Not Before: Oct 20 08:58:40 2025 GMT
            Not After : Oct 21 12:45:40 2025 GMT
        Subject: CN=425D8E614FF9DE4E6CA1CBD7ADD31B2C5C363D37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7f:b4:ec:05:d3:5d:04:e9:8d:97:5e:91:f3:
                    72:d2:33:1e:99:b7:f5:73:87:b8:f6:92:a8:51:ca:
                    ba:59:86:f1:83:fa:e6:46:c6:28:f8:50:e5:64:c0:
                    46:ab:6f:6d:d0:25:bb:dc:e7:a6:7c:5a:5a:23:64:
                    40:f2:1a:d3:8c:4f:5f:73:17:70:ac:8e:67:c7:8e:
                    6d:d9:82:b8:e9:01:66:54:1f:52:cd:cb:36:e2:83:
                    e4:13:5f:de:e7:83:2d:2f:d7:3c:53:ac:fb:c1:0e:
                    a2:a0:f6:cb:f1:9c:0f:af:b9:89:66:76:13:a9:55:
                    5f:be:74:f6:62:c4:a9:7f:64:fa:3e:52:d3:e9:9c:
                    27:2d:9f:15:18:0d:bb:05:5c:ad:3b:f8:db:d1:46:
                    ac:fb:e1:47:7e:ff:98:94:75:0d:c4:8c:7e:0d:a2:
                    a1:a9:d4:dc:e8:9b:92:07:88:dd:7c:8a:47:85:50:
                    14:0d:c1:0d:4d:de:b8:e1:15:8c:de:9b:2a:18:00:
                    47:3b:a5:3b:81:3a:69:71:60:77:da:ce:73:72:cd:
                    3b:fc:59:1f:c0:d3:68:a8:14:f3:3c:f0:59:92:5a:
                    ba:83:f8:17:c8:15:35:db:00:8a:7a:16:e0:0b:ec:
                    ec:b9:84:95:c9:93:d0:30:b1:f6:0b:23:b1:2c:fe:
                    04:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:5D:8E:61:4F:F9:DE:4E:6C:A1:CB:D7:AD:D3:1B:2C:5C:36:3D:37
            X509v3 Authority Key Identifier:
                keyid:FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a6:18:7d:d8:54:b2:b5:59:3f:cc:1f:5f:ca:2a:f6:35:d4:
         72:39:8b:23:ee:9f:aa:0c:ac:01:aa:1e:d5:89:bf:cb:e0:a5:
         06:51:5a:33:8d:02:70:89:11:f7:ab:0a:91:25:39:9f:9c:f1:
         64:06:ac:dc:cf:9f:98:f2:8c:d8:58:3d:d6:da:b9:c2:a3:3c:
         9c:21:eb:57:b5:bb:b9:6e:b2:81:d4:67:07:e5:44:59:0b:4b:
         f2:64:8b:46:09:87:cb:ee:15:3f:89:6a:76:25:cb:d3:72:22:
         c0:d3:0d:77:1a:c0:5c:b4:fa:ec:74:30:15:94:c1:e9:5a:94:
         97:5d:53:e8:73:6e:b3:12:a4:5a:fb:40:da:60:2f:fa:62:2a:
         5c:d6:a8:4d:a2:04:27:36:4f:bd:fa:f4:e3:13:ce:d9:44:d7:
         bf:a8:b5:85:7e:43:a5:f9:2f:b8:f4:b7:ac:cf:c5:93:e7:22:
         22:bb:d3:0d:12:97:0c:b2:29:61:72:40:b4:7a:9e:bd:d8:b0:
         08:ff:86:ea:4c:b8:0b:d6:75:27:df:39:82:ba:c9:e7:9d:cc:
         e8:49:88:05:ac:40:f3:32:ba:e2:3d:cb:0e:e9:9d:e9:a9:e1:
         78:5c:6c:a9:44:43:70:e0:97:29:85:c7:9b:fb:6e:0f:d4:18:
         ed:35:a1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:07:03 2025 by rpki-client