Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
File:                     38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft (raw, json)
Hash identifier:          Gaf4fhPxTfa2ZanQTVEOLZDnVI+DSjhM861fklbT7j8=
Subject key identifier:   68:D9:C6:18:E8:6C:5C:92:FE:3E:EB:DD:5C:49:ED:C3:14:2E:12:13
Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
Certificate issuer:       /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Certificate serial:       79CDA8AD2F55BB513194EB0328BFA8427DE429A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
Manifest number:          024E
Signing time:             Wed 18 Jun 2025 14:17:20 +0000
Manifest this update:     Wed 18 Jun 2025 14:12:20 +0000
Manifest next update:     Thu 19 Jun 2025 15:16:20 +0000
Files and hashes:         1: 323830343a343031633a383030303a3a2f33342d3334203d3e20323635393335.roa (hash: K6hKgjGHS2JMsgie2uti/OK2EXoaH1YdGKcx614Q77c=)
                          2: 323830343a343031633a343030303a3a2f33342d3334203d3e20323635393335.roa (hash: u9fwuwlcVlrLUEDLWvJsUdw6PZpcbu5LujjwqTVS6zs=)
                          3: 3136342e3136332e32322e302f32342d3234203d3e20323635393335.roa (hash: 35z3e246Z+fyO5X/GtPsgCr1RalEayMlVcqQWqIJGxc=)
                          4: 323830343a343031633a3a2f33342d3334203d3e20323635393335.roa (hash: Sahl2RiuVTohechxqH9kEgIw0rbG9MfR6lFxaweqFQI=)
                          5: 38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl (hash: Uzi5ZIf/IFAvyULI4Xy/b6hVGhBgefp0hyKd+GMGgvk=)
                          6: 323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa (hash: 3triGDE1ZxhPAnqJadqRcQb4fDCJ1Pqb6fzxF7HMxXo=)
                          7: 3136342e3136332e32332e302f32342d3234203d3e20323635393335.roa (hash: xPngmDYkRZ0N4BgFGzfITwtVOSvC5t5MiTn/0VX+8Fs=)
                          8: 3136342e3136332e32302e302f32332d3233203d3e20323635393335.roa (hash: WDsAdzf1GTfwSCQozo68MxPfWHhH2y3WV9WITs/wY5U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl
                          rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 15:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:cd:a8:ad:2f:55:bb:51:31:94:eb:03:28:bf:a8:42:7d:e4:29:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
        Validity
            Not Before: Jun 18 14:12:20 2025 GMT
            Not After : Jun 19 15:16:20 2025 GMT
        Subject: CN=68D9C618E86C5C92FE3EEBDD5C49EDC3142E1213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0c:bc:e3:40:e6:af:18:d3:9d:08:41:13:8c:
                    04:2d:5b:94:5b:67:87:d4:70:aa:3a:83:b6:31:15:
                    c4:a9:71:3f:71:90:d2:7e:4b:b5:83:f3:0b:d4:60:
                    f9:a9:a4:12:b9:76:02:14:5a:c1:7a:aa:9e:74:0c:
                    75:5e:cd:0e:29:35:f5:cf:22:9a:6b:4b:c0:f0:b9:
                    a5:5e:8b:29:27:7e:1f:92:3b:4d:a0:f4:af:e2:0b:
                    4b:96:f2:6d:6a:1d:92:7a:a4:0a:92:aa:68:91:4b:
                    20:35:fe:51:7d:b3:b6:60:dc:40:55:22:9c:09:7e:
                    6f:b6:1a:33:d6:26:9c:57:3e:4e:9b:8f:4c:2d:d6:
                    1f:86:80:bd:27:bb:35:6b:bc:bc:1e:c3:15:86:24:
                    9e:27:fb:86:99:b6:f4:ff:b7:26:7b:9e:8d:3d:16:
                    0b:39:1b:ff:fb:24:f4:2b:2c:56:f1:5c:9e:da:e3:
                    dc:a3:76:a2:ee:cc:bd:5a:39:3d:d0:55:69:cd:ee:
                    14:b6:c5:4b:6b:af:60:40:a9:25:19:3d:e9:c4:6f:
                    b4:76:4d:6d:9b:f0:45:ad:d9:ab:02:07:3c:cd:54:
                    e0:92:a4:8a:97:75:6b:5c:2c:d7:79:ee:48:76:94:
                    93:98:6c:85:54:d8:47:ce:ba:27:29:0b:d1:d4:6b:
                    ab:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D9:C6:18:E8:6C:5C:92:FE:3E:EB:DD:5C:49:ED:C3:14:2E:12:13
            X509v3 Authority Key Identifier:
                keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:2f:9f:92:86:f6:37:a4:fd:80:60:6f:a9:32:59:e5:e9:4a:
         a8:fb:78:4f:cf:f9:08:6f:a0:7c:31:d7:34:de:c0:92:28:79:
         2b:76:c3:26:b6:85:1d:5e:6f:34:c1:18:9d:98:4d:65:eb:7f:
         c7:5f:1f:59:b1:c2:c0:17:f5:31:55:c4:ed:92:8e:c4:01:6b:
         f0:d1:c6:aa:72:78:b9:62:95:a9:74:eb:47:98:d5:97:e3:5a:
         9f:1c:72:17:6a:cb:91:c8:6b:92:f2:bd:4a:d3:0a:be:a6:da:
         b0:4e:e6:0d:29:f5:db:a5:7b:84:af:93:f8:45:b1:c5:13:44:
         29:8c:39:d6:23:ae:09:b9:35:2c:02:ae:93:48:a1:8e:64:3b:
         29:21:d4:e4:44:b1:75:e8:ea:1a:ae:09:1e:93:96:2a:70:e5:
         25:cb:b7:33:3f:92:87:c3:9e:23:cf:96:46:57:07:8b:62:8a:
         be:b9:43:3d:e9:df:5e:36:79:e2:7f:ef:44:fd:7e:f1:d3:5b:
         4e:a9:57:12:b7:c5:04:aa:74:06:2c:32:21:c0:c0:8c:17:9d:
         03:1e:ef:0e:c3:85:f2:ed:01:13:a2:66:d8:db:dc:30:3c:2e:
         3c:4d:1a:30:82:7b:f5:5f:00:6b:55:16:a9:a4:88:fb:2d:f0:
         6f:dc:6f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:11:35 2025 by rpki-client