Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.mft
File:                     3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.mft (raw, json)
Hash identifier:          VS+UcoUn0DlCzYXanAbssKmbIB1gyG10XgYyNCTsI+Y=
Subject key identifier:   A1:CC:B1:13:B7:00:CD:35:E4:EE:17:A9:88:92:95:10:9B:1B:FA:50
Authority key identifier: 3A:7A:08:E1:E3:3E:38:B8:2F:E4:69:E9:4F:06:C3:17:4B:5F:8C:F9
Certificate issuer:       /CN=3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9
Certificate serial:       49BFE9A4438CC593BA54862852138A342EFB1A19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.mft
Manifest number:          029E
Signing time:             Wed 20 Aug 2025 09:44:58 +0000
Manifest this update:     Wed 20 Aug 2025 09:39:58 +0000
Manifest next update:     Thu 21 Aug 2025 13:38:58 +0000
Files and hashes:         1: 323830343a376262633a3a2f33322d313238203d3e20323731343531.roa (hash: kMnD+RyvuJ0NL+O9RGy/c5aIAQvWBC3Y02pHCInQNkM=)
                          2: 3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.crl (hash: D08Xdnb1eX9HCzVPdFpVVDkJLh20THWWI/NLJCgq5CI=)
                          3: 3138312e3137342e3234302e302f32322d3332203d3e20323731343531.roa (hash: xQm2PYvgNI75n8ZKaEiMNbnP1wrcZYMwPXPGeAGlycY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.crl
                          rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 13:38:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:bf:e9:a4:43:8c:c5:93:ba:54:86:28:52:13:8a:34:2e:fb:1a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9
        Validity
            Not Before: Aug 20 09:39:58 2025 GMT
            Not After : Aug 21 13:38:58 2025 GMT
        Subject: CN=A1CCB113B700CD35E4EE17A9889295109B1BFA50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f9:90:dd:ec:fe:f2:a6:ce:3c:80:78:8d:0f:
                    3d:58:a9:03:96:bc:d5:54:c9:c3:6e:ea:9c:c9:83:
                    8a:9f:a1:56:31:ac:cf:78:a1:a3:f2:9b:17:06:cc:
                    8b:b0:95:43:71:0a:16:fe:11:20:e2:df:b1:be:6e:
                    3e:87:2b:69:2e:00:f3:c0:b6:17:ba:d2:89:25:9d:
                    42:9e:51:d5:83:3f:40:6c:4f:c5:24:a9:de:9b:58:
                    1c:78:05:1e:09:09:a6:50:76:52:34:86:a8:0b:10:
                    cd:41:92:d5:63:2e:59:0b:df:0f:7e:0e:5e:2e:33:
                    ca:9c:da:73:d1:a3:47:c5:ca:ab:8a:dc:b5:4d:af:
                    aa:12:03:a7:95:86:82:97:11:a7:27:da:f0:09:72:
                    95:a3:3c:c8:4c:54:26:82:74:d7:3a:c6:ed:02:4d:
                    3e:56:51:95:33:59:b6:31:5f:ef:0f:de:cb:26:de:
                    da:6e:9f:58:ec:e2:29:32:28:df:91:7c:30:22:d4:
                    91:b9:e6:8e:c5:f2:b2:90:8d:a3:91:b3:b4:85:86:
                    87:f4:74:b1:14:39:24:8c:6d:e5:b0:40:31:36:23:
                    17:e9:8e:6f:e7:df:e3:0e:f2:ec:60:66:02:d4:3c:
                    7e:49:48:12:35:48:8c:8c:54:56:13:36:77:d5:89:
                    85:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CC:B1:13:B7:00:CD:35:E4:EE:17:A9:88:92:95:10:9B:1B:FA:50
            X509v3 Authority Key Identifier:
                keyid:3A:7A:08:E1:E3:3E:38:B8:2F:E4:69:E9:4F:06:C3:17:4B:5F:8C:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:95:2a:71:a6:b7:fc:f1:4f:ea:e3:15:ee:0d:3f:e0:72:c4:
         61:c9:ac:a1:63:dd:ef:c7:11:3b:40:2c:14:36:ef:af:d9:74:
         55:5a:c1:b9:f1:ec:d1:9a:0c:e5:d8:fb:07:68:9f:23:c5:fe:
         78:bd:ed:24:3d:0f:b9:13:20:ff:54:31:0b:57:6d:15:c1:6a:
         34:c0:73:b2:96:65:bf:2e:3c:8e:a7:20:4a:22:c6:f8:4d:1f:
         a4:8f:e3:0b:8a:fd:5d:a0:30:2c:6c:19:46:0e:72:15:c0:93:
         99:b4:62:89:ae:ab:42:3b:07:ed:25:8d:bc:f6:c1:24:7f:51:
         da:a8:e4:b3:8a:20:71:5d:54:4c:0d:99:1c:4d:13:e4:26:7e:
         69:d9:90:9f:c6:28:b4:3c:ed:69:92:34:4f:5c:24:96:0f:41:
         c3:01:d6:e6:3e:f0:8a:30:f4:2b:b2:36:c4:02:f0:4b:29:09:
         f6:2a:1b:5e:00:ea:95:de:90:de:58:7e:86:69:2d:6f:aa:fb:
         94:ed:d2:14:16:ce:87:b9:16:ce:50:43:64:ef:bb:3a:27:35:
         c2:b7:2f:9e:e1:19:30:24:86:69:41:47:f7:84:f9:99:7c:c8:
         9e:5a:a4:e2:b4:27:3f:e7:52:cf:ae:89:0b:d2:0c:bd:fc:c4:
         be:ac:26:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSb/ppEOMxZO6VIYoUhOKNC77GhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E3QTA4RTFFMzNFMzhCODJGRTQ2OUU5NEYwNkMzMTc0
QjVGOENGOTAeFw0yNTA4MjAwOTM5NThaFw0yNTA4MjExMzM4NThaMDMxMTAvBgNV
BAMTKEExQ0NCMTEzQjcwMENEMzVFNEVFMTdBOTg4OTI5NTEwOUIxQkZBNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo+ZDd7P7yps48gHiNDz1YqQOW
vNVUycNu6pzJg4qfoVYxrM94oaPymxcGzIuwlUNxChb+ESDi37G+bj6HK2kuAPPA
the60oklnUKeUdWDP0BsT8Ukqd6bWBx4BR4JCaZQdlI0hqgLEM1BktVjLlkL3w9+
Dl4uM8qc2nPRo0fFyquK3LVNr6oSA6eVhoKXEacn2vAJcpWjPMhMVCaCdNc6xu0C
TT5WUZUzWbYxX+8P3ssm3tpun1js4ikyKN+RfDAi1JG55o7F8rKQjaORs7SFhof0
dLEUOSSMbeWwQDE2Ixfpjm/n3+MO8uxgZgLUPH5JSBI1SIyMVFYTNnfViYXRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUocyxE7cAzTXk7hepiJKVEJsb+lAwHwYDVR0j
BBgwFoAUOnoI4eM+OLgv5GnpTwbDF0tfjPkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnJVUlhXMjhtYjF4cjVLVlVKZ0g2b0xGNGNIamtXUlRQN0t1M0NNcDRL
QTcvMS8zQTdBMDhFMUUzM0UzOEI4MkZFNDY5RTk0RjA2QzMxNzRCNUY4Q0Y5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBN0EwOEUxRTMzRTM4Qjgy
RkU0NjlFOTRGMDZDMzE3NEI1RjhDRjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NnJVUlhXMjhtYjF4cjVLVlVKZ0g2b0xGNGNIamtXUlRQN0t1M0NNcDRLQTcvMS8z
QTdBMDhFMUUzM0UzOEI4MkZFNDY5RTk0RjA2QzMxNzRCNUY4Q0Y5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjJUqcaa3/PFP6uMV7g0/4HLEYcmsoWPd78cRO0AsFDbvr9l0VVrBufHs0ZoM
5dj7B2ifI8X+eL3tJD0PuRMg/1QxC1dtFcFqNMBzspZlvy48jqcgSiLG+E0fpI/j
C4r9XaAwLGwZRg5yFcCTmbRiia6rQjsH7SWNvPbBJH9R2qjks4ogcV1UTA2ZHE0T
5CZ+admQn8YotDztaZI0T1wklg9BwwHW5j7wijD0K7I2xALwSykJ9iobXgDqld6Q
3lh+hmktb6r7lO3SFBbOh7kWzlBDZO+7Oic1wrcvnuEZMCSGaUFH94T5mXzInlqk
4rQnP+dSz66JC9IMvfzEvqwmLA==
-----END CERTIFICATE-----
Generated at Wed Aug 20 18:36:37 2025 by rpki-client