Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.mft
File:                     FD031BA6F0B6769270F067331FFFBCE55D6792E9.mft (raw, json)
Hash identifier:          I4HHWbwWs5mMizsvt9V7+2imHgtqeO56BVPoSwZSFME=
Subject key identifier:   44:FF:03:39:C6:A1:55:A8:A8:68:A9:16:35:3A:18:D7:34:2A:C9:24
Authority key identifier: FD:03:1B:A6:F0:B6:76:92:70:F0:67:33:1F:FF:BC:E5:5D:67:92:E9
Certificate issuer:       /CN=FD031BA6F0B6769270F067331FFFBCE55D6792E9
Certificate serial:       6326F1446C335651926958E63EA37C7A21527AA0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.mft
Manifest number:          0142
Signing time:             Tue 04 Nov 2025 13:28:49 +0000
Manifest this update:     Tue 04 Nov 2025 13:23:49 +0000
Manifest next update:     Wed 05 Nov 2025 14:51:49 +0000
Files and hashes:         1: 323830343a386132383a3a2f33322d313238203d3e20323733363531.roa (hash: t8aizyI9lYaDA6bnIdfnBC8syAVXcvpfv27Bh2mN7Mc=)
                          2: 34352e3138362e34382e302f32322d3332203d3e20323733363531.roa (hash: 5EnjsnBJFC9vy419I945o6YtyRDlG3CjspAK7QAMX7g=)
                          3: FD031BA6F0B6769270F067331FFFBCE55D6792E9.crl (hash: G/9i7vRGJOaFnnUB2bTI6PA/KmpA0+g0bkW5eqpMJpE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.crl
                          rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 14:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:26:f1:44:6c:33:56:51:92:69:58:e6:3e:a3:7c:7a:21:52:7a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD031BA6F0B6769270F067331FFFBCE55D6792E9
        Validity
            Not Before: Nov  4 13:23:49 2025 GMT
            Not After : Nov  5 14:51:49 2025 GMT
        Subject: CN=44FF0339C6A155A8A868A916353A18D7342AC924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:68:e3:ca:90:b9:11:e1:80:bb:b8:07:5d:81:
                    1b:7f:cf:ca:ad:6e:db:b2:5e:c1:96:a4:44:5a:b5:
                    49:fb:c1:c1:30:57:d6:39:2a:ea:99:5d:a7:34:e0:
                    cb:73:64:73:55:92:f4:e7:9f:38:89:28:0c:96:5c:
                    80:5b:df:60:b7:0a:52:71:5b:f7:02:67:27:53:a0:
                    23:0f:c8:2d:db:ec:b3:2b:13:a3:2b:b0:cc:3e:3c:
                    56:5d:c5:e3:d2:52:26:25:ef:5c:12:d3:23:57:e8:
                    cb:af:1e:5f:b7:60:81:9d:af:fa:96:c8:1c:1a:ac:
                    f6:19:3e:45:11:f2:5f:6e:d6:80:31:7e:d9:3f:6f:
                    db:52:32:ba:2f:a4:88:1c:d7:2c:67:31:da:fe:e1:
                    05:5b:96:ae:88:0e:29:cd:76:b4:7c:5e:cc:19:65:
                    fd:37:6d:42:e5:5a:50:07:d9:f3:b7:53:bb:68:e2:
                    14:d3:af:af:67:2d:8d:23:45:16:96:6b:78:11:43:
                    ef:53:b4:4a:58:83:82:0b:82:1f:2d:09:68:69:53:
                    81:e8:37:b9:5f:e9:7c:5e:d8:1c:0e:2d:e8:c8:fb:
                    5c:f0:0e:48:cc:33:24:d7:a9:3f:08:cd:3c:a2:7f:
                    ec:03:ab:e1:a0:57:31:95:b1:05:9c:cb:d0:66:52:
                    64:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FF:03:39:C6:A1:55:A8:A8:68:A9:16:35:3A:18:D7:34:2A:C9:24
            X509v3 Authority Key Identifier:
                keyid:FD:03:1B:A6:F0:B6:76:92:70:F0:67:33:1F:FF:BC:E5:5D:67:92:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:af:ff:25:18:43:5a:e1:f3:95:79:7b:0a:7c:dd:5f:15:ad:
         17:13:4b:78:99:38:01:39:d0:8f:35:9f:04:bd:cb:de:47:38:
         e2:a4:24:60:c1:62:b9:f3:de:b1:31:dc:1d:4d:66:5f:fe:d6:
         ab:91:2e:5c:d3:94:da:47:50:cc:41:cd:b0:dd:af:bc:0d:18:
         28:f9:08:9e:4f:45:fd:a5:0d:4f:ac:b4:17:b9:bf:24:54:f7:
         e1:91:16:e7:b0:3e:eb:8a:ce:10:b7:1f:b7:8d:95:33:26:1a:
         a3:79:bf:82:6e:62:36:a7:8f:04:b5:84:78:02:e2:0c:27:76:
         cd:1f:f7:d9:92:2d:4d:df:65:09:0a:ad:84:59:3e:7b:fa:38:
         2a:df:93:d1:34:e2:b9:0f:b1:65:da:95:01:0f:d4:0c:01:56:
         81:47:83:af:69:5e:0c:b2:2d:bf:09:67:46:dc:07:5d:31:93:
         65:0e:f8:42:fb:9b:64:a1:41:8c:12:1a:6e:f2:8b:60:dc:68:
         4d:e5:16:cd:74:e3:d1:7e:03:ea:39:51:29:19:7b:f2:0f:ef:
         0b:e5:f7:a0:4e:a2:ff:ae:5c:a1:44:d8:31:f6:72:c8:33:be:
         44:af:7f:ea:43:1c:62:1f:1d:66:22:9b:3f:d7:c7:cb:19:39:
         d4:58:27:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYybxRGwzVlGSaVjmPqN8eiFSeqAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQwMzFCQTZGMEI2NzY5MjcwRjA2NzMzMUZGRkJDRTU1
RDY3OTJFOTAeFw0yNTExMDQxMzIzNDlaFw0yNTExMDUxNDUxNDlaMDMxMTAvBgNV
BAMTKDQ0RkYwMzM5QzZBMTU1QThBODY4QTkxNjM1M0ExOEQ3MzQyQUM5MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQaOPKkLkR4YC7uAddgRt/z8qt
btuyXsGWpERatUn7wcEwV9Y5KuqZXac04MtzZHNVkvTnnziJKAyWXIBb32C3ClJx
W/cCZydToCMPyC3b7LMrE6MrsMw+PFZdxePSUiYl71wS0yNX6MuvHl+3YIGdr/qW
yBwarPYZPkUR8l9u1oAxftk/b9tSMrovpIgc1yxnMdr+4QVblq6IDinNdrR8XswZ
Zf03bULlWlAH2fO3U7to4hTTr69nLY0jRRaWa3gRQ+9TtEpYg4ILgh8tCWhpU4Ho
N7lf6Xxe2BwOLejI+1zwDkjMMyTXqT8IzTyif+wDq+GgVzGVsQWcy9BmUmTpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQURP8DOcahVaioaKkWNToY1zQqySQwHwYDVR0j
BBgwFoAU/QMbpvC2dpJw8GczH/+85V1nkukwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdKZzluS1Y4VW9wb0hrUUczNXBKTlhBTEs0Vm9GV3ZBUFRYUHp0S2t3
YlAvMC9GRDAzMUJBNkYwQjY3NjkyNzBGMDY3MzMxRkZGQkNFNTVENjc5MkU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZEMDMxQkE2RjBCNjc2OTI3
MEYwNjczMzFGRkZCQ0U1NUQ2NzkyRTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NUdKZzluS1Y4VW9wb0hrUUczNXBKTlhBTEs0Vm9GV3ZBUFRYUHp0S2t3YlAvMC9G
RDAzMUJBNkYwQjY3NjkyNzBGMDY3MzMxRkZGQkNFNTVENjc5MkU5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANa//JRhDWuHzlXl7CnzdXxWtFxNLeJk4ATnQjzWfBL3L3kc44qQkYMFiufPe
sTHcHU1mX/7Wq5EuXNOU2kdQzEHNsN2vvA0YKPkInk9F/aUNT6y0F7m/JFT34ZEW
57A+64rOELcft42VMyYao3m/gm5iNqePBLWEeALiDCd2zR/32ZItTd9lCQqthFk+
e/o4Kt+T0TTiuQ+xZdqVAQ/UDAFWgUeDr2leDLItvwlnRtwHXTGTZQ74QvubZKFB
jBIabvKLYNxoTeUWzXTj0X4D6jlRKRl78g/vC+X3oE6i/65coUTYMfZyyDO+RK9/
6kMcYh8dZiKbP9fHyxk51FgnkQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:53:24 2025 by rpki-client