Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
File:                     D7F3F67EA800504F23795E22991815F9E686C811.mft (raw, json)
Hash identifier:          PLnpZSNbYy2w49y1LWYedq02LdjuKDzWIN5UJaEhixk=
Subject key identifier:   A4:E9:A3:43:D9:3C:B6:0B:C7:6C:53:04:67:D1:0E:2B:68:FB:1A:B5
Authority key identifier: D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11
Certificate issuer:       /CN=D7F3F67EA800504F23795E22991815F9E686C811
Certificate serial:       61C053B9FBB87CDFE179A2B635CFB2545FACDDE1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
Manifest number:          02F1
Signing time:             Mon 20 Oct 2025 06:50:00 +0000
Manifest this update:     Mon 20 Oct 2025 06:45:00 +0000
Manifest next update:     Tue 21 Oct 2025 08:14:00 +0000
Files and hashes:         1: 3139312e3234332e33382e302f32342d3234203d3e20323633343932.roa (hash: h1+BPE8QKGkGQjlwrOwfbil3+GmL9t/TZ5FhPjfP0Ys=)
                          2: 3139312e3234332e33362e302f32342d3234203d3e20323633343932.roa (hash: 8MSaZGp/oQ19MDpNrNYIwOMH8Rvub228ncf8cGi5UrA=)
                          3: 3139312e3234332e33392e302f32342d3234203d3e20323633343932.roa (hash: A29uFPI1dE2pL7Ym7I1sLhIfm55LwVTB0Q1J4KIDhQY=)
                          4: 3139312e3234332e33362e302f32332d3233203d3e20323633343932.roa (hash: fyv559suoxOTWuZ+x7F4q8+xix1OaSFY/Rn/K8Tm6UI=)
                          5: D7F3F67EA800504F23795E22991815F9E686C811.crl (hash: ONAYToLWPfIqYKRh0l8s5c9LIZoKbi0q16MXn0NOktE=)
                          6: 323830343a313262303a3a2f33322d3332203d3e20323633343932.roa (hash: IlooSbQXnxtp9yE158oMr+kw+VRPcvYSK0oGbAfrITs=)
                          7: 3139312e3234332e33362e302f32322d3232203d3e20323633343932.roa (hash: OnKIYKJargD/FTIo6Z54sfeV3foda7Z1vivFEJao5xA=)
                          8: 3139312e3234332e33372e302f32342d3234203d3e20323633343932.roa (hash: 1QaaHGZII86d9mGbjqzaZ+SrF2kGCAd2kLcMFDLAtT0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl
                          rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c0:53:b9:fb:b8:7c:df:e1:79:a2:b6:35:cf:b2:54:5f:ac:dd:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F3F67EA800504F23795E22991815F9E686C811
        Validity
            Not Before: Oct 20 06:45:00 2025 GMT
            Not After : Oct 21 08:14:00 2025 GMT
        Subject: CN=A4E9A343D93CB60BC76C530467D10E2B68FB1AB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:df:09:0d:23:f2:19:fd:db:34:4b:53:a3:8b:
                    00:16:01:a2:06:c3:3e:11:86:e4:89:36:d5:be:77:
                    3b:52:72:5a:e6:1b:d0:6c:1d:f7:40:e5:dd:cf:3c:
                    e5:40:2f:eb:d2:e3:5c:d5:9c:3e:4f:10:58:c8:13:
                    87:ce:c0:71:41:af:83:25:27:16:c8:97:b7:89:d2:
                    bc:4c:90:81:52:a7:f2:55:e4:3e:ff:2d:2b:75:f2:
                    1f:0a:ff:41:a5:07:34:dd:83:2c:23:ea:09:2a:0e:
                    85:25:00:8e:d5:a0:82:07:e9:e9:15:47:38:cb:e2:
                    83:cd:37:f3:f4:18:4e:c5:13:84:29:de:59:71:f4:
                    28:87:fc:d3:81:fc:74:1d:c3:82:1f:33:1f:e9:07:
                    c5:f8:88:f6:02:73:14:cf:97:95:15:8f:52:52:a6:
                    54:27:ab:d5:03:a4:8d:5a:fe:4b:7d:9d:e5:f5:3d:
                    91:2b:f7:ee:b8:f0:95:d9:26:ab:68:79:00:a4:6f:
                    f0:72:c9:d1:d4:c2:42:7b:fc:aa:fa:d3:97:c4:86:
                    0d:50:9b:9c:b4:72:19:cc:d1:8e:94:92:55:45:a5:
                    c4:c1:fa:6d:e3:02:c9:d4:ad:e2:c6:9a:a2:e1:f0:
                    4e:48:fa:c4:b9:0f:25:8b:dc:33:dc:de:e0:b2:99:
                    f1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E9:A3:43:D9:3C:B6:0B:C7:6C:53:04:67:D1:0E:2B:68:FB:1A:B5
            X509v3 Authority Key Identifier:
                keyid:D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:91:14:27:e5:3f:4e:54:6b:0a:16:ce:ec:55:77:23:8a:f9:
         fe:1f:e6:7b:8b:c8:83:e0:10:c8:43:d0:0c:6d:a9:fa:54:7c:
         64:85:ae:ec:cd:6b:74:55:b3:ef:5a:c7:ce:0c:e0:52:d5:c7:
         a0:02:49:52:63:08:21:20:22:15:d5:f6:cf:f1:c8:1b:df:68:
         2b:24:1a:b4:e2:15:74:66:e1:a5:05:52:c2:29:8d:2a:68:cf:
         fc:cb:81:a7:bd:28:38:37:a5:b7:07:f0:32:b1:7b:d1:10:ea:
         48:f4:df:ed:98:0e:60:d7:79:5c:80:c0:6b:3e:a6:3b:f0:a2:
         05:aa:00:b8:66:cc:ae:ae:1a:63:fb:a1:fa:27:c1:e0:14:55:
         4c:e1:23:ad:78:74:40:4b:25:d8:c0:6f:c8:e8:40:6a:aa:38:
         96:3c:24:4c:a3:32:83:b9:2a:34:70:f6:80:05:9c:5d:42:b9:
         fd:2a:04:64:03:0d:01:17:93:b6:ab:5e:a7:b0:1c:9f:fd:18:
         47:90:3e:43:be:f4:7a:df:10:8d:ec:db:82:f5:09:45:ff:bc:
         4f:e8:68:b1:d9:d6:31:ac:2c:f1:37:99:95:33:ed:08:27:d4:
         78:85:e7:2a:ed:0e:81:e2:51:a5:1b:6b:f7:42:e8:f7:f8:ac:
         11:a3:08:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:31:06 2025 by rpki-client