Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.mft
File:                     3438EF474B88120C954212EE504ACF2C02AF3889.mft (raw, json)
Hash identifier:          6ipjJ602Lkk30fyPtxn/XMVjfxH2n91mzx1IWYGWFhw=
Subject key identifier:   DE:8F:C7:E6:D6:17:40:F5:F7:5C:92:02:4F:E4:25:38:C4:69:AF:D5
Authority key identifier: 34:38:EF:47:4B:88:12:0C:95:42:12:EE:50:4A:CF:2C:02:AF:38:89
Certificate issuer:       /CN=3438EF474B88120C954212EE504ACF2C02AF3889
Certificate serial:       142A9B0BA2E97762A7DC07D5E8F0191315E2E631
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3438EF474B88120C954212EE504ACF2C02AF3889.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.mft
Manifest number:          CD
Signing time:             Wed 17 Sep 2025 17:26:18 +0000
Manifest this update:     Wed 17 Sep 2025 17:21:18 +0000
Manifest next update:     Thu 18 Sep 2025 19:33:18 +0000
Files and hashes:         1: 3137372e34342e302e302f31372d3235203d3e203238323032.roa (hash: /U/OngAc0MYV9SINp90LnkMguo0z2IqQ0Y1lvs4W4uw=)
                          2: 3138362e3231362e36342e302f31382d3235203d3e203238323032.roa (hash: 1/pyHMIAfL06J0VEIZqoHDUBduatU86nbTixn3aNe10=)
                          3: 3139312e35332e302e302f31362d3235203d3e203238323032.roa (hash: fzlJfuNfGs98/1MXM9FAPOukrmfvjUc9Upo5Ah/hiSo=)
                          4: 3138392e39312e302e302f31392d3235203d3e203238323032.roa (hash: Hu0ei8r8XFIYW5cidhumkYDbO6Mg8ZzPdHu1MTyIKx8=)
                          5: 3138372e34342e302e302f31382d3235203d3e203238323032.roa (hash: k4ZEWqStZqdeiizwzpxYS/y21HrZDTgVMksarnxQxvM=)
                          6: 3137372e3133302e3132382e302f31392d3235203d3e203238323032.roa (hash: Z6pIhsjnVhIGFKWYZKvCVj5vy8bkp1QZ7wOc64Sp6nY=)
                          7: 3438EF474B88120C954212EE504ACF2C02AF3889.crl (hash: olKPzUtDjIpVvk13m2S49iRncPFn83FrWTTyZHEn/d4=)
                          8: 323830343a3837633a3a2f33322d3438203d3e203238323032.roa (hash: 3U8v5wWVU5DKuoqKxOZlyA4aH6wQWVHyDsBw39wyRng=)
                          9: 3138372e3132302e36342e302f31382d3235203d3e203238323032.roa (hash: CUmohz5mDhwwGIiRcgFRXXFnq1N8P5j4aNSMS9oPTwc=)
                          10: 3137392e3138392e3136302e302f31392d3235203d3e203238323032.roa (hash: FcLauEny8HFG+9CDE+cOc2OPV8xlyXFVblqydZFLii8=)
                          11: 3137372e3133302e3136302e302f31392d3235203d3e203238323032.roa (hash: yweAROg5FhlocO1xEgi3/tdYFuc2BclWrzJHyGWs2t8=)
                          12: 3139312e3234302e302e302f31372d3235203d3e203238323032.roa (hash: 4NnsqoSeT+5Zn5TL9p8ulO45uiNKI73CuiSSE2jhQp8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.crl
                          rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3438EF474B88120C954212EE504ACF2C02AF3889.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 19:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:2a:9b:0b:a2:e9:77:62:a7:dc:07:d5:e8:f0:19:13:15:e2:e6:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3438EF474B88120C954212EE504ACF2C02AF3889
        Validity
            Not Before: Sep 17 17:21:18 2025 GMT
            Not After : Sep 18 19:33:18 2025 GMT
        Subject: CN=DE8FC7E6D61740F5F75C92024FE42538C469AFD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8b:6b:e2:3a:d9:89:68:c9:e1:09:4e:d8:bb:
                    c2:98:f7:3a:62:a6:2e:e8:b1:57:0f:cc:f3:2f:6f:
                    ca:d2:da:d3:12:17:54:a5:bf:3b:61:8b:59:cb:1a:
                    f8:47:30:95:b8:98:d8:d8:46:45:8c:27:96:9f:0e:
                    6f:b7:b0:5d:c2:35:7f:5d:cc:5b:03:4a:05:13:57:
                    88:ec:10:ad:af:83:71:2a:65:9e:87:85:47:db:2f:
                    3e:4c:cd:ae:98:34:22:3f:3b:ed:11:cf:ac:0e:78:
                    f2:7c:e3:19:94:51:c5:a8:8c:4d:a2:fd:39:52:b4:
                    dd:3c:68:09:b0:40:1c:50:da:67:d8:86:81:a4:7c:
                    09:9c:47:35:8f:94:34:54:e0:51:a9:94:14:84:45:
                    93:b0:be:b0:e8:03:88:c2:af:69:1e:7e:4f:c5:3e:
                    15:86:e0:5d:26:96:07:b7:26:78:52:b9:f3:6d:c7:
                    6d:58:b2:15:e9:df:6b:ba:b1:ad:90:b3:b8:18:ba:
                    bb:58:85:43:41:c3:7f:a0:0c:a8:77:74:2e:19:fc:
                    3f:ca:d9:5c:2f:d6:ab:2f:74:63:f7:03:21:bf:53:
                    ca:db:87:29:b6:fa:4c:56:c6:69:e6:89:7f:97:04:
                    18:5f:d8:be:16:bb:4d:27:a1:ee:bc:b8:a0:6f:49:
                    1f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8F:C7:E6:D6:17:40:F5:F7:5C:92:02:4F:E4:25:38:C4:69:AF:D5
            X509v3 Authority Key Identifier:
                keyid:34:38:EF:47:4B:88:12:0C:95:42:12:EE:50:4A:CF:2C:02:AF:38:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3438EF474B88120C954212EE504ACF2C02AF3889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:9a:3c:34:92:ed:b4:99:42:7f:7f:f4:94:44:c3:d6:30:d4:
         34:6d:81:d9:83:c5:da:44:b7:c0:7d:86:eb:01:f8:13:99:4b:
         d6:71:b9:23:57:28:15:eb:e9:ff:94:01:06:60:45:24:e0:21:
         89:8f:d2:c8:b3:50:2d:35:2a:aa:9a:37:4b:8a:39:2b:02:5c:
         77:30:5f:0b:59:c0:81:74:2a:43:33:53:19:c7:7f:19:ae:20:
         97:5e:9e:30:2f:86:65:6d:fa:d3:41:5c:0c:2e:5f:b6:02:f1:
         c3:f2:b3:3f:aa:da:67:e3:f4:47:2a:c2:d9:7d:94:ac:ac:e0:
         73:a8:b1:2b:b9:1d:ca:f4:c6:1e:1f:ac:cd:8d:a2:f3:ec:9b:
         aa:c3:72:8c:32:d0:cf:2e:f8:d0:d2:63:e3:0d:68:94:01:04:
         6d:b8:04:44:d8:1c:ed:59:5c:2d:30:7d:bd:f5:a1:cb:de:f4:
         33:54:2b:61:8a:70:05:cc:37:01:e1:d3:ed:56:2b:a9:ea:7d:
         11:00:b3:a8:1f:53:f0:39:ba:81:73:4e:df:2a:5b:d8:7c:f3:
         3a:4e:bb:de:c5:64:10:51:cd:42:83:34:79:8c:46:36:a2:5a:
         14:2a:c0:2d:a9:ba:9d:c5:a6:3f:a0:f9:a8:0d:c4:cb:6c:4c:
         08:d9:93:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 08:11:27 2025 by rpki-client