Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
File:                     38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft (raw, json)
Hash identifier:          XKXPMFCTFzppeljpC1hal8uaaKVucuaipiVMkm/vIMI=
Subject key identifier:   D0:A3:9B:FA:4F:D6:1F:4D:F4:4A:E9:C4:59:03:CE:4D:39:48:08:D7
Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
Certificate issuer:       /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Certificate serial:       54CE9B293859BCCD4A06F01EDCDD5A9BF738FC1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
Manifest number:          0296
Signing time:             Sun 10 Aug 2025 15:15:11 +0000
Manifest this update:     Sun 10 Aug 2025 15:10:11 +0000
Manifest next update:     Mon 11 Aug 2025 17:52:11 +0000
Files and hashes:         1: 323830343a343031633a3a2f33342d3334203d3e20323635393335.roa (hash: Sahl2RiuVTohechxqH9kEgIw0rbG9MfR6lFxaweqFQI=)
                          2: 3136342e3136332e32302e302f32332d3234203d3e20323635393335.roa (hash: wg2cqsCgcZbAdOFn10mzbSUzdoDtdWxiDjUxBp/NKqA=)
                          3: 323830343a343031633a343030303a3a2f33342d3334203d3e20323635393335.roa (hash: u9fwuwlcVlrLUEDLWvJsUdw6PZpcbu5LujjwqTVS6zs=)
                          4: 38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl (hash: 0iq9p3oyM+fh8z0Uo5hJNASs5/LkOD8RCjKAtwLaQI0=)
                          5: 3136342e3136332e32322e302f32342d3234203d3e20323635393335.roa (hash: 35z3e246Z+fyO5X/GtPsgCr1RalEayMlVcqQWqIJGxc=)
                          6: 323830343a343031633a383030303a3a2f33342d3334203d3e20323635393335.roa (hash: K6hKgjGHS2JMsgie2uti/OK2EXoaH1YdGKcx614Q77c=)
                          7: 323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa (hash: 3triGDE1ZxhPAnqJadqRcQb4fDCJ1Pqb6fzxF7HMxXo=)
                          8: 3136342e3136332e32332e302f32342d3234203d3e20323635393335.roa (hash: xPngmDYkRZ0N4BgFGzfITwtVOSvC5t5MiTn/0VX+8Fs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl
                          rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 17:15:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ce:9b:29:38:59:bc:cd:4a:06:f0:1e:dc:dd:5a:9b:f7:38:fc:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
        Validity
            Not Before: Aug 10 15:10:11 2025 GMT
            Not After : Aug 11 17:52:11 2025 GMT
        Subject: CN=D0A39BFA4FD61F4DF44AE9C45903CE4D394808D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:92:12:64:0d:8e:8e:d7:a5:45:15:b1:a2:84:
                    93:d5:22:46:fd:1c:cb:a8:86:d7:22:14:36:b7:39:
                    22:28:1f:b7:3c:db:4d:db:3d:35:12:24:7c:28:6d:
                    b0:0b:8a:af:d1:3e:a9:dd:62:e9:3b:d4:82:4a:61:
                    d4:2c:f8:7a:fa:e8:2e:9c:af:40:2e:7d:72:62:de:
                    81:67:35:41:6b:07:e5:45:e4:f5:43:4a:5f:79:08:
                    4b:08:3c:d1:f7:d4:19:76:29:72:fe:99:d8:04:08:
                    46:18:bb:f9:04:d4:53:23:5f:d7:1f:f0:87:f6:ef:
                    47:a0:e1:80:1e:bf:e4:75:95:ee:57:83:7d:ad:bf:
                    4c:35:b2:ee:26:3b:8b:12:49:38:82:d7:3c:dd:98:
                    7f:10:78:7d:ac:a8:32:83:16:fd:db:de:67:05:9f:
                    c9:a1:0a:e1:3c:25:a6:00:49:57:16:d0:6d:a8:19:
                    f0:6b:1f:83:bb:1b:ea:9d:c9:f2:0f:ef:1e:91:6d:
                    91:0d:30:2a:3f:cb:b3:32:a7:c7:ee:9f:20:5e:d8:
                    12:ea:56:13:3e:2d:5b:fa:4e:44:8a:d4:bf:24:73:
                    e6:2b:f2:72:b7:86:27:ff:5d:79:44:32:e9:64:8e:
                    56:41:72:e7:46:9a:29:35:04:e4:63:dd:93:62:20:
                    74:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A3:9B:FA:4F:D6:1F:4D:F4:4A:E9:C4:59:03:CE:4D:39:48:08:D7
            X509v3 Authority Key Identifier:
                keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6e:81:5c:03:0e:5d:01:d8:18:49:18:6f:1e:33:b4:6e:55:
         5e:67:bf:10:4e:ba:08:43:cb:ca:18:f7:97:e2:bb:37:cf:2a:
         85:2f:47:d4:01:7b:64:61:a2:fb:43:b9:7f:db:20:c8:10:49:
         fb:f3:b1:ae:3f:ea:46:47:f3:4b:10:53:f4:a2:47:c1:9a:c0:
         02:9a:8e:50:fc:89:9b:60:bd:ee:13:c9:a7:11:b9:13:aa:b6:
         3d:60:1b:56:c4:22:46:47:24:ac:e3:72:d0:17:ac:3e:3a:50:
         84:ca:e8:3d:db:e5:0b:da:01:c4:c0:b7:f1:96:e6:3b:92:43:
         01:9a:71:55:c0:d7:79:89:3b:f3:be:88:b4:78:5a:63:96:2c:
         cf:20:dc:ae:02:33:b2:4e:0e:3d:1b:4f:3d:50:d7:89:90:92:
         cb:f1:82:6b:4f:91:af:87:8e:fe:9c:bf:e5:2f:c2:de:e7:07:
         44:d1:92:89:29:c9:cc:99:bd:09:90:3e:bb:5e:13:42:ab:67:
         96:52:5c:b1:c4:01:03:69:e1:50:55:70:0b:61:e4:7d:93:ce:
         09:91:0d:b3:e7:df:ff:43:10:a6:38:ce:b8:d4:6b:e4:fd:1c:
         c1:9d:d4:80:a0:73:da:b4:f3:7a:e0:2c:03:97:03:b4:7e:74:
         e9:12:52:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:14:59 2025 by rpki-client