Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft
File:                     FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft (raw, json)
Hash identifier:          bqL609Wqug/+njIIzkI553Hq5TGFYC4KcF8pEGC4tfg=
Subject key identifier:   CB:28:7E:CE:12:5D:A3:81:EC:BB:0E:64:23:2F:C4:76:43:FE:47:13
Authority key identifier: FA:ED:B0:9B:70:5F:EF:6A:6E:14:D8:F6:8D:6E:E4:4B:C2:F1:28:94
Certificate issuer:       /CN=FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894
Certificate serial:       42428AE89F878808279F93583EFC6C8BAD433A94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft
Manifest number:          0249
Signing time:             Thu 18 Sep 2025 04:44:46 +0000
Manifest this update:     Thu 18 Sep 2025 04:39:46 +0000
Manifest next update:     Fri 19 Sep 2025 07:38:46 +0000
Files and hashes:         1: 323830343a316633633a3a2f33362d3336203d3e203532393130.roa (hash: lfqZkpYjQtoRCrlJD+BBcFVCp7Q4ArEgJm8EQlnhS+8=)
                          2: 3138362e3235312e33382e302f32342d3234203d3e203532393130.roa (hash: LJ3GvetHQ0kN2c975azp4zzCkBxk+LMzyWa6evxQVAw=)
                          3: FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.crl (hash: tXlpYAGYsmst2hkx34uiHLBbOaxntWJ9BI9p+FhjBSE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.crl
                          rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 07:38:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:42:8a:e8:9f:87:88:08:27:9f:93:58:3e:fc:6c:8b:ad:43:3a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894
        Validity
            Not Before: Sep 18 04:39:46 2025 GMT
            Not After : Sep 19 07:38:46 2025 GMT
        Subject: CN=CB287ECE125DA381ECBB0E64232FC47643FE4713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:99:74:74:11:43:fa:af:ef:19:b3:ee:72:20:
                    ac:c3:8a:24:95:8b:99:4e:64:b4:ba:8a:cc:28:85:
                    2b:05:db:4a:17:b5:5b:c1:ba:67:bc:31:9b:01:c4:
                    5a:20:e2:0b:14:b0:59:92:9d:2b:43:b6:ca:e2:14:
                    98:76:d5:07:0d:2c:01:05:86:26:96:f3:2f:8f:cd:
                    79:9c:dd:0f:eb:71:f9:64:e6:96:7c:cd:08:c5:22:
                    da:f5:3d:d1:b4:4d:16:c9:0b:6f:9e:30:0d:5d:a8:
                    cb:c4:25:1e:30:1c:3d:37:fe:a7:15:e7:2a:d7:76:
                    d7:83:6d:8f:d0:93:78:65:1c:10:e6:fc:7c:42:52:
                    49:e6:a7:a9:18:2c:c7:67:f4:cf:68:e9:1f:d5:84:
                    5e:c9:47:b4:95:ae:53:e0:dc:f6:5a:ff:53:5c:fe:
                    65:35:6a:c0:bf:26:18:a2:1b:65:2b:05:d6:f5:60:
                    fb:af:d9:04:2a:7b:79:03:1d:9b:b6:0a:9b:71:64:
                    66:2e:14:91:b0:16:81:fe:5d:f7:5d:50:40:bd:e6:
                    62:4c:fb:4e:e8:c8:4a:f1:15:21:f7:71:1c:56:76:
                    f7:22:8f:9e:47:3b:90:77:5d:a7:53:69:7c:c1:1f:
                    eb:1f:48:4c:fd:f7:65:e0:4e:6a:ff:ae:be:2e:8b:
                    4f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:28:7E:CE:12:5D:A3:81:EC:BB:0E:64:23:2F:C4:76:43:FE:47:13
            X509v3 Authority Key Identifier:
                keyid:FA:ED:B0:9B:70:5F:EF:6A:6E:14:D8:F6:8D:6E:E4:4B:C2:F1:28:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:76:2b:23:a7:7f:35:1b:e7:99:29:b2:77:48:92:b6:26:e7:
         8a:6a:1e:0a:b4:3d:67:8d:88:8a:29:80:26:21:ef:d7:54:9a:
         60:fe:8b:7a:df:15:5c:49:9e:50:25:62:de:79:21:07:7f:a0:
         7d:b6:1b:6f:ec:84:01:75:dd:58:62:85:7f:17:59:d1:d1:4a:
         bd:6f:ae:b7:27:9f:61:4b:1a:65:32:07:d8:a4:62:4c:df:f7:
         a5:0c:49:09:4e:03:0c:1e:0b:d2:7c:9d:f4:35:cd:33:d3:8d:
         33:82:6c:83:cd:13:1d:d4:c9:87:5a:20:61:8f:ca:03:1a:a2:
         19:24:5d:b4:99:ba:6b:52:69:c2:39:f0:65:84:0b:9c:8c:b3:
         ae:54:c9:96:79:67:e4:6f:64:21:76:bd:91:81:3c:00:f9:6e:
         8d:44:65:37:b3:86:6e:3b:1a:75:20:78:8a:b0:36:d5:e8:04:
         b4:5a:74:fb:94:7f:ab:68:74:92:2e:8e:2d:76:85:c4:8d:59:
         f8:0d:68:d8:f3:74:00:20:10:ec:d4:fa:41:3c:f7:b7:e6:17:
         c5:0d:ab:01:9a:8e:66:58:03:6d:e7:40:70:be:97:5d:89:a0:
         5e:c6:93:94:f6:10:d9:0d:83:b4:aa:4c:cd:86:65:27:3f:3e:
         98:5f:5b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:24:10 2025 by rpki-client