Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft
File:                     3DFAB11D75C819D05773554EBACF15CD75341EF8.mft (raw, json)
Hash identifier:          aC8IURdS/uEy1PsLPumvm2Tdb0ZRvDK4RkYYnuIYWVs=
Subject key identifier:   24:7E:7A:F6:AF:19:3A:4E:5C:1E:97:3F:51:36:7E:60:8A:4C:AA:10
Authority key identifier: 3D:FA:B1:1D:75:C8:19:D0:57:73:55:4E:BA:CF:15:CD:75:34:1E:F8
Certificate issuer:       /CN=3DFAB11D75C819D05773554EBACF15CD75341EF8
Certificate serial:       0E0D032BE90B30B5CB104E76E1D3F59323129B3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft
Manifest number:          02D1
Signing time:             Sat 26 Jul 2025 11:00:00 +0000
Manifest this update:     Sat 26 Jul 2025 10:55:00 +0000
Manifest next update:     Sun 27 Jul 2025 11:00:00 +0000
Files and hashes:         1: 323830343a373963633a3a2f33322d3334203d3e20323731333238.roa (hash: ioQjGfieQHF3yV2fgI8Chw4pCzVaqcleon3vtaTviRw=)
                          2: 3230302e392e3131362e302f32322d3234203d3e20323731333238.roa (hash: oltG1noOnbrRoM0sS15kDu8e6YFzCzXI+kuYiuRIpNo=)
                          3: 3DFAB11D75C819D05773554EBACF15CD75341EF8.crl (hash: NvRTzzlQF7e3MEYZEHxZp/u0kVyVt8NG43xkMDVLwXY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.crl
                          rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0d:03:2b:e9:0b:30:b5:cb:10:4e:76:e1:d3:f5:93:23:12:9b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DFAB11D75C819D05773554EBACF15CD75341EF8
        Validity
            Not Before: Jul 26 10:55:00 2025 GMT
            Not After : Jul 27 11:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c6:2b:42:dd:83:fa:86:28:60:bf:b0:35:a2:
                    cd:16:aa:93:32:54:a0:b6:7d:e0:60:0d:14:5d:22:
                    0e:3c:94:44:20:43:f1:7b:5d:22:c5:f3:55:c7:ed:
                    bc:0d:8a:d6:11:b6:c9:4a:76:cb:3d:3a:be:24:bf:
                    00:17:d8:a4:2c:b0:4f:f7:41:8e:e0:7f:67:29:5f:
                    5e:52:ce:d5:77:02:55:34:3b:7f:2e:e0:d0:46:68:
                    a8:ea:f2:8f:71:cb:76:42:9d:45:b1:57:77:4d:51:
                    b0:61:50:6e:b0:36:d6:c3:87:f5:bd:36:ea:41:af:
                    d1:97:45:e7:0c:ef:ce:cd:75:00:3e:e9:ab:c4:1d:
                    42:03:55:a5:14:d4:f0:04:52:dd:8b:fb:57:d1:18:
                    5e:89:c2:70:17:1a:e2:67:d5:87:5f:70:67:29:43:
                    b9:56:f7:3a:8f:49:1c:8f:d8:59:a0:0b:47:c5:aa:
                    a3:23:f6:15:18:0d:a9:f2:45:5d:e9:02:07:0d:fd:
                    5e:4e:a3:30:a5:73:6d:86:05:ce:e4:fb:5d:d8:1f:
                    cd:2d:5c:42:a1:19:d0:57:c8:26:fc:6a:df:64:af:
                    c1:c7:26:89:f5:3d:a4:23:71:63:ba:b1:50:5d:f8:
                    82:d2:03:35:be:77:73:bf:e8:93:f4:4e:76:94:7b:
                    ef:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7E:7A:F6:AF:19:3A:4E:5C:1E:97:3F:51:36:7E:60:8A:4C:AA:10
            X509v3 Authority Key Identifier:
                keyid:3D:FA:B1:1D:75:C8:19:D0:57:73:55:4E:BA:CF:15:CD:75:34:1E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f2:c5:35:de:e4:04:9a:d1:ad:65:10:c8:bd:a5:e4:87:42:
         2a:5e:73:60:ac:50:1b:05:dd:91:99:1e:61:50:f8:30:10:b1:
         f7:0c:c3:ac:61:96:37:7d:6f:a6:83:9f:99:a9:ce:e7:a6:59:
         5a:f8:93:4c:c3:e1:d2:28:b6:6f:2e:94:c0:db:44:2f:75:03:
         56:c0:b9:b3:21:24:59:49:ca:09:7c:2e:45:5d:43:07:95:90:
         03:a1:6a:2d:bb:5c:48:cf:1f:a5:29:76:9f:06:01:2b:3a:2d:
         91:51:c1:d0:5e:59:ff:ce:7f:54:e1:da:9d:b1:02:1b:7e:19:
         c0:91:36:71:d1:95:2f:8e:df:fd:27:16:99:1d:88:b2:06:b7:
         43:64:af:e6:02:c0:55:b4:84:94:49:0e:43:ca:1f:a2:03:1b:
         70:af:a1:04:44:f5:2b:bf:b8:b5:67:20:c3:a4:ef:a8:f6:be:
         20:e0:2f:26:e1:59:8e:b5:ce:41:92:26:df:ac:19:de:f4:45:
         74:78:0f:c0:2a:9e:77:45:c1:38:be:75:58:cb:b1:69:90:db:
         85:74:be:ae:9e:fb:7f:00:c1:2e:0c:ed:d4:b7:5f:71:40:c9:
         52:17:3f:96:1c:2b:1d:01:73:96:98:a9:8d:d5:61:87:19:f0:
         0b:6c:df:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:17:52 2025 by rpki-client