Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft
File:                     3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft (raw, json)
Hash identifier:          CNO92GK2aYzQjGNQm/JAU/6686O9ihmM9i7cpd0dTxQ=
Subject key identifier:   19:68:A2:92:FC:42:82:63:FD:9D:1C:89:37:4D:E2:55:C7:80:69:48
Authority key identifier: 3A:3B:9A:F6:03:B3:E2:66:EC:51:78:C1:58:92:CB:B3:7D:8C:CD:41
Certificate issuer:       /CN=3A3B9AF603B3E266EC5178C15892CBB37D8CCD41
Certificate serial:       4E3347F267507387C2D04DF3B7D131CDF924CA7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft
Manifest number:          28
Signing time:             Thu 01 May 2025 04:05:39 +0000
Manifest this update:     Thu 01 May 2025 04:00:39 +0000
Manifest next update:     Fri 02 May 2025 04:52:39 +0000
Files and hashes:         1: 3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl (hash: 0UANVWt8E/BBzR9xWwQP4egK2H9FH4jH/U69WHZlKp4=)
                          2: 323830343a383136633a3a2f33322d3333203d3e20323732343533.roa (hash: km/ah8tdGnSbAEE8eMAVgMkElj1zG/cbsgnk+5b2q5E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl
                          rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 04:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:33:47:f2:67:50:73:87:c2:d0:4d:f3:b7:d1:31:cd:f9:24:ca:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A3B9AF603B3E266EC5178C15892CBB37D8CCD41
        Validity
            Not Before: May  1 04:00:39 2025 GMT
            Not After : May  2 04:52:39 2025 GMT
        Subject: CN=1968A292FC428263FD9D1C89374DE255C7806948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:17:2e:4b:b7:99:c3:c4:1f:1b:98:bc:ff:b5:
                    96:ed:f1:b3:f3:d6:db:a2:19:52:86:b2:d7:56:41:
                    5f:bd:d4:5f:32:e9:3d:9e:95:49:03:d4:2c:e0:d8:
                    7b:85:50:a9:23:7a:6f:20:fd:82:6d:7c:1f:3c:3e:
                    bf:24:81:c1:f9:bf:30:30:f1:43:32:8f:dd:4c:f3:
                    aa:63:c0:f1:80:b1:ee:5f:09:7c:f8:68:8c:9b:eb:
                    67:28:fb:42:be:ab:fd:3c:16:5d:7d:ca:1f:bb:12:
                    ca:19:fd:e3:73:fb:14:8f:4d:87:d2:ea:04:ff:2b:
                    a2:27:14:78:95:a2:a0:76:d0:f4:12:fd:d2:c8:a4:
                    a2:3e:30:06:e5:d4:cd:30:b7:71:74:81:1c:33:52:
                    ea:ff:49:22:32:0d:a1:e8:cb:13:7f:fe:d9:63:3c:
                    db:c6:40:29:08:6e:a1:fd:4c:d6:52:11:6d:65:d0:
                    34:ef:36:e4:7f:5c:59:31:46:7e:69:5c:2d:a6:f0:
                    0a:70:e6:3a:aa:43:ea:35:60:24:d2:36:a8:00:b3:
                    cb:f8:f7:80:7e:46:03:47:28:42:06:84:7b:7f:23:
                    4f:03:19:5d:99:98:5e:df:5a:51:71:b5:08:99:28:
                    ec:55:3b:46:59:f4:a2:51:ce:26:e3:d2:2e:ab:d4:
                    5d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:68:A2:92:FC:42:82:63:FD:9D:1C:89:37:4D:E2:55:C7:80:69:48
            X509v3 Authority Key Identifier:
                keyid:3A:3B:9A:F6:03:B3:E2:66:EC:51:78:C1:58:92:CB:B3:7D:8C:CD:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:c6:93:94:d3:58:36:b6:60:d4:45:9c:d8:18:83:34:9d:bf:
         a5:69:d9:81:89:bc:e8:5f:81:33:56:99:81:e8:8d:53:f3:54:
         59:5d:7a:41:72:d1:5f:7a:95:0b:ac:be:29:ea:77:64:3d:c0:
         94:eb:14:24:3c:11:84:60:00:e0:c5:ac:47:a4:e8:f4:fd:c5:
         78:a5:9a:68:d4:f4:bb:24:f3:e6:8d:4a:97:51:85:c3:9c:f8:
         f9:77:7a:58:8f:95:1e:06:ad:5a:70:dc:19:37:44:ff:13:4b:
         7e:a0:56:7e:b7:84:f2:61:cf:e5:fb:2a:4d:b0:ac:e9:ca:d8:
         7b:9b:1c:23:13:17:4f:01:4d:27:3a:ba:c0:1a:8f:d7:71:7f:
         f9:f0:b1:a0:95:d8:7a:42:46:24:8a:86:5c:d8:eb:15:4c:14:
         61:db:f9:36:23:f1:e7:92:83:61:6b:76:62:2b:48:a9:f6:7d:
         95:f8:31:d5:25:02:55:ee:15:d6:fd:54:af:82:56:a1:df:e9:
         6e:e0:45:89:e4:11:a7:cc:82:c6:7b:0f:81:b4:d0:fa:b5:8d:
         f8:49:4c:87:93:59:17:76:47:14:c1:f5:57:8d:35:71:0a:7d:
         52:4a:c4:21:82:2c:73:b9:d6:57:36:58:22:ee:db:06:df:51:
         a0:5a:eb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:20:17 2025 by rpki-client