Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft
File:                     3DDE2C96A736983C4145E6A74FA601EF275DE118.mft (raw, json)
Hash identifier:          6grtlYvZd2HcCvcESThEIXdj86EAf/AN2fFebZjNqYg=
Subject key identifier:   8D:12:39:A5:59:3E:33:9B:3D:19:8E:15:68:A3:A7:35:78:95:A4:52
Authority key identifier: 3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18
Certificate issuer:       /CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
Certificate serial:       24406EEAF3BA26AF2CEBDBB95C80216F7C911E45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft
Manifest number:          0294
Signing time:             Sun 10 Aug 2025 13:29:12 +0000
Manifest this update:     Sun 10 Aug 2025 13:24:12 +0000
Manifest next update:     Mon 11 Aug 2025 14:12:12 +0000
Files and hashes:         1: 3137302e3235342e37362e302f32322d3332203d3e203532373833.roa (hash: W8s8whgOmZDsi43J8G37ITFwJ20HsttSGTKGgs5x0rM=)
                          2: 3133382e3235352e3139322e302f32322d3332203d3e203532373833.roa (hash: lwXRa0qiPfQiWSMj6lm8jrC+VXsZs4evtxadksBch4Q=)
                          3: 3133312e3235352e3131362e302f32322d3332203d3e203532373833.roa (hash: J2os+yBVbJ75LHvWXYl37oENdZnBGb1/25a4CiXyyK8=)
                          4: 3137372e37342e3138342e302f32312d3332203d3e203532373833.roa (hash: /VU2G9KNTteuNN2kL0cGkBoRNg4Z5tEq5pYfHwPMi4A=)
                          5: 3137302e37382e3131362e302f32322d3332203d3e203532373833.roa (hash: jv8kapc/ph/YpbHwtC/joiWEGc3ILUjuNy+hAFyt7EM=)
                          6: 323830343a313066383a3a2f33322d313238203d3e203532373833.roa (hash: PhIag7pRzkC7Bapt79fBidxwqlMO2tX8xdTGP14BVts=)
                          7: 3133382e3132322e3133322e302f32322d3332203d3e203532373833.roa (hash: C1eAvO6vSJ6cTUNhHyz/RcfblW+ZPbe4237uTB/Y+mw=)
                          8: 3DDE2C96A736983C4145E6A74FA601EF275DE118.crl (hash: 0P+4ecLcmUu8KE6HqUB/aek7Vs1MCDi0q9G00wqMJV8=)
                          9: 3137372e3230302e36342e302f32302d3332203d3e203532373833.roa (hash: 6OBiD/8DlENQaZjx/MvA5MAEVExrvubewYLsYMeOnMM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl
                          rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 14:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:40:6e:ea:f3:ba:26:af:2c:eb:db:b9:5c:80:21:6f:7c:91:1e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
        Validity
            Not Before: Aug 10 13:24:12 2025 GMT
            Not After : Aug 11 14:12:12 2025 GMT
        Subject: CN=8D1239A5593E339B3D198E1568A3A7357895A452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0e:f5:fb:4c:78:c5:05:c8:0f:b5:7f:9f:0c:
                    32:29:2f:ef:ed:5f:51:18:d6:0e:74:8b:54:62:14:
                    25:ca:0e:e5:b3:b8:53:0c:78:e7:da:64:35:91:9d:
                    30:4c:05:6d:5a:14:44:13:e7:32:af:67:5d:ff:0f:
                    ac:0f:d9:1f:95:59:75:38:f6:9c:da:0c:98:28:a3:
                    94:4e:86:17:c7:3b:c3:21:91:5b:10:3a:e2:40:50:
                    96:cb:e1:1c:3a:4f:0d:b4:7a:d2:0c:9c:b5:8f:07:
                    b7:db:ef:c7:4d:6f:ba:c6:2b:11:41:0c:96:c2:45:
                    69:e7:d2:b7:72:8b:2c:c5:84:6f:fb:db:90:0a:d5:
                    b0:f0:d0:81:08:32:e8:c0:29:52:36:fa:b2:4a:13:
                    2d:20:9e:fc:cc:96:9e:f3:9c:03:d2:f9:96:a7:c0:
                    26:7a:ac:dc:7b:37:f2:c7:62:0c:d3:6d:81:75:db:
                    d9:c6:cf:92:66:0d:9a:76:64:6e:63:6e:ca:40:45:
                    11:14:88:46:4f:20:f0:60:91:eb:2f:da:f7:34:e2:
                    c3:80:ab:34:24:6b:51:42:19:b4:dc:b8:a3:2f:f9:
                    8e:a5:63:56:0a:c8:32:c2:2b:17:ba:52:c7:dc:0d:
                    c6:29:26:13:8d:eb:b6:bb:f2:f1:d7:34:f9:90:be:
                    1a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:12:39:A5:59:3E:33:9B:3D:19:8E:15:68:A3:A7:35:78:95:A4:52
            X509v3 Authority Key Identifier:
                keyid:3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:2d:4b:e7:cd:2d:16:75:3d:d7:f7:13:2e:bf:4f:08:ce:7d:
         23:3f:4b:d9:f3:5a:03:ed:f7:63:f5:70:98:db:3c:26:09:3c:
         12:05:65:dd:42:2a:1c:fc:33:83:83:03:8a:37:79:db:34:98:
         e6:db:d1:45:72:fa:39:ed:ff:06:64:96:66:f6:db:8b:c3:9c:
         d4:ee:28:a6:a2:8b:68:dd:2f:c2:93:b2:e1:97:c7:a0:74:e6:
         36:61:9d:72:58:3b:65:75:4e:20:88:15:04:a4:66:e6:0f:25:
         d7:31:5e:29:36:cd:ac:fd:43:d6:f6:b7:5d:da:72:87:a3:99:
         c8:45:97:3d:36:ca:6a:55:2b:e9:ed:59:19:71:50:67:57:0d:
         5c:a9:8e:dd:d7:ae:ba:ca:c8:c2:47:f8:aa:f1:0c:c0:31:4d:
         04:37:c6:aa:db:ae:ab:7b:00:18:09:27:95:e7:29:e0:5c:a5:
         bd:c4:5e:93:a4:bb:26:23:cb:63:4f:11:4c:0b:db:65:36:ea:
         63:53:eb:a1:6e:fe:ca:38:fb:4b:b3:53:6b:20:ca:1a:9d:ef:
         60:86:a4:95:cf:fb:00:7e:32:33:a6:0e:79:41:c5:c4:05:ad:
         84:42:c1:21:b2:f5:db:e8:6e:72:8c:e0:bf:cb:8d:bc:51:38:
         2e:bc:ac:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:07:57 2025 by rpki-client