Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft
File:                     3895E2089A93A58E1062DE9612B321CA505C51FA.mft (raw, json)
Hash identifier:          91G7fMJ7QHTY4lnmRRmaoRMIRmq7esufi4M/oypPtLo=
Subject key identifier:   AF:90:ED:5E:3A:93:D0:9D:9E:4C:F0:72:D4:F4:FB:48:A2:11:21:91
Authority key identifier: 38:95:E2:08:9A:93:A5:8E:10:62:DE:96:12:B3:21:CA:50:5C:51:FA
Certificate issuer:       /CN=3895E2089A93A58E1062DE9612B321CA505C51FA
Certificate serial:       2690686196812D270DBEADB13F9D9C6CB539AC06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft
Manifest number:          0295
Signing time:             Wed 18 Jun 2025 11:20:00 +0000
Manifest this update:     Wed 18 Jun 2025 11:15:00 +0000
Manifest next update:     Thu 19 Jun 2025 11:20:00 +0000
Files and hashes:         1: 3895E2089A93A58E1062DE9612B321CA505C51FA.crl (hash: gTnvK5JVGJpjHH08z0O1ua5pnlxwFxQZnx4dHD/u/MA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.crl
                          rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 11:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:90:68:61:96:81:2d:27:0d:be:ad:b1:3f:9d:9c:6c:b5:39:ac:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3895E2089A93A58E1062DE9612B321CA505C51FA
        Validity
            Not Before: Jun 18 11:15:00 2025 GMT
            Not After : Jun 25 11:20:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cd:3d:1d:94:a2:e6:52:53:28:36:9b:35:6b:
                    ca:91:7e:0b:95:96:d1:eb:b1:61:60:83:74:e6:03:
                    5a:da:80:13:46:a5:fc:d6:99:9d:9f:4a:da:b2:51:
                    72:1d:e2:1a:b1:ea:55:3a:91:07:6f:1c:49:b8:1f:
                    74:72:30:ae:23:83:e8:87:43:c8:0a:c2:82:c8:a7:
                    8c:0f:c3:60:f7:57:2c:f5:c7:25:17:4f:42:1c:dc:
                    fe:d5:e6:a7:46:37:ca:e8:ec:fe:14:98:62:9d:4c:
                    a7:f4:a7:53:90:1a:94:52:f0:63:9a:6e:41:07:d7:
                    5d:d6:d8:dd:63:0f:65:0b:ef:f8:88:a0:d8:e5:dc:
                    f4:cc:f7:9a:5e:f2:a6:fc:b8:ea:59:9f:bd:9d:4c:
                    f9:14:89:c3:40:36:7e:e1:64:0f:8f:96:95:8e:f0:
                    68:83:f4:0e:79:c3:a3:db:ee:ec:31:a5:ae:ec:b1:
                    e7:8e:c8:01:57:2a:89:21:e7:e4:9d:54:84:2a:82:
                    89:a3:f7:1a:d7:64:e5:fc:ba:5e:6b:9f:31:d6:96:
                    e1:0d:17:cf:34:88:7a:24:fd:34:65:b0:7f:30:cf:
                    71:b3:fd:da:f6:70:c6:c0:3f:f9:ec:27:1b:fa:cc:
                    78:42:03:51:78:ff:22:64:94:ed:6d:7a:99:bd:a5:
                    d9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:90:ED:5E:3A:93:D0:9D:9E:4C:F0:72:D4:F4:FB:48:A2:11:21:91
            X509v3 Authority Key Identifier:
                keyid:38:95:E2:08:9A:93:A5:8E:10:62:DE:96:12:B3:21:CA:50:5C:51:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d5:1a:fa:86:f7:3c:74:a1:0b:32:8e:c0:f1:08:13:56:32:
         19:1f:34:df:20:b1:5c:e6:6d:2b:bd:79:bf:3c:85:18:4e:04:
         35:b7:d2:c2:bc:be:18:e0:10:4a:ef:53:25:b2:ff:95:55:4c:
         0a:7f:f4:1f:86:1f:49:11:19:a5:e6:e4:fe:b7:f2:52:91:55:
         09:ed:51:51:34:de:e9:3b:64:5a:38:1a:6a:fd:b0:1e:bf:f0:
         ab:67:a7:38:3a:69:86:58:2c:d6:43:31:74:79:40:22:38:c9:
         dc:cd:ba:df:5e:f4:b8:b4:e8:b1:9b:97:39:bc:b1:68:9e:ef:
         dd:22:e0:64:b7:19:df:0d:ef:5c:f2:d4:74:60:8b:aa:69:6e:
         58:6e:d8:6e:68:08:77:4d:ee:63:a1:c8:18:60:f5:a0:0a:91:
         6d:05:fe:8b:fc:81:38:71:19:8d:4a:8a:14:6a:42:56:81:8d:
         e9:6d:73:bd:c8:bc:a6:a8:2b:52:b8:ef:10:f2:14:de:f4:15:
         14:67:9e:b9:8f:8f:ad:7a:cb:02:64:bc:68:e3:e6:70:51:30:
         85:b0:1d:98:87:e9:cc:b6:53:dd:ed:92:6b:c8:df:3e:15:5e:
         7d:f1:78:ee:f2:12:60:46:cf:16:34:55:8c:97:d2:41:27:00:
         3d:36:6b:b5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 18 23:29:37 2025 by rpki-client