Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.mft
File:                     F1C6B7C46075B4144C904B5F483EC1FC29F974FE.mft (raw, json)
Hash identifier:          K/SUowAyt33wD8p3xLG3JwyU2qXpNHm0lIS7bOXK4bQ=
Subject key identifier:   FE:D0:69:4A:46:61:04:39:94:B6:60:5D:48:81:B2:EA:62:F8:51:E8
Authority key identifier: F1:C6:B7:C4:60:75:B4:14:4C:90:4B:5F:48:3E:C1:FC:29:F9:74:FE
Certificate issuer:       /CN=F1C6B7C46075B4144C904B5F483EC1FC29F974FE
Certificate serial:       1D9C9E5A5F3BAF16BAF48A7FC69A5A25E4348A22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.mft
Manifest number:          0303
Signing time:             Mon 03 Nov 2025 00:04:14 +0000
Manifest this update:     Sun 02 Nov 2025 23:59:14 +0000
Manifest next update:     Tue 04 Nov 2025 02:17:14 +0000
Files and hashes:         1: 3137392e36332e3131362e302f32322d3235203d3e20323731353434.roa (hash: vJaNhbo7zOs7sNLt6oJ2O6JQBDN+Zx3zq+rgNYIkprA=)
                          2: F1C6B7C46075B4144C904B5F483EC1FC29F974FE.crl (hash: cC0GFiURubZ24om3uDVobpdsetHlFvRUU/ITR2VWERY=)
                          3: 323830343a376432633a3a2f33322d3336203d3e20323731353434.roa (hash: acdepI2FwTX8GuL59yNY0nqJ9IlGTdlOU2pElEzirOY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.crl
                          rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 02:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9c:9e:5a:5f:3b:af:16:ba:f4:8a:7f:c6:9a:5a:25:e4:34:8a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C6B7C46075B4144C904B5F483EC1FC29F974FE
        Validity
            Not Before: Nov  2 23:59:14 2025 GMT
            Not After : Nov  4 02:17:14 2025 GMT
        Subject: CN=FED0694A4661043994B6605D4881B2EA62F851E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0c:e8:b5:2d:97:cf:0c:ef:53:cd:74:5b:e4:
                    82:af:13:23:5a:b2:b1:c6:99:39:b6:e5:d0:fa:8a:
                    09:e0:80:91:11:50:d7:1d:44:4d:ec:2b:bf:88:10:
                    a4:e2:d5:3d:4d:94:f3:10:c9:21:ea:52:81:74:28:
                    f4:e3:0c:b3:b0:ad:b2:32:5d:ca:d1:82:aa:26:17:
                    c8:f3:b2:11:2c:e1:f7:19:86:b0:07:01:3d:a7:d8:
                    75:27:d5:7a:1b:7a:d7:09:f0:99:87:1b:bf:9f:50:
                    d2:27:3c:a3:c8:13:bc:c2:e5:53:ea:3c:9c:d7:66:
                    c2:c9:bf:39:8f:e2:64:5c:5b:eb:4c:45:7a:f6:97:
                    24:a4:97:a7:9d:72:0d:07:9a:28:26:65:02:45:33:
                    67:d2:03:7a:85:8f:16:52:0b:d1:75:d2:74:f5:0b:
                    33:5d:20:3a:5a:22:ce:c2:dd:87:83:c5:f6:f2:9f:
                    9b:11:c4:49:b8:2a:48:f8:0d:10:d8:37:01:c6:ce:
                    61:9d:f5:cb:47:ae:65:78:2b:34:a4:46:64:46:1f:
                    c4:fa:fb:c5:2d:f1:28:cd:18:05:53:ad:eb:f3:9d:
                    a7:9f:45:11:ac:67:86:3f:c9:33:cc:1f:93:4a:46:
                    7f:a4:e9:10:da:1f:2c:66:b2:ad:ab:50:b4:bf:49:
                    33:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D0:69:4A:46:61:04:39:94:B6:60:5D:48:81:B2:EA:62:F8:51:E8
            X509v3 Authority Key Identifier:
                keyid:F1:C6:B7:C4:60:75:B4:14:4C:90:4B:5F:48:3E:C1:FC:29:F9:74:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:86:d3:5c:1a:3d:96:eb:07:47:75:68:e4:b0:8b:a1:72:4a:
         2f:5d:74:ae:72:71:1d:a7:0f:58:fd:12:91:8a:4d:a6:60:7c:
         9b:99:d4:33:d4:48:33:49:55:19:77:16:53:bb:ba:7f:15:03:
         3d:c2:49:9a:82:a6:36:8c:b9:b8:4a:31:84:6b:85:49:bb:22:
         02:99:cd:5f:bf:48:39:c7:1f:78:da:de:5c:9c:10:5a:39:89:
         a1:07:02:20:84:a6:a3:c6:37:24:8b:d2:2d:52:22:38:f6:48:
         fd:29:c6:63:a1:db:15:cf:be:ae:57:cb:a8:ef:bf:60:24:39:
         5b:7e:8d:7f:d3:81:78:ce:f0:ad:2c:55:26:a5:15:f7:fd:1a:
         2c:47:d6:95:09:f4:7b:b2:4d:72:39:d2:a0:d8:52:96:20:7d:
         f2:f9:d1:01:f2:8b:20:24:a2:ae:7f:68:55:ce:86:b0:22:c5:
         76:9e:47:85:90:9b:b9:bf:12:e0:fa:b5:ae:1b:7b:1d:be:42:
         b7:62:ec:86:8c:eb:d4:64:03:be:3b:c6:24:33:80:f6:40:57:
         48:41:36:a8:ae:77:39:69:53:f2:76:10:14:b5:c2:45:52:54:
         74:5a:f3:b2:02:bb:82:96:00:0d:e2:4d:47:eb:fc:c5:41:3d:
         f8:99:5a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:27:56 2025 by rpki-client