Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft
File:                     DD0CBBA83E82BACB16521E6328443385F92099E0.mft (raw, json)
Hash identifier:          aaJ8lAMXRGTTGqeG6+qbZmuEw+O+Ag4rX5HF62Gxa2g=
Subject key identifier:   39:89:61:96:0D:92:95:EA:0E:65:DE:E9:7A:61:D2:22:C7:F2:A8:A7
Authority key identifier: DD:0C:BB:A8:3E:82:BA:CB:16:52:1E:63:28:44:33:85:F9:20:99:E0
Certificate issuer:       /CN=DD0CBBA83E82BACB16521E6328443385F92099E0
Certificate serial:       3C11B7E53B0014EA95546F558A4B5A3106A591F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft
Manifest number:          3F
Signing time:             Fri 04 Apr 2025 23:46:00 +0000
Manifest this update:     Fri 04 Apr 2025 23:40:53 +0000
Manifest next update:     Sun 06 Apr 2025 02:17:53 +0000
Files and hashes:         1: 3136302e31392e3235302e302f32332d3233203d3e20323636313732.roa (hash: HY6MYAFLtJg5jOQ4B/eycEVQ9U7PrF4BqIW3WcAPgb4=)
                          2: 3136302e31392e3234382e302f32322d3232203d3e203236363137.roa (hash: 7LyoeTKMiyxga4IK7BSrP73puUFLAu8PmxcbDm3zrRQ=)
                          3: DD0CBBA83E82BACB16521E6328443385F92099E0.crl (hash: PJwLP8LoaLxQWrTUfeza7aqI/71o3snGISCZ3zV+QZ0=)
                          4: 323830343a336264303a3a2f33322d3332203d3e20323636313732.roa (hash: ARQtTGJn8ecRrryzPLbTrDMNnVh5iFR4d/qAnKHlnZ8=)
                          5: 3136302e31392e3234382e302f32332d3233203d3e20323636313732.roa (hash: b/OyRpa49KnqeQJPH6x6Bw89aO+HIjXgb0fRAprBKPc=)
                          6: 3136302e31392e3234382e302f32322d3232203d3e20323636313732.roa (hash: zuFJSRGwNPo1tkuKWISReBRx/vbX03nb+vL0l2eDEQA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.crl
                          rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 02:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:11:b7:e5:3b:00:14:ea:95:54:6f:55:8a:4b:5a:31:06:a5:91:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD0CBBA83E82BACB16521E6328443385F92099E0
        Validity
            Not Before: Apr  4 23:40:53 2025 GMT
            Not After : Apr  6 02:17:53 2025 GMT
        Subject: CN=398961960D9295EA0E65DEE97A61D222C7F2A8A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:75:5c:ef:96:8b:99:b5:82:f8:56:9c:ab:15:
                    18:0f:08:94:9b:e1:c2:46:e6:9a:7f:c9:8b:30:01:
                    c1:dc:1a:eb:b0:d3:1b:2f:b7:e7:76:c0:bb:00:f5:
                    b4:e5:be:cc:4e:b3:af:26:da:b3:c7:c6:91:c8:5f:
                    43:42:e6:36:c6:fa:88:33:e2:18:d7:88:79:7d:f4:
                    29:8c:64:30:e9:f7:d6:c1:c1:71:97:b6:d3:ea:e7:
                    60:5a:3f:02:4c:5f:c7:36:bc:1c:10:eb:25:68:0d:
                    8e:b4:ce:12:da:3e:38:79:a8:54:e8:c9:80:56:c6:
                    13:1c:22:c1:38:69:97:e6:bc:20:50:64:3e:f7:32:
                    59:3c:e9:8a:ee:86:38:e1:2e:0f:bc:7e:4c:b8:50:
                    43:19:df:45:9e:ed:8d:84:56:db:d5:27:e0:17:5c:
                    9d:d6:15:9b:54:f7:84:8b:ce:9e:f0:ca:e7:94:03:
                    44:57:61:e7:0f:a8:7c:84:c2:65:b1:30:2e:0b:6e:
                    f4:9e:4d:b8:74:25:0f:eb:25:ad:7d:99:78:3b:2c:
                    c2:03:e1:a9:30:c7:84:79:93:fa:86:ca:1c:79:e0:
                    41:eb:e3:c1:ce:84:ec:23:35:c4:60:4d:17:2e:e0:
                    f1:e3:10:b4:76:9a:6a:a1:4a:3a:66:8b:28:52:2f:
                    81:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:89:61:96:0D:92:95:EA:0E:65:DE:E9:7A:61:D2:22:C7:F2:A8:A7
            X509v3 Authority Key Identifier:
                keyid:DD:0C:BB:A8:3E:82:BA:CB:16:52:1E:63:28:44:33:85:F9:20:99:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:7d:6d:53:6b:e7:2e:f2:c8:57:16:4b:f8:ae:b3:af:5b:6a:
         22:8e:a5:ac:f4:f1:d8:06:ce:ac:4a:51:48:cf:22:ef:12:e5:
         f4:92:f0:c4:9a:e4:d9:e3:f8:17:d9:f1:6e:89:c1:92:19:3d:
         d6:e1:8b:d3:d3:f5:fa:d5:10:ef:fe:42:e5:57:aa:83:87:bf:
         b5:8a:4b:7d:46:c5:45:8d:c5:2e:a8:6a:23:ae:b6:02:93:e8:
         15:2e:6b:4a:39:a1:c2:ae:c8:20:32:00:e7:b5:fd:bd:9c:7f:
         a8:4e:5c:1e:f0:33:2e:bd:f0:be:51:54:c8:e5:05:40:44:48:
         77:d6:f9:4b:2c:2d:7d:75:a2:ca:df:94:27:d0:80:73:d6:15:
         81:6c:15:d7:a6:ce:0f:1d:d1:84:43:30:c1:2f:33:60:af:5d:
         66:00:f3:b1:97:82:7d:a6:14:35:a8:c9:20:8d:51:41:07:69:
         6b:b3:85:8f:30:7e:4d:be:c7:a7:bf:61:66:da:a9:d0:3f:8d:
         48:0d:b5:b2:21:18:08:f3:77:40:b6:05:c6:e6:9e:ba:9d:14:
         f0:5f:e4:0b:4d:e9:63:02:f1:6d:e1:a9:d8:ac:d1:83:0d:21:
         c8:9c:ef:95:9e:c9:1f:07:63:d4:7d:9e:88:06:d1:bc:c5:27:
         ea:cf:24:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:23:34 2025 by rpki-client