Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
File:                     3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft (raw, json)
Hash identifier:          yYPcHdd2Eyq1mqN6V8TJ1Ify4LvATtFMetTz+NvAgzI=
Subject key identifier:   81:58:7C:41:9C:40:F9:8D:2C:A6:AB:93:F1:8E:9F:45:90:2E:BF:FE
Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
Certificate issuer:       /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Certificate serial:       2A4B46BC01C9F0826B438193924A12D4173192D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
Manifest number:          02C3
Signing time:             Wed 17 Sep 2025 20:50:01 +0000
Manifest this update:     Wed 17 Sep 2025 20:45:01 +0000
Manifest next update:     Thu 18 Sep 2025 23:35:01 +0000
Files and hashes:         1: 34352e3138302e3138342e302f32332d3233203d3e20323639313435.roa (hash: 2RkNWBLR029RFRbh32kFnlXtZFOD9xnYisNTVjldsO0=)
                          2: 34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa (hash: /bpAsgSUi1LnoTyueVXmEbHEdvQmkmUVeA1xO4MqaNU=)
                          3: 34352e3138302e3138342e302f32322d3232203d3e20323639313435.roa (hash: kbu54ESKW1e5BIRWIv2H+d7R8holRL2gmDinoqBBatI=)
                          4: 323830343a363031383a383030303a3a2f33332d3333203d3e20323639313435.roa (hash: Orz/ogX6qFnRjGYGiV2xeJsYmVdzFYD63V3ZXxKfl8k=)
                          5: 323830343a363031383a3a2f33322d3332203d3e20323639313435.roa (hash: pukb5lj9ipcGQlV0LxsDM+V/GjI+AEgmTgzISsvatVU=)
                          6: 323830343a363031383a3a2f33332d3333203d3e20323639313435.roa (hash: nPpf0hhGMugZmNdbWERrNoc79wWP0pZTB/sPp3v04wk=)
                          7: 3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl (hash: +ikc5BTBI1Mv/xsOvzf0f0msEzh3+Jn+hnD1CFQmb5g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl
                          rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 23:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4b:46:bc:01:c9:f0:82:6b:43:81:93:92:4a:12:d4:17:31:92:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
        Validity
            Not Before: Sep 17 20:45:01 2025 GMT
            Not After : Sep 18 23:35:01 2025 GMT
        Subject: CN=81587C419C40F98D2CA6AB93F18E9F45902EBFFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f1:c0:50:3c:61:6d:00:78:fe:3f:f6:09:29:
                    e6:59:8c:f5:a5:af:df:d8:62:34:75:02:38:fd:49:
                    2e:ab:bc:14:aa:de:42:ea:06:d7:ae:c5:2f:fb:60:
                    f5:ad:14:b8:0b:4d:95:e7:a7:e2:80:53:1a:e0:a1:
                    95:82:42:0b:6a:bf:98:1a:b9:2b:0f:e8:ed:6a:31:
                    0f:25:83:f4:fa:a0:ac:30:64:0f:57:56:c7:c3:dd:
                    31:5d:d8:62:5f:04:58:6b:fc:4b:7c:4a:0d:3b:88:
                    b1:2e:1b:ca:78:3e:e3:e0:f5:3e:e1:12:bc:5a:22:
                    fd:28:59:40:a1:93:3e:98:c1:cb:fe:d4:25:0b:f2:
                    70:cf:af:4a:5c:54:90:c9:7b:93:5c:cd:31:e8:92:
                    fa:fe:d8:e6:c2:93:a3:a8:85:e4:15:c1:66:8c:ed:
                    e8:cc:7d:23:01:e8:56:3a:ea:00:00:a1:26:0d:1a:
                    21:48:08:60:66:6f:4c:c1:94:76:7e:3e:9a:bb:75:
                    a6:41:62:f6:76:ea:75:0c:a2:26:3a:3b:1e:62:d8:
                    60:b1:0b:7d:5d:4d:cd:8d:66:2b:8c:39:86:25:6b:
                    e1:25:f3:15:cc:d4:c1:56:bb:74:13:cb:14:e1:3f:
                    f5:9b:2c:12:fd:c5:b2:c7:73:42:28:78:75:1c:8b:
                    b0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:58:7C:41:9C:40:F9:8D:2C:A6:AB:93:F1:8E:9F:45:90:2E:BF:FE
            X509v3 Authority Key Identifier:
                keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ea:fa:d2:d0:6e:66:8f:57:35:e6:33:65:79:3b:65:f5:41:
         4c:74:2c:f0:10:9b:a5:c0:27:1a:db:71:d4:12:af:53:2f:dc:
         0a:2a:f2:80:91:da:cd:0d:1b:76:b7:f2:93:c6:0a:84:0f:39:
         9e:7e:61:05:5d:dd:f4:04:ca:a2:68:0c:bf:62:78:07:77:f8:
         ce:5d:57:c5:17:96:27:e8:5c:b2:17:70:f2:d5:6e:af:2d:ee:
         09:ed:6e:74:94:70:72:1e:89:e9:7c:ba:af:1a:58:ce:b0:35:
         f4:44:c1:c8:25:7b:19:36:21:67:0d:6c:7e:88:ef:98:8e:98:
         9f:4c:1a:90:41:6a:70:98:d3:0b:08:71:f2:21:f9:2e:d7:39:
         df:b8:a7:a5:4a:59:1c:11:8e:3e:2d:75:91:13:1e:f5:e4:92:
         85:4e:d4:e6:c2:22:e9:58:ec:08:00:fe:1e:e5:d5:de:c3:e5:
         dd:eb:2b:36:3e:95:ec:74:cc:05:7c:0a:e9:4a:e8:ee:0d:5f:
         cc:85:6e:f1:45:ab:af:57:81:c4:55:e6:9d:a4:fd:39:0b:f4:
         62:92:16:fc:65:df:1a:97:f8:c0:06:05:76:08:20:55:0a:2c:
         9a:56:12:44:9d:81:7e:a4:81:88:46:82:9c:b0:03:23:36:a4:
         ed:83:79:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:38:58 2025 by rpki-client