Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
File:                     3D4867F11A1D652682FA95ED911B20D81139853D.mft (raw, json)
Hash identifier:          UwK8wupoQFIfiYg8sCIf2W9uH8L31UdUzAgJBacrl0o=
Subject key identifier:   86:D1:2F:FB:B1:47:9B:DC:C5:3F:47:F0:FD:FA:0E:94:3C:65:77:E9
Authority key identifier: 3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
Certificate issuer:       /CN=3D4867F11A1D652682FA95ED911B20D81139853D
Certificate serial:       7223BD0D932FC796025D754DBB3B00B4F8ABFA71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
Manifest number:          01D2
Signing time:             Sun 10 Aug 2025 10:05:33 +0000
Manifest this update:     Sun 10 Aug 2025 10:00:33 +0000
Manifest next update:     Mon 11 Aug 2025 12:09:33 +0000
Files and hashes:         1: 3D4867F11A1D652682FA95ED911B20D81139853D.crl (hash: NRzRRcsOopWBfU7+QPpSmz2YfkNOwsiu4eHegtPA+HU=)
                          2: 34352e3138322e35332e302f32342d3234203d3e20323639323835.roa (hash: 095KOiCgelfFAJaEWZp4FBq2DB3dXDZ9yQVjrdfn984=)
                          3: 34352e3138322e35322e302f32332d3233203d3e20323639323835.roa (hash: ZxtUGA5deC/zbWluiWJ77qtyRWRAt7GQgEShJ9N2Y9Y=)
                          4: 34352e3138322e35352e302f32342d3234203d3e20323639323835.roa (hash: WIZeG9VXENqyRBdnsn2Zw89aWs+DTTdhSsrCc+RAnv4=)
                          5: 323830343a363233633a3a2f33322d313238203d3e20323639323835.roa (hash: 14FHE6zmhSnBphK8r9h/sTCvAXLmSQ2AOYVJqOdtMCU=)
                          6: 34352e3138322e35322e302f32342d3234203d3e20323639323835.roa (hash: s7QXeX2vq8O5spZaWQpOWd0FB4fwiDOt/mIE//O0u84=)
                          7: 34352e3138322e35342e302f32342d3234203d3e20323639323835.roa (hash: gSG2IH0mhehp6KRqkDAwBhoDX02TBWqyKucR8jhGqhM=)
                          8: 34352e3138322e35322e302f32322d3232203d3e20323639323835.roa (hash: baYSgeyu1Fh792QHXa/jVzjbIEks13VYEFPNKOFhRUw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl
                          rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 12:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:23:bd:0d:93:2f:c7:96:02:5d:75:4d:bb:3b:00:b4:f8:ab:fa:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4867F11A1D652682FA95ED911B20D81139853D
        Validity
            Not Before: Aug 10 10:00:33 2025 GMT
            Not After : Aug 11 12:09:33 2025 GMT
        Subject: CN=86D12FFBB1479BDCC53F47F0FDFA0E943C6577E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:f6:a6:99:10:c6:eb:51:41:0e:0a:e5:6d:
                    c7:06:4f:28:bd:98:28:34:9f:dc:b8:41:a0:be:c6:
                    eb:a2:ab:4c:86:96:90:0b:a0:1a:b7:af:32:41:41:
                    3c:d4:b1:c3:cf:12:fd:72:5c:c8:27:18:d1:be:71:
                    bd:3d:81:64:c9:a7:00:ba:2e:fc:dd:48:d6:e0:af:
                    8f:92:b2:13:73:58:cc:6d:6b:43:a8:09:10:66:de:
                    2d:70:df:59:51:d7:c8:87:20:68:32:36:ba:0e:23:
                    78:54:e7:b3:bf:73:db:63:95:cd:16:dd:f4:41:ec:
                    53:16:52:83:2c:fb:a1:fb:e9:26:53:7f:eb:32:5b:
                    01:6a:b4:e9:7c:cb:f6:a8:40:c2:73:ce:61:50:69:
                    ed:8e:6f:76:42:71:77:51:f2:29:6c:54:fe:aa:c1:
                    a7:fb:64:ce:4b:dc:70:6b:c3:0f:33:98:62:b7:4a:
                    b3:42:31:c6:93:2a:bd:21:53:e1:9d:70:84:12:16:
                    33:b5:8a:71:3d:e2:d4:c9:17:35:7b:1e:d3:59:52:
                    e2:f6:57:04:ad:15:ed:de:e1:02:35:bc:20:a1:de:
                    34:c4:8d:eb:8f:27:cd:f3:05:6e:f3:a9:ec:c3:1d:
                    a7:7d:21:13:20:70:49:fd:58:71:1f:fd:5c:e9:25:
                    5b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D1:2F:FB:B1:47:9B:DC:C5:3F:47:F0:FD:FA:0E:94:3C:65:77:E9
            X509v3 Authority Key Identifier:
                keyid:3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:6c:a4:8b:4a:21:73:fd:88:22:79:4c:78:c3:9c:ef:6a:51:
         54:db:14:c9:cb:5f:f3:e6:14:cb:60:ee:44:b9:71:4c:d1:cb:
         2f:f5:ca:79:2f:89:a1:02:07:8f:e0:df:75:34:40:c9:fb:bd:
         15:ff:30:14:34:7b:37:e7:87:1c:b9:64:fd:34:7a:b3:f0:9e:
         23:cd:5c:7b:25:55:ee:27:bd:e1:40:04:13:51:8e:cd:d0:df:
         12:39:e5:fc:f9:8a:36:84:39:31:2d:c8:6a:d9:4c:cc:68:70:
         08:5f:50:4e:51:03:2a:33:2d:de:2b:b3:ec:80:f8:26:18:44:
         f3:ac:16:e1:10:19:17:16:2e:f2:fb:26:48:da:87:36:78:0b:
         e8:c1:3e:e9:ad:9f:a5:24:dd:be:c7:d9:95:4f:8d:b2:a5:60:
         7d:78:c1:fc:3c:3f:15:25:36:82:5a:2f:f2:c7:e6:5d:e7:85:
         49:a8:ec:ff:05:16:4a:eb:25:b1:50:dc:ac:d8:0f:92:e4:49:
         28:1a:fe:1d:ab:1d:a2:48:6d:96:17:75:f3:30:4c:25:f9:ed:
         10:71:b2:f9:c4:43:f1:8f:6a:62:ae:9e:cf:b0:dd:df:86:90:
         45:59:f3:a2:f7:c8:c3:ca:ca:15:4a:ab:00:2c:d0:7a:40:46:
         49:fa:2c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:50:39 2025 by rpki-client