Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.mft
File:                     FACBE837964A181010E5EBCBABD77E727EBA0A71.mft (raw, json)
Hash identifier:          ZeZJ99vhNTAhtohp1GU1U8B+PNR0OD7snPJeB75uKVs=
Subject key identifier:   24:EB:F5:AD:76:F1:F9:17:08:8A:F6:84:97:89:35:95:6A:26:3F:D1
Authority key identifier: FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71
Certificate issuer:       /CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
Certificate serial:       6A24E715C0EE095144AFAD3212A5C206EBB188F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.mft
Manifest number:          0286
Signing time:             Mon 03 Nov 2025 06:01:58 +0000
Manifest this update:     Mon 03 Nov 2025 05:56:58 +0000
Manifest next update:     Tue 04 Nov 2025 08:54:58 +0000
Files and hashes:         1: 323830343a3534633a3a2f33322d313238203d3e20323632353037.roa (hash: RzULG4v37J8OPaaEK0hn+c6FE9oIkJBje/CvT/U46H4=)
                          2: 3137372e35352e3136362e302f32342d3332203d3e20323632353037.roa (hash: M2VoFkfceDb9lF1mvZYsirkUDEfhjwUb7YHyhYLm15Y=)
                          3: 3137372e35352e3136342e302f32322d3332203d3e20323632353037.roa (hash: zyW2TFmF5thqVBvcAva2N6vaXgeB8yXA/jrkcr1aRgk=)
                          4: 3137372e35352e3137322e302f32322d3332203d3e20323632353037.roa (hash: KeXqx/opZUPDldxietryrcfPX6N4fK1ltpNye8NEnno=)
                          5: 3137372e35352e3136352e302f32342d3332203d3e20323632353037.roa (hash: Gaptw9+1WyRV5JiqqO7mX0o50cl3ZsKCXJfZ0KZ4DpQ=)
                          6: 3137372e35352e3136382e302f32322d3332203d3e20323632353037.roa (hash: AQFyRHBhcmTJSZvONCP5Qy17VXk+dXWPQ2CSVG+uIls=)
                          7: 3137372e35352e3136342e302f32342d3332203d3e20323632353037.roa (hash: uCFawZWvg0L4CjXCIVB1WT10DUbcgVX5xbtAz+EOJYA=)
                          8: 3137372e35352e3136302e302f32302d3332203d3e20323632353037.roa (hash: el1Hf0jD1R6/66epID7rvHloP9WzYLRTify9aW6lDnc=)
                          9: FACBE837964A181010E5EBCBABD77E727EBA0A71.crl (hash: ejCdOrzB/ozylDCf93sjzJvGMfcpuuKU72QCU33jzaw=)
                          10: 3137372e35352e3136302e302f32322d3332203d3e20323632353037.roa (hash: F1V+K5KXrhM5lK87BFwqjEYBCfe3GassPbj5pW9TqcA=)
                          11: 3137372e35352e3136372e302f32342d3332203d3e20323632353037.roa (hash: NIEGM5AslHIM6T11I0mz2s4e6q9XisYj77N/kVpSE44=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl
                          rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 08:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:24:e7:15:c0:ee:09:51:44:af:ad:32:12:a5:c2:06:eb:b1:88:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
        Validity
            Not Before: Nov  3 05:56:58 2025 GMT
            Not After : Nov  4 08:54:58 2025 GMT
        Subject: CN=24EBF5AD76F1F917088AF684978935956A263FD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e6:0d:3f:46:27:42:65:17:79:6c:1b:1b:d5:
                    8b:c9:1b:ad:c8:49:aa:03:fc:ce:51:38:f5:d8:c0:
                    fe:64:16:eb:4d:f9:3b:7a:c7:7d:17:65:c2:cb:c2:
                    05:c1:1f:f4:06:1a:1b:55:dd:df:53:3d:78:08:a0:
                    6c:91:95:64:15:71:f0:42:5d:11:9d:28:fb:b0:a1:
                    3f:45:a1:dd:6e:2c:b7:5e:04:4c:49:8f:a0:10:6a:
                    a4:b4:c8:f7:d2:61:89:44:4d:44:50:bc:6e:14:83:
                    fe:af:33:f1:ea:5a:e7:a7:6f:87:17:b0:a0:c1:28:
                    a4:b4:2c:56:ca:c7:d7:14:ff:9f:98:1b:c0:04:8d:
                    98:c4:98:58:1d:0d:ca:82:c7:2e:13:bc:c1:8f:b0:
                    65:63:c2:98:53:94:3f:2e:5f:c6:7c:d1:ac:a3:43:
                    5f:4d:cc:6a:11:ee:be:2e:14:c5:01:8b:75:cd:d0:
                    c0:87:ca:0d:2f:7e:99:8a:4f:02:85:b5:4c:bc:27:
                    3a:59:11:cb:e8:9f:c1:60:ff:ba:cb:d9:93:da:35:
                    27:12:c7:72:1e:5d:c0:04:df:71:fb:b5:ad:32:7b:
                    a4:0d:33:cb:5a:7f:df:b8:0a:63:39:c9:48:ce:72:
                    92:88:27:50:a7:33:37:3b:a4:a3:44:87:ec:0d:0f:
                    d8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EB:F5:AD:76:F1:F9:17:08:8A:F6:84:97:89:35:95:6A:26:3F:D1
            X509v3 Authority Key Identifier:
                keyid:FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:29:42:10:63:4a:11:6e:95:bf:06:c5:df:fc:b6:d9:80:8e:
         26:d1:05:03:c4:b2:d9:5c:f0:83:46:7e:be:2f:52:09:b0:0f:
         9d:bc:9a:c1:2f:b0:79:2c:84:6c:a2:84:45:db:bd:b2:96:3a:
         a1:35:b2:a0:cd:8c:f8:62:e0:e9:0e:54:4a:c5:15:d4:b0:43:
         44:94:98:a9:a9:f6:1c:99:3b:ad:5e:a0:67:f1:11:99:15:68:
         3d:58:5e:0c:db:9d:6f:3b:9c:b8:e0:b6:6c:b0:d2:d1:30:c7:
         c7:60:f2:ad:e7:1c:2b:03:66:9c:a3:4a:df:21:ee:56:ae:22:
         56:50:fc:1e:77:4c:fc:ef:ca:f0:b9:da:7b:2a:04:54:6f:f8:
         c5:2d:62:99:14:d3:24:f4:40:97:be:d0:90:27:97:18:b5:be:
         d3:86:62:be:b9:85:f3:ab:2b:b9:37:87:f2:5a:9e:ca:a9:75:
         87:d3:f2:d3:bd:e5:ce:15:90:09:9c:b0:51:3e:80:a3:89:99:
         6a:9b:63:a3:2c:7d:8b:c0:c9:83:d1:fe:76:64:c1:38:10:55:
         5e:05:1b:5f:3e:d5:ee:4f:56:20:79:9d:13:a4:77:98:90:94:
         bb:3b:d4:06:43:5b:eb:04:e9:02:f1:20:7f:79:f6:ab:48:d9:
         16:0c:f7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:12:22 2025 by rpki-client