Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
File:                     CA9F7609986EAF1A517249B9120F2B69069A604A.mft (raw, json)
Hash identifier:          or99lFr6zhz2seQx2ZZB9lFjdK0jXe8c3PNbMvhhkFM=
Subject key identifier:   F5:03:23:54:B2:BA:A4:CC:B9:28:1F:40:D0:E6:40:C3:B5:75:72:42
Authority key identifier: CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A
Certificate issuer:       /CN=CA9F7609986EAF1A517249B9120F2B69069A604A
Certificate serial:       1434B6EAAD6DDA3EFADF0D13030680EF8770F69E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
Manifest number:          02F2
Signing time:             Sun 19 Oct 2025 22:40:01 +0000
Manifest this update:     Sun 19 Oct 2025 22:35:01 +0000
Manifest next update:     Mon 20 Oct 2025 22:42:01 +0000
Files and hashes:         1: 3137302e3234342e37362e302f32342d3234203d3e20323636353035.roa (hash: amplB2JLDJJAckH9IaBBkn+qJzqilzpjHxaNCTaCWYQ=)
                          2: 3137302e3234342e37392e302f32342d3234203d3e20323636353035.roa (hash: YF8aSn8ZrakqqHsGkJ+aJMpg3UM2WIjA8ryfsST1/NQ=)
                          3: CA9F7609986EAF1A517249B9120F2B69069A604A.crl (hash: sCPMEdaYqJSqdpVx/3yTR3zUrR/fe0p7L2/JiCaVYdc=)
                          4: 323830343a333864383a3a2f33322d3334203d3e20323636353035.roa (hash: t4980+rUmsxpFvMPiI7I8jUd83zOqWinNqdfWWIlnEA=)
                          5: 3137302e3234342e37382e302f32342d3234203d3e20323636353035.roa (hash: P2xrOWpHLY6EnnxO2vbmZAQg+LiKo7wZq6AG1cS/2u4=)
                          6: 3137302e3234342e37362e302f32332d3233203d3e20323636353035.roa (hash: PVZgZ80ec1MnnTWZFJhH3Pekch5EzlVCo00ByHvruS8=)
                          7: 3137302e3234342e37372e302f32342d3234203d3e20323636353035.roa (hash: eJBkgue2M5PeX7HA+TZbr9kyv+9Hqw6VsgHSqBR6XUE=)
                          8: 3137302e3234342e37362e302f32322d3232203d3e20323636353035.roa (hash: smiarjDG+OGsbjcVsk86Au5AndvkklCegjiEmQy0Xdw=)
                          9: 3137302e3234342e37382e302f32332d3233203d3e20323636353035.roa (hash: zYfkxrKkqL3tYrhKgo7C4mfgls0J10QOQdD+qfnFkqw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl
                          rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 22:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:34:b6:ea:ad:6d:da:3e:fa:df:0d:13:03:06:80:ef:87:70:f6:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9F7609986EAF1A517249B9120F2B69069A604A
        Validity
            Not Before: Oct 19 22:35:01 2025 GMT
            Not After : Oct 20 22:42:01 2025 GMT
        Subject: CN=F5032354B2BAA4CCB9281F40D0E640C3B5757242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4b:ef:73:92:34:9f:7f:22:0d:f6:60:e6:47:
                    b1:5c:ac:5e:e1:8c:9c:10:d2:9e:f0:0c:99:f5:d4:
                    8a:20:38:27:52:85:1d:5d:85:3e:ca:ae:e3:f4:10:
                    85:5d:a1:ce:ba:f2:30:b7:db:30:43:8a:85:5f:9c:
                    95:2f:71:fd:8e:87:94:25:c0:ca:8e:27:e4:88:ec:
                    97:58:4a:61:80:b8:81:24:11:72:3b:89:0d:85:a3:
                    e9:22:eb:8b:00:f1:a6:10:a3:5d:8b:79:80:a4:f3:
                    6a:15:37:b1:e6:01:53:0d:9c:d7:59:31:1d:4e:82:
                    a6:d9:bc:97:bc:9b:e1:1e:61:4e:a3:95:48:72:4b:
                    d6:d0:b8:37:a7:e4:62:3f:ce:cb:e4:07:23:37:9f:
                    0b:99:d0:da:ab:c0:d5:39:58:d9:43:f2:3b:ec:a3:
                    a8:3f:7c:6e:dd:bf:7d:17:ab:39:ad:21:e6:51:41:
                    0a:99:fb:5c:0e:72:25:50:69:da:c7:72:42:dd:30:
                    f9:90:b0:60:bc:65:0f:8a:9e:dd:33:2d:ae:28:5c:
                    d9:32:6e:f3:c3:b0:cb:31:04:56:6e:45:3d:13:7a:
                    81:70:7b:d4:75:87:22:98:30:2e:eb:d3:15:40:e6:
                    92:6e:40:ff:1f:76:2d:b8:21:49:58:06:10:41:a4:
                    37:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:03:23:54:B2:BA:A4:CC:B9:28:1F:40:D0:E6:40:C3:B5:75:72:42
            X509v3 Authority Key Identifier:
                keyid:CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:02:ef:8d:d8:53:45:97:1a:45:5f:86:a0:f4:ac:77:8f:ee:
         08:ba:91:43:8a:f0:f4:3d:36:41:90:3a:22:1a:6c:32:fb:bb:
         d2:3c:28:1f:c9:c3:63:0d:f1:17:26:0c:51:62:f4:bf:96:9a:
         63:a7:06:e4:dc:08:e8:59:a5:64:d3:39:52:a9:1e:28:78:b6:
         1f:91:7e:b9:df:b8:5f:52:96:65:67:89:30:60:c9:39:4e:ec:
         fe:0b:ee:fc:90:2e:f9:b8:bb:03:51:0f:d5:fd:0a:63:94:4b:
         b5:c0:1f:c2:1b:5a:33:b0:d7:65:23:fd:dc:6b:c3:2e:c1:ab:
         64:77:83:9c:65:39:dc:6f:d0:3e:e8:a9:ad:c7:5d:1d:2d:8f:
         38:46:16:30:94:c8:8c:75:93:22:8d:6c:f1:ed:99:19:af:a2:
         10:d6:3d:ae:39:cb:fa:c7:34:ee:6b:c7:81:df:6e:1e:63:65:
         c6:82:48:53:46:57:34:8d:4d:a1:17:a2:9d:ff:a8:ee:76:65:
         d8:3d:21:d2:78:3c:e8:03:25:07:26:99:81:da:21:59:ed:c2:
         7a:4c:0f:d9:45:d9:76:dd:bc:9d:f6:e0:cd:9b:dc:f7:71:f8:
         0f:d5:67:d4:ec:64:75:01:7a:1d:50:33:e6:b1:a4:f4:f8:49:
         0c:39:97:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:33:18 2025 by rpki-client