Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
File:                     F61AA6D04968E2222C81499C46D03813F1070400.mft (raw, json)
Hash identifier:          7KUqu/HJH7UZuNSmU6p/49tipuLuWaVtCU88++P8eTo=
Subject key identifier:   25:DB:46:55:11:E6:28:69:DD:12:7A:A6:B7:09:61:29:CB:52:A6:C0
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Certificate issuer:       /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial:       494DC754BCD0454F77C5271CA342FC7EF7CBB2A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
Manifest number:          01AF
Signing time:             Sat 23 Aug 2025 03:02:55 +0000
Manifest this update:     Sat 23 Aug 2025 02:57:55 +0000
Manifest next update:     Sun 24 Aug 2025 06:46:55 +0000
Files and hashes:         1: 3138392e38342e3137362e302f32302d3332203d3e203238313731.roa (hash: LSjMHoE69qWqnpzVzyyj7h0wlVYndHxXSlQXW5zHZ84=)
                          2: 323830343a6438343a3a2f33322d313238203d3e203238313731.roa (hash: fFWlkw4VgGZKIM3JMaVwB2wGQVwKvg1CcuwKadWJSlU=)
                          3: 3137392e3130372e3132382e302f31392d3332203d3e203238313731.roa (hash: yhjpZ/3yeOya0YdscNdzwhmDLQucI5LPtbVEA2kspkI=)
                          4: 3137372e3133372e3234302e302f32312d3332203d3e203238313731.roa (hash: C2DRBYLwQ2ccRNhVyPuOjzMp87KdmEZ6vL8rvFgjzj0=)
                          5: 3137372e38342e36342e302f32312d3332203d3e203238313731.roa (hash: QGs4i+u1Fp781xTRBZuVf9Sbpy4p+Uveo96HgjsMvDA=)
                          6: 3138392e38342e3136302e302f32302d3332203d3e203238313731.roa (hash: 9cCHxisrQbcvqgrXYb1FMnOR1opLT5/3gLcwgpJUiMU=)
                          7: F61AA6D04968E2222C81499C46D03813F1070400.crl (hash: gAR5p2j1C+XBrkNii4i2IIzKixnFY1JItaomQHQ6A/w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 06:46:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4d:c7:54:bc:d0:45:4f:77:c5:27:1c:a3:42:fc:7e:f7:cb:b2:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
        Validity
            Not Before: Aug 23 02:57:55 2025 GMT
            Not After : Aug 24 06:46:55 2025 GMT
        Subject: CN=25DB465511E62869DD127AA6B7096129CB52A6C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:20:5c:31:72:ce:ae:87:11:51:3e:e2:40:fc:
                    f2:bd:88:93:4d:da:59:97:3b:98:35:c3:d4:f7:b0:
                    b7:f4:c6:82:d1:87:8a:ab:fd:00:ec:02:73:0a:d9:
                    68:ac:28:64:2a:2f:2a:c4:cf:90:b0:3e:5f:7b:ab:
                    0f:be:93:e1:36:d5:04:7e:79:d6:e8:3e:f2:b1:f5:
                    d9:61:f3:0e:34:44:6b:fe:a9:e9:34:65:85:6d:0a:
                    d1:1b:5a:a4:a9:be:ab:a2:73:d8:2f:3f:5e:7a:9b:
                    1d:a0:86:68:a6:58:e8:5b:8a:dc:a5:d5:a1:25:a0:
                    2b:1b:53:57:73:f7:b9:26:52:cc:64:19:f7:4e:a8:
                    95:f8:6c:25:a7:d8:9b:a5:98:0e:7a:fc:ee:b2:7b:
                    4c:5d:fd:27:ec:65:dc:af:75:1d:18:10:af:f9:a8:
                    46:15:98:7a:18:9e:85:7f:71:27:97:26:ba:51:25:
                    6e:5f:48:a6:bc:5a:ca:68:fe:99:bf:5d:11:3d:78:
                    5e:62:c8:eb:09:24:68:6f:cc:1b:d7:d3:d1:02:3e:
                    c9:d3:02:82:e7:33:b2:91:e1:33:8e:75:69:b1:5a:
                    11:ed:64:ce:a2:78:2d:67:73:2c:fb:14:6e:45:7b:
                    d1:de:84:e9:5b:a6:ee:59:cc:55:51:b1:bf:fa:ab:
                    36:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DB:46:55:11:E6:28:69:DD:12:7A:A6:B7:09:61:29:CB:52:A6:C0
            X509v3 Authority Key Identifier:
                keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:35:46:8d:e7:59:93:70:22:22:05:fa:a7:0c:0b:4b:0d:8a:
         01:ce:6b:e5:a6:90:af:30:47:a8:e6:4b:6a:7c:26:40:6e:c3:
         f8:4d:15:73:c5:a2:8f:27:e9:9e:64:08:e1:2d:34:84:96:01:
         2d:e8:fc:f5:1d:85:be:25:43:12:b9:6a:0c:9a:78:ec:a3:be:
         0d:40:46:1c:df:51:83:a5:18:59:03:ee:a0:81:d1:ff:52:2c:
         5a:05:bd:0e:37:5f:25:2c:d9:04:04:81:76:ba:a0:ee:3d:3f:
         34:72:c8:05:7e:98:32:6f:28:c4:22:bb:81:c3:a7:c0:75:20:
         2f:23:0a:8b:98:81:4d:45:77:d9:e4:53:de:a5:a9:f1:00:79:
         3d:cd:67:3e:58:5f:01:b8:57:e1:f1:62:6d:a0:47:e0:6e:92:
         eb:c7:68:4d:18:a4:64:48:8a:ac:a5:ca:cb:c6:8a:e6:19:e3:
         df:0c:76:0b:6b:b2:2c:41:66:ab:48:b3:b2:cc:16:4a:64:40:
         4a:d3:d6:4f:2f:30:3d:b6:1b:8c:47:1e:7f:92:1a:1c:1e:8b:
         61:bd:7a:83:40:05:97:9e:7b:93:2f:f2:51:f7:4e:78:9e:16:
         00:b6:b5:c1:87:2d:b4:68:46:7c:a9:39:c1:ce:50:6b:be:1a:
         0d:bc:97:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:51:54 2025 by rpki-client