Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft
File:                     3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft (raw, json)
Hash identifier:          VzgTI0AJzTYhlv5l7t21fEN8ztht4Xbh7l03q1EM5Cs=
Subject key identifier:   A2:D9:F0:2B:28:3C:8F:1B:2D:81:74:D7:64:BC:86:3C:2B:B0:01:F0
Authority key identifier: 35:36:DA:9F:A1:CF:7E:31:2A:AF:77:21:ED:15:38:4E:06:3A:E2:E2
Certificate issuer:       /CN=3536DA9FA1CF7E312AAF7721ED15384E063AE2E2
Certificate serial:       1EEF2FE2F7ED705B6CF3ACA077687C2A69554350
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft
Manifest number:          029F
Signing time:             Tue 19 Aug 2025 22:51:19 +0000
Manifest this update:     Tue 19 Aug 2025 22:46:19 +0000
Manifest next update:     Thu 21 Aug 2025 01:48:19 +0000
Files and hashes:         1: 3137302e38322e3132302e302f32322d3234203d3e20323633363638.roa (hash: oLFcJDR+piIEBdqrJGQ1URlRH59LSw4XFpddQMkvr2g=)
                          2: 3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl (hash: UwiIc4msUK7Bc7vhQiqt3K4ApHRESOFJW+o118pqML0=)
                          3: 323830343a313134383a3a2f33322d3438203d3e20323633363638.roa (hash: xdHdjHLVcOu3wNmoYsUtHv/HX60zCuV6THDKgGvGDkE=)
                          4: 3139312e3234312e35362e302f32322d3234203d3e20323633363638.roa (hash: FKNYF9UdtLT5dzH41/M3vw86QkrwsEo9zVWfnFSF5xQ=)
                          5: 3134332e3133372e37362e302f32322d3234203d3e20323633363638.roa (hash: jS2yt6iWqnU4Fu3w0oDSmPWdZIRbmkruFgSjKM6ouBM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl
                          rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 01:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ef:2f:e2:f7:ed:70:5b:6c:f3:ac:a0:77:68:7c:2a:69:55:43:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3536DA9FA1CF7E312AAF7721ED15384E063AE2E2
        Validity
            Not Before: Aug 19 22:46:19 2025 GMT
            Not After : Aug 21 01:48:19 2025 GMT
        Subject: CN=A2D9F02B283C8F1B2D8174D764BC863C2BB001F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:10:94:b9:3f:6f:4e:54:d0:b4:67:eb:14:71:
                    3b:f5:6a:54:e0:c7:c5:3f:1d:46:09:71:6d:74:47:
                    7d:38:3c:dd:1c:79:b4:fa:2c:7f:e2:88:c2:6e:02:
                    e8:87:20:08:5e:17:87:64:76:94:69:9a:a3:c9:9b:
                    8d:af:f6:f0:72:f4:fc:5a:34:7c:1b:37:5c:0d:1f:
                    2d:27:81:8a:62:05:db:1b:c5:db:da:ab:40:45:a8:
                    d8:35:ee:2e:5e:de:9e:2a:d8:4c:fb:9e:e3:b3:7e:
                    2c:bb:7b:1f:61:d7:3e:fa:3c:a9:9c:cf:9b:f7:14:
                    1b:c3:43:86:09:6d:b3:6e:07:33:3d:fc:a2:71:f2:
                    1b:92:1b:f7:6c:aa:ee:2e:b4:99:e1:33:d9:60:6f:
                    81:37:51:07:66:91:26:fa:22:7f:c5:3c:a9:6e:f7:
                    3d:47:40:7c:86:10:f2:d0:eb:ef:fe:89:f0:93:cd:
                    14:ef:5d:4c:6b:a5:5d:47:de:3c:ea:50:40:ba:8e:
                    5c:fa:e8:d9:bb:ee:ed:25:6f:06:15:f2:5b:3c:7e:
                    c0:7c:25:fe:42:07:ad:29:08:e6:78:90:d3:88:61:
                    e4:ee:01:c4:c0:22:e2:5b:11:45:ef:be:90:21:93:
                    ec:91:70:d1:2f:9a:83:4b:0e:59:04:a0:73:a5:14:
                    8d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D9:F0:2B:28:3C:8F:1B:2D:81:74:D7:64:BC:86:3C:2B:B0:01:F0
            X509v3 Authority Key Identifier:
                keyid:35:36:DA:9F:A1:CF:7E:31:2A:AF:77:21:ED:15:38:4E:06:3A:E2:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ea:cd:fc:0c:71:0b:5c:83:04:97:bd:0b:34:29:ad:76:70:
         37:2f:6c:bd:6e:62:03:72:54:d8:8f:71:5d:5b:f4:e0:94:4b:
         e4:74:22:81:53:f2:a6:22:d5:38:08:1c:84:99:d6:17:58:49:
         68:cf:a2:83:90:49:6e:17:3c:db:b7:11:9a:72:b8:e4:1b:18:
         7a:57:a7:35:50:65:db:a7:2c:85:f0:82:28:d4:90:ac:3d:fc:
         00:1d:cf:a2:a5:10:1b:5f:88:c7:61:c4:44:55:b5:5f:5a:7c:
         32:68:77:a9:9e:c3:c3:4c:b9:10:3b:f5:73:65:9f:14:75:f3:
         fc:3b:bf:00:10:88:63:20:03:7a:f9:0d:64:3a:5f:cd:71:35:
         51:fa:de:7e:9f:8b:11:d2:e9:0c:d9:b9:b5:50:f2:8f:d0:7f:
         33:ca:59:9a:f5:82:e8:f0:aa:dd:cc:d3:59:5e:e6:0f:5a:93:
         a8:d9:53:43:da:4a:8a:af:c2:17:c3:b8:c9:9f:e3:ca:76:40:
         2c:98:a6:bd:4c:22:c0:28:19:eb:0d:ce:f7:01:06:48:2e:4e:
         bb:97:4c:70:f4:e7:ce:5e:8a:6d:35:b3:65:15:e9:0c:3a:21:
         f1:a8:39:ba:d9:21:ba:6b:12:22:f7:2a:c8:58:f0:ff:23:d3:
         13:50:08:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 16:27:31 2025 by rpki-client