Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft
File:                     FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft (raw, json)
Hash identifier:          tdjhLG35NzkxLCwygOR02KzBKrRJeSFLKqburQDPumk=
Subject key identifier:   EB:85:60:53:88:D6:30:85:1B:F3:6F:3D:81:22:B2:48:EF:5D:55:CE
Authority key identifier: FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22
Certificate issuer:       /CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922
Certificate serial:       43B2D5A5AA3C91E49E3ADC9672E435E9484E5446
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft
Manifest number:          01BD
Signing time:             Mon 20 Oct 2025 00:15:48 +0000
Manifest this update:     Mon 20 Oct 2025 00:10:48 +0000
Manifest next update:     Tue 21 Oct 2025 03:20:48 +0000
Files and hashes:         1: 323830343a343034383a3a2f33322d3332203d3e20323635393439.roa (hash: aVX2IVjqQ7TBmrLb8tvVwiKLOMusuScEgmbSzTiPcHU=)
                          2: FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl (hash: jTm/uduGyYfh2Yu66fSnb+81wCjGsM2yz5S77v5hWU0=)
                          3: 323830343a343034383a343139303a3a2f34342d3434203d3e20323635393439.roa (hash: kPfHCCVjuXOCeZNEJwNpypbphNqRr3lRTBt8Eop3Nlo=)
                          4: 323830343a343034383a633030303a3a2f34382d3438203d3e20323635393439.roa (hash: 7Qzy/btRNj11AxGCeS6Dpd0PnNCT+ea7uWwcpm3zMXI=)
                          5: 323830343a343034383a343130303a3a2f34342d3434203d3e20323635393439.roa (hash: zW1xCtJa5QCLgMyo6nJWymabeEMwLqJXph2CLwyCn+A=)
                          6: 323830343a343034383a343138303a3a2f34342d3434203d3e20323635393439.roa (hash: CutOeiI0pzO2yXb55rKNiniR6g5mvq1Pa0uSDAK7XnE=)
                          7: 3136342e3136332e39362e302f32322d3234203d3e20323635393439.roa (hash: eaLjYHuylYDNlI3C2KTFFFRv9QuJT7KhJPOURxEEGOk=)
                          8: 323830343a343034383a343131303a3a2f34342d3434203d3e20323635393439.roa (hash: /LJNQZNY/0IDWXpsOfzH/XnySG8NHgNXNnNQU9d5gaw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl
                          rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b2:d5:a5:aa:3c:91:e4:9e:3a:dc:96:72:e4:35:e9:48:4e:54:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922
        Validity
            Not Before: Oct 20 00:10:48 2025 GMT
            Not After : Oct 21 03:20:48 2025 GMT
        Subject: CN=EB85605388D630851BF36F3D8122B248EF5D55CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cf:3c:04:88:f8:55:5e:d2:22:5b:c7:1f:8d:
                    e9:57:ff:ab:f1:34:be:df:69:a3:6d:72:69:0d:5e:
                    2e:f7:37:d6:a5:0d:8d:6a:92:e1:22:82:6d:d9:1e:
                    ce:e3:24:c6:58:68:ff:a4:c6:b0:5b:92:d3:02:05:
                    37:04:bb:77:d8:12:9a:66:d0:2f:7c:5b:11:d1:36:
                    4c:db:d1:96:47:14:f9:0f:27:0e:f9:47:92:90:2f:
                    69:07:ba:0f:01:09:62:2a:58:23:e3:04:30:1d:6c:
                    c2:77:78:af:0f:a1:39:6e:2e:93:f0:54:0c:25:e6:
                    3f:26:62:48:22:f6:26:86:54:25:11:bb:11:a5:46:
                    67:42:5b:3e:6d:49:23:25:87:b4:07:8f:a9:5a:26:
                    54:96:19:c9:86:ae:1b:0c:1c:ec:0a:6e:4c:6a:63:
                    ea:16:4e:cd:da:0c:d8:7d:b1:09:ad:c9:7e:05:ad:
                    75:5d:59:e1:a3:32:a2:cf:97:87:35:b2:47:ec:0b:
                    53:c6:83:f3:6d:dc:8f:86:b9:2e:11:13:9d:57:da:
                    c0:dc:a7:eb:cd:3f:92:76:38:f4:d0:66:0c:e9:db:
                    08:30:e7:61:78:a0:fe:1f:c3:f8:61:2f:d1:1a:ab:
                    d2:5b:64:89:cf:22:5b:f2:35:14:bb:4c:78:87:7f:
                    79:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:85:60:53:88:D6:30:85:1B:F3:6F:3D:81:22:B2:48:EF:5D:55:CE
            X509v3 Authority Key Identifier:
                keyid:FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:94:65:90:3a:c7:03:1f:a9:73:57:ac:d4:06:1c:89:f8:2f:
         87:ef:0c:78:60:4d:84:6b:5f:e8:10:3a:e4:61:2b:12:a1:e1:
         c6:61:1d:3a:5f:3d:64:40:da:bb:25:0c:9c:9e:8e:6b:c7:a6:
         a6:6f:68:60:ec:35:a4:ea:81:d5:1a:bb:43:0a:05:54:76:66:
         fd:3b:97:00:8c:c3:47:6f:72:5d:66:2f:6a:e0:17:7a:cf:87:
         11:18:9a:72:51:ba:12:45:d0:52:12:3b:98:17:6c:d1:ef:81:
         cb:e9:2a:3e:d1:a1:7c:dc:d4:8e:d6:5b:6a:e4:0c:6c:93:a2:
         a1:6e:99:82:36:f0:3c:e1:64:4b:5a:95:ff:50:1a:9d:4f:82:
         31:14:a5:8a:8a:b3:40:97:7c:4a:e0:ee:e8:55:47:00:16:68:
         cd:45:ae:2d:08:70:c9:cd:8f:17:cc:e0:8b:5a:c3:ae:e9:93:
         ba:c3:72:05:d6:d2:f3:f2:4e:a4:09:be:63:af:3c:d6:42:cf:
         f1:85:54:35:5c:69:f0:20:2d:25:de:fc:89:74:70:ba:c2:47:
         52:b8:7f:00:0f:46:44:dc:dc:2c:9e:1b:7b:e8:35:1f:c9:04:
         13:ba:1e:01:44:ed:cd:c3:19:f8:63:be:87:e8:20:7d:35:f0:
         97:0d:6c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:57:10 2025 by rpki-client