Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/173B09B782839FC1F053BA3B0D3570BF8FCBF577.mft
File:                     173B09B782839FC1F053BA3B0D3570BF8FCBF577.mft (raw, json)
Hash identifier:          jWpEPX8fHhDyx0ywEfMx/t3pRZIZCITNH6Qpc9p/XzM=
Subject key identifier:   4A:10:B0:0A:81:F5:B8:8E:1F:49:44:7F:6C:96:A4:2E:AC:88:60:03
Authority key identifier: 17:3B:09:B7:82:83:9F:C1:F0:53:BA:3B:0D:35:70:BF:8F:CB:F5:77
Certificate issuer:       /CN=173B09B782839FC1F053BA3B0D3570BF8FCBF577
Certificate serial:       0B7593A85EE01671525E96EB7E9994BF3547CF5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173B09B782839FC1F053BA3B0D3570BF8FCBF577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/173B09B782839FC1F053BA3B0D3570BF8FCBF577.mft
Manifest number:          0142
Signing time:             Mon 20 Oct 2025 12:13:29 +0000
Manifest this update:     Mon 20 Oct 2025 12:08:29 +0000
Manifest next update:     Tue 21 Oct 2025 16:03:29 +0000
Files and hashes:         1: 3137372e3132352e3230342e302f32322d3234203d3e20323632333436.roa (hash: YZtmvbF49fC0v80TI4bTrJw6IoY2TdVLTk7MfrGxgzc=)
                          2: 323830343a3831633a3a2f33322d3634203d3e20323632333436.roa (hash: huKEgQX1Ek7OJPiVvxwRrG3BAw+37vnTSN1R+U1o+f0=)
                          3: 3137392e3130372e35362e302f32312d3234203d3e20323632333436.roa (hash: KoVQHaXct7NgPJJYioorytA5l8ym7AyUVH/cvQFCVO4=)
                          4: 3137302e3135302e3130302e302f32322d3234203d3e20323632333436.roa (hash: w7OVz+kHNQ0qWUlg9+fCjylQzyVcW8vmkTrkKZSTrk4=)
                          5: 3133382e39372e302e302f32322d3234203d3e20323632333436.roa (hash: /v2vzETncLM7OTbfehrJd+2tAoahNTcid4eovEkO4cM=)
                          6: 3134332e3230322e3232342e302f32322d3234203d3e20323632333436.roa (hash: GWAI1QujwNXfcoNQstqjOcUk48Vb59obF2GLGX0nGYc=)
                          7: 173B09B782839FC1F053BA3B0D3570BF8FCBF577.crl (hash: nGwFApX7SwfRq6vyUAHWu/xZxqlZshMB/lqLcZVN+B8=)
                          8: 3137372e3132352e3136302e302f32312d3234203d3e20323632333436.roa (hash: DKOUa3SjaI+u0GLvaIP+Oqed0jGnhFUHLD0IjZcDpqg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/173B09B782839FC1F053BA3B0D3570BF8FCBF577.crl
                          rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/173B09B782839FC1F053BA3B0D3570BF8FCBF577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173B09B782839FC1F053BA3B0D3570BF8FCBF577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:75:93:a8:5e:e0:16:71:52:5e:96:eb:7e:99:94:bf:35:47:cf:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173B09B782839FC1F053BA3B0D3570BF8FCBF577
        Validity
            Not Before: Oct 20 12:08:29 2025 GMT
            Not After : Oct 21 16:03:29 2025 GMT
        Subject: CN=4A10B00A81F5B88E1F49447F6C96A42EAC886003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:27:54:bc:3d:09:fb:2b:70:a5:ce:eb:0c:0b:
                    5c:ed:19:0c:9c:9a:2a:e9:70:46:f4:33:c2:5a:00:
                    1d:0c:6d:48:09:fb:bb:b1:ee:86:b3:a8:66:23:99:
                    9d:62:4f:8c:3d:17:1f:36:57:14:92:bb:39:f0:bc:
                    46:d3:fe:7a:99:ba:95:51:87:f0:10:9c:00:d2:b2:
                    22:ea:3b:2f:33:02:3d:47:50:78:fd:00:39:a8:9c:
                    5e:57:4a:a4:89:63:f2:92:58:2c:02:21:8b:bb:ea:
                    1d:31:6a:b0:05:99:d3:21:56:0d:42:98:3a:e2:85:
                    d2:cb:f4:7c:58:3c:f2:e4:22:6a:17:30:7c:57:3e:
                    c0:9c:09:a7:72:4b:81:9e:4c:d8:14:a7:85:86:16:
                    88:5d:7c:38:eb:97:a2:ba:99:ea:bc:39:58:c2:1f:
                    9e:fa:a0:90:98:46:e7:23:25:c9:f6:d7:61:77:f5:
                    7c:4e:cd:3e:e1:53:71:7f:2f:fa:f5:8d:23:1e:de:
                    86:6a:fb:b2:7c:3a:32:e5:68:d7:02:96:bd:ba:c0:
                    86:6f:85:3b:28:31:af:71:87:43:22:82:2c:e6:81:
                    f0:c7:a8:28:2b:58:16:e5:c4:13:68:7f:4a:91:93:
                    77:53:7e:1c:ab:04:8c:68:24:2a:c4:8b:f4:d5:69:
                    1a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:10:B0:0A:81:F5:B8:8E:1F:49:44:7F:6C:96:A4:2E:AC:88:60:03
            X509v3 Authority Key Identifier:
                keyid:17:3B:09:B7:82:83:9F:C1:F0:53:BA:3B:0D:35:70:BF:8F:CB:F5:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/173B09B782839FC1F053BA3B0D3570BF8FCBF577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173B09B782839FC1F053BA3B0D3570BF8FCBF577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/173B09B782839FC1F053BA3B0D3570BF8FCBF577.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:87:e8:3d:03:36:c2:99:64:83:69:99:7c:08:d6:d7:e9:5a:
         64:2b:15:23:2b:48:8e:60:fb:68:5b:ef:7d:1d:ff:35:53:5c:
         55:fa:e4:43:0b:ec:9e:08:38:f6:3b:0f:88:70:b1:43:f5:0a:
         7d:b4:5f:0a:82:7c:e5:79:d3:66:19:9d:89:e7:46:fb:32:7b:
         b2:63:0f:e6:9c:b2:79:27:41:2f:8d:ee:af:1e:95:9b:a5:50:
         c3:5a:90:ad:fd:20:11:20:65:e1:a0:40:48:c0:f6:29:f9:79:
         ee:6f:9d:b1:bd:58:c5:cc:fa:89:6c:dc:db:40:fb:0b:ed:da:
         8a:7f:4a:24:04:cc:fb:0a:84:41:95:89:bc:68:17:4b:24:41:
         ee:58:7f:89:1f:c4:b4:58:0f:b9:08:d1:d4:6a:9f:2d:ff:03:
         65:9b:c8:ad:5d:da:46:0d:8b:80:d7:dc:fc:e2:f0:d1:e5:9e:
         6c:d8:f9:0a:25:65:40:91:fa:ea:8e:6c:d8:df:f9:2b:58:df:
         ba:bf:6b:a3:b3:48:ba:c1:3f:05:95:48:72:d8:b4:e4:43:88:
         4c:87:30:f8:5b:24:26:74:3d:dd:75:b6:23:cf:d0:32:46:5c:
         45:f3:3a:7a:43:9e:3a:c5:bb:38:66:38:14:13:a6:a8:4a:5b:
         57:80:d0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:26:45 2025 by rpki-client