Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.mft
File:                     FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.mft (raw, json)
Hash identifier:          MIH1kDF3x5LSn6qoEbwpUJV+gkOq+WiF2mKupfO5Bsg=
Subject key identifier:   45:D7:29:15:4B:0D:3E:F6:FF:39:D5:7D:83:F5:2F:1C:7D:88:72:F4
Authority key identifier: FF:9A:6A:49:4A:C8:BD:42:AC:BA:6F:13:A8:42:AB:B2:E5:B5:C0:71
Certificate issuer:       /CN=FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071
Certificate serial:       4D02EE69B33397B8DAFBA0726D6F27DE55BB3423
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.mft
Manifest number:          02DD
Signing time:             Sat 23 Aug 2025 11:00:00 +0000
Manifest this update:     Sat 23 Aug 2025 10:55:00 +0000
Manifest next update:     Sun 24 Aug 2025 11:00:00 +0000
Files and hashes:         1: 3139302e352e3230382e302f32322d3234203d3e20323731313835.roa (hash: 4ZVE8yTQKvpecneJ1bV/TlfHWVZ9028B4PIxJZn9otg=)
                          2: 323830343a373738633a3a2f33322d3334203d3e20323731313835.roa (hash: +2FlKewuZktP4c66zuxHNwVCYsXgbLYozrON0BqHGO8=)
                          3: FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.crl (hash: fF6gNwItQgSa0Ndx+IAAaSEEdec0X4BPISmAPsEkeTk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.crl
                          rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:02:ee:69:b3:33:97:b8:da:fb:a0:72:6d:6f:27:de:55:bb:34:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071
        Validity
            Not Before: Aug 23 10:55:00 2025 GMT
            Not After : Aug 30 11:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:09:5a:67:7f:0b:83:cd:c7:ae:b8:9e:70:57:
                    50:4f:c2:3d:fb:d0:d0:bf:69:d6:a8:71:8f:bb:28:
                    87:41:c1:7d:17:a1:11:67:67:9f:c0:87:e8:85:1a:
                    dd:56:5f:8a:ac:3d:ce:80:c1:b9:e0:a5:06:c9:ca:
                    e0:75:7a:0c:b7:61:0f:5f:52:bc:43:f7:45:d4:a0:
                    fa:7a:66:34:99:2c:cf:c9:7f:06:4a:de:d8:43:d3:
                    54:51:74:30:c2:4e:c8:da:0e:aa:88:c4:ad:e1:55:
                    d4:a8:90:e8:00:0c:f2:d7:f0:7f:fa:7b:fd:21:47:
                    80:c3:52:5f:78:21:83:7a:c3:77:1e:5d:84:24:f8:
                    73:e7:c5:78:79:6e:08:45:db:bd:7e:db:0d:7f:17:
                    20:40:02:9a:49:d7:40:13:b9:a6:ac:40:4f:47:b7:
                    22:1b:69:fd:ce:1f:7e:61:9f:c0:2d:8d:ae:20:33:
                    f1:01:df:b5:7f:97:64:7d:0c:f9:ab:ae:b9:1c:da:
                    3c:8c:dc:8e:f4:05:f8:5f:a6:35:b0:22:76:19:64:
                    87:db:38:8e:e8:12:16:89:b3:d3:a3:49:26:75:9b:
                    d3:44:cf:60:a0:5b:32:e5:ec:ac:82:b1:3a:39:1b:
                    2e:22:1a:3d:55:96:1c:3f:c9:02:66:aa:fc:be:66:
                    e8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D7:29:15:4B:0D:3E:F6:FF:39:D5:7D:83:F5:2F:1C:7D:88:72:F4
            X509v3 Authority Key Identifier:
                keyid:FF:9A:6A:49:4A:C8:BD:42:AC:BA:6F:13:A8:42:AB:B2:E5:B5:C0:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ef:36:ee:1e:d8:5e:36:8d:15:a2:6a:3f:47:d5:89:02:7c:
         27:d9:3d:00:1b:a3:ee:58:d9:65:b9:da:6a:84:a9:e0:3a:f1:
         91:19:1d:19:61:4a:d5:93:31:ba:7d:8f:f5:a0:ff:5c:0d:d5:
         e3:0f:54:34:1c:de:e9:7b:73:d7:d4:55:69:c5:07:26:4f:b5:
         c9:65:56:1b:b2:a8:f7:10:77:62:6d:6c:48:e4:24:3d:04:bb:
         3a:d0:c4:d5:82:8c:45:66:3b:7d:35:df:11:9d:cc:33:a7:0d:
         51:ca:a9:53:c8:a4:49:45:d3:2d:d6:f3:34:b7:c4:8d:e9:78:
         d7:0b:b1:ca:67:be:86:16:90:db:f1:a2:ee:1b:ca:68:d8:2d:
         fa:22:a1:a6:e7:41:60:55:00:26:2c:03:9f:ad:24:b0:a1:81:
         b6:b8:73:ab:96:d8:e4:1f:db:eb:71:bb:86:51:1a:23:d6:0a:
         cc:9a:48:3d:43:00:c7:92:6d:28:93:84:d7:cd:b9:52:c2:08:
         10:80:9f:dc:e1:d4:0c:0a:c0:59:4b:61:a2:ed:6c:40:f1:34:
         64:49:19:a2:cc:ef:fb:45:ee:5f:19:27:59:79:c5:e1:41:32:
         1b:c3:7f:a9:1a:17:c9:eb:39:00:18:e6:e2:6c:d7:4c:16:07:
         a3:94:c5:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:28:35 2025 by rpki-client