Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft
File:                     3895E2089A93A58E1062DE9612B321CA505C51FA.mft (raw, json)
Hash identifier:          3waqot5X30rJdIXpndxHK/CFOW8mnbrG0MdHzP/5fG4=
Subject key identifier:   DB:44:B5:43:6E:CD:AB:6F:60:A0:2E:87:E4:C2:CD:98:10:34:F9:5D
Authority key identifier: 38:95:E2:08:9A:93:A5:8E:10:62:DE:96:12:B3:21:CA:50:5C:51:FA
Certificate issuer:       /CN=3895E2089A93A58E1062DE9612B321CA505C51FA
Certificate serial:       250CEEEE521A8EE5F4A73E8352F1B047FE57D072
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft
Manifest number:          02F3
Signing time:             Wed 20 Aug 2025 05:28:01 +0000
Manifest this update:     Wed 20 Aug 2025 05:23:01 +0000
Manifest next update:     Thu 21 Aug 2025 05:28:01 +0000
Files and hashes:         1: 3895E2089A93A58E1062DE9612B321CA505C51FA.crl (hash: l9eGoLmZo5vpx/rX5M9bBO8gWBN31sKQtZyhoE60c6A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.crl
                          rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 05:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0c:ee:ee:52:1a:8e:e5:f4:a7:3e:83:52:f1:b0:47:fe:57:d0:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3895E2089A93A58E1062DE9612B321CA505C51FA
        Validity
            Not Before: Aug 20 05:23:01 2025 GMT
            Not After : Aug 27 05:28:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fd:6b:f7:79:63:c0:0e:97:a8:c7:1b:07:32:
                    7b:48:87:83:95:64:86:ba:21:1d:da:d4:25:59:e4:
                    97:a8:5c:03:28:6a:82:50:25:47:31:d3:dd:e9:42:
                    0e:c9:c8:fb:c6:c8:38:ed:64:c6:2e:14:c1:92:03:
                    25:1b:19:d4:0c:ff:e9:0e:74:c9:cc:57:22:6e:74:
                    26:ff:ad:f5:01:0b:bc:5c:2d:7b:ae:b9:dd:75:6e:
                    18:a7:89:2d:fe:02:1e:d2:5e:d4:89:16:85:00:69:
                    be:92:95:93:28:61:c5:a8:2c:de:d7:17:9a:bf:58:
                    36:55:85:f7:45:2e:90:9a:c3:f0:ea:75:f1:6e:1a:
                    cb:5e:47:76:d3:a0:a4:34:aa:39:83:cb:99:ec:de:
                    0e:64:f3:ba:ed:ca:9e:d2:8d:65:13:a4:27:05:a2:
                    8e:69:99:78:60:ad:3d:17:94:61:e2:d5:94:d3:03:
                    34:20:c0:0e:4a:4a:57:e7:2a:e8:3d:6f:40:25:a8:
                    33:1d:ce:a8:38:1f:bb:a0:26:d7:f2:6f:b4:f8:3c:
                    b1:db:e6:69:f9:31:88:1a:65:31:4b:04:b8:0b:3c:
                    68:ac:7c:09:b8:c0:fc:41:6a:3d:99:c4:ae:fb:ce:
                    77:8e:6b:36:5a:a5:c4:63:0a:a8:90:f1:8b:23:01:
                    33:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:44:B5:43:6E:CD:AB:6F:60:A0:2E:87:E4:C2:CD:98:10:34:F9:5D
            X509v3 Authority Key Identifier:
                keyid:38:95:E2:08:9A:93:A5:8E:10:62:DE:96:12:B3:21:CA:50:5C:51:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:22:e0:4a:ff:12:03:98:b9:e0:b5:2c:25:d6:d7:5f:69:7e:
         87:00:82:3a:76:8c:f6:7f:75:30:e7:ad:2b:02:8b:d4:09:2c:
         b6:83:59:88:36:7b:f7:57:bb:1b:9a:14:8f:49:2f:f4:93:b6:
         21:25:23:2d:1b:02:14:78:26:00:ba:2f:d5:af:46:c8:ce:18:
         55:81:51:bb:1b:86:79:05:27:2d:07:f5:62:07:fe:33:50:08:
         8a:e4:ee:a9:2d:f8:c7:83:ca:82:54:47:d1:a1:b3:b7:15:ef:
         69:1b:0a:51:a8:3b:85:aa:af:da:6a:49:9f:3a:12:6c:34:e7:
         04:ee:c4:5b:74:5b:f3:d2:be:0c:f8:c3:4f:ab:79:c0:8d:59:
         18:2a:f6:64:10:61:24:a4:5d:a7:b3:f0:3c:45:5c:98:1a:ad:
         bb:e2:4b:2d:48:e1:7c:ec:b8:0d:24:81:78:85:20:47:9a:90:
         61:67:c7:c7:e5:e7:27:a2:ed:0c:55:a9:ba:78:06:32:de:56:
         83:dd:32:5f:bd:6e:7e:d0:8c:c9:80:a8:68:ff:59:1e:66:55:
         4d:21:da:e8:68:7e:55:e5:c2:22:9d:7b:01:61:45:3d:e4:b1:
         fd:56:16:24:45:7e:25:ac:d7:e8:53:60:6f:24:13:02:10:f7:
         7e:58:bb:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 20 16:25:58 2025 by rpki-client