Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
File:                     3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft (raw, json)
Hash identifier:          v3P20HpZXMlQNCqBIyr+x65QEcCyRQ433lpaReR7lCk=
Subject key identifier:   94:FA:E1:93:D6:99:21:7C:FF:5D:77:09:EA:EF:36:6B:C7:BD:1E:E2
Authority key identifier: 3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E
Certificate issuer:       /CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
Certificate serial:       7407877EF7D69F96364E49CFBBA7C17F1DE2FA5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
Manifest number:          C0
Signing time:             Tue 17 Jun 2025 14:13:06 +0000
Manifest this update:     Tue 17 Jun 2025 14:08:06 +0000
Manifest next update:     Wed 18 Jun 2025 16:52:06 +0000
Files and hashes:         1: 3138392e35302e3232322e302f32342d3234203d3e20323730353531.roa (hash: UsQOMyZHtsc6TaHqA0joIAL0Xfjc2PpvhLLL00pQDVA=)
                          2: 3138392e35302e3232332e302f32342d3234203d3e20323730353531.roa (hash: tg53L27JqwL4FND+rLzsbtuLYRRo/BSqrNhOQnodd2w=)
                          3: 3138392e35302e3232312e302f32342d3234203d3e20323730353531.roa (hash: a5PrF0/f461Ynit6WvECovL5BWmEJeQoBlDUQq7HxQo=)
                          4: 323830343a366462383a3a2f33322d3332203d3e20323730353531.roa (hash: FV+S+TZX84Q03vR1jKTgDhNyXgTv5smpg9WGAeALcHM=)
                          5: 3138392e35302e3232302e302f32322d3232203d3e20323730353531.roa (hash: AX9jQRnpyOWBuTJjKmVSaEOA2ZYYCjSkvfBgQQ9WXbA=)
                          6: 3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl (hash: M34S8ImK8OH7x1oV4VTC+VxVvCp3GFQ/5dF3+/VfUaY=)
                          7: 3138392e35302e3232302e302f32342d3234203d3e20323730353531.roa (hash: XIK3trgOduFvYXpauvrEY/zSl++zplK4JsYkuaGD2gw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl
                          rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 16:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:07:87:7e:f7:d6:9f:96:36:4e:49:cf:bb:a7:c1:7f:1d:e2:fa:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
        Validity
            Not Before: Jun 17 14:08:06 2025 GMT
            Not After : Jun 18 16:52:06 2025 GMT
        Subject: CN=94FAE193D699217CFF5D7709EAEF366BC7BD1EE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:25:51:09:e0:aa:89:d4:69:25:cd:58:48:dc:
                    8d:6a:24:ba:4a:ff:5d:ea:d2:b2:e8:59:ee:bc:3c:
                    5e:ff:b3:37:80:de:86:85:a7:ab:30:41:f0:e1:6b:
                    05:3d:a0:2d:e5:aa:f5:be:0f:31:8e:8d:a0:d2:58:
                    63:64:e1:94:67:d7:cf:5a:ff:8c:a0:20:fe:0a:58:
                    36:4a:b9:8d:2d:a7:01:9f:83:a2:87:cd:01:2d:7b:
                    ab:30:8c:ed:33:1c:22:89:fe:53:85:76:d2:09:6b:
                    7f:da:1a:85:10:9a:c4:71:82:4a:c2:18:93:d7:5c:
                    e9:69:69:3f:a7:1f:39:b7:73:88:c8:bc:39:3d:8b:
                    6e:76:a3:84:8d:d4:f9:3a:c8:eb:74:1a:41:29:e5:
                    85:00:26:80:df:fa:eb:85:7a:85:03:e9:02:59:46:
                    2b:98:21:01:63:4b:51:35:4a:4c:02:66:38:48:25:
                    03:5d:ff:38:33:95:5d:e1:1a:70:13:33:f0:30:85:
                    26:ff:1f:22:1e:56:e1:3d:e1:c2:cb:10:67:e6:ca:
                    56:32:a9:99:5b:48:f4:46:5f:f9:47:2c:07:7a:82:
                    a9:7a:f6:0a:60:58:c1:48:67:7a:e3:8e:b5:f8:48:
                    e3:65:be:f1:10:4d:b1:41:b4:63:2d:65:2f:05:89:
                    05:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FA:E1:93:D6:99:21:7C:FF:5D:77:09:EA:EF:36:6B:C7:BD:1E:E2
            X509v3 Authority Key Identifier:
                keyid:3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a0:82:5d:da:6d:11:c4:64:a6:44:12:12:53:eb:9a:11:33:
         40:a0:99:88:7b:f0:db:53:f5:8f:34:78:e0:03:2f:67:0f:b1:
         88:44:a6:55:e8:6f:d2:56:f9:51:94:0d:64:4f:16:ab:6a:1c:
         0f:ec:3b:fc:30:19:14:d9:9d:d5:d3:b6:5c:3f:70:18:13:85:
         d5:01:03:0b:ab:a1:05:8b:8d:18:46:ba:b5:76:f3:0c:b6:ab:
         c0:3b:d0:1d:69:d4:86:8b:76:e2:71:b1:54:b7:32:40:7f:13:
         31:c0:13:2e:f8:90:94:6f:1d:56:a1:a0:31:c4:7d:39:f9:d5:
         b2:49:93:45:7a:a7:33:2e:16:41:52:62:d4:bc:96:3a:2e:06:
         bf:2e:dc:5f:8f:67:8d:fb:3d:49:e1:2c:89:70:db:75:a4:c8:
         21:fe:73:03:b0:7c:70:bf:b1:78:57:5a:6f:a1:be:5d:eb:05:
         b9:cb:84:63:e1:4e:56:65:1e:62:31:0b:a5:7d:a3:d0:be:a1:
         b7:c3:bd:e9:78:56:bb:70:05:28:97:59:92:50:de:bd:c0:42:
         70:f3:2e:cf:7c:e1:54:a0:e0:67:fb:ec:0a:84:e4:a6:c8:be:
         90:44:3d:92:1d:c7:7f:65:87:1a:c9:7f:cc:0b:a5:5f:89:97:
         8c:d8:82:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 22:16:42 2025 by rpki-client