Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft
File:                     3C7FA74CDFF1E4752479602672F26A883C7A6052.mft (raw, json)
Hash identifier:          KMSWT8GXHjEA1+AzDPnFjMYbNJt6PUeiS+kmkqwgMUQ=
Subject key identifier:   08:9D:76:93:DD:11:51:A9:23:4E:4A:6C:16:2D:A2:90:46:86:85:A5
Authority key identifier: 3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52
Certificate issuer:       /CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
Certificate serial:       67DB3EA64AA9FCFD6CABD9D3B2CE1A18F970ACD8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft
Manifest number:          023B
Signing time:             Tue 05 Aug 2025 08:47:03 +0000
Manifest this update:     Tue 05 Aug 2025 08:42:03 +0000
Manifest next update:     Wed 06 Aug 2025 10:41:03 +0000
Files and hashes:         1: 323830343a316163383a3a2f33322d3334203d3e203631383835.roa (hash: hgbebWRxJH711YUS+ZshiJSddOzcAmuyU3X5EXPVldc=)
                          2: 3133312e302e3134302e302f32342d3234203d3e203631383835.roa (hash: spAyhkGjuBNP2zEIUTDLtN/IEf7CJVmrsLGKeK3QbZM=)
                          3: 3133312e302e3134312e302f32342d3234203d3e203631383835.roa (hash: 6j/YM1iWE1stiYo/1xSZmbaSx9cwVBwCyvj6K025FBY=)
                          4: 3133312e302e3134332e302f32342d3234203d3e203631383835.roa (hash: Ax4GFW+ZgDBWbEqakOBkeW9VThd7RRswN4RG5fl4FpQ=)
                          5: 3C7FA74CDFF1E4752479602672F26A883C7A6052.crl (hash: 8ukn1ihzbQZc+9RLSRFq04ccVb5Fc5ZJom6j7AFxA1w=)
                          6: 3133312e302e3134322e302f32342d3234203d3e203631383835.roa (hash: FAhC/DsyPmRASXFbQ5wrESgSjR2bWWo3CPFzHQ4QYnY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl
                          rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 10:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:db:3e:a6:4a:a9:fc:fd:6c:ab:d9:d3:b2:ce:1a:18:f9:70:ac:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
        Validity
            Not Before: Aug  5 08:42:03 2025 GMT
            Not After : Aug  6 10:41:03 2025 GMT
        Subject: CN=089D7693DD1151A9234E4A6C162DA290468685A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:86:78:4f:ef:93:55:87:c9:63:4e:69:9b:
                    ef:e2:1e:38:d0:ea:65:89:41:84:e0:b4:cb:76:1f:
                    80:4a:12:53:87:c8:7d:f9:3e:83:86:a4:a4:d3:ee:
                    c5:e9:cf:98:09:ee:64:4f:99:61:f5:40:84:66:58:
                    fe:d9:94:4d:70:53:0a:18:0f:c7:c0:8e:23:0e:82:
                    f8:67:c1:46:f8:f7:d0:36:ef:5c:79:c9:11:6c:65:
                    74:d6:44:0e:c3:2c:72:d8:ef:c6:91:f8:6c:27:43:
                    4a:2a:4e:2f:b6:36:ae:a6:6a:ea:2b:ae:30:23:ae:
                    d8:95:d9:17:00:3f:57:ab:45:c9:2b:d5:7b:83:5f:
                    65:d2:e0:ad:ce:2c:31:93:51:f4:60:6e:22:cd:37:
                    ed:2f:76:d6:52:c3:d4:52:22:f8:17:7c:a0:5a:61:
                    f9:bf:67:56:f5:98:b6:db:c0:7a:76:f3:28:3a:eb:
                    b3:5f:f2:78:02:19:f4:a1:ad:bb:ae:98:f3:ae:2b:
                    86:31:37:57:86:72:2c:af:5e:d5:a4:2d:06:7b:22:
                    c5:63:dd:71:fd:db:97:b6:16:95:e6:73:97:f5:8c:
                    30:9f:6e:44:5d:30:60:35:da:86:b0:e9:ed:6c:e7:
                    0e:48:29:6f:55:9d:df:2c:b8:83:c9:51:1e:45:a8:
                    ac:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9D:76:93:DD:11:51:A9:23:4E:4A:6C:16:2D:A2:90:46:86:85:A5
            X509v3 Authority Key Identifier:
                keyid:3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:dd:e5:fc:b1:3a:66:97:18:b1:01:c0:e1:5e:48:dc:fe:e9:
         9c:b6:2a:1b:b9:72:7a:04:c9:0f:03:56:26:8d:73:0d:53:7a:
         1f:75:8d:c2:d5:f4:b8:76:d6:61:08:74:90:d0:0c:33:45:7e:
         bb:5c:ea:6c:35:cb:42:19:34:ad:22:df:27:6c:32:69:4d:0a:
         83:c6:b0:fc:0b:4c:fd:60:67:52:27:54:8c:65:2b:70:24:3f:
         bf:e6:f4:bb:6d:2b:a5:22:ba:16:1c:17:48:da:73:0c:15:11:
         1b:f8:39:ec:d7:08:19:c3:c6:cc:d1:26:f4:0b:ba:a5:48:66:
         ce:e9:96:07:d6:48:19:89:ea:3b:80:58:cd:79:66:50:47:f8:
         1e:3d:00:ce:1c:33:06:aa:7c:35:c3:6a:64:97:e9:f4:27:56:
         65:93:09:c8:81:91:dc:e3:ab:81:04:a8:8f:d4:6b:4f:aa:ca:
         17:41:24:ef:e7:aa:d0:46:a1:92:35:c0:67:df:3f:af:0b:bd:
         23:bb:54:91:64:9d:5f:1f:94:74:1c:17:32:e1:03:b5:45:f2:
         ff:97:03:cd:ef:38:5d:18:d6:d2:ef:b2:b4:87:e6:5e:66:8a:
         26:e8:78:ee:52:73:1a:bc:9f:73:42:25:f9:59:07:97:fb:94:
         a6:9e:83:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZ9s+pkqp/P1sq9nTss4aGPlwrNgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M3RkE3NENERkYxRTQ3NTI0Nzk2MDI2NzJGMjZBODgz
QzdBNjA1MjAeFw0yNTA4MDUwODQyMDNaFw0yNTA4MDYxMDQxMDNaMDMxMTAvBgNV
BAMTKDA4OUQ3NjkzREQxMTUxQTkyMzRFNEE2QzE2MkRBMjkwNDY4Njg1QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvx4Z4T++TVYfJY05pm+/iHjjQ
6mWJQYTgtMt2H4BKElOHyH35PoOGpKTT7sXpz5gJ7mRPmWH1QIRmWP7ZlE1wUwoY
D8fAjiMOgvhnwUb499A271x5yRFsZXTWRA7DLHLY78aR+GwnQ0oqTi+2Nq6mauor
rjAjrtiV2RcAP1erRckr1XuDX2XS4K3OLDGTUfRgbiLNN+0vdtZSw9RSIvgXfKBa
Yfm/Z1b1mLbbwHp28yg667Nf8ngCGfShrbuumPOuK4YxN1eGciyvXtWkLQZ7IsVj
3XH925e2FpXmc5f1jDCfbkRdMGA12oaw6e1s5w5IKW9Vnd8suIPJUR5FqKwfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUCJ12k90RUakjTkpsFi2ikEaGhaUwHwYDVR0j
BBgwFoAUPH+nTN/x5HUkeWAmcvJqiDx6YFIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSERLU2lzN1lBTkZ1anI5ZExFR1ZmRmdpR0c5OWd5WnBRVzdxdkF0amE5
ZHQvMC8zQzdGQTc0Q0RGRjFFNDc1MjQ3OTYwMjY3MkYyNkE4ODNDN0E2MDUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDN0ZBNzRDREZGMUU0NzUy
NDc5NjAyNjcyRjI2QTg4M0M3QTYwNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SERLU2lzN1lBTkZ1anI5ZExFR1ZmRmdpR0c5OWd5WnBRVzdxdkF0amE5ZHQvMC8z
QzdGQTc0Q0RGRjFFNDc1MjQ3OTYwMjY3MkYyNkE4ODNDN0E2MDUyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPd3l/LE6ZpcYsQHA4V5I3P7pnLYqG7lyegTJDwNWJo1zDVN6H3WNwtX0uHbW
YQh0kNAMM0V+u1zqbDXLQhk0rSLfJ2wyaU0Kg8aw/AtM/WBnUidUjGUrcCQ/v+b0
u20rpSK6FhwXSNpzDBURG/g57NcIGcPGzNEm9Au6pUhmzumWB9ZIGYnqO4BYzXlm
UEf4Hj0AzhwzBqp8NcNqZJfp9CdWZZMJyIGR3OOrgQSoj9RrT6rKF0Ek7+eq0Eah
kjXAZ98/rwu9I7tUkWSdXx+UdBwXMuEDtUXy/5cDze84XRjW0u+ytIfmXmaKJuh4
7lJzGryfc0Il+VkHl/uUpp6DMA==
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:13:06 2025 by rpki-client