Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
File:                     FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft (raw, json)
Hash identifier:          3DhCe+PnTby7ghS5ZpbU6/ZU7mghnC2TROL0uNFl8pw=
Subject key identifier:   9F:69:4A:F3:59:35:08:33:52:39:1A:31:CC:5E:78:80:E2:81:AF:6F
Authority key identifier: FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D
Certificate issuer:       /CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
Certificate serial:       49443DD9D4548B771B8F8EE7D626E3A0E4DCDC60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
Manifest number:          B0
Signing time:             Tue 29 Apr 2025 08:07:46 +0000
Manifest this update:     Tue 29 Apr 2025 08:02:46 +0000
Manifest next update:     Wed 30 Apr 2025 09:18:46 +0000
Files and hashes:         1: 323830343a333766343a3a2f33322d3332203d3e20323636343436.roa (hash: eqxpPB5XAwja6jV+iVtvQUQ7DvtnMA9xHg8xBxaaJdw=)
                          2: 3137302e38322e3139322e302f32332d3233203d3e20323636343436.roa (hash: jKml+vsCmyH3VYhSt6DUlObhppzrFV5AHtWdFgHc6Y8=)
                          3: 3230302e38302e3131312e302f32342d3234203d3e20323636343436.roa (hash: N1pJ8ZcS9Nl6TbrNXvFkugMPx7xFs2V9bRUg8jfm0g4=)
                          4: 3137302e38322e3139322e302f32322d3232203d3e20323636343436.roa (hash: 4lHsUeGIHF9o7B2qxWtWznQHrYWNguoIdRX1EKI3brE=)
                          5: 3137302e38322e3139352e302f32342d3234203d3e20323636343436.roa (hash: +KVVMcJd40fZQtXLvQJ8sBLKn1TiCqb0kXQ7+miqAxU=)
                          6: 3137302e38322e3139322e302f32342d3234203d3e20323636343436.roa (hash: EOlboj3wT6mMDAXmwbGfzwxGWbjkRQ7C2jjpeWmWvl0=)
                          7: 3137302e38322e3139342e302f32342d3234203d3e20323636343436.roa (hash: xQ43aWNNIZH99ujqoAg+zbfknfirc7BIELUncdPk2JY=)
                          8: 3137302e38322e3139332e302f32342d3234203d3e20323636343436.roa (hash: SmxaKkfKqHOd8Yloavtod6j9w1RbBKjAZPKbRAXuIyE=)
                          9: 3137302e38322e3139342e302f32332d3233203d3e20323636343436.roa (hash: pIDTOZx/tJ1WdD/eCBD4yUnkQ6vG9xe6nYcj0NzfI3M=)
                          10: 323830343a333766343a3a2f33332d3333203d3e20323636343436.roa (hash: 4QHp+lUdRMNPBoaGQT+18uVhEV9Be4V4HDnXA/DipBs=)
                          11: FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl (hash: UeIwCssg4rz8T1QcENrtDxFaGVh/x0FUZ3aB3MzmCGc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl
                          rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 09:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:44:3d:d9:d4:54:8b:77:1b:8f:8e:e7:d6:26:e3:a0:e4:dc:dc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
        Validity
            Not Before: Apr 29 08:02:46 2025 GMT
            Not After : Apr 30 09:18:46 2025 GMT
        Subject: CN=9F694AF35935083352391A31CC5E7880E281AF6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ab:0e:8d:d0:e2:d8:78:ef:5a:0d:7f:5a:e2:
                    71:0f:26:58:52:e4:eb:91:dc:12:94:23:9b:ec:7d:
                    43:66:cc:c3:69:ac:51:55:57:b9:73:aa:7e:5e:a2:
                    ac:dd:bc:12:be:95:17:44:27:f5:5d:a6:98:d2:9f:
                    28:b3:f2:0f:76:c6:0c:a7:bc:04:59:54:7f:e8:cd:
                    b7:79:fb:b7:3f:f5:5f:43:0b:f3:f2:8a:2c:c9:73:
                    75:54:be:6e:fe:af:50:03:82:f0:93:78:59:9f:95:
                    12:79:95:43:90:f6:38:96:42:6e:1d:c1:c4:5c:84:
                    77:94:fd:ea:84:13:e8:85:d6:c7:ae:82:87:5b:0e:
                    1a:89:98:e4:2a:ad:bf:4a:06:10:03:fe:56:62:92:
                    d0:f9:44:e2:7f:32:0c:e9:09:cd:4f:34:f7:d6:ee:
                    30:9d:c3:bc:ff:eb:58:c7:aa:d7:8d:60:f2:bd:b7:
                    b0:bc:16:df:ca:62:2b:fc:d8:18:24:21:80:e8:64:
                    42:5a:e7:0f:67:d7:cf:51:c5:43:07:2b:2e:22:71:
                    37:38:64:59:bc:66:28:f0:ed:43:08:71:db:f2:b0:
                    2a:12:e4:c0:53:a1:fe:a3:c4:de:c6:d3:70:08:8f:
                    a5:cd:81:01:c0:af:38:61:ec:82:e8:fd:0e:25:00:
                    f8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:69:4A:F3:59:35:08:33:52:39:1A:31:CC:5E:78:80:E2:81:AF:6F
            X509v3 Authority Key Identifier:
                keyid:FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:36:36:0c:25:9b:b5:29:b4:e1:12:70:d1:40:2a:03:94:dc:
         13:32:00:e5:d2:53:5c:70:cb:09:2a:99:15:87:63:4c:94:9f:
         02:33:2d:4d:45:05:08:62:85:7d:8c:bd:7b:f3:8f:33:58:5c:
         a6:6f:98:58:5e:b3:ce:82:ab:08:7a:0d:d5:d1:f0:2d:68:9f:
         bf:83:60:60:12:96:51:36:fb:28:a9:ad:b8:7a:27:5f:6c:f6:
         9e:97:95:0c:ee:8e:78:f1:89:13:e9:0a:d8:be:fb:80:8e:d5:
         01:f9:fd:9a:d9:97:12:50:bc:a6:62:8b:71:6e:eb:02:09:0a:
         5b:cd:11:2f:05:06:29:4f:fe:67:e8:90:67:40:87:86:5b:46:
         21:f2:14:21:3f:b7:43:c8:3a:a4:4b:dc:77:89:a7:d0:a6:cf:
         bf:05:51:ce:e3:58:a3:c8:2a:eb:cf:fd:cf:1f:49:03:1d:20:
         e5:e3:85:c7:41:8c:e5:9a:b3:92:32:3a:4d:eb:76:0f:9d:c5:
         ae:07:68:2d:26:29:85:64:43:c7:ac:47:86:70:9c:c6:39:7c:
         8a:69:db:4b:e9:e1:eb:07:a5:93:c7:58:84:a8:97:dd:79:c7:
         cb:29:44:24:a1:5b:be:47:f2:86:03:ff:14:69:83:3e:be:a1:
         2a:b1:54:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:34:52 2025 by rpki-client