Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.mft
File:                     9AD736118DEE4B1A75B2C689365A87E1543247BA.mft (raw, json)
Hash identifier:          4uXZC9SkdXr5cJ2gmPd37gcUeJUgQhMzBK1YuUCxE5c=
Subject key identifier:   84:4E:DE:FC:EB:78:FD:18:0E:70:D0:1D:CF:BE:AF:DC:F4:75:58:8B
Authority key identifier: 9A:D7:36:11:8D:EE:4B:1A:75:B2:C6:89:36:5A:87:E1:54:32:47:BA
Certificate issuer:       /CN=9AD736118DEE4B1A75B2C689365A87E1543247BA
Certificate serial:       0A752022C45517C466D6E0EC2D9C059373733185
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AD736118DEE4B1A75B2C689365A87E1543247BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.mft
Manifest number:          3C
Signing time:             Tue 17 Jun 2025 23:58:07 +0000
Manifest this update:     Tue 17 Jun 2025 23:53:07 +0000
Manifest next update:     Thu 19 Jun 2025 01:39:07 +0000
Files and hashes:         1: 9AD736118DEE4B1A75B2C689365A87E1543247BA.crl (hash: X9rZXwSJjIdu0/dVWUjAryUzLPj8JoexlXLOF4yLKEs=)
                          2: 323830343a393162303a3a2f33322d3438203d3e20323734363538.roa (hash: OHDgjz8XKrpjYqeCeBLrr9sjRso+Et//ZZ2WnBAfncg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.crl
                          rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AD736118DEE4B1A75B2C689365A87E1543247BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 01:39:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:75:20:22:c4:55:17:c4:66:d6:e0:ec:2d:9c:05:93:73:73:31:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AD736118DEE4B1A75B2C689365A87E1543247BA
        Validity
            Not Before: Jun 17 23:53:07 2025 GMT
            Not After : Jun 19 01:39:07 2025 GMT
        Subject: CN=844EDEFCEB78FD180E70D01DCFBEAFDCF475588B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:ac:b8:e7:c8:a6:53:6d:ac:f5:9c:55:1c:
                    f6:f7:57:c0:e7:a7:f0:0b:b0:3e:b5:7f:85:3b:05:
                    ff:1d:13:b6:7e:3e:02:ac:aa:66:48:ef:1f:a2:fe:
                    c2:26:3c:66:f6:1f:3e:c6:5f:19:64:33:64:cb:fa:
                    8c:d0:64:de:e8:82:d4:e9:84:44:cb:19:aa:bd:97:
                    2f:47:50:8f:fa:84:cc:07:58:08:0d:09:9b:4c:43:
                    fc:45:30:04:2a:51:06:91:55:a7:87:80:08:6d:3e:
                    7b:f4:b1:55:26:5a:15:64:e0:7d:a8:48:ad:68:86:
                    d7:e6:ef:c6:54:49:e1:1e:17:e7:bc:4e:7a:f0:a9:
                    98:3d:13:f0:75:ba:08:91:27:0b:ea:44:2b:8b:37:
                    ff:64:c0:56:67:da:77:43:f6:ca:1e:89:47:d5:3c:
                    75:13:26:e1:44:b5:d3:cf:a8:c5:f2:24:37:76:4c:
                    41:f7:f3:70:c3:62:c7:8d:91:63:c9:eb:cf:9f:2e:
                    57:24:a2:ee:36:8b:b4:ae:8a:30:69:1a:76:3b:b0:
                    df:a8:f5:a1:4d:be:4c:11:1a:61:32:9e:0e:1a:3f:
                    3c:54:50:4e:b0:c7:1b:ad:22:91:52:b1:4b:2b:7c:
                    7d:81:0b:c0:0e:90:d3:54:df:b8:ec:57:d6:8a:fd:
                    9b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4E:DE:FC:EB:78:FD:18:0E:70:D0:1D:CF:BE:AF:DC:F4:75:58:8B
            X509v3 Authority Key Identifier:
                keyid:9A:D7:36:11:8D:EE:4B:1A:75:B2:C6:89:36:5A:87:E1:54:32:47:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AD736118DEE4B1A75B2C689365A87E1543247BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:08:2b:a5:27:ef:27:c3:8b:06:4e:6e:3e:51:99:97:b3:01:
         a9:50:27:d5:f6:96:ab:7a:59:1e:31:a7:14:22:a5:e8:08:da:
         4d:d0:ca:a2:90:68:11:55:37:bd:2f:d1:4f:ae:70:27:ac:c5:
         23:b6:98:41:97:82:a9:74:05:e4:c0:89:de:10:15:87:af:c4:
         7d:cf:6c:ff:51:5f:42:ca:5c:51:f4:dd:bd:9d:75:21:f3:93:
         39:cf:a6:3b:7b:23:43:12:17:db:b5:a3:ea:cb:ae:c2:b0:73:
         6b:cb:2c:0f:38:11:7e:81:f8:59:13:31:b1:83:19:ab:d8:d3:
         ed:b6:96:18:f6:31:42:68:00:28:e2:8a:3d:0c:87:7f:c5:92:
         64:55:06:d5:d8:aa:17:3b:d1:82:03:20:1f:ce:3f:fd:9e:9a:
         ad:21:dc:8c:e5:78:41:bd:b5:b6:73:7a:3e:95:e4:12:db:2f:
         06:45:34:09:78:c5:bd:bb:7a:d3:7c:92:d8:11:51:18:8d:02:
         d3:c7:17:07:49:fe:dd:fe:24:34:71:6a:c9:77:ec:11:ee:96:
         54:54:94:7b:8e:36:ff:86:01:c5:c8:20:a9:5b:3e:5f:a9:70:
         a1:ff:2d:b0:8e:8c:fd:af:98:35:7a:16:92:53:7c:de:2b:b9:
         83:3e:c7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:54:25 2025 by rpki-client