Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
File:                     6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft (raw, json)
Hash identifier:          /fKH/oTYGiSK3xzzdyHL41nANANCjCn/6Pe6M29IL3g=
Subject key identifier:   52:DE:93:47:E8:70:D7:23:F2:5C:09:39:E1:B8:4C:D3:DD:06:34:FF
Authority key identifier: 6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C
Certificate issuer:       /CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
Certificate serial:       62309D81BA9CB95AA0285B189A14557C2D5E6020
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
Manifest number:          02C8
Signing time:             Thu 18 Sep 2025 03:05:57 +0000
Manifest this update:     Thu 18 Sep 2025 03:00:57 +0000
Manifest next update:     Fri 19 Sep 2025 06:56:57 +0000
Files and hashes:         1: 6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl (hash: FzEbRgkvrDJbtZS3hD08zCAQXrm2+3guR9xAipWOEi4=)
                          2: 323830343a333065343a3a2f33322d313238203d3e20323632373732.roa (hash: jwGypfEcZTI1iJl0YRFLhbSSCMtq7GuPrRa/9uXHV5g=)
                          3: 3138362e3233332e3233362e302f32322d3332203d3e20323632373732.roa (hash: aayLUxa+4PtSzKbXdlcEV5j5+uegyNKpZJNgf1xFsc4=)
                          4: 3138362e3233322e3137392e302f32342d3332203d3e20323632373732.roa (hash: zCJ9NcAZgKh2r/gHTI/+9ji8xjgt5SZ/Um8SDcvF4VI=)
                          5: 3138362e3233322e3137362e302f32332d3332203d3e20323632373732.roa (hash: YHLrw22ihutPUNd9BxRl0QS4TkPEc/vmPOTHqth4DFI=)
                          6: 3138362e3233322e3137382e302f32342d3332203d3e20323632373732.roa (hash: Ot1EWApvBmh4FPs84Z1lY3kwhdYkbmmnY60dPj9p9ec=)
                          7: 3138362e3233322e3137362e302f32322d3332203d3e20323632373732.roa (hash: ISLR/SHc5/TU+SqtFt9tn8WBaID+aj52PKr8f09VylI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl
                          rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 06:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:30:9d:81:ba:9c:b9:5a:a0:28:5b:18:9a:14:55:7c:2d:5e:60:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
        Validity
            Not Before: Sep 18 03:00:57 2025 GMT
            Not After : Sep 19 06:56:57 2025 GMT
        Subject: CN=52DE9347E870D723F25C0939E1B84CD3DD0634FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:20:3b:6b:78:f8:70:d2:71:8f:c6:55:ee:43:
                    16:b2:d4:9a:0b:2e:4d:d7:91:c2:61:82:00:12:76:
                    5e:01:1b:2a:50:f7:a1:08:dc:54:d9:d2:39:a0:34:
                    a9:29:c9:27:25:44:f5:67:59:f9:77:fc:cb:22:4c:
                    10:14:a1:21:27:8b:b4:a0:19:6d:df:f7:89:1d:84:
                    a7:0d:ef:42:4c:68:62:d1:4a:1a:b1:fd:e2:81:cf:
                    03:96:39:06:7d:d0:7a:61:b2:e6:5a:12:d0:be:fb:
                    b3:eb:cd:9a:6d:fe:45:92:45:f9:59:ed:ed:e6:b4:
                    03:30:9c:02:51:92:fe:0a:8f:09:79:89:3f:92:f0:
                    fa:ff:e5:f2:99:9e:50:fb:78:f0:6a:b6:41:26:43:
                    39:48:e0:08:ff:ce:f2:8e:50:ad:a6:87:3c:47:b5:
                    59:a6:53:a7:e7:d8:b0:02:a8:59:4c:b6:43:78:c5:
                    b5:23:2a:05:1d:53:85:ba:4f:fb:d7:c1:49:e9:c2:
                    b3:40:d8:df:24:59:d7:9f:e7:07:43:2e:64:47:5a:
                    e2:fc:98:f7:a3:af:47:9d:67:d6:8a:53:19:38:07:
                    a0:32:4f:5f:30:8c:61:92:34:4f:d1:9d:b3:2f:50:
                    10:0b:cd:3f:98:59:aa:9e:b7:3e:ce:9f:a0:cc:91:
                    04:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DE:93:47:E8:70:D7:23:F2:5C:09:39:E1:B8:4C:D3:DD:06:34:FF
            X509v3 Authority Key Identifier:
                keyid:6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:4d:ca:3f:fb:cd:79:14:a6:21:af:f5:bc:af:18:9a:79:11:
         41:ef:2e:30:67:30:94:81:8f:67:95:b6:4b:12:5b:0f:05:bb:
         75:32:a5:38:fa:bd:ef:44:d7:50:fa:9d:0d:ac:01:79:42:53:
         fe:2a:67:c2:07:ad:9c:d3:67:c0:7c:8b:ca:59:d9:51:bd:e1:
         81:4c:b2:36:e9:b4:75:9a:fd:9c:74:1a:1e:0b:15:0d:44:65:
         cc:86:79:d2:41:e2:c3:f7:0a:2d:b8:81:78:db:1f:98:38:53:
         37:1c:26:0a:f8:35:e3:c8:9c:08:b4:ef:5c:13:ab:2b:28:89:
         00:f2:ce:f8:86:be:9c:f1:a1:be:d6:32:cf:b8:6e:aa:36:54:
         97:77:0e:45:2c:0f:32:b7:83:af:9a:c9:47:a1:54:4d:2d:0c:
         6f:2c:4c:21:60:a0:41:7b:07:66:63:8c:70:5e:8d:36:bb:75:
         c2:77:4e:07:e5:28:21:a7:12:8e:c7:14:cd:ed:79:eb:6e:d4:
         32:5b:27:a5:5a:1d:29:8e:c9:bd:7a:14:24:53:8b:dc:09:f0:
         e7:61:9c:2c:ec:f4:cc:e2:80:bc:3f:a9:f9:6b:6a:b6:3a:70:
         8c:e4:a4:de:c7:c3:fa:d8:dc:17:89:5e:32:24:55:45:5b:cd:
         c0:e6:c0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 14:36:25 2025 by rpki-client