Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
File:                     3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft (raw, json)
Hash identifier:          ojRvn59xrhxG5wL4ZmTc5PTQq/LItj8+bEapWR21k+0=
Subject key identifier:   C4:D8:18:19:9B:FD:59:18:FF:0B:49:5A:06:6A:4E:1E:F4:26:43:26
Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
Certificate issuer:       /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Certificate serial:       73C2B5E3E514E62B27FB40D1BBDDF988D839017E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
Manifest number:          0289
Signing time:             Tue 05 Aug 2025 09:47:06 +0000
Manifest this update:     Tue 05 Aug 2025 09:42:06 +0000
Manifest next update:     Wed 06 Aug 2025 13:02:06 +0000
Files and hashes:         1: 323830343a363031383a3a2f33322d3332203d3e20323639313435.roa (hash: pukb5lj9ipcGQlV0LxsDM+V/GjI+AEgmTgzISsvatVU=)
                          2: 34352e3138302e3138342e302f32322d3232203d3e20323639313435.roa (hash: kbu54ESKW1e5BIRWIv2H+d7R8holRL2gmDinoqBBatI=)
                          3: 34352e3138302e3138342e302f32332d3233203d3e20323639313435.roa (hash: 2RkNWBLR029RFRbh32kFnlXtZFOD9xnYisNTVjldsO0=)
                          4: 323830343a363031383a383030303a3a2f33332d3333203d3e20323639313435.roa (hash: Orz/ogX6qFnRjGYGiV2xeJsYmVdzFYD63V3ZXxKfl8k=)
                          5: 323830343a363031383a3a2f33332d3333203d3e20323639313435.roa (hash: nPpf0hhGMugZmNdbWERrNoc79wWP0pZTB/sPp3v04wk=)
                          6: 3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl (hash: aIZAb0qkNmB86T59myKn4SvFyp2VKLYbmLq2tG81gos=)
                          7: 34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa (hash: /bpAsgSUi1LnoTyueVXmEbHEdvQmkmUVeA1xO4MqaNU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl
                          rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 13:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c2:b5:e3:e5:14:e6:2b:27:fb:40:d1:bb:dd:f9:88:d8:39:01:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
        Validity
            Not Before: Aug  5 09:42:06 2025 GMT
            Not After : Aug  6 13:02:06 2025 GMT
        Subject: CN=C4D818199BFD5918FF0B495A066A4E1EF4264326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:29:18:d9:5a:ae:d7:45:f8:96:c2:08:e5:18:
                    ae:04:9f:6a:0d:c8:5d:84:31:ce:d1:35:e6:0c:4d:
                    f3:b7:af:84:b8:84:a4:19:50:85:f7:cc:05:1f:77:
                    e5:04:e6:25:2d:0f:4b:b7:be:23:a1:a1:84:87:23:
                    f4:93:99:50:f7:e0:bd:c8:5c:7a:4d:6c:d0:3a:2b:
                    c0:ab:c3:93:6e:30:62:24:c9:5f:50:40:ef:84:eb:
                    a2:5a:9c:77:de:92:ae:ab:30:db:e1:36:55:15:d9:
                    58:2d:bc:9c:2f:7d:dc:ed:15:52:d5:d4:60:7b:68:
                    73:a2:f0:bf:a8:bb:a7:fd:b3:e1:7e:92:5d:d4:53:
                    59:48:ac:65:03:0a:eb:0b:d1:55:c9:7c:7b:64:1d:
                    b5:d0:94:39:78:ec:9b:1c:3b:3f:c5:e2:53:ae:05:
                    c4:6e:1e:21:22:2c:f6:df:14:9f:25:fa:b6:b8:39:
                    cf:b8:a6:d2:41:b3:d5:22:11:50:1e:08:e5:f3:5c:
                    41:99:be:ea:fd:09:95:f4:20:7f:0e:22:84:77:3f:
                    04:cb:5f:49:53:24:a2:de:bb:0b:06:04:33:c9:02:
                    26:17:08:5b:0e:75:c3:d1:a8:78:38:dc:e4:14:1b:
                    51:34:3d:bc:99:da:71:73:d5:c3:8f:5e:aa:98:1a:
                    68:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D8:18:19:9B:FD:59:18:FF:0B:49:5A:06:6A:4E:1E:F4:26:43:26
            X509v3 Authority Key Identifier:
                keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:fc:45:b0:1a:1b:f3:da:be:5b:b9:9d:98:b1:3f:78:09:d6:
         6f:97:d2:04:0b:c3:12:17:63:ee:6f:91:a5:02:08:fe:79:36:
         be:30:49:d4:3d:fb:c1:9e:77:97:b4:77:79:98:a7:04:3a:10:
         45:2c:65:07:0c:3e:d9:e5:2f:2e:0a:b4:68:ec:f2:10:b7:9b:
         cc:6f:d7:fd:c2:9a:74:1d:f7:5a:a5:60:0f:0c:07:da:4c:2e:
         21:a5:fc:d2:01:f3:f5:73:c9:5a:94:86:f0:ff:77:59:84:80:
         75:93:22:48:5d:95:52:56:19:25:8d:84:4b:b5:0b:fd:47:ef:
         e6:3c:47:3a:d4:42:d3:66:d0:67:9e:50:12:60:ad:c8:74:86:
         6a:6a:a2:ff:b2:ba:2d:36:21:33:12:ba:aa:7c:db:55:98:e4:
         a2:6e:ae:c2:6d:ed:69:55:eb:ff:e4:b7:88:2e:9c:85:0c:2f:
         b5:1b:81:2f:a5:63:2f:80:ee:01:a9:03:8e:76:1f:4f:e4:51:
         24:08:2a:23:81:a4:42:c3:2c:7e:15:23:23:94:8f:24:46:bf:
         f5:2b:09:e1:6d:b2:73:62:41:07:59:d6:6f:a0:d7:85:4e:6c:
         6c:f6:9b:3b:ac:b0:4d:1a:42:60:83:63:b3:17:97:a9:3d:c4:
         7e:43:d9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:01:47 2025 by rpki-client