Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
File:                     38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft (raw, json)
Hash identifier:          eoRlLRSXIhBXN9qyaC8j6iqkGPDEuWbBs1/JHG37c7k=
Subject key identifier:   D9:A6:65:7D:77:56:10:FB:4F:BD:90:16:55:FF:FA:B7:02:27:2F:FD
Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
Certificate issuer:       /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Certificate serial:       1D44A53A85A38B8BB29480C0FC660AA0B77E68CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
Manifest number:          020F
Signing time:             Fri 02 May 2025 02:33:56 +0000
Manifest this update:     Fri 02 May 2025 02:28:56 +0000
Manifest next update:     Sat 03 May 2025 05:41:56 +0000
Files and hashes:         1: 323830343a343031633a3a2f33342d3334203d3e20323635393335.roa (hash: Sahl2RiuVTohechxqH9kEgIw0rbG9MfR6lFxaweqFQI=)
                          2: 3136342e3136332e32302e302f32332d3233203d3e20323635393335.roa (hash: WDsAdzf1GTfwSCQozo68MxPfWHhH2y3WV9WITs/wY5U=)
                          3: 323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa (hash: 3triGDE1ZxhPAnqJadqRcQb4fDCJ1Pqb6fzxF7HMxXo=)
                          4: 323830343a343031633a343030303a3a2f33342d3334203d3e20323635393335.roa (hash: u9fwuwlcVlrLUEDLWvJsUdw6PZpcbu5LujjwqTVS6zs=)
                          5: 3136342e3136332e32332e302f32342d3234203d3e20323635393335.roa (hash: xPngmDYkRZ0N4BgFGzfITwtVOSvC5t5MiTn/0VX+8Fs=)
                          6: 38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl (hash: TP4NlGLzrGlfKKWIxxXL1bu0VMXKzOJ9Zx3p1jg9KWw=)
                          7: 323830343a343031633a383030303a3a2f33342d3334203d3e20323635393335.roa (hash: K6hKgjGHS2JMsgie2uti/OK2EXoaH1YdGKcx614Q77c=)
                          8: 3136342e3136332e32322e302f32342d3234203d3e20323635393335.roa (hash: 35z3e246Z+fyO5X/GtPsgCr1RalEayMlVcqQWqIJGxc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl
                          rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 05:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:44:a5:3a:85:a3:8b:8b:b2:94:80:c0:fc:66:0a:a0:b7:7e:68:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
        Validity
            Not Before: May  2 02:28:56 2025 GMT
            Not After : May  3 05:41:56 2025 GMT
        Subject: CN=D9A6657D775610FB4FBD901655FFFAB702272FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9d:35:48:a8:d5:b6:a7:bd:5f:0d:b7:55:2c:
                    be:ad:11:6c:1b:d8:10:8c:38:aa:37:05:9b:73:05:
                    45:fd:ea:01:dd:26:6c:f4:66:f3:3c:ae:9f:19:21:
                    49:a8:a1:66:6c:75:62:fc:cd:ad:9d:84:ee:0d:f5:
                    d5:6b:24:b6:00:0f:3f:6a:52:c4:1d:46:cd:9b:fc:
                    50:67:9b:7c:58:ad:0d:c7:62:f0:16:40:0d:4c:23:
                    c6:c6:fc:40:bd:3c:58:fb:86:04:a4:b5:a8:7d:83:
                    5f:69:e1:0e:c4:0c:37:39:93:32:6c:b4:ba:10:c4:
                    61:91:27:ae:c1:fe:f6:56:5c:6b:35:d1:c4:55:94:
                    b3:f2:a0:f9:f9:02:64:78:d2:63:bc:c0:ae:3a:39:
                    81:fe:5b:08:79:46:9a:f6:d8:cf:24:b9:ab:82:c6:
                    5b:48:bb:cf:ba:85:b9:be:14:cc:0c:e8:75:11:82:
                    b6:96:2f:d3:dd:db:89:fe:6d:38:90:60:f2:93:31:
                    1f:72:7c:15:a1:68:6f:f2:75:dc:92:03:69:4c:53:
                    d8:13:3b:ba:db:93:da:cd:06:7a:46:01:8e:05:4f:
                    87:d8:f2:45:e8:9e:ad:18:ac:4e:00:9c:63:c6:fb:
                    40:0b:ae:f5:04:da:00:b9:c5:f3:72:05:d8:7b:90:
                    27:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A6:65:7D:77:56:10:FB:4F:BD:90:16:55:FF:FA:B7:02:27:2F:FD
            X509v3 Authority Key Identifier:
                keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ee:bc:a7:f9:c5:6f:ce:8d:50:0e:07:79:65:68:0a:cd:58:
         ca:1e:37:63:80:42:0e:53:c2:f7:5e:b5:bb:8b:8e:5c:b0:00:
         b7:f1:d8:ea:a7:60:24:84:c0:20:4e:17:68:97:20:63:3b:7d:
         d3:a7:dd:c1:34:a0:ed:0f:a9:30:4a:6a:f5:9e:99:bd:77:2b:
         be:08:91:75:41:e3:26:ec:58:b0:3a:2b:3c:de:98:05:fa:21:
         e2:eb:74:97:41:bf:39:37:f6:ca:f1:44:c5:96:fd:23:04:ce:
         de:48:57:66:cb:e1:b6:3a:c3:10:64:92:43:01:10:4e:41:97:
         61:d2:b8:41:2f:44:53:25:87:49:8b:76:15:15:b0:84:e9:b1:
         75:41:2a:45:08:5c:2c:94:da:eb:7e:96:9a:fa:48:56:df:d8:
         fa:e3:51:81:fd:6b:70:25:77:28:9d:17:30:6b:83:f7:47:88:
         cb:ea:5a:00:9a:db:53:41:f1:b1:7d:e5:76:93:98:b5:e2:9a:
         ab:c3:18:7d:a5:a3:28:bd:02:50:e5:7b:b6:44:e9:89:14:11:
         0a:0b:04:2b:18:62:c1:0b:2c:f4:2f:22:6d:4d:0e:7d:58:7d:
         b1:cf:87:3c:75:d8:07:14:ee:db:af:11:76:8d:ff:5b:bc:f3:
         e9:6a:a8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:51:12 2025 by rpki-client