Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
File:                     F61AA6D04968E2222C81499C46D03813F1070400.mft (raw, json)
Hash identifier:          4q/ulkcZtIQb9+sY3SixU0crdXLrQjXlCinBo0aIVFk=
Subject key identifier:   C5:9A:51:EA:98:E5:B1:36:D3:AA:3F:59:95:F7:C0:21:29:E5:DE:4F
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Certificate issuer:       /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial:       2740953B1510C8B8C3F340D50A7141C756EAFF7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
Manifest number:          01FB
Signing time:             Mon 20 Oct 2025 00:28:48 +0000
Manifest this update:     Mon 20 Oct 2025 00:23:48 +0000
Manifest next update:     Tue 21 Oct 2025 00:59:48 +0000
Files and hashes:         1: F61AA6D04968E2222C81499C46D03813F1070400.crl (hash: ek8wNWgyapQGe2prV2Lor3zZHbgIG2bXfG7Cr+p4P08=)
                          2: 3137372e38342e36342e302f32312d3332203d3e203238313731.roa (hash: U0dKlcKKr/hLfu/RHEWfMLWA36Y5pKohdXoqmaps2fk=)
                          3: 3138392e38342e3136302e302f32302d3332203d3e203238313731.roa (hash: MRZIZ8OzYITUzJxFxOr0XWGd2SFJQ1IqnbGOQt6Cxw0=)
                          4: 323830343a6438343a3a2f33322d313238203d3e203238313731.roa (hash: J2MFbSa5syD/XbhiQ2w1XiwJgCh4ewvGNRy0Nu21ffc=)
                          5: 3137372e3133372e3234302e302f32312d3332203d3e203238313731.roa (hash: Sg3bwWYx6DSTKLq4342Zmi5HUxBms4RC45OTLBbnbEU=)
                          6: 3138392e38342e3137362e302f32302d3332203d3e203238313731.roa (hash: jHrieo0zsQTubV3HMPW8+PaOcAFEA5C4K1kPR46IY8I=)
                          7: 3137392e3130372e3132382e302f31392d3332203d3e203238313731.roa (hash: h0dhczl1BVewT4kaVEoXQgiLIw/ZftHswOgMzeqtieM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:40:95:3b:15:10:c8:b8:c3:f3:40:d5:0a:71:41:c7:56:ea:ff:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
        Validity
            Not Before: Oct 20 00:23:48 2025 GMT
            Not After : Oct 21 00:59:48 2025 GMT
        Subject: CN=C59A51EA98E5B136D3AA3F5995F7C02129E5DE4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c7:21:25:75:f2:fc:ec:3d:92:80:9d:dc:c1:
                    c5:b6:aa:df:62:ff:51:a0:7d:4e:43:13:e2:ad:34:
                    b2:46:fc:3e:b8:5c:14:dc:38:d0:f6:c4:aa:e4:6c:
                    a5:0a:55:61:a1:e2:dd:97:bd:a7:2b:f3:82:5d:96:
                    98:c2:52:18:a8:c4:6f:0d:06:d7:f4:80:95:c8:fe:
                    63:c4:cd:8f:27:a1:68:e7:d8:b4:91:95:b8:8d:7a:
                    57:22:04:6b:eb:24:12:d7:71:1f:a3:a1:42:b6:f9:
                    e0:73:1c:9f:ff:65:d4:88:ad:b9:bf:a1:ea:32:da:
                    ef:32:77:af:39:3e:c4:3b:fb:8b:e9:ee:3c:38:28:
                    4e:f7:80:90:eb:f1:53:b7:e3:ff:74:19:6a:76:03:
                    8a:c9:14:eb:3f:d8:6d:64:83:b5:f1:14:7b:ac:06:
                    88:8f:cc:88:f6:05:50:b0:f7:88:54:09:2a:7c:51:
                    f2:7f:33:73:92:fe:75:28:13:9b:5a:5f:72:43:04:
                    cd:b8:26:e5:7e:63:c0:99:ad:75:2d:ae:9e:96:a2:
                    4a:cf:48:85:49:b6:14:10:43:b4:e4:bd:54:92:3c:
                    6d:ea:6a:22:3a:45:8e:5e:8b:f6:42:2d:da:39:1f:
                    d5:7e:62:22:1e:31:ca:71:bd:53:47:27:48:25:0a:
                    08:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9A:51:EA:98:E5:B1:36:D3:AA:3F:59:95:F7:C0:21:29:E5:DE:4F
            X509v3 Authority Key Identifier:
                keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:5d:98:58:07:ca:82:41:ea:2f:12:a5:50:5c:08:b7:18:93:
         68:0d:3f:c9:57:5e:e4:d0:1e:75:83:8c:8f:cc:85:6f:62:9a:
         6a:be:79:c3:61:6d:60:d9:d5:bf:0e:96:5e:39:6e:90:42:cf:
         23:98:6a:36:ca:b5:81:62:c6:b0:df:a0:d2:55:cd:f8:f8:25:
         a2:17:8c:50:7f:be:75:24:28:64:5a:01:13:da:70:e4:ea:46:
         ac:9d:4c:3f:a9:c4:a9:6d:2d:24:ce:fa:95:a1:65:fb:35:be:
         fc:12:54:0f:d6:c2:a1:19:2c:09:a6:7a:9a:54:71:d8:63:df:
         c6:2e:39:df:a4:9e:2b:c5:b1:6e:96:56:b0:0c:99:2c:c3:95:
         1e:4c:c0:78:25:ac:55:1e:23:e3:05:f2:00:86:8d:a4:a4:30:
         04:b4:6d:61:42:8e:43:52:3a:6c:b6:47:08:81:a6:0d:ff:34:
         b7:3f:58:e0:44:19:d0:46:d4:ed:85:55:27:d2:66:be:78:a3:
         ea:44:95:6e:6d:57:ac:de:d1:fc:b1:36:ac:ee:43:fc:3c:5b:
         79:f9:e7:7e:9f:44:6b:3c:28:8a:3b:4e:c0:2d:a2:09:bd:dd:
         d8:80:96:fd:bd:af:b6:09:83:92:e7:26:24:70:b6:d9:4d:2f:
         3f:a7:c0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:41:33 2025 by rpki-client