Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft
File:                     3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft (raw, json)
Hash identifier:          oioQQUgZacj/AE192PSLKd42JOAItaPG6dErv3itOQ0=
Subject key identifier:   FD:81:D3:6F:02:D4:5C:C7:F0:C4:A5:C2:75:A1:04:59:A9:37:29:66
Authority key identifier: 3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D
Certificate issuer:       /CN=3E586F998949245A7BA87D54C48DB6C4360CEB9D
Certificate serial:       63F31DF92BD130A226C0FF26EE352EB57A7B8D6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft
Manifest number:          CA
Signing time:             Fri 06 Jun 2025 10:19:35 +0000
Manifest this update:     Fri 06 Jun 2025 10:14:35 +0000
Manifest next update:     Sat 07 Jun 2025 13:29:35 +0000
Files and hashes:         1: 323830343a6536383a3a2f33322d3438203d3e20323632393533.roa (hash: mHONVwFSZafTrb2bs4XTqeqR/1IxRdzcYgif/PNK+5w=)
                          2: 3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl (hash: pr9ugqYZXbgermfvPowhQlFxbEBH93sPWQR3LjJw/pQ=)
                          3: 3138362e3233352e3234382e302f32322d3234203d3e20323632393533.roa (hash: adeQrk3GHwoD07zzNg8h8DoI+T/hg8cMNdSF33h18Mw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl
                          rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 13:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f3:1d:f9:2b:d1:30:a2:26:c0:ff:26:ee:35:2e:b5:7a:7b:8d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E586F998949245A7BA87D54C48DB6C4360CEB9D
        Validity
            Not Before: Jun  6 10:14:35 2025 GMT
            Not After : Jun  7 13:29:35 2025 GMT
        Subject: CN=FD81D36F02D45CC7F0C4A5C275A10459A9372966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:ee:79:ca:b3:ac:fd:58:a3:a8:0e:bb:74:
                    d3:12:d0:cf:ac:23:da:82:71:2c:72:06:5f:80:a3:
                    2f:c5:09:dd:70:16:60:0d:79:88:66:4e:e3:ae:99:
                    f7:96:58:c0:81:97:39:cc:63:88:97:01:67:72:dc:
                    98:01:5d:02:51:e6:64:e5:83:65:98:c1:9c:f1:7a:
                    f9:45:76:06:b6:0f:91:96:ec:b0:29:1d:90:c7:d4:
                    0a:91:5d:7d:cd:f6:2d:43:2a:a0:b4:ce:78:54:0b:
                    31:0d:fd:ea:a4:93:76:48:14:41:d9:06:18:39:6a:
                    e0:84:06:b8:83:87:de:f4:86:bb:09:b1:2d:7f:47:
                    af:51:2b:f9:17:31:05:17:b3:9d:48:f4:50:33:79:
                    5a:28:01:fe:0d:09:64:b0:42:3e:d5:38:a8:c8:f3:
                    b6:d8:56:06:cb:3a:7f:d9:cf:f9:37:49:30:f4:15:
                    e7:3e:9e:77:86:94:3f:28:58:f1:66:6b:b8:db:1d:
                    45:da:26:5f:4c:22:64:cc:c6:11:9b:b7:d6:da:0c:
                    75:c4:ef:a3:da:17:39:2d:3d:13:b9:0a:db:16:55:
                    b1:f4:50:5c:8d:56:36:8c:64:b3:c9:d7:3c:fe:59:
                    86:7d:79:83:2f:f2:51:b2:e9:1a:56:47:4c:cd:e6:
                    4d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:81:D3:6F:02:D4:5C:C7:F0:C4:A5:C2:75:A1:04:59:A9:37:29:66
            X509v3 Authority Key Identifier:
                keyid:3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:e5:d3:21:c3:06:36:31:6b:38:51:84:d0:40:56:87:e0:c7:
         14:ce:15:5a:d6:ec:cf:91:56:b4:3d:96:69:55:88:b7:75:ee:
         2e:78:1a:c7:92:7c:32:83:44:96:7a:12:05:e7:35:8e:f5:f2:
         fe:2f:67:41:69:76:7e:8e:2f:b6:79:2f:bc:82:9d:45:50:79:
         14:40:cd:d9:8b:90:82:b9:50:2a:9f:fe:d4:86:fd:0f:be:1c:
         80:fe:7f:bf:48:98:64:96:98:11:fa:a0:c2:34:51:1e:fd:27:
         ca:7a:f8:af:ff:08:4b:45:9e:d6:f6:20:50:5d:1a:79:e6:63:
         63:45:3f:0f:1b:1a:0e:94:74:8c:97:86:45:fc:93:14:ea:80:
         fa:af:b5:47:b7:f3:b6:a8:d2:19:ed:c7:0c:ed:c3:70:07:43:
         1f:2c:4b:b6:9e:39:d8:22:11:a1:9a:fe:6c:7f:0c:eb:7c:46:
         04:2f:df:cf:5b:1c:58:3c:1f:13:51:5d:a5:3c:dc:cc:8f:9b:
         e0:83:27:9f:f4:47:8c:87:18:43:86:43:08:a3:75:53:60:ac:
         df:85:4a:27:51:f3:40:28:33:5c:f6:8d:a2:65:99:55:0e:4c:
         ea:0f:04:39:ac:7a:49:15:28:cd:32:ef:2e:53:20:13:06:37:
         f3:ec:c9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:01:51 2025 by rpki-client