Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
File:                     3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft (raw, json)
Hash identifier:          HHy/RQUomt1N9In5PfNeelzb0SPxggxnrGXfncKypPc=
Subject key identifier:   C1:16:E1:0A:12:83:E9:99:30:51:79:AF:24:E2:3B:DE:E1:BD:7D:44
Authority key identifier: 3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E
Certificate issuer:       /CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
Certificate serial:       61F98152E623DCD2EE15F4379285A00F30792B68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
Manifest number:          0105
Signing time:             Fri 08 Aug 2025 15:21:04 +0000
Manifest this update:     Fri 08 Aug 2025 15:16:04 +0000
Manifest next update:     Sat 09 Aug 2025 18:22:04 +0000
Files and hashes:         1: 323830343a366462383a3a2f33322d3332203d3e20323730353531.roa (hash: FV+S+TZX84Q03vR1jKTgDhNyXgTv5smpg9WGAeALcHM=)
                          2: 3138392e35302e3232332e302f32342d3234203d3e20323730353531.roa (hash: tg53L27JqwL4FND+rLzsbtuLYRRo/BSqrNhOQnodd2w=)
                          3: 3138392e35302e3232302e302f32322d3232203d3e20323730353531.roa (hash: AX9jQRnpyOWBuTJjKmVSaEOA2ZYYCjSkvfBgQQ9WXbA=)
                          4: 3138392e35302e3232302e302f32342d3234203d3e20323730353531.roa (hash: XIK3trgOduFvYXpauvrEY/zSl++zplK4JsYkuaGD2gw=)
                          5: 3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl (hash: UW9D15Knk8+rVsr1wob3nEkX70Fi7k2UTymF7in/rkY=)
                          6: 3138392e35302e3232312e302f32342d3234203d3e20323730353531.roa (hash: a5PrF0/f461Ynit6WvECovL5BWmEJeQoBlDUQq7HxQo=)
                          7: 3138392e35302e3232322e302f32342d3234203d3e20323730353531.roa (hash: UsQOMyZHtsc6TaHqA0joIAL0Xfjc2PpvhLLL00pQDVA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl
                          rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 18:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f9:81:52:e6:23:dc:d2:ee:15:f4:37:92:85:a0:0f:30:79:2b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
        Validity
            Not Before: Aug  8 15:16:04 2025 GMT
            Not After : Aug  9 18:22:04 2025 GMT
        Subject: CN=C116E10A1283E999305179AF24E23BDEE1BD7D44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:68:8b:ff:dc:54:bc:8c:9b:46:ab:f7:5e:19:
                    72:15:84:38:0f:97:8b:12:11:d7:10:a5:19:e9:12:
                    f8:ba:f7:e0:57:9f:4c:1e:de:80:fa:ad:f0:a9:1b:
                    b4:c4:66:e1:48:ba:c6:29:a5:bd:b8:38:56:31:a5:
                    2f:a1:ab:9e:aa:de:da:a4:d7:ba:d8:f3:3c:99:30:
                    37:94:aa:f8:80:ba:6b:43:49:e2:7b:10:d1:91:54:
                    b4:34:18:0b:e5:5c:96:76:e6:a1:31:b0:49:9d:6e:
                    f0:f4:bb:79:93:7f:29:25:16:f3:89:97:fc:40:a1:
                    52:a7:75:42:ca:d3:e3:3b:18:89:f7:a7:25:69:fe:
                    ea:d4:9c:de:4b:a0:7b:f4:f3:4a:8b:3d:63:41:6d:
                    fc:63:94:75:44:62:86:59:26:fc:77:6e:0c:ed:18:
                    81:b2:a1:8f:d4:48:91:20:31:a6:68:58:bb:35:fb:
                    73:a1:a1:b0:e4:7d:2b:c1:29:e0:4e:18:29:73:3e:
                    33:7e:7b:9f:a1:5d:b6:f7:f8:48:2e:06:c8:0e:7f:
                    40:10:66:15:90:85:39:bb:14:85:f9:b3:b6:45:88:
                    8e:66:2a:20:b5:1e:79:f5:f1:6b:81:28:d1:fd:f9:
                    ca:64:01:8e:58:cc:40:5e:bd:dc:95:02:37:7f:96:
                    df:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:16:E1:0A:12:83:E9:99:30:51:79:AF:24:E2:3B:DE:E1:BD:7D:44
            X509v3 Authority Key Identifier:
                keyid:3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:bc:84:b3:9b:ed:20:e9:f1:08:a3:14:14:ff:85:6e:fb:1f:
         1e:8c:38:54:40:0e:4e:07:89:10:1e:c1:ee:b3:0a:99:6d:42:
         3b:bd:20:48:39:b2:b9:aa:b1:d1:c3:67:dd:23:9b:c3:4f:a9:
         79:4a:d1:aa:4b:83:06:5e:56:1a:34:3a:1f:54:3a:52:f9:af:
         fb:d6:50:5e:c7:2a:f3:00:34:ef:04:90:e6:99:ac:1c:83:d0:
         7e:1a:95:80:3d:28:96:5f:bd:3d:b1:08:72:6d:38:3e:e2:aa:
         bb:ee:80:0a:0a:4e:4d:de:35:08:b2:bf:fa:ac:7c:93:e0:d2:
         ae:3f:47:f1:44:1a:d5:29:59:9b:96:45:3d:29:00:2c:3f:b5:
         fd:2d:b0:1e:c9:ee:e1:53:ad:4e:05:9a:f1:e7:98:04:27:c7:
         2a:bb:a5:f5:0e:1f:62:61:87:5a:b4:1a:84:e9:2b:b6:77:37:
         92:88:a4:a3:3c:ce:e8:12:3c:21:6f:6c:5c:8c:bc:3d:cd:71:
         20:39:e2:47:9a:53:7d:55:4b:c4:a2:f3:8f:d8:73:93:ae:a4:
         79:67:07:f1:89:62:28:ac:9b:1e:66:c3:5c:1f:8a:b3:b0:ac:
         14:85:27:01:a4:6c:29:33:13:f4:8b:a6:35:76:9e:a6:c4:79:
         e3:d1:b8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:38:04 2025 by rpki-client