Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
File:                     38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft (raw, json)
Hash identifier:          yo4Q6dH1HQ1JfxHwmsW564jKlG7K/4J6H7ZzzpZgPIQ=
Subject key identifier:   A7:24:C7:E2:04:0B:E9:F0:33:2B:E1:61:D9:57:A6:F3:89:0E:8F:FB
Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
Certificate issuer:       /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Certificate serial:       64F414B9158C0877F073690A408E58CBBFFA0668
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
Manifest number:          0307
Signing time:             Mon 03 Nov 2025 01:59:01 +0000
Manifest this update:     Mon 03 Nov 2025 01:54:01 +0000
Manifest next update:     Tue 04 Nov 2025 05:25:01 +0000
Files and hashes:         1: 323830343a343031633a3a2f33342d3334203d3e20323635393335.roa (hash: Sahl2RiuVTohechxqH9kEgIw0rbG9MfR6lFxaweqFQI=)
                          2: 323830343a343031633a343030303a3a2f33342d3334203d3e20323635393335.roa (hash: u9fwuwlcVlrLUEDLWvJsUdw6PZpcbu5LujjwqTVS6zs=)
                          3: 3136342e3136332e32322e302f32342d3234203d3e20323635393335.roa (hash: 35z3e246Z+fyO5X/GtPsgCr1RalEayMlVcqQWqIJGxc=)
                          4: 323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa (hash: 3triGDE1ZxhPAnqJadqRcQb4fDCJ1Pqb6fzxF7HMxXo=)
                          5: 3136342e3136332e32332e302f32342d3234203d3e20323635393335.roa (hash: xPngmDYkRZ0N4BgFGzfITwtVOSvC5t5MiTn/0VX+8Fs=)
                          6: 38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl (hash: nD47CGeX+Eyz/80VpmWF2ZVVMHStm106Scy26MdRUcw=)
                          7: 323830343a343031633a383030303a3a2f33342d3334203d3e20323635393335.roa (hash: K6hKgjGHS2JMsgie2uti/OK2EXoaH1YdGKcx614Q77c=)
                          8: 3136342e3136332e32302e302f32332d3234203d3e20323635393335.roa (hash: wg2cqsCgcZbAdOFn10mzbSUzdoDtdWxiDjUxBp/NKqA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl
                          rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f4:14:b9:15:8c:08:77:f0:73:69:0a:40:8e:58:cb:bf:fa:06:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
        Validity
            Not Before: Nov  3 01:54:01 2025 GMT
            Not After : Nov  4 05:25:01 2025 GMT
        Subject: CN=A724C7E2040BE9F0332BE161D957A6F3890E8FFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:29:94:74:ea:80:0a:cd:b9:31:99:c3:6f:11:
                    93:3e:a4:4b:e3:9e:8f:5a:5a:3c:ec:97:c2:c0:bb:
                    5d:33:e1:e2:3f:35:c9:18:4b:1a:31:2c:78:c9:bf:
                    d9:45:8b:7a:71:a7:3f:22:cf:14:9c:e8:d7:75:57:
                    81:f9:a0:93:ef:0e:79:38:c1:c8:0d:4c:64:71:b0:
                    3d:e5:6f:f2:07:d1:a4:48:b7:57:e4:b6:5b:c3:09:
                    98:bd:29:9d:d1:7e:57:ae:94:80:b9:0e:fe:1d:88:
                    7b:d1:50:25:08:5a:e9:af:e4:74:17:8d:ab:4a:1e:
                    be:c5:14:36:7c:18:9b:94:e0:d1:9a:44:44:89:7a:
                    1f:b3:39:30:d5:20:da:aa:c9:3c:7a:44:e5:80:19:
                    f6:8d:da:87:99:57:72:3c:f9:ae:0c:d0:1a:b3:b1:
                    02:78:79:48:a5:17:07:93:c2:49:d1:e5:bd:1b:1c:
                    8d:7b:cf:9c:23:e1:7e:7d:a9:40:74:cb:bd:07:f7:
                    c1:54:78:c0:06:df:ea:77:1d:78:06:1b:97:ea:1d:
                    39:34:43:7e:74:3b:af:0d:a7:63:1a:95:02:00:a5:
                    8b:fd:15:44:2d:99:f1:dd:9e:47:a6:d9:f4:c0:8d:
                    ce:cb:90:cb:e5:71:fe:9f:95:ad:af:27:8b:85:c6:
                    d3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:24:C7:E2:04:0B:E9:F0:33:2B:E1:61:D9:57:A6:F3:89:0E:8F:FB
            X509v3 Authority Key Identifier:
                keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:20:60:2c:61:98:24:97:81:b9:48:44:4c:d4:cc:cf:e3:0f:
         7c:5f:4a:19:54:06:e3:1b:93:80:6e:00:22:b8:0b:33:5c:bf:
         59:0f:e8:e8:53:f5:ff:05:cc:87:56:a4:af:39:35:c4:ce:09:
         5b:16:3a:0e:60:d5:e6:db:0d:8c:6e:e6:f8:39:23:85:62:e2:
         1a:5d:ff:d0:d9:5e:e0:19:6b:7d:28:80:60:d7:6e:b9:20:7a:
         60:93:c6:26:3b:19:13:12:7c:c0:5f:d9:33:4d:5a:70:fa:3e:
         b2:eb:f3:a5:6d:af:ae:fe:2e:2a:e4:47:34:68:14:af:84:3b:
         78:b9:f7:91:a9:c2:62:08:73:c3:d7:60:13:22:38:95:54:77:
         d5:2d:e3:8e:1a:72:08:2c:4e:71:47:77:9b:61:b9:79:88:dd:
         47:61:55:4a:c6:7e:a5:f2:2e:5c:2c:b9:a3:a1:2f:2d:01:c8:
         9e:ed:22:41:36:e4:e2:45:e4:27:71:87:51:c2:56:ed:a1:7c:
         d1:68:92:0b:f2:42:d6:cd:f2:f4:73:ba:60:1c:9d:5e:4e:22:
         5f:d2:58:54:0c:0e:6c:ca:7d:a3:a9:fb:93:0e:5e:7c:ba:ad:
         7a:15:8c:b9:d5:1a:7d:2f:e7:ae:fb:a4:49:11:8c:c1:ae:d1:
         5c:a3:1e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:32:43 2025 by rpki-client