Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.mft
File:                     A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.mft (raw, json)
Hash identifier:          t3qyJHBa4EwIQ6WDvvakafc1ewbtnZWLSz2b27UirnY=
Subject key identifier:   43:D2:F7:AD:4E:C2:37:52:CF:D7:FF:67:B5:69:D8:FC:B2:4B:57:A4
Authority key identifier: A0:BD:39:FF:72:B4:E3:DA:FE:35:21:F4:0F:4E:43:89:CB:58:87:F3
Certificate issuer:       /CN=A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3
Certificate serial:       5540DAAC076A65D8118E6B3053B5D4B2B7406E91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.mft
Manifest number:          F9
Signing time:             Mon 20 Oct 2025 09:24:29 +0000
Manifest this update:     Mon 20 Oct 2025 09:19:29 +0000
Manifest next update:     Tue 21 Oct 2025 11:14:29 +0000
Files and hashes:         1: 323830343a333231383a383030303a3a2f33332d3333203d3e20323635303535.roa (hash: uHtEpmV6GkbVrpL5LO01/kwMREgnxpzgd68337v57ac=)
                          2: 323830343a333231383a3a2f33322d3332203d3e20323635303535.roa (hash: zCb1tobwwy6Up01aFY7ez9cCaolBaKm2oj7H2iWVCVc=)
                          3: 3137302e3233312e3132302e302f32322d3232203d3e20323635303535.roa (hash: /2eCrRJnDCMjLSeBX94hrJuESCoTM/nurrOFcbi7w/U=)
                          4: 3137302e3233312e3132322e302f32332d3233203d3e20323635303535.roa (hash: kMFeGvLwygKxcHyC8eTFNx15JSQt6N9t4c2qJQT+/hY=)
                          5: 3137302e3233312e3132302e302f32332d3233203d3e20323635303535.roa (hash: pNQo3A10GTQLN+cyPRg5n0zIfrseNOrv6KmdH4aGU4M=)
                          6: A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.crl (hash: CNIYeOX4MVGdbC49XC47djTqvCbUAgTmxjwOSwUwJQc=)
                          7: 323830343a333231383a3a2f33332d3333203d3e20323635303535.roa (hash: jAN2fHmhMUPHs/4tzvsVmMmeP1AeUzg3bL0hldG1SAw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.crl
                          rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:40:da:ac:07:6a:65:d8:11:8e:6b:30:53:b5:d4:b2:b7:40:6e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3
        Validity
            Not Before: Oct 20 09:19:29 2025 GMT
            Not After : Oct 21 11:14:29 2025 GMT
        Subject: CN=43D2F7AD4EC23752CFD7FF67B569D8FCB24B57A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cd:5d:f1:bb:94:1c:a4:57:11:03:38:49:26:
                    3f:83:c7:8c:c2:4a:1e:7b:54:bd:78:a0:20:08:08:
                    d0:78:c7:ea:fb:a5:68:4e:a3:0d:1a:9e:7f:28:53:
                    29:7c:98:75:3a:88:87:c9:31:09:26:0a:0b:20:87:
                    d5:10:7d:4a:da:f6:39:51:88:0b:04:29:d7:c6:df:
                    68:7c:36:78:e4:55:16:ca:e6:95:ea:c0:51:18:ba:
                    00:72:51:0a:00:cd:72:48:81:a8:70:63:40:d7:c4:
                    8c:07:79:f6:f6:83:55:2a:3f:57:e1:89:9e:b6:ed:
                    07:54:0b:4d:8b:a6:77:02:b0:c9:0d:b7:7a:ed:3d:
                    37:95:bc:a8:11:3b:f7:02:b6:ad:b4:67:86:f0:25:
                    06:75:af:6c:84:1d:89:d7:22:b9:0f:0f:0e:6c:1c:
                    4b:af:bd:0a:49:0a:db:88:de:1f:55:90:28:35:1b:
                    d9:93:59:d8:87:a6:d8:33:6e:b8:4c:ef:73:df:e0:
                    0a:27:2b:5e:76:25:cc:cc:a4:13:18:d4:e5:07:33:
                    12:69:0f:91:1d:44:38:54:88:21:87:ea:c8:06:f8:
                    45:53:a6:54:a6:de:e7:a5:3b:20:d1:08:7f:50:6d:
                    ba:91:6f:e9:f4:d0:29:64:d9:7a:8e:30:fd:2e:71:
                    1c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D2:F7:AD:4E:C2:37:52:CF:D7:FF:67:B5:69:D8:FC:B2:4B:57:A4
            X509v3 Authority Key Identifier:
                keyid:A0:BD:39:FF:72:B4:E3:DA:FE:35:21:F4:0F:4E:43:89:CB:58:87:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:15:a8:bc:76:97:68:1d:2c:48:3c:bf:fa:85:ed:60:d5:0f:
         43:52:8c:0a:2f:1b:70:a5:ad:f4:3a:71:b8:36:8a:0e:14:12:
         e4:aa:11:60:9e:00:ed:0f:2b:33:1e:d0:f5:f1:c4:93:94:a5:
         a4:0d:2f:19:9d:03:79:83:8c:fb:90:56:0a:14:6e:a8:3d:e7:
         05:99:58:20:f0:78:eb:18:39:1e:d1:e9:89:f0:2c:d9:10:81:
         c0:74:0e:48:80:ac:1d:1d:64:bb:ac:93:d6:f1:ca:39:2e:d6:
         7b:bf:92:4c:40:58:03:aa:67:ea:36:b8:bf:bd:7c:0d:28:7f:
         80:2e:bf:e8:71:6b:36:6b:ed:60:97:5c:7b:62:a6:ac:2e:dc:
         d4:e7:df:66:d5:5d:83:41:52:bc:45:cb:fa:53:0e:7f:90:5d:
         e9:98:cc:36:bb:d3:58:2b:65:37:34:fc:08:a5:de:de:0e:3c:
         cb:e4:19:da:15:eb:c0:da:29:c4:ba:4d:77:95:2c:35:f2:86:
         8d:72:78:27:42:e7:53:6a:a8:fc:d5:31:a4:7f:43:c0:6d:8e:
         a2:6b:96:f0:d3:3f:4e:4c:fd:5a:fd:23:ce:9d:c5:02:89:cc:
         a4:41:a4:32:d0:04:3a:e9:64:ee:5a:14:78:74:ae:fc:e9:3a:
         63:f8:46:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:41:00 2025 by rpki-client