Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.mft
File:                     3B4B1D11DA1C8532237B102F0C1C617E70A272C5.mft (raw, json)
Hash identifier:          Cy+j2DtGnFyTrujq1YVSy6YF9+WOH6hg0WjZLBxqH1U=
Subject key identifier:   AE:6C:00:24:C0:96:A8:A6:9A:F4:28:08:1B:09:B4:75:63:9C:D6:82
Authority key identifier: 3B:4B:1D:11:DA:1C:85:32:23:7B:10:2F:0C:1C:61:7E:70:A2:72:C5
Certificate issuer:       /CN=3B4B1D11DA1C8532237B102F0C1C617E70A272C5
Certificate serial:       549B7A2698CEAD409D5EC41E377E0DC548A0BB04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.mft
Manifest number:          CF
Signing time:             Mon 23 Jun 2025 01:41:50 +0000
Manifest this update:     Mon 23 Jun 2025 01:36:50 +0000
Manifest next update:     Tue 24 Jun 2025 05:06:50 +0000
Files and hashes:         1: 3B4B1D11DA1C8532237B102F0C1C617E70A272C5.crl (hash: tXJYZbSPEixcMP5L0GwuvuLsk79n42eS65tnRqi6RDI=)
                          2: 34352e3232342e3131342e302f32332d3233203d3e20323637363537.roa (hash: ufX0QnRDG9Qtm6AUOnyqKnDEdXFfSqBv9A8zdNqIPhI=)
                          3: 323830343a343464383a3a2f33332d3333203d3e20323637363537.roa (hash: DFCs6nRQiS3p4kYOFx9qyfLKWu82j04EjjVQEUhlvRU=)
                          4: 34352e3232342e3131322e302f32332d3234203d3e20323637363537.roa (hash: Tx0FjievZ1fIALoALR+dZPiezsWqP+kaA3FYqPdlF7Y=)
                          5: 323830343a343464383a383030303a3a2f33332d3333203d3e20323637363537.roa (hash: B7E00C1Vxzm7LGbcrVzCf9CW2okcJ2rZZJ8BHdI0fJY=)
                          6: 323830343a343464383a3a2f33322d3332203d3e20323637363537.roa (hash: d5s2JyEN4cNkPgu2RyAG0Tl4mWwr4eYppkTDVzH7Grw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.crl
                          rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Jun 2025 03:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:9b:7a:26:98:ce:ad:40:9d:5e:c4:1e:37:7e:0d:c5:48:a0:bb:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B4B1D11DA1C8532237B102F0C1C617E70A272C5
        Validity
            Not Before: Jun 23 01:36:50 2025 GMT
            Not After : Jun 24 05:06:50 2025 GMT
        Subject: CN=AE6C0024C096A8A69AF428081B09B475639CD682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e6:a2:02:6a:9d:f3:5c:1b:49:bb:4b:c5:5e:
                    ce:2c:e8:dc:48:aa:9e:5b:07:55:cf:ee:34:d2:8c:
                    32:63:96:48:79:4f:0c:87:1e:9a:c3:3b:de:1e:df:
                    2d:c3:39:37:71:67:f9:85:f1:e2:f9:3d:dd:d9:15:
                    93:a6:51:55:fc:21:d5:9c:5f:c7:4c:dc:b5:40:1e:
                    79:c2:1d:78:ee:0e:bf:87:1f:4f:0a:92:a9:f7:51:
                    45:4d:5a:9f:f4:44:fb:08:6f:a4:48:b9:5a:be:de:
                    26:ef:cf:36:67:47:c9:bf:47:3d:f9:4b:ec:34:6d:
                    0c:e8:4b:77:c3:89:04:0d:68:a7:e6:f6:b9:3b:7a:
                    40:8c:3f:3f:91:23:1d:0b:f7:53:5b:7d:0d:d6:b0:
                    a1:b1:3e:61:1b:1b:a3:07:7c:95:d6:1d:c7:6b:86:
                    01:d0:0d:31:7b:46:06:e3:7c:c4:7f:a7:51:82:5d:
                    20:3f:e1:50:ce:cc:0f:9d:48:a8:6d:1a:e1:c8:e4:
                    bd:2a:3c:84:c7:1c:2e:13:00:32:e4:20:86:90:05:
                    23:c1:70:92:91:8f:29:a5:d2:c9:d1:a8:a5:2a:f0:
                    aa:30:3f:8c:e0:a1:de:68:e5:27:ea:19:c7:70:d2:
                    7e:7a:f8:89:f3:f5:8f:b6:d4:29:8b:bc:86:09:13:
                    39:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6C:00:24:C0:96:A8:A6:9A:F4:28:08:1B:09:B4:75:63:9C:D6:82
            X509v3 Authority Key Identifier:
                keyid:3B:4B:1D:11:DA:1C:85:32:23:7B:10:2F:0C:1C:61:7E:70:A2:72:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:94:98:75:3b:39:fc:c8:f3:d3:c0:21:e6:8f:1e:da:9b:5e:
         e3:ae:ca:82:6e:dd:15:41:fe:cb:3a:99:6a:39:46:2a:b9:c6:
         0b:76:1c:16:4a:cf:ab:5b:6f:a2:8e:62:9b:11:c2:e5:9a:f7:
         62:27:ac:cb:0b:a9:89:db:57:6e:e8:11:91:52:d7:6f:02:2e:
         ab:b4:b3:75:67:0e:34:bc:11:7d:8c:06:39:0a:6c:ba:cb:e5:
         ca:4b:eb:24:f7:8c:b8:42:30:1a:d5:d4:52:3d:68:47:b9:ee:
         a8:b7:87:bd:1e:a0:75:64:b8:d0:32:4f:f5:d8:02:cb:db:9a:
         6b:6a:ca:8e:a9:1f:49:70:a4:4a:59:8a:1a:12:5a:7d:6f:27:
         16:35:79:45:3e:a0:2d:f5:7e:b7:aa:b7:a5:92:7b:10:34:87:
         65:fd:72:31:2b:51:ae:fe:f1:8c:a9:6b:61:72:4d:8b:38:4c:
         83:51:b2:c1:ba:a5:ef:0e:93:49:1c:52:b8:2c:31:ae:ca:45:
         d0:c4:07:3f:40:79:d6:9e:3b:c7:21:47:32:6b:e4:f4:a5:7d:
         f6:6d:6b:90:3b:43:df:d2:14:62:cb:e9:fe:cf:ec:03:94:ce:
         8f:00:34:a1:55:04:a3:fe:cb:d2:d1:4d:b2:7f:13:f7:9b:28:
         ea:6f:e9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 05:18:28 2025 by rpki-client