Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.mft
File:                     3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.mft (raw, json)
Hash identifier:          bvtphmnRfczft1ZZ4gBphmmZkVco0Yvd1prMfIhTAjU=
Subject key identifier:   85:6A:CB:4D:D6:D1:23:3E:13:62:76:65:02:09:0E:C5:3D:46:FA:CB
Authority key identifier: 3C:20:D4:74:3A:45:7C:18:DB:0F:EA:EA:30:25:E1:CC:D5:1A:47:93
Certificate issuer:       /CN=3C20D4743A457C18DB0FEAEA3025E1CCD51A4793
Certificate serial:       1ABCC2A398DF24434144E2A900B177482AEBF643
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.mft
Manifest number:          48
Signing time:             Sun 02 Nov 2025 19:10:30 +0000
Manifest this update:     Sun 02 Nov 2025 19:05:30 +0000
Manifest next update:     Mon 03 Nov 2025 20:52:30 +0000
Files and hashes:         1: 3137392e36332e38342e302f32342d3234203d3e20323732363737.roa (hash: ixY83XvDBYZiG6O6HGJ3j6UGLPruZNbqMrd4eBjD/Oc=)
                          2: 323830343a383666343a343030303a3a2f33342d3334203d3e20323732363737.roa (hash: XSOLNpw1HK91WxJn7yZZIyP6WKBeEMbquhD7SAI3Lok=)
                          3: 323830343a383666343a3a2f33332d3333203d3e20323732363737.roa (hash: 4gBwo+FEqs8oXpckuT+J3E8Fj/1rr657bMGCD4KwweM=)
                          4: 3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.crl (hash: mj1A8PFlbeDltJs58bVo8EecNcZeKp1mSqKloPwx2Qc=)
                          5: 3137392e36332e38362e302f32342d3234203d3e20323732363737.roa (hash: dbAsN08fXpioH/SKr/9Lm74T/CgJJw26EFJ3HY73NSs=)
                          6: 323830343a383666343a633030303a3a2f33342d3334203d3e20323732363737.roa (hash: jyy841zEqYfLUWDoTIX3svplo1bFMnyvLLcGFd0Ve/g=)
                          7: 3137392e36332e38342e302f32332d3233203d3e20323732363737.roa (hash: Gkte1rZdgZWcFABsNafvYFJLQ8NAOGhF7VkqNdf58CY=)
                          8: 3137392e36332e38352e302f32342d3234203d3e20323732363737.roa (hash: eb8THf7D+lg7QBl+PpAHwb2T72UygbL23Fh2CxutCNU=)
                          9: 323830343a383666343a3a2f33342d3334203d3e20323732363737.roa (hash: 1H4Njegq50Ogk2SmC1VgkspNPO0SqrKrNMRNGqFwLp0=)
                          10: 3137392e36332e38372e302f32342d3234203d3e20323732363737.roa (hash: Nu633KADxeAicjVwe3++2Vju7q9QwmhZ/qPdE+yWOsY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.crl
                          rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Nov 2025 20:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:bc:c2:a3:98:df:24:43:41:44:e2:a9:00:b1:77:48:2a:eb:f6:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C20D4743A457C18DB0FEAEA3025E1CCD51A4793
        Validity
            Not Before: Nov  2 19:05:30 2025 GMT
            Not After : Nov  3 20:52:30 2025 GMT
        Subject: CN=856ACB4DD6D1233E1362766502090EC53D46FACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c3:ae:e3:5b:ee:f4:eb:e7:53:aa:1c:25:83:
                    04:da:7a:0b:bd:e2:5a:1d:69:4f:4c:1e:2a:91:3d:
                    2d:cf:1c:39:c8:0e:32:18:58:b3:55:3c:82:ec:d8:
                    8e:38:d5:31:89:66:d7:4e:58:51:29:7b:ec:fa:ad:
                    d6:8a:77:e5:2f:b0:b1:12:32:a9:86:8b:20:8b:eb:
                    cf:fa:70:5d:63:e0:06:59:e4:b3:6d:5a:80:20:d4:
                    7d:3b:2a:6c:c0:85:55:3b:c4:33:73:ba:24:52:2e:
                    6a:95:07:57:70:49:4e:c8:8d:7a:79:dd:ec:16:c0:
                    75:75:bb:2d:76:3d:b9:89:12:b1:bd:07:0f:50:3b:
                    4a:a2:7b:fb:f3:ae:e0:5e:c6:bc:e2:02:6a:c2:70:
                    24:7b:d4:27:58:73:09:2c:90:87:c6:93:a0:f7:d8:
                    08:8c:1e:77:10:2a:2b:31:3c:18:c8:33:49:70:7c:
                    f7:c2:af:fe:a8:f5:65:46:06:e5:da:c6:e8:2e:7a:
                    04:b5:61:dc:e6:3f:47:b8:58:30:11:8b:9c:fb:ca:
                    81:11:bc:e4:fe:4b:06:fa:ad:f6:3a:e6:3e:30:35:
                    6f:f9:7f:68:d0:93:20:74:85:44:d7:47:48:1d:99:
                    23:36:a8:21:17:2b:8f:ba:71:e7:f3:76:c6:9f:e1:
                    7a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6A:CB:4D:D6:D1:23:3E:13:62:76:65:02:09:0E:C5:3D:46:FA:CB
            X509v3 Authority Key Identifier:
                keyid:3C:20:D4:74:3A:45:7C:18:DB:0F:EA:EA:30:25:E1:CC:D5:1A:47:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:79:1a:8e:0d:e0:49:59:80:e5:59:df:05:8e:86:d4:a4:0e:
         ec:c7:5a:2d:4e:59:01:a6:bd:e2:dd:5a:92:ee:e8:79:85:30:
         c1:bb:25:b6:8d:d9:ad:cc:06:79:8b:9b:e2:f0:39:ce:73:56:
         c4:9e:c4:fd:dc:0f:2f:e6:5d:9e:57:95:fc:fc:56:13:56:19:
         1b:1d:84:46:b2:17:11:ba:7a:3c:8e:96:d9:2d:e3:1f:6d:6b:
         c6:05:9f:93:1f:b6:0a:ef:78:18:5b:27:62:67:11:aa:2a:51:
         7e:93:8f:f0:9f:0d:02:7b:73:19:95:7a:7a:c0:61:e3:b8:33:
         58:1c:f4:b1:3b:f5:bf:57:2f:53:9f:9d:4e:1a:fc:56:12:60:
         6c:0a:86:54:5f:93:c4:ad:13:f3:4f:db:f1:7a:7b:29:28:1e:
         db:3d:0e:2d:b6:6e:68:d4:ae:1b:90:3a:cd:b5:45:c4:71:a5:
         54:57:89:14:e1:f6:91:36:9f:67:96:dd:6a:2f:ae:36:4e:f0:
         a3:b0:2c:31:55:12:bd:b2:4e:15:ec:0c:b4:42:9a:a6:a7:c9:
         47:be:27:94:9b:b5:ec:ff:8c:39:34:80:2f:56:9a:9c:bd:2b:
         cf:17:5c:fe:a2:d2:03:77:a4:cc:22:db:1d:d3:41:2e:fd:ea:
         c8:ba:43:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:36:23 2025 by rpki-client