Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.mft
File:                     22377022A32DC670182F5C02A6E1E234ECF2F9C0.mft (raw, json)
Hash identifier:          3COh+vS1nOW6OTYj94qJeh8ztgR/FDxrSwMu+vcTXr4=
Subject key identifier:   E3:EF:1D:AB:4B:5E:99:AB:6C:92:45:72:D8:CA:93:E4:68:55:DE:F4
Authority key identifier: 22:37:70:22:A3:2D:C6:70:18:2F:5C:02:A6:E1:E2:34:EC:F2:F9:C0
Certificate issuer:       /CN=22377022A32DC670182F5C02A6E1E234ECF2F9C0
Certificate serial:       27E8C3A00C80FE492C8BFBF38D944EB1004B2DD2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.mft
Manifest number:          0242
Signing time:             Wed 11 Jun 2025 07:33:33 +0000
Manifest this update:     Wed 11 Jun 2025 07:28:33 +0000
Manifest next update:     Thu 12 Jun 2025 10:08:33 +0000
Files and hashes:         1: 323830343a353339343a3a2f33322d3438203d3e20323638353933.roa (hash: /Y7yyKgFYp/V9/fghfWvaUmRHFEzfTZAfugagQKa6iU=)
                          2: 34352e3136322e36342e302f32322d3234203d3e20323638353933.roa (hash: Zvr/EHwmrNr41VfdVtcRn2+71ogF5EWWwZ2XvktYZas=)
                          3: 22377022A32DC670182F5C02A6E1E234ECF2F9C0.crl (hash: whaXFtG5e+eIeY6myusTcKuHhglQqlFZD0wby3hsKhg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.crl
                          rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 10:08:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e8:c3:a0:0c:80:fe:49:2c:8b:fb:f3:8d:94:4e:b1:00:4b:2d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22377022A32DC670182F5C02A6E1E234ECF2F9C0
        Validity
            Not Before: Jun 11 07:28:33 2025 GMT
            Not After : Jun 12 10:08:33 2025 GMT
        Subject: CN=E3EF1DAB4B5E99AB6C924572D8CA93E46855DEF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:50:55:95:c3:07:4b:d4:eb:9f:67:df:2f:5c:
                    51:b4:b7:a7:45:fe:82:79:bd:ea:c0:cf:65:24:6a:
                    38:90:35:4f:91:63:5e:66:e1:65:54:fd:8b:39:a9:
                    78:e8:99:e4:6b:8f:5a:4f:f5:67:e1:24:1e:59:0b:
                    16:46:9c:96:b9:f0:2b:9c:8c:c0:d8:f2:2c:a1:ae:
                    f2:a1:ad:77:45:85:0c:08:82:89:d9:21:63:45:56:
                    d6:26:27:00:9f:f5:43:72:8b:f3:0a:10:2a:3d:b9:
                    48:f6:9d:7f:c3:9a:9a:d1:2c:1a:16:bd:df:05:14:
                    33:0b:42:00:ff:25:27:f3:b4:ce:82:38:84:54:4d:
                    93:59:d9:a1:d5:a7:81:6c:c9:fb:de:3a:d1:72:2b:
                    64:76:e5:77:f5:70:30:5e:b7:db:52:7f:bf:98:22:
                    a3:19:9f:64:fe:23:f4:06:d8:38:cb:42:b5:fc:f2:
                    41:5a:22:5b:38:dd:2b:34:bf:57:bb:e0:9c:3a:63:
                    03:88:1d:5f:ef:0c:de:12:cc:08:08:5d:5b:76:f4:
                    1d:52:33:06:80:27:1f:94:33:e7:69:cb:35:e4:64:
                    ee:c9:b5:e6:3f:44:f7:85:fe:09:ee:13:2f:2e:8f:
                    fd:62:8b:af:29:a9:72:64:38:50:38:ad:7c:ea:d6:
                    24:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EF:1D:AB:4B:5E:99:AB:6C:92:45:72:D8:CA:93:E4:68:55:DE:F4
            X509v3 Authority Key Identifier:
                keyid:22:37:70:22:A3:2D:C6:70:18:2F:5C:02:A6:E1:E2:34:EC:F2:F9:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a2:97:aa:78:ff:4b:7f:e9:ec:0d:68:6d:48:66:49:43:7d:
         b0:00:80:c7:2b:ca:00:9a:eb:3b:07:f7:da:2a:6b:8b:10:4b:
         06:9f:bb:15:c5:90:39:ff:03:09:ec:f3:fb:c7:93:71:03:01:
         4d:99:17:ac:d0:e1:05:66:c4:03:d1:8e:fd:32:68:0f:1b:d9:
         6c:bc:22:21:02:c0:81:3b:90:1c:d4:fb:91:0c:f6:4d:bf:4a:
         45:7f:0b:98:92:43:15:df:ae:82:d8:db:a5:68:ea:aa:b4:af:
         04:db:e6:b9:72:a8:1f:67:a2:46:a8:5c:b8:4a:f2:f4:c0:04:
         cf:3a:e8:dd:0f:e4:b6:b1:e6:e2:d0:0f:ad:45:fd:60:b3:e4:
         aa:91:83:8b:7f:cb:73:5f:89:57:a1:81:80:b2:6e:d5:91:c2:
         5d:6c:75:3d:f9:87:9d:4f:8a:3c:55:ad:98:2d:2f:af:51:51:
         d8:ac:47:67:8f:f8:ad:b7:d0:9e:ec:4a:02:50:f0:ff:10:83:
         76:7d:e6:da:6c:0c:45:33:e0:9e:6e:73:8f:e6:ee:05:12:a1:
         4d:bd:8a:b6:23:7b:22:f8:bc:0d:60:de:55:23:bb:d7:3c:5f:
         4f:b7:07:9e:c8:c0:63:d4:49:b7:61:00:48:00:d4:3e:20:a3:
         c2:8b:e6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:31:47 2025 by rpki-client