Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.mft
File:                     FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.mft (raw, json)
Hash identifier:          k9N/x2m+x9AHXzqyofxQJWGSN1VTbdyH84ohZp/xxA4=
Subject key identifier:   37:61:BF:12:02:D7:DA:35:74:BB:31:DF:6C:C7:E8:D0:26:37:C3:F2
Authority key identifier: FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04
Certificate issuer:       /CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
Certificate serial:       22ED0F5FC7E0A9384634FAE5C990CC7803C948D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.mft
Manifest number:          0235
Signing time:             Fri 06 Jun 2025 17:42:51 +0000
Manifest this update:     Fri 06 Jun 2025 17:37:51 +0000
Manifest next update:     Sat 07 Jun 2025 18:21:51 +0000
Files and hashes:         1: 34352e3139312e36362e302f32332d3233203d3e20323639363730.roa (hash: OPfX4aH9VidbAvjo7i8JO5PxyNZKwBWelDx98S3S08Q=)
                          2: 34352e3139312e36372e302f32342d3234203d3e20323639363730.roa (hash: XW5LR66uKbkanx3DI1HAmd5C7rlphLrG2CaxVnzCojU=)
                          3: 34352e3139312e36342e302f32342d3234203d3e20323639363730.roa (hash: et2d5C1LvbVi+3HziuMqUpcdHLCkSTbuGOUrlOTo/FI=)
                          4: 34352e3139312e36342e302f32322d3232203d3e20323639363730.roa (hash: n98cOX6llMzCwxXNNcbE69cO2pmF5p82hcBOUmqryUg=)
                          5: FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.crl (hash: +ViE320z56pyvKpruT1JaoEmPPLr/DqsSQIhmyIXDjI=)
                          6: 323830343a363832303a3a2f33322d3332203d3e20323639363730.roa (hash: hTMqyB3upDkb42MCSYVvpr9SaCQvOhMkBLbn8M3cDkw=)
                          7: 34352e3139312e36362e302f32342d3234203d3e20323639363730.roa (hash: XliBItMVJqUpGd2PGu0OmcyhpHkSRxxumnwQGb35Hz4=)
                          8: 34352e3139312e36352e302f32342d3234203d3e20323639363730.roa (hash: tQ9gjcr2gp4L66Gkr2akbvsHVNSqfTjFSN5MfeOpoag=)
                          9: 34352e3139312e36342e302f32332d3233203d3e20323639363730.roa (hash: 0JHTtjoFJdH5rBRMLVhc7Knl0mJnls587sQp/BxXLVE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.crl
                          rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 18:21:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ed:0f:5f:c7:e0:a9:38:46:34:fa:e5:c9:90:cc:78:03:c9:48:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
        Validity
            Not Before: Jun  6 17:37:51 2025 GMT
            Not After : Jun  7 18:21:51 2025 GMT
        Subject: CN=3761BF1202D7DA3574BB31DF6CC7E8D02637C3F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fe:40:f1:c4:5d:e5:09:97:62:98:59:7d:ee:
                    3b:99:24:f3:59:2c:f0:60:1c:65:ff:b5:f5:a2:9e:
                    23:ca:39:ab:7c:e8:1f:56:0d:d5:8c:14:3f:a2:39:
                    6f:f3:cb:55:77:9e:dc:b2:15:78:be:b7:ae:ff:fb:
                    99:ee:11:cf:ee:6f:8d:4b:2d:8b:38:e7:53:5c:24:
                    e8:38:fa:94:5d:a8:35:28:22:dd:5e:e1:5c:21:f2:
                    70:93:78:66:f3:3a:e2:60:0b:09:99:fd:73:ac:73:
                    6e:3c:bf:a8:a5:f1:0e:e9:4e:12:56:ee:96:a3:58:
                    ec:ff:1d:c2:63:c4:cc:bd:b4:29:ef:cd:4e:3f:aa:
                    d6:30:6d:18:fb:51:43:86:6a:9b:1e:fc:04:e2:b2:
                    aa:b1:5e:b1:e9:f0:87:d4:c8:13:be:26:b0:66:46:
                    9d:b3:77:9a:87:c5:39:e5:54:88:90:b9:49:3b:a5:
                    72:ce:ac:ec:78:64:40:42:81:62:23:ae:84:dd:8a:
                    05:af:62:b8:a3:a3:3d:be:75:6b:24:c1:6f:12:8c:
                    0b:8c:ce:0c:92:fa:5a:a4:96:ae:52:0c:59:52:9c:
                    4d:1a:ac:22:4e:81:3f:4a:e9:e0:7c:89:0d:19:bd:
                    04:cd:23:e0:66:57:58:f7:82:0a:cc:0a:be:62:d2:
                    98:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:61:BF:12:02:D7:DA:35:74:BB:31:DF:6C:C7:E8:D0:26:37:C3:F2
            X509v3 Authority Key Identifier:
                keyid:FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a8:26:b6:72:2d:db:ac:7c:6d:8f:3d:50:72:b4:ee:08:dc:
         d6:ad:ae:7e:19:4e:32:b5:58:35:dc:9c:e4:73:d3:48:a7:95:
         28:25:88:bc:1c:04:d6:8f:28:00:e7:9a:20:54:3c:c7:eb:1c:
         f5:f1:0e:f4:ae:59:ef:3a:ab:c1:47:99:c9:aa:10:e3:fa:6b:
         80:b5:4c:e2:9e:a2:f8:f4:0a:5b:01:c4:fe:4a:f0:e5:fa:23:
         6a:37:fa:5b:c7:81:71:c5:1a:f2:08:82:49:a1:b1:fc:54:03:
         52:b9:ce:66:30:ef:7f:c0:72:b8:50:52:e3:67:20:77:f2:36:
         a3:14:fc:e4:df:73:52:b1:cf:de:11:0b:89:4f:1b:f0:3f:58:
         bd:e0:fc:d0:89:4a:6f:b3:58:46:3f:15:b7:54:65:2d:d5:62:
         2c:be:45:8f:a4:93:b5:a5:6b:0f:26:31:88:d1:02:a9:da:6a:
         e1:85:d4:52:27:ac:05:90:e5:ab:13:cf:96:22:7b:2f:44:a8:
         ec:8c:08:1e:f9:73:c8:75:ce:94:30:00:5a:6e:b5:ba:b0:b6:
         fa:63:b9:ee:6b:97:f3:98:c1:9d:49:f4:aa:ea:32:64:76:35:
         b8:9e:32:a6:59:6a:68:bc:e9:6c:d1:a4:38:74:aa:9e:1f:f0:
         df:d6:ca:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:08:35 2025 by rpki-client