Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
File:                     F61AA6D04968E2222C81499C46D03813F1070400.mft (raw, json)
Hash identifier:          qflQMpfg+DLh1q6bln61ac8r1LpPGZkPKkgIcjtAEWM=
Subject key identifier:   A7:C7:D9:F8:93:75:82:E5:4A:E9:D5:35:19:0B:4F:9F:3D:BB:3E:0A
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Certificate issuer:       /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial:       14CF9269C3E4474BB115A8FABDF679DB0CF62DF8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
Manifest number:          0199
Signing time:             Wed 06 Aug 2025 06:29:10 +0000
Manifest this update:     Wed 06 Aug 2025 06:24:10 +0000
Manifest next update:     Thu 07 Aug 2025 09:46:10 +0000
Files and hashes:         1: 3137392e3130372e3132382e302f31392d3332203d3e203238313731.roa (hash: yhjpZ/3yeOya0YdscNdzwhmDLQucI5LPtbVEA2kspkI=)
                          2: 3138392e38342e3137362e302f32302d3332203d3e203238313731.roa (hash: LSjMHoE69qWqnpzVzyyj7h0wlVYndHxXSlQXW5zHZ84=)
                          3: 3137372e38342e36342e302f32312d3332203d3e203238313731.roa (hash: QGs4i+u1Fp781xTRBZuVf9Sbpy4p+Uveo96HgjsMvDA=)
                          4: 323830343a6438343a3a2f33322d313238203d3e203238313731.roa (hash: fFWlkw4VgGZKIM3JMaVwB2wGQVwKvg1CcuwKadWJSlU=)
                          5: F61AA6D04968E2222C81499C46D03813F1070400.crl (hash: /TtZvr2levtUSzJ7BcALombK+Idw6ROmLyKVotBl5Kw=)
                          6: 3138392e38342e3136302e302f32302d3332203d3e203238313731.roa (hash: 9cCHxisrQbcvqgrXYb1FMnOR1opLT5/3gLcwgpJUiMU=)
                          7: 3137372e3133372e3234302e302f32312d3332203d3e203238313731.roa (hash: C2DRBYLwQ2ccRNhVyPuOjzMp87KdmEZ6vL8rvFgjzj0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 09:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:cf:92:69:c3:e4:47:4b:b1:15:a8:fa:bd:f6:79:db:0c:f6:2d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
        Validity
            Not Before: Aug  6 06:24:10 2025 GMT
            Not After : Aug  7 09:46:10 2025 GMT
        Subject: CN=A7C7D9F8937582E54AE9D535190B4F9F3DBB3E0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e8:2a:fb:2b:0d:b0:31:bc:a2:d0:05:bf:7c:
                    24:b4:c5:bf:29:33:08:b5:e4:f2:7e:d2:7e:7e:d9:
                    f1:31:f8:49:56:5a:71:62:96:43:98:d1:70:fc:69:
                    b3:b3:bc:35:da:7c:a4:69:9c:f5:3a:e1:21:82:1d:
                    59:90:9a:4a:cf:7f:e7:11:38:48:4d:66:b8:52:51:
                    f2:d4:b6:fc:93:bb:d7:cc:68:d1:cd:54:0e:fb:3f:
                    60:d3:e7:03:08:a5:34:df:23:ae:17:98:c8:6e:ff:
                    20:15:3b:86:8d:e4:80:7e:19:c2:4d:5e:d5:09:20:
                    49:da:b8:e0:d3:e6:45:c1:75:41:56:6e:6a:79:38:
                    48:34:19:59:bd:04:fd:18:18:db:97:42:08:c3:57:
                    ea:cc:79:11:c9:4b:85:43:7b:af:97:9a:63:82:71:
                    4c:80:fc:0c:99:83:2e:c6:bd:33:f0:80:0e:2e:47:
                    e5:f2:93:99:a5:3f:7a:12:9b:6a:90:4d:fb:0f:bf:
                    16:78:dc:63:f8:60:30:61:27:1b:4f:6e:a7:fe:59:
                    37:3a:74:3c:dd:b9:c8:4c:65:18:97:e6:9c:8b:f7:
                    2a:c1:51:26:07:b5:f5:1b:30:53:2b:7a:ef:12:db:
                    83:ed:66:32:0d:9b:be:be:3d:22:7b:8d:cb:5d:5e:
                    21:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C7:D9:F8:93:75:82:E5:4A:E9:D5:35:19:0B:4F:9F:3D:BB:3E:0A
            X509v3 Authority Key Identifier:
                keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:34:87:94:81:40:47:94:50:3d:e0:5c:29:86:6f:d1:78:1c:
         c9:7a:7a:16:7b:5c:ba:18:c5:36:47:ea:bf:c7:08:20:fb:93:
         63:4f:b5:86:95:e6:dc:42:27:00:7e:a9:a4:fe:59:bc:e4:5e:
         e2:70:1e:09:a0:e2:ea:f4:76:32:5f:ec:aa:53:c6:f0:24:d5:
         45:a4:bc:38:cd:84:25:17:1c:70:71:0f:b5:77:d5:96:fe:bd:
         19:ba:20:7c:55:2f:2e:0b:b4:84:bc:81:67:15:20:41:00:f3:
         53:15:3e:a3:17:41:9a:e8:50:b8:ef:95:0d:87:2d:43:38:8c:
         98:02:64:0b:c9:ea:43:4c:44:61:81:7c:74:9d:09:30:c0:dc:
         ba:10:7c:25:eb:1e:db:40:c3:c7:0b:b5:a8:45:f4:e5:d4:33:
         3c:8c:99:1b:b1:c5:94:46:87:e7:a0:02:4c:38:43:d5:4d:38:
         04:82:42:86:7d:b4:06:26:f1:06:29:5e:55:87:ff:70:0a:0c:
         b7:1f:cc:a5:7e:33:b1:79:3f:28:8f:5f:f1:97:4c:af:0a:39:
         45:61:15:56:0a:76:f0:dc:5b:0d:b3:e7:4f:c6:53:b2:3f:80:
         3e:a6:f7:56:40:2d:ce:6c:90:97:d7:a1:47:77:65:02:90:d6:
         7c:03:8e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:05:08 2025 by rpki-client