Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft
File:                     3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft (raw, json)
Hash identifier:          m6shgZr2sG58tUMPXcaw82SB2afSCMkBvov4NUF8FZ0=
Subject key identifier:   25:2F:D0:F6:FA:F5:E8:19:AC:B5:3A:10:45:97:A4:EE:C3:D5:DE:D9
Authority key identifier: 3E:F7:09:C8:F0:D0:D3:C6:A4:EE:47:57:C8:48:2F:4E:6D:52:5E:91
Certificate issuer:       /CN=3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91
Certificate serial:       159C90287C8453AA9BF8517BBA404C608CA598A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft
Manifest number:          02E2
Signing time:             Wed 06 Aug 2025 19:00:00 +0000
Manifest this update:     Wed 06 Aug 2025 18:55:00 +0000
Manifest next update:     Thu 07 Aug 2025 19:00:00 +0000
Files and hashes:         1: 34352e3138372e3132342e302f32322d3234203d3e20323639343738.roa (hash: mpZHAAPJTUQXooOaT1oXKL/6OVYZoElxqPmWeW2/+og=)
                          2: 3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.crl (hash: a9PAfg3tuv5Wic/CFL7laXpnj6KiSdcpfBdHHsOwOtg=)
                          3: 323830343a363534303a3a2f33322d3336203d3e20323639343738.roa (hash: smBh1jOxiL6mXMibovlt7reUW8x0Aoc05Rh0DO5+hfQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.crl
                          rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:9c:90:28:7c:84:53:aa:9b:f8:51:7b:ba:40:4c:60:8c:a5:98:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91
        Validity
            Not Before: Aug  6 18:55:00 2025 GMT
            Not After : Aug  7 19:00:00 2025 GMT
        Subject: CN=3082010A0282010100BC5EEAE0665393F610E427D030DDF8916EC5A32E3E42D03015AB119E3C9AC6836EDEC0FB9F5A33DBA7669F6B16FD58761710CC940B64C5424D499E26B5A2ABF07A02618617444AAC50550ACBFD44E080857281B05860FFDC62BE03CE68AEE58324AA7798E0C2CDE9FC379FE1D5CA516E93071D13991FCC5393FBFF1BEA3FE8DAD2A52A3EA21537F909EABD71C10DDF73C9F93C33FA9DF0F9B37A0A854A98462D12474F57006E83D2CA15533DB44F49BD2C85A4F38F2D154CE642AFA6C35072F578C2F2FEFBD4DA53C55A094670739FE8BB28855736148E51401476194041C48BB01D5BB6B560DC05EC4037DF6DEF242D179234D4838F3C9E53904131FB55BACB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5e:ea:e0:66:53:93:f6:10:e4:27:d0:30:dd:
                    f8:91:6e:c5:a3:2e:3e:42:d0:30:15:ab:11:9e:3c:
                    9a:c6:83:6e:de:c0:fb:9f:5a:33:db:a7:66:9f:6b:
                    16:fd:58:76:17:10:cc:94:0b:64:c5:42:4d:49:9e:
                    26:b5:a2:ab:f0:7a:02:61:86:17:44:4a:ac:50:55:
                    0a:cb:fd:44:e0:80:85:72:81:b0:58:60:ff:dc:62:
                    be:03:ce:68:ae:e5:83:24:aa:77:98:e0:c2:cd:e9:
                    fc:37:9f:e1:d5:ca:51:6e:93:07:1d:13:99:1f:cc:
                    53:93:fb:ff:1b:ea:3f:e8:da:d2:a5:2a:3e:a2:15:
                    37:f9:09:ea:bd:71:c1:0d:df:73:c9:f9:3c:33:fa:
                    9d:f0:f9:b3:7a:0a:85:4a:98:46:2d:12:47:4f:57:
                    00:6e:83:d2:ca:15:53:3d:b4:4f:49:bd:2c:85:a4:
                    f3:8f:2d:15:4c:e6:42:af:a6:c3:50:72:f5:78:c2:
                    f2:fe:fb:d4:da:53:c5:5a:09:46:70:73:9f:e8:bb:
                    28:85:57:36:14:8e:51:40:14:76:19:40:41:c4:8b:
                    b0:1d:5b:b6:b5:60:dc:05:ec:40:37:df:6d:ef:24:
                    2d:17:92:34:d4:83:8f:3c:9e:53:90:41:31:fb:55:
                    ba:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2F:D0:F6:FA:F5:E8:19:AC:B5:3A:10:45:97:A4:EE:C3:D5:DE:D9
            X509v3 Authority Key Identifier:
                keyid:3E:F7:09:C8:F0:D0:D3:C6:A4:EE:47:57:C8:48:2F:4E:6D:52:5E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:7f:96:10:c2:44:56:45:ea:d0:c1:a7:c9:0e:52:c5:02:a1:
         65:7a:fd:83:ac:93:72:be:de:c8:db:e4:ca:ca:0d:e2:8c:21:
         d0:bd:04:ea:61:1a:ac:88:0e:9a:41:21:4d:ea:7b:d4:29:d5:
         6e:94:1e:41:e7:bb:8c:99:91:a1:9e:4d:eb:17:5e:a6:dc:6e:
         29:65:22:cf:84:ac:db:59:ef:e0:cd:32:3e:02:1e:97:2d:05:
         58:1e:89:d6:6e:45:b1:dd:19:88:d0:1d:3d:7c:9c:c2:72:03:
         78:47:6b:39:ec:83:ed:9a:fc:12:38:2a:d4:22:bb:2d:56:c0:
         1f:59:5e:3f:68:0e:38:86:fb:d0:ae:bb:84:6b:28:80:53:aa:
         64:21:0d:99:17:d9:67:ce:7d:4f:1d:05:ca:3b:6e:16:48:7c:
         20:37:0c:6d:e0:75:56:fd:fd:42:72:6d:f7:f5:ae:93:10:5e:
         22:0c:84:4b:7b:6f:b0:7d:6f:ae:dc:3b:67:53:45:f1:14:5c:
         25:19:da:cf:a6:e8:54:bf:f7:8a:e8:5d:0f:82:e7:27:fc:05:
         87:d3:4a:23:79:0d:8c:8a:ea:17:bf:47:37:f5:c0:81:9e:d0:
         b5:36:cc:c9:2d:c2:e0:01:0e:40:85:49:51:7f:e1:21:1e:19:
         b2:ad:67:42
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:14:21 2025 by rpki-client