Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.mft
File:                     038EA35AF01B781289F24933082A9857B17EAE3A.mft (raw, json)
Hash identifier:          TMahSyjhm1NEKBvFtf/f6QLlJpEaBqO2Y9bKaqyBoPk=
Subject key identifier:   77:C1:CC:9D:25:55:15:A6:9A:59:E0:BF:D3:37:6B:66:59:31:93:1F
Authority key identifier: 03:8E:A3:5A:F0:1B:78:12:89:F2:49:33:08:2A:98:57:B1:7E:AE:3A
Certificate issuer:       /CN=038EA35AF01B781289F24933082A9857B17EAE3A
Certificate serial:       63B47BC26274797754B609997EBCFFE067977C86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.mft
Manifest number:          0202
Signing time:             Tue 04 Nov 2025 19:11:37 +0000
Manifest this update:     Tue 04 Nov 2025 19:06:37 +0000
Manifest next update:     Wed 05 Nov 2025 21:51:37 +0000
Files and hashes:         1: 038EA35AF01B781289F24933082A9857B17EAE3A.crl (hash: j8b4pm0dXugpT3GjSSwbfDLUWQNrIyI44WznvRZ0sL4=)
                          2: 3136302e3233382e3232382e302f32342d3234203d3e20323636353536.roa (hash: HyMp/45+aPJ3xv6BS1BSEtGU5dfBoJttCdk+Y2oSFrY=)
                          3: 3136302e3233382e3232382e302f32332d3233203d3e20323636353536.roa (hash: qqw8XOvUrZXXundy5cwBvwu/7opXf71pnfhglGicMkE=)
                          4: 3136302e3233382e3233302e302f32332d3233203d3e20323636353536.roa (hash: zMnDbfmkPgHskdtlQ1eZNoUoL2BaMaCxCcWPiG/ZVN8=)
                          5: 323830343a336464343a3a2f33322d3332203d3e20323636353536.roa (hash: vMNuiS/QZ09FSOR6rZ+afTgkVIv0+omU9QZkEiLgYZg=)
                          6: 3136302e3233382e3232382e302f32322d3232203d3e20323636353536.roa (hash: ZtLi9pepBluNDAhUNA2nZQ2BvSAboQFvEs5nlsuzdfY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.crl
                          rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 21:51:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b4:7b:c2:62:74:79:77:54:b6:09:99:7e:bc:ff:e0:67:97:7c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=038EA35AF01B781289F24933082A9857B17EAE3A
        Validity
            Not Before: Nov  4 19:06:37 2025 GMT
            Not After : Nov  5 21:51:37 2025 GMT
        Subject: CN=77C1CC9D255515A69A59E0BFD3376B665931931F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:59:bf:29:98:93:f1:ad:38:70:0c:db:46:4d:
                    e9:74:74:9e:e0:ce:02:fb:6a:f7:da:74:91:a2:8a:
                    0e:7f:1e:73:3d:87:b5:ae:a4:ff:08:e1:1b:a6:11:
                    6c:4c:5f:19:5b:65:c5:e1:79:dc:b4:90:ce:20:bb:
                    66:58:1f:79:11:2f:81:06:ce:4e:5a:b2:5e:53:16:
                    a5:3d:19:f1:2d:4a:b5:93:cc:5b:53:44:8c:86:a3:
                    28:20:d1:f7:52:35:dc:66:a1:15:af:4c:93:8a:03:
                    a2:ce:01:c6:0a:57:72:15:3a:26:03:d7:66:24:27:
                    3f:dc:b7:90:66:9e:71:46:84:ea:55:64:85:d4:d6:
                    dd:67:d5:52:80:85:63:bf:8f:0f:32:08:9b:03:5e:
                    54:87:5b:ff:d9:e7:78:69:88:50:95:14:b3:5a:58:
                    20:5c:92:51:25:a1:b0:69:c1:4a:18:48:42:e2:20:
                    b8:97:ca:1b:87:06:1a:0f:88:8e:4f:7c:05:ab:a0:
                    bb:a4:81:a8:43:53:1f:ee:64:10:48:03:ac:25:17:
                    f3:31:c4:6d:60:26:9c:78:4f:e5:93:08:b5:ea:25:
                    0c:34:5e:61:e6:77:d5:14:cc:99:32:d7:f7:d5:01:
                    b5:47:93:02:bb:ff:6d:3a:30:db:be:eb:65:a7:5c:
                    99:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C1:CC:9D:25:55:15:A6:9A:59:E0:BF:D3:37:6B:66:59:31:93:1F
            X509v3 Authority Key Identifier:
                keyid:03:8E:A3:5A:F0:1B:78:12:89:F2:49:33:08:2A:98:57:B1:7E:AE:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:ed:17:e3:fc:94:7d:ee:88:84:6f:d2:fc:ae:7a:b7:86:d6:
         6b:fe:c2:75:90:3f:b9:6a:85:0c:d6:75:09:d4:25:40:bc:bf:
         09:dd:3e:99:62:0b:6a:bd:9b:88:ba:32:21:d2:18:41:1b:f3:
         ae:a8:f1:2a:4b:97:7d:a8:25:e6:f1:a3:5b:75:0e:7f:91:25:
         b9:0c:fe:79:15:86:e1:de:aa:e1:25:e1:27:50:52:46:47:c7:
         63:02:5b:20:c6:04:66:0b:03:97:8c:ba:16:bb:95:df:cf:7d:
         58:cf:9d:80:dd:f1:f4:cc:0f:de:a1:07:8e:16:95:75:e9:28:
         42:c4:75:bc:90:b7:c6:98:48:7d:5c:6c:ec:91:ec:99:21:27:
         79:3c:e6:6b:57:f4:e9:57:f8:f3:a8:63:93:a4:3d:1e:50:a3:
         33:fd:bd:20:55:d9:c8:2d:dd:65:77:ff:c1:53:2c:69:d3:37:
         53:28:11:10:93:36:86:07:c7:18:7d:d4:3c:e8:38:55:0d:39:
         f3:0a:0f:a5:6b:69:88:a5:c1:69:6b:04:e3:28:66:84:e8:bc:
         ab:b9:95:8e:8f:00:59:23:0b:56:d1:7a:6e:8a:30:38:20:95:
         2b:c0:f8:6e:2c:e0:72:dc:61:c5:97:ae:fe:e3:55:ac:89:01:
         5a:e2:c2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:17:09 2025 by rpki-client