Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6LJ8Nw7zCzsLwMW1EFV1HVYQi386ZpPpnTuW9ztwdp9u/0/301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.mft
File:                     301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.mft (raw, json)
Hash identifier:          1XwZ0v3pAoZLoeOvZIGJ9YrWumA/Hfo8c6RjnwgW4HE=
Subject key identifier:   4E:2D:9F:23:60:01:FD:85:1F:FE:2F:25:15:B0:88:32:8E:9A:9A:2D
Authority key identifier: 30:16:11:F5:C3:3A:5D:1B:48:E3:E8:13:ED:7A:A0:4F:23:EE:16:E3
Certificate issuer:       /CN=301611F5C33A5D1B48E3E813ED7AA04F23EE16E3
Certificate serial:       12CC1E436F1932718C6727E71594772E0E0CDB28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6LJ8Nw7zCzsLwMW1EFV1HVYQi386ZpPpnTuW9ztwdp9u/0/301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.mft
Manifest number:          3A
Signing time:             Sat 14 Jun 2025 20:15:12 +0000
Manifest this update:     Sat 14 Jun 2025 20:10:12 +0000
Manifest next update:     Mon 16 Jun 2025 00:11:12 +0000
Files and hashes:         1: 323830343a393365383a3a2f33342d3334203d3e20323734383038.roa (hash: LF2Y/1ywklXprmHdgD6qU5zwwvbF48txnbXnSXrAFGU=)
                          2: 301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.crl (hash: 43uOO00NI8JX8WNVjutFEKXOP6tN3HIZbBY5TD6LWos=)
                          3: 323830343a393365383a383030303a3a2f33342d3334203d3e20323734383038.roa (hash: 2TdWSCRqjkakOMzELYONxdsNLnMljYWxmsq+xMVVSlY=)
                          4: 323830343a393365383a633030303a3a2f33342d3334203d3e20323734383038.roa (hash: Djo1I0khzxM1cGMB+ppQE6nGMTNTT4fluBp4LcQYEzg=)
                          5: 323830343a393365383a343030303a3a2f33342d3334203d3e20323734383038.roa (hash: 6a06Yt/0/6Dr03cD/7d8VFM5z9TvMkjFCNwFy1k52wY=)
                          6: 323830343a393365383a3a2f33332d3333203d3e20323734383038.roa (hash: iVbyMORKvMf4CK7MB+kJfGMFf/WGWhig4ZUYHuuTwZE=)
                          7: 323830343a393365383a3a2f33322d3332203d3e20323734383038.roa (hash: 8LW57mk1C6ScVmZ5BVqBDkQYBZqh4ZDkDP49bDBVX0o=)
                          8: 323830343a393365383a383030303a3a2f33332d3333203d3e20323734383038.roa (hash: zOlcr6SfQURrW7IAuEuFnIoAM8iZEj/Fx348t3b8E5k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6LJ8Nw7zCzsLwMW1EFV1HVYQi386ZpPpnTuW9ztwdp9u/0/301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.crl
                          rsync://rpki-repo.registro.br/repo/6LJ8Nw7zCzsLwMW1EFV1HVYQi386ZpPpnTuW9ztwdp9u/0/301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Jun 2025 00:11:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:cc:1e:43:6f:19:32:71:8c:67:27:e7:15:94:77:2e:0e:0c:db:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301611F5C33A5D1B48E3E813ED7AA04F23EE16E3
        Validity
            Not Before: Jun 14 20:10:12 2025 GMT
            Not After : Jun 16 00:11:12 2025 GMT
        Subject: CN=4E2D9F236001FD851FFE2F2515B088328E9A9A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0f:60:54:06:25:9f:55:91:f8:8b:bd:71:a6:
                    db:ca:e3:58:9d:6f:2a:73:43:f8:7f:81:2a:c3:d0:
                    1a:8f:29:32:30:2e:53:1f:7f:19:9b:bb:8a:4f:fd:
                    ec:f0:a6:f3:40:05:8a:46:3e:2b:88:0d:f4:f4:d2:
                    4b:4a:1d:53:31:cb:0a:91:5d:a8:8b:e7:48:ca:f6:
                    dc:0a:9e:da:50:98:98:c7:77:b4:d0:7e:ce:71:b6:
                    52:9f:40:63:80:4f:4f:32:6e:80:d3:d5:43:7d:8c:
                    a7:6a:e3:c2:72:4d:45:2a:de:e5:d0:0b:59:7d:e0:
                    74:67:85:18:36:88:82:1d:2c:b0:e2:9e:17:dc:f2:
                    35:81:c8:f4:c2:70:12:59:86:ab:d3:b7:33:bc:d1:
                    5d:e6:a3:66:4e:bb:66:6e:9e:cf:0b:de:55:09:1e:
                    6c:29:d4:f4:96:1f:c9:1b:4d:b3:81:78:19:89:4a:
                    00:87:46:cb:59:01:f1:bf:57:9f:9f:b0:73:b1:2c:
                    53:7e:a8:57:87:1c:42:17:a4:9a:e6:bf:e2:db:02:
                    87:63:97:b7:47:cb:ac:a2:52:59:f0:e6:05:db:6e:
                    44:bd:bc:fc:75:fb:91:9e:84:17:36:0f:23:4c:d9:
                    45:96:a4:81:67:09:db:26:b9:b8:8c:a1:92:18:0e:
                    54:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2D:9F:23:60:01:FD:85:1F:FE:2F:25:15:B0:88:32:8E:9A:9A:2D
            X509v3 Authority Key Identifier:
                keyid:30:16:11:F5:C3:3A:5D:1B:48:E3:E8:13:ED:7A:A0:4F:23:EE:16:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6LJ8Nw7zCzsLwMW1EFV1HVYQi386ZpPpnTuW9ztwdp9u/0/301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6LJ8Nw7zCzsLwMW1EFV1HVYQi386ZpPpnTuW9ztwdp9u/0/301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:91:bf:21:c3:19:be:bd:f9:96:5e:45:20:5a:14:61:47:b4:
         bd:77:c1:6c:c0:5d:33:8f:a4:0e:de:82:b0:e6:70:6f:0f:95:
         05:44:b9:d6:d8:13:15:ba:1b:c4:be:17:04:65:5e:ae:e0:c0:
         95:d9:95:73:fb:7d:7c:8c:9e:25:95:29:e3:53:5f:97:34:ea:
         b5:60:31:c7:4b:8d:c6:61:5e:47:c1:c0:d6:33:f2:a9:e9:b8:
         bb:3d:4c:27:ed:5d:5a:94:fe:8b:27:e3:1f:20:8b:62:d7:10:
         b9:f5:3d:a5:3a:bc:aa:a0:c1:ad:50:1e:85:f7:ea:b4:1a:c2:
         40:b8:a9:0f:fd:89:28:58:7b:39:4c:1b:6a:9b:5f:b7:31:56:
         1d:20:69:64:5a:d2:33:33:66:74:94:c4:c0:5f:67:8c:77:06:
         7d:f5:e0:b2:3e:78:00:6d:cf:b9:23:42:14:04:e5:82:63:88:
         f1:09:81:23:8b:54:57:bc:15:a1:57:62:78:f2:19:2a:da:e9:
         78:09:ad:83:d6:9b:48:31:8f:97:d6:fd:e6:d2:09:61:50:15:
         53:71:4f:0a:59:71:30:22:50:fc:4f:e0:d4:be:71:37:1e:f9:
         96:b7:7c:76:f8:cc:7a:3a:2f:db:e5:68:39:c4:cf:6c:4e:05:
         43:ef:90:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:29:06 2025 by rpki-client