Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft
File:                     B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft (raw, json)
Hash identifier:          LWuyz3TiZ6XdSxCYMyLJMxr2aISjHihyClGUXd8yRak=
Subject key identifier:   3C:88:8A:35:FD:DA:D4:2D:F2:D4:8B:3A:DB:85:34:C3:8E:E8:B1:00
Authority key identifier: B0:33:7D:29:70:CB:09:EC:BA:6C:93:B9:F7:30:52:6E:8A:BD:17:9C
Certificate issuer:       /CN=B0337D2970CB09ECBA6C93B9F730526E8ABD179C
Certificate serial:       050AAAAB7C25841166E193AAF745B5EDF447368E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft
Manifest number:          0102
Signing time:             Fri 08 Aug 2025 01:47:36 +0000
Manifest this update:     Fri 08 Aug 2025 01:42:36 +0000
Manifest next update:     Sat 09 Aug 2025 03:56:36 +0000
Files and hashes:         1: 323830343a3363383a3a2f33322d3336203d3e20323632393038.roa (hash: 0NGsiRjwRCwvztO0HQSwZ5G2u2NyRn8qasG89BQU4fw=)
                          2: 3136382e3139362e35362e302f32322d3234203d3e20323632393038.roa (hash: CveRwIcrqNwQKM9zizyilPdp+fXc4SVnOCQsPgpHD6o=)
                          3: B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl (hash: iXnW3JGDerGaPb1yDVpqspJ6/ouO22r5I+mmZU9586A=)
                          4: 3137372e33382e32382e302f32322d3234203d3e20323632393038.roa (hash: HJFC7iXGTFPZDU8AX26DfYJHqA8ZIk/nP70vX6+jQo4=)
                          5: 3137372e33382e32342e302f32322d3234203d3e20323632393038.roa (hash: dGUuPMBAaOXlYlzrmpRc8TAZ4SZ3d8aZsmWcWxA6jcY=)
                          6: 3137372e35322e35362e302f32322d3234203d3e20323632393038.roa (hash: CYet3kKlZMq0bVz27G5Q21l43aX4pgm4MbAST0VmGkg=)
                          7: 3137372e39312e3133362e302f32322d3234203d3e20323632393038.roa (hash: MAXqeMftrDx2qfIrNZeHi1Fg5BRXYViJaP7l5pPBgyg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl
                          rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 03:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0a:aa:ab:7c:25:84:11:66:e1:93:aa:f7:45:b5:ed:f4:47:36:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0337D2970CB09ECBA6C93B9F730526E8ABD179C
        Validity
            Not Before: Aug  8 01:42:36 2025 GMT
            Not After : Aug  9 03:56:36 2025 GMT
        Subject: CN=3C888A35FDDAD42DF2D48B3ADB8534C38EE8B100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bc:aa:79:d6:7d:c4:ce:6e:7e:4c:e2:b6:a7:
                    0d:04:d7:06:a8:05:5b:f1:40:7b:e6:d3:ff:0d:9c:
                    c4:89:a4:89:72:98:9a:87:48:13:b8:a9:7b:d0:c3:
                    47:9c:2a:32:b4:08:17:86:aa:59:6d:15:fa:1a:8b:
                    bb:f1:f2:9b:ca:96:dc:1d:31:d3:05:89:fb:98:f0:
                    78:ba:08:18:4c:86:34:d1:57:ad:2e:25:00:c0:cc:
                    dd:dc:ae:99:0b:04:0f:0a:fd:ad:b6:34:49:b3:1c:
                    25:77:af:05:75:87:e4:f9:ad:3e:6a:73:76:cf:38:
                    d9:0c:8b:01:f2:59:c5:a0:e5:07:b1:14:16:4d:6a:
                    d2:d2:d9:48:c1:27:55:3e:93:71:5c:62:c0:e7:2e:
                    58:cb:f3:ff:e3:d7:59:61:6f:2e:b0:1a:27:9f:d6:
                    8a:62:02:4a:c6:b3:73:f9:7e:3e:84:27:71:25:96:
                    a8:d2:14:07:22:8e:4f:83:2a:d9:9c:ab:7c:62:84:
                    a5:41:cb:12:94:1c:a1:47:09:71:ae:d4:74:ed:e4:
                    ee:c0:f4:af:f8:37:b0:dc:14:3c:07:a2:b2:67:61:
                    fd:31:91:ff:d2:68:d6:20:e1:19:ec:e0:44:b7:d2:
                    fd:df:19:3d:c4:93:ef:e2:58:a9:58:4e:01:fb:34:
                    61:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:88:8A:35:FD:DA:D4:2D:F2:D4:8B:3A:DB:85:34:C3:8E:E8:B1:00
            X509v3 Authority Key Identifier:
                keyid:B0:33:7D:29:70:CB:09:EC:BA:6C:93:B9:F7:30:52:6E:8A:BD:17:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a1:2f:b6:ec:b0:37:64:48:fb:1e:20:95:f3:36:b4:84:71:
         d8:79:0a:4e:32:cf:4c:7b:68:9c:f2:9f:fc:dd:18:7d:39:09:
         51:73:40:1d:03:51:0b:85:6e:5e:fc:97:48:1a:54:f8:2d:13:
         da:c5:5e:6f:9a:8c:75:db:17:fc:a1:c3:83:2e:55:f2:d8:52:
         ae:ac:23:39:b4:5d:14:a4:cb:b5:48:78:7f:aa:1a:1a:02:46:
         75:2c:f6:bf:f5:eb:5f:2a:fa:6d:8a:a5:db:bf:1f:2e:c2:3b:
         39:67:e4:97:0f:42:7d:ce:3c:30:9f:f9:bf:73:ea:53:f8:06:
         bf:be:8f:15:ad:26:71:66:72:f0:1c:10:af:ad:d6:d0:b0:9c:
         18:fe:09:2a:1d:93:91:0b:5e:2d:7b:67:bc:02:e8:04:7a:d6:
         f1:65:8c:92:70:8b:16:b2:8b:71:2a:e5:2a:34:1a:7b:42:4b:
         c8:00:95:5c:22:6e:32:41:42:d0:22:1c:cf:50:65:30:5c:e8:
         72:6b:94:1d:0d:6f:3f:98:67:35:c5:dd:c5:db:f9:38:9f:34:
         d7:05:26:fa:8e:ca:cd:64:74:25:4f:bd:34:77:f0:23:56:ca:
         18:4f:3e:de:fb:5e:21:ab:d1:56:00:2b:71:9f:53:8c:4e:e2:
         f7:20:3c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 21:01:50 2025 by rpki-client