Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
File:                     3929491D59EC78DBDEC7423B04D06034C1A59303.mft (raw, json)
Hash identifier:          cGQiUf9urvUcPQjw8QnrfHDouk8gZhzzVy4eHHaLh14=
Subject key identifier:   14:99:31:BE:38:34:FC:98:39:45:5B:E9:72:AA:39:0E:19:94:51:28
Authority key identifier: 39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03
Certificate issuer:       /CN=3929491D59EC78DBDEC7423B04D06034C1A59303
Certificate serial:       48593C2E7D6D22E99A21AE01E7FC7554DA797163
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
Manifest number:          025B
Signing time:             Fri 20 Jun 2025 17:42:58 +0000
Manifest this update:     Fri 20 Jun 2025 17:37:58 +0000
Manifest next update:     Sat 21 Jun 2025 20:09:58 +0000
Files and hashes:         1: 3133382e3138362e34362e302f32342d3234203d3e203532373731.roa (hash: oKmqp3pUuskrpDKvIz38YvBojkJr5FQ+ucKs52P5lrQ=)
                          2: 3133382e3138362e34352e302f32342d3234203d3e203532373731.roa (hash: vq6ju4UXi/ICkYUSVNcpDfbmMC+017+BLy+qBVlgIg8=)
                          3: 3137372e3135352e3230382e302f32302d3234203d3e20313938393439.roa (hash: 3bPB6yCtYL3D0wSL2tRb0r4YKRGWocgjFfTQBX/9c4M=)
                          4: 3133382e3138362e34372e302f32342d3234203d3e203532373731.roa (hash: cwWDuYXNgtm8vhLG8Wjk2qqu6f7CrU6fdW2sXrl1onk=)
                          5: 3137372e3135352e3230382e302f32302d3234203d3e203532373731.roa (hash: 5worlU83AAVZHAiq+9hKj0B+5yQI8olkprzeRgIP3pI=)
                          6: 3136382e3232382e39322e302f32322d3234203d3e20313938393439.roa (hash: EeJUcMaOa2Ec+XqzF4iBLmaLjBIM2OBo8yyBIztiFBg=)
                          7: 3136382e3232382e39322e302f32322d3234203d3e203532373731.roa (hash: 4oN8ZtLbU8xuNa0RF+vyGH0ConKe1xPJNJNTpNJOuJ8=)
                          8: 323830343a326661343a3a2f33322d3438203d3e203532373731.roa (hash: yjTkMcDk4CLMzQBlzrsAYIcrdcAzSw6jBr5IYfZdehI=)
                          9: 3929491D59EC78DBDEC7423B04D06034C1A59303.crl (hash: ial+emf1EOFNIX8mYV/82YlipJw34YTh1ydoMRKJO8E=)
                          10: 3133382e3138362e34342e302f32342d3234203d3e203532373731.roa (hash: qx43jtOLbO3D7RWXNsLV1UgFsnXfHErpuojc0SUm4vs=)
                          11: 3133382e3138362e34342e302f32322d3234203d3e20313938393439.roa (hash: Mb3peu3Qx8g9nTFuO/kPbkvjDvfhEWQUVV+DLgfo4oA=)
                          12: 3133382e3138362e34342e302f32322d3234203d3e203532373731.roa (hash: FfS5AdltD+bYy6tMSQEon9HbbkIAv8M2kl+4KD/wENk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl
                          rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 20:09:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:59:3c:2e:7d:6d:22:e9:9a:21:ae:01:e7:fc:75:54:da:79:71:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3929491D59EC78DBDEC7423B04D06034C1A59303
        Validity
            Not Before: Jun 20 17:37:58 2025 GMT
            Not After : Jun 21 20:09:58 2025 GMT
        Subject: CN=149931BE3834FC9839455BE972AA390E19945128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:27:f8:1a:bd:8c:90:e0:d9:6c:9b:f1:a4:01:
                    e7:00:94:68:72:51:18:ce:5f:7f:f7:a8:ea:e5:d5:
                    9e:51:a7:c8:67:09:20:c7:e5:8f:8f:36:63:6a:76:
                    d5:91:fb:53:2a:9c:7e:ee:b4:62:cf:f6:fb:59:9a:
                    85:d9:c3:72:59:13:db:a5:44:ca:cb:28:ee:bf:55:
                    ad:af:89:91:f1:b7:90:08:58:24:ae:c6:7b:ce:f6:
                    ca:22:c9:05:41:13:35:40:cb:d3:d9:c7:b7:8a:30:
                    d5:eb:90:5b:2e:93:c7:e2:18:f6:f3:a3:02:4c:96:
                    f0:de:ae:54:8a:c2:3c:99:b6:3b:2a:78:96:82:2c:
                    6b:28:5c:91:f1:f8:f0:7e:f8:19:c2:23:8d:2c:e3:
                    91:ed:af:8f:94:17:ba:e3:4d:68:90:8d:c2:29:13:
                    83:aa:32:3e:6b:b4:51:83:68:a1:cd:d7:7f:aa:2f:
                    25:30:0b:95:af:f6:8a:22:52:a1:18:2e:94:17:06:
                    28:a0:3c:83:9a:93:04:c5:35:7f:ef:e8:bd:cb:73:
                    66:b5:4c:7f:33:09:99:6a:f4:aa:7e:40:51:a2:f5:
                    c0:04:39:1d:e2:11:1d:d0:f9:c1:21:3f:67:d1:54:
                    ec:dd:4f:bc:e3:64:6c:d8:b1:e3:0f:a5:d1:49:b0:
                    24:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:99:31:BE:38:34:FC:98:39:45:5B:E9:72:AA:39:0E:19:94:51:28
            X509v3 Authority Key Identifier:
                keyid:39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:cd:18:51:0e:ee:44:fe:5d:0c:c9:66:93:d6:fc:99:33:28:
         cd:21:cb:f7:f0:e2:1c:1f:71:ce:76:fa:ac:a5:50:e5:1e:b2:
         3e:6f:cf:e5:cb:30:79:42:4e:d7:71:b0:86:fd:dd:91:b3:15:
         75:71:f3:be:c7:7d:16:2c:eb:f7:ac:03:e6:ac:c6:92:b4:d7:
         da:7c:4f:50:1d:52:05:4e:a5:af:8f:bf:7f:d6:92:e0:cb:4c:
         1b:01:06:02:59:5c:22:8a:e4:8a:fe:6d:03:c2:67:04:e1:87:
         cd:98:ba:ff:39:c8:eb:6a:01:a0:d9:68:71:ab:96:11:a9:17:
         ca:77:69:d7:d7:cb:f9:f1:a9:a9:77:1e:4d:30:e5:ab:e6:74:
         cb:b4:08:35:c0:ca:88:ac:5f:db:a0:2d:86:4b:66:39:99:3b:
         43:7b:96:6b:69:42:be:26:db:03:2f:81:13:7a:e9:4f:ef:4b:
         9b:2d:e8:b4:a1:b3:92:79:7c:df:69:a0:3a:8e:36:44:a9:a0:
         99:c6:23:4d:54:b8:cb:61:f7:50:03:ea:e3:ba:8e:ca:26:67:
         8b:79:13:89:54:13:0c:17:7b:f7:e3:93:c3:62:d0:50:11:2f:
         0c:02:0b:72:9e:94:8e:e7:ef:d3:5a:0b:86:c7:02:b0:ff:94:
         b5:ff:9b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 14:19:12 2025 by rpki-client