Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
File:                     FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft (raw, json)
Hash identifier:          QkRfYFSgbVFB7+Qof/KcZTiy/UwjBPldtKR/IAV47ZE=
Subject key identifier:   DC:98:8F:85:2F:5D:D3:18:34:AA:31:BA:77:9A:0D:AD:33:2D:9D:A7
Authority key identifier: FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D
Certificate issuer:       /CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
Certificate serial:       0F10F35DE80DED41383B19E1FE9E41965BBD4C68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
Manifest number:          F3
Signing time:             Wed 18 Jun 2025 21:09:49 +0000
Manifest this update:     Wed 18 Jun 2025 21:04:49 +0000
Manifest next update:     Fri 20 Jun 2025 00:06:49 +0000
Files and hashes:         1: 3230302e38302e3131312e302f32342d3234203d3e20323636343436.roa (hash: N1pJ8ZcS9Nl6TbrNXvFkugMPx7xFs2V9bRUg8jfm0g4=)
                          2: 3137302e38322e3139322e302f32332d3233203d3e20323636343436.roa (hash: jKml+vsCmyH3VYhSt6DUlObhppzrFV5AHtWdFgHc6Y8=)
                          3: 3137302e38322e3139322e302f32342d3234203d3e20323636343436.roa (hash: EOlboj3wT6mMDAXmwbGfzwxGWbjkRQ7C2jjpeWmWvl0=)
                          4: 3137302e38322e3139332e302f32342d3234203d3e20323636343436.roa (hash: SmxaKkfKqHOd8Yloavtod6j9w1RbBKjAZPKbRAXuIyE=)
                          5: 3137302e38322e3139352e302f32342d3234203d3e20323636343436.roa (hash: +KVVMcJd40fZQtXLvQJ8sBLKn1TiCqb0kXQ7+miqAxU=)
                          6: FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl (hash: 4dLs9rxSd5wfGdOO6wJyE92AX4PoSCKMBEIcRidvldA=)
                          7: 3137302e38322e3139322e302f32322d3232203d3e20323636343436.roa (hash: 4lHsUeGIHF9o7B2qxWtWznQHrYWNguoIdRX1EKI3brE=)
                          8: 3137302e38322e3139342e302f32332d3233203d3e20323636343436.roa (hash: pIDTOZx/tJ1WdD/eCBD4yUnkQ6vG9xe6nYcj0NzfI3M=)
                          9: 323830343a333766343a3a2f33332d3333203d3e20323636343436.roa (hash: 4QHp+lUdRMNPBoaGQT+18uVhEV9Be4V4HDnXA/DipBs=)
                          10: 323830343a333766343a3a2f33322d3332203d3e20323636343436.roa (hash: eqxpPB5XAwja6jV+iVtvQUQ7DvtnMA9xHg8xBxaaJdw=)
                          11: 3137302e38322e3139342e302f32342d3234203d3e20323636343436.roa (hash: xQ43aWNNIZH99ujqoAg+zbfknfirc7BIELUncdPk2JY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl
                          rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 00:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:10:f3:5d:e8:0d:ed:41:38:3b:19:e1:fe:9e:41:96:5b:bd:4c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
        Validity
            Not Before: Jun 18 21:04:49 2025 GMT
            Not After : Jun 20 00:06:49 2025 GMT
        Subject: CN=DC988F852F5DD31834AA31BA779A0DAD332D9DA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:16:45:c4:6b:8e:a2:81:53:15:59:ed:1e:
                    a0:8b:be:01:a7:54:ee:80:5b:8c:68:c4:a6:6f:21:
                    12:0f:4f:31:f3:fd:f5:a9:93:07:69:47:a4:8c:93:
                    63:1c:47:ed:c2:53:6a:56:0c:02:3a:40:cb:a0:1b:
                    b0:a4:58:db:c0:86:70:dd:49:5f:e5:06:9b:78:02:
                    6b:17:39:ba:f3:5d:1d:09:39:45:0b:ba:af:ba:c6:
                    2e:89:ac:05:c1:4e:ac:27:29:df:8a:be:c8:32:ca:
                    f9:67:63:05:84:65:0a:c5:5c:7a:be:b3:d4:ce:b8:
                    9e:5f:5c:d8:f5:80:d3:26:c5:1e:24:58:8a:7d:75:
                    39:97:16:1f:d9:98:d4:0d:2a:8a:b7:7e:e0:87:c8:
                    bc:17:52:32:6d:e1:5d:1d:cf:6b:67:a9:cb:1a:c7:
                    5c:a7:c6:4d:6a:e9:bc:02:5d:af:8b:14:be:11:3c:
                    6d:40:27:bf:62:19:dd:24:6f:76:9e:a1:7f:d8:25:
                    e0:10:ea:5f:25:5a:1a:51:11:26:8b:ea:b5:73:98:
                    dc:b0:b7:49:71:99:01:5e:39:02:29:65:9a:a2:f4:
                    ea:0a:c9:8f:44:d2:59:74:2a:46:5d:6e:f9:9a:48:
                    5d:3d:bb:65:53:68:c8:24:cd:14:99:bf:13:36:47:
                    82:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:98:8F:85:2F:5D:D3:18:34:AA:31:BA:77:9A:0D:AD:33:2D:9D:A7
            X509v3 Authority Key Identifier:
                keyid:FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:9e:bd:28:7d:d4:3c:dd:da:d0:92:9a:90:91:73:a4:1b:cf:
         d2:06:d5:ab:29:88:47:70:e4:eb:df:02:7b:98:1c:72:93:c6:
         6d:f4:2b:3d:c6:97:ea:11:54:76:3a:2f:9f:5f:07:19:23:4d:
         d0:09:72:31:ae:31:0b:95:cd:f7:84:e6:2d:3b:cb:40:20:b6:
         6c:69:79:54:88:f6:a7:3c:3e:0e:c2:f2:61:28:aa:07:53:d5:
         51:4f:24:bf:f3:0a:e9:27:ac:24:71:7b:14:51:9f:03:fd:9b:
         ff:c9:e8:ae:38:d4:b3:dd:f0:4a:8b:12:dd:45:9a:c0:49:b8:
         a0:fb:28:0f:77:6d:a3:59:58:f8:f4:81:8b:a6:68:94:de:46:
         33:17:85:df:79:3d:42:c5:06:d6:1c:a8:b2:92:1e:98:af:fa:
         f4:21:5c:4c:30:ba:b8:a5:d5:ae:58:13:91:75:40:1a:1f:d9:
         1e:13:a3:90:aa:a5:c5:ad:13:ed:58:24:af:47:1d:dd:5e:5b:
         6b:97:d5:af:64:6f:2e:35:10:82:15:fe:10:20:14:a7:4b:0f:
         13:4f:3e:22:53:96:33:01:29:9f:4a:ff:a7:eb:87:1d:42:36:
         cc:1c:3d:d9:b3:60:bc:92:0f:95:d4:be:95:55:65:b2:a4:71:
         68:9d:93:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 12:46:01 2025 by rpki-client