Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.mft
File:                     F346A2DF3646E1D5462B83A19F3C56C660FEB218.mft (raw, json)
Hash identifier:          FaPjr0jE147isZKz7G6XqCZwLe3Xg6jNy7oWHM5FFU8=
Subject key identifier:   05:DC:B7:A2:2C:63:94:7E:D6:68:DA:9F:FE:11:06:60:86:EC:A3:9E
Authority key identifier: F3:46:A2:DF:36:46:E1:D5:46:2B:83:A1:9F:3C:56:C6:60:FE:B2:18
Certificate issuer:       /CN=F346A2DF3646E1D5462B83A19F3C56C660FEB218
Certificate serial:       2E2504E9B5A7848E85935C4ADBA9B0C1593E65E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.mft
Manifest number:          A3
Signing time:             Fri 06 Jun 2025 00:07:49 +0000
Manifest this update:     Fri 06 Jun 2025 00:02:49 +0000
Manifest next update:     Sat 07 Jun 2025 01:48:49 +0000
Files and hashes:         1: 34352e3232362e33362e302f32332d3233203d3e20323636393735.roa (hash: 8G5A7N+ePAqGBFceWS4hfkx9y15QFKnqdlxSasIeOzg=)
                          2: 34352e3232362e33362e302f32342d3234203d3e20323636393735.roa (hash: LkycYlfLfhux/co3SmDPdT8a0lABGr8+dgfsXx6NSE0=)
                          3: 34352e3232362e33392e302f32342d3234203d3e20323636393735.roa (hash: KzCKpw5mIFeFb94y6gsKFGSO0Cu1Sdy/aNoSSFyv63w=)
                          4: 323830343a343633343a3a2f33322d3332203d3e20323636393735.roa (hash: U8ggjszPYbkkqzc0fACxe/vZSUO2znBLP4yNo7UGAlg=)
                          5: 34352e3232362e33372e302f32342d3234203d3e20323636393735.roa (hash: /+roH6uKhNgpgS6MVAhPd2WMANGK45oCR2rl/f5fs+g=)
                          6: F346A2DF3646E1D5462B83A19F3C56C660FEB218.crl (hash: UggRASbb30q7cMhLLHw4M3KrJSi1Jq3Xdf3FU42TEfs=)
                          7: 34352e3232362e33382e302f32342d3234203d3e20323636393735.roa (hash: FY/S+j3eJnypBOjrZ+bRO+vVR8geEnRYaehjFlkmNxA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.crl
                          rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 01:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:25:04:e9:b5:a7:84:8e:85:93:5c:4a:db:a9:b0:c1:59:3e:65:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F346A2DF3646E1D5462B83A19F3C56C660FEB218
        Validity
            Not Before: Jun  6 00:02:49 2025 GMT
            Not After : Jun  7 01:48:49 2025 GMT
        Subject: CN=05DCB7A22C63947ED668DA9FFE11066086ECA39E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c6:90:bf:12:ba:b8:07:bc:2c:f8:54:68:3c:
                    0f:4f:97:27:cf:92:0b:7a:cf:7b:96:1b:1b:b5:c1:
                    2a:0e:9b:df:bf:fd:02:72:24:49:80:c0:78:f2:77:
                    6a:bd:f7:1c:13:45:db:3b:9e:3f:7c:b1:86:70:fe:
                    98:ef:88:46:ea:ba:c5:74:27:78:38:ac:68:4c:cf:
                    a3:36:c0:f0:f5:b4:1c:d3:71:9c:d1:84:2b:ea:2d:
                    b8:81:7b:48:58:b7:ac:4e:18:7f:ce:86:fe:e4:e9:
                    19:a2:40:9d:b6:65:61:82:43:0d:77:a4:67:14:56:
                    60:38:a3:a3:ae:dd:dd:61:73:dc:f5:19:be:c2:93:
                    15:ed:f4:43:bc:25:2e:a0:4c:48:8a:56:83:50:cb:
                    a2:37:bf:46:44:ae:20:ac:8e:fc:4f:f9:42:6e:c4:
                    0c:25:fc:3d:24:7b:47:ee:94:18:b5:a2:34:97:57:
                    ae:36:44:53:d8:ae:00:01:1b:0d:65:a2:00:3b:2b:
                    4d:4d:8d:c6:c0:8b:ff:57:2b:bb:79:7b:9f:b7:70:
                    ea:6a:39:df:9a:3d:25:b2:f7:e6:5e:a3:b4:2f:a8:
                    a9:e3:17:37:5f:de:cb:c1:f7:9c:1d:09:49:46:03:
                    3e:92:bf:79:e1:4c:9d:da:7b:d3:e5:d5:64:24:d9:
                    97:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DC:B7:A2:2C:63:94:7E:D6:68:DA:9F:FE:11:06:60:86:EC:A3:9E
            X509v3 Authority Key Identifier:
                keyid:F3:46:A2:DF:36:46:E1:D5:46:2B:83:A1:9F:3C:56:C6:60:FE:B2:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:1f:ee:25:80:e6:af:78:af:bd:72:7f:6c:8e:f2:e8:bc:6e:
         c3:fd:24:c9:27:f3:45:60:80:23:96:8f:48:0b:fd:48:3b:45:
         fa:6e:39:b1:2d:09:ca:11:d5:ee:bc:a1:a1:8d:7b:46:0f:05:
         f3:d4:76:3d:d0:c7:c8:58:58:cb:86:cf:88:fe:02:33:d4:a8:
         06:1d:8e:36:1d:74:c9:14:dd:8e:8c:5c:bc:20:5c:8d:36:c2:
         97:d7:a2:23:1f:ad:d7:39:f8:7c:58:6f:82:d1:08:e4:df:73:
         a8:4b:d2:be:ab:69:98:85:8c:9a:af:6b:83:5e:29:94:36:47:
         5e:ed:b7:7d:a9:25:d1:84:f2:ca:6c:c4:fa:70:7e:93:a6:6a:
         30:b3:85:5d:53:3f:d7:0e:03:b5:87:ad:4a:f4:ef:c2:31:75:
         22:fb:67:4b:8a:f2:c2:75:3b:8d:dc:21:38:4b:87:2a:8e:fb:
         9e:b7:21:72:97:80:99:1f:31:1a:b3:23:7f:63:db:f6:d6:d9:
         13:db:97:43:f0:79:4b:c2:7e:20:f7:3c:76:d3:2c:8b:5f:59:
         1d:2a:72:f5:5e:15:37:aa:33:89:e7:fc:13:b0:41:31:a0:0a:
         4c:00:6d:fd:03:46:e7:d4:9a:0a:36:e1:fa:99:e5:18:7c:df:
         bf:38:1e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:45:50 2025 by rpki-client