Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.mft
File:                     FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.mft (raw, json)
Hash identifier:          KT2vGlXYZQbXYFtk2vN9jNS1eBIAgo1m2vLgczOb7G8=
Subject key identifier:   52:75:AD:BB:27:5D:D2:E7:9C:B6:E1:E1:18:9D:69:60:A9:3F:70:A7
Authority key identifier: FD:CF:6A:6B:F7:DB:13:21:6C:1A:A8:AD:94:05:9A:DD:9B:00:58:AB
Certificate issuer:       /CN=FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB
Certificate serial:       2692FF0EDDB9E53220159C280B823DC21FD259A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.mft
Manifest number:          0E
Signing time:             Mon 20 Oct 2025 08:44:36 +0000
Manifest this update:     Mon 20 Oct 2025 08:39:36 +0000
Manifest next update:     Tue 21 Oct 2025 12:21:36 +0000
Files and hashes:         1: 323830343a333233303a3a2f33322d3438203d3e20323635303631.roa (hash: BFiGML4qKgrDNllHxX9UFDMYcUOmP4sHHRK0xqQ3GS4=)
                          2: 3137302e3233312e35362e302f32322d3234203d3e20323635303631.roa (hash: UTVJfypfok615iRWk1ayEw/rK8U4eAbDusVkYJUItSA=)
                          3: FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.crl (hash: bmz39vE8ysiTFmEnu+wvxUTMyLgVM/YGSSUqvY+FnOk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.crl
                          rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:92:ff:0e:dd:b9:e5:32:20:15:9c:28:0b:82:3d:c2:1f:d2:59:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB
        Validity
            Not Before: Oct 20 08:39:36 2025 GMT
            Not After : Oct 21 12:21:36 2025 GMT
        Subject: CN=5275ADBB275DD2E79CB6E1E1189D6960A93F70A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8b:f2:87:af:28:eb:6d:23:48:d9:5b:4c:f3:
                    54:98:58:68:21:4f:a9:41:f0:b5:75:ef:a5:40:dc:
                    09:25:aa:98:b7:24:53:49:ad:05:5c:3e:4a:f6:0b:
                    26:a1:99:07:99:0c:a9:3b:10:4b:8e:7d:41:e5:c1:
                    8e:17:6f:4c:2f:b1:a6:41:1f:b9:ed:c4:50:aa:92:
                    1e:bb:24:49:4e:60:6f:47:49:23:01:87:f1:c1:0e:
                    f1:0b:55:f1:95:02:35:c9:a0:9f:4a:b5:c0:fd:9c:
                    79:fe:a5:e6:6b:d5:9d:bb:f1:17:af:d5:8c:de:59:
                    f7:f7:89:1a:94:4f:36:b4:55:36:9d:b9:3d:dd:bc:
                    37:72:7d:51:03:af:a6:94:99:14:b3:d2:f8:62:3b:
                    c2:99:03:ee:3e:02:42:6e:36:49:d8:1e:58:b6:b6:
                    d2:7f:09:7b:c4:41:cb:c1:9a:d4:cc:0d:de:28:74:
                    af:0d:ce:69:0c:62:1f:31:e4:da:aa:bf:27:16:6e:
                    4f:1b:39:ca:f8:49:fc:04:74:b0:55:33:e6:42:79:
                    c2:a8:be:40:7e:bb:30:e6:60:ab:d1:b9:c7:59:f6:
                    cb:65:2e:87:ef:e8:e0:0e:e5:83:55:4c:c7:9b:35:
                    48:32:f6:c7:7b:6f:a7:26:68:7c:ef:51:66:2a:5c:
                    eb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:75:AD:BB:27:5D:D2:E7:9C:B6:E1:E1:18:9D:69:60:A9:3F:70:A7
            X509v3 Authority Key Identifier:
                keyid:FD:CF:6A:6B:F7:DB:13:21:6C:1A:A8:AD:94:05:9A:DD:9B:00:58:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:4a:bb:0f:c1:42:8e:cf:c5:5b:92:f7:6b:06:c0:e3:22:1f:
         dc:74:84:c0:bb:c5:23:18:05:f4:88:f2:ff:66:20:63:f4:54:
         71:8f:b6:ee:97:60:4a:99:7f:3a:4e:8d:88:f4:8a:46:dc:ff:
         7a:b2:94:7c:47:f5:5e:13:2b:c1:5a:d4:42:de:5e:b1:4a:21:
         95:a6:f8:7c:47:11:e1:3f:56:12:36:9d:52:81:ee:b5:1b:c8:
         27:5c:ce:4f:60:5f:b6:ff:0e:c3:29:4e:02:80:6f:13:2b:6a:
         47:59:2d:5d:95:95:23:5c:af:6f:5e:aa:a5:ab:e2:9e:0c:ec:
         00:9f:ed:6e:6f:90:92:b2:04:5b:ac:bb:d0:f1:bc:a1:70:76:
         1b:d1:03:68:67:92:29:5d:82:3e:d0:45:ba:61:4b:58:01:f4:
         72:e4:04:59:2f:8c:08:c6:90:d0:97:8e:d8:e9:87:c5:4e:7e:
         6b:8e:c3:2a:d2:f8:49:d2:fa:62:63:fe:8f:4c:05:36:0e:5d:
         13:2e:14:ea:46:3a:28:c3:82:a9:02:6d:d9:2a:62:32:6c:4e:
         e9:3b:23:d8:ec:61:85:f3:94:6c:cd:e2:66:af:d3:a6:84:65:
         63:c0:9f:81:cf:53:29:89:15:53:33:8c:3f:bc:48:86:25:9b:
         7b:ba:6b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:55:12 2025 by rpki-client