Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
File:                     3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft (raw, json)
Hash identifier:          i7jwTpqq/HSi2oxzf/2FCkdjroEcXG3BBdpVVlj6sm4=
Subject key identifier:   1B:4B:BE:61:0D:C3:89:D4:EC:9A:F5:9E:83:9B:A3:A1:20:D2:9C:28
Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
Certificate issuer:       /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Certificate serial:       57E3E6F37E81833BC72384DE589EA96032133301
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
Manifest number:          0216
Signing time:             Sat 10 May 2025 11:55:49 +0000
Manifest this update:     Sat 10 May 2025 11:50:49 +0000
Manifest next update:     Sun 11 May 2025 12:08:49 +0000
Files and hashes:         1: 323830343a363031383a383030303a3a2f33332d3333203d3e20323639313435.roa (hash: Orz/ogX6qFnRjGYGiV2xeJsYmVdzFYD63V3ZXxKfl8k=)
                          2: 323830343a363031383a3a2f33332d3333203d3e20323639313435.roa (hash: nPpf0hhGMugZmNdbWERrNoc79wWP0pZTB/sPp3v04wk=)
                          3: 3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl (hash: Wb0ZDAkd2w54ubCMu+vIol4v6P+yMTke+7xwUg+yoC0=)
                          4: 34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa (hash: /bpAsgSUi1LnoTyueVXmEbHEdvQmkmUVeA1xO4MqaNU=)
                          5: 34352e3138302e3138342e302f32322d3232203d3e20323639313435.roa (hash: kbu54ESKW1e5BIRWIv2H+d7R8holRL2gmDinoqBBatI=)
                          6: 34352e3138302e3138342e302f32332d3233203d3e20323639313435.roa (hash: 2RkNWBLR029RFRbh32kFnlXtZFOD9xnYisNTVjldsO0=)
                          7: 323830343a363031383a3a2f33322d3332203d3e20323639313435.roa (hash: pukb5lj9ipcGQlV0LxsDM+V/GjI+AEgmTgzISsvatVU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl
                          rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 12:08:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e3:e6:f3:7e:81:83:3b:c7:23:84:de:58:9e:a9:60:32:13:33:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
        Validity
            Not Before: May 10 11:50:49 2025 GMT
            Not After : May 11 12:08:49 2025 GMT
        Subject: CN=1B4BBE610DC389D4EC9AF59E839BA3A120D29C28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:18:a8:59:c7:77:93:e9:33:d2:37:9f:8e:da:
                    8e:02:3b:9d:32:9b:27:f5:6d:f7:c4:e6:71:8c:95:
                    33:c2:ff:e6:11:d0:19:0d:a2:c2:b1:88:7b:6e:ac:
                    22:8a:3b:d3:50:fb:c9:ce:85:a4:c8:31:54:af:9b:
                    e7:f7:56:d7:f4:10:4e:4f:a7:54:c6:83:5c:ae:ce:
                    a1:cc:87:d3:92:a8:23:6b:e2:d8:e5:54:47:d0:7b:
                    06:47:8d:2a:91:ba:19:8f:62:50:eb:11:1d:89:ba:
                    c1:89:17:21:ef:6e:83:39:c2:4a:60:f1:e1:ec:00:
                    8e:12:1e:9f:5a:b5:be:d6:a4:38:36:7e:8c:d3:e6:
                    b7:80:59:7e:f3:b6:31:d8:f4:87:c4:84:5c:35:d8:
                    4f:7a:39:dd:f5:ee:dc:0c:3b:f1:19:f5:27:fa:e6:
                    76:27:a3:69:49:a9:3c:fd:4c:35:db:ee:db:a3:6d:
                    ef:db:7a:e0:21:69:cd:b0:62:69:32:d8:67:e2:77:
                    07:1b:13:f1:cd:c8:4d:e3:6d:a0:4e:e8:ae:58:e8:
                    4c:ae:c1:65:c5:7f:17:b2:8c:52:42:16:2c:43:cf:
                    46:62:fe:8d:1b:88:80:6e:2d:f7:bb:6d:8f:1f:58:
                    89:6a:ff:89:5f:bc:7a:8a:24:01:4c:63:ac:49:1f:
                    5b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4B:BE:61:0D:C3:89:D4:EC:9A:F5:9E:83:9B:A3:A1:20:D2:9C:28
            X509v3 Authority Key Identifier:
                keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:55:09:42:65:61:91:4a:e5:b1:e3:43:ad:94:8d:a8:b8:30:
         cb:96:43:23:25:eb:e1:c1:91:12:c1:a0:34:1e:8b:ba:f3:ac:
         2f:01:4b:c2:8f:0e:0a:fa:14:f4:b5:9e:c3:f2:18:ba:01:f6:
         80:7b:c2:80:58:e9:0f:60:0e:c8:f9:77:a1:6e:a4:61:f7:ae:
         70:39:35:6b:2c:e9:6a:29:96:e4:7f:72:53:23:bc:85:e7:37:
         75:8c:03:40:93:ea:4b:50:01:83:a3:c7:d6:14:49:91:f9:1a:
         3f:d1:d3:4e:ac:66:db:a0:6e:85:36:4a:5f:eb:3c:38:a2:d2:
         68:00:55:bf:dd:a1:24:82:ee:56:e5:1b:9e:15:c6:1c:2d:8d:
         6e:ab:01:d0:c7:f9:03:76:a2:00:f9:d6:75:e9:3b:c1:f1:da:
         36:c1:ae:9c:2f:b7:84:42:14:4f:58:7c:cb:16:3b:22:57:44:
         bf:0f:fb:68:f9:c9:58:26:bc:3d:b9:bc:5f:bb:0a:86:43:40:
         5a:96:84:49:d8:e4:c5:85:37:d3:5d:65:be:91:4e:b0:3c:a7:
         ff:87:92:af:ff:85:97:72:2e:1e:ff:76:df:d9:13:4a:50:6c:
         17:9e:88:1e:4a:16:e9:37:ae:a9:4e:76:e1:c7:36:39:17:2b:
         ee:04:de:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:56:13 2025 by rpki-client