Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.mft
File:                     3811D3CF68BD6E1D457066AF72C5B80697140952.mft (raw, json)
Hash identifier:          qpyYz0sQUGEYOJHxeh0fR6XTi00i2we7tEJSz/vA9aY=
Subject key identifier:   A6:DF:FF:3F:14:D9:D2:88:53:21:ED:4D:4A:C5:24:04:D1:EF:90:0A
Authority key identifier: 38:11:D3:CF:68:BD:6E:1D:45:70:66:AF:72:C5:B8:06:97:14:09:52
Certificate issuer:       /CN=3811D3CF68BD6E1D457066AF72C5B80697140952
Certificate serial:       226E2C9FE2E7094B3E7C931C82A7BE0FC8E4893D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3811D3CF68BD6E1D457066AF72C5B80697140952.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.mft
Manifest number:          0D
Signing time:             Fri 13 Jun 2025 21:07:12 +0000
Manifest this update:     Fri 13 Jun 2025 21:02:12 +0000
Manifest next update:     Sat 14 Jun 2025 22:12:12 +0000
Files and hashes:         1: 3137372e32302e3137362e302f32342d3234203d3e20323633303335.roa (hash: Kk+VNp/je2BEYWXyXG9TA8b6ZZVNni4pgYWiQssz7/E=)
                          2: 323830343a6133383a3a2f33322d3332203d3e20323633303335.roa (hash: JF+vt37xu7OxUG8guYjCdH1ca2d+IC4yEayqQxlRp6M=)
                          3: 323830343a6133383a3a2f33332d3333203d3e20323633303335.roa (hash: F9JxKUIzoWhUK3lStPOzsWWdFdFQ/+y1E53aFid51NM=)
                          4: 3137372e32302e3138312e302f32342d3234203d3e20323633303335.roa (hash: YPoZ1oALd4YkF918XERnqyxn+wnNHYgl+yOKAGKNGmk=)
                          5: 3137372e32302e3138302e302f32342d3234203d3e20323633303335.roa (hash: o3txryZN7XGKm5qsD/ctGaaortDnsd7WshL+oq06uak=)
                          6: 3137372e32302e3138332e302f32342d3234203d3e20323633303335.roa (hash: OVlz1EldR//b5LFSHEqX5cHURULAKEBLPVXjsazeTmE=)
                          7: 3811D3CF68BD6E1D457066AF72C5B80697140952.crl (hash: y/rrz638nc1rk8tOxFjR7wcUMukhDdIYI8Svq4QWfxk=)
                          8: 3137372e32302e3137392e302f32342d3234203d3e20323633303335.roa (hash: 624IAq74gYVg2o/YRcntsIQ4jDdp8xYPVypobjo24a8=)
                          9: 3137372e32302e3137382e302f32342d3234203d3e20323633303335.roa (hash: XkP9LOdfEmzPgg2fO3EGL9EVZiVbYXNvoHMUXIAaIj4=)
                          10: 3137372e32302e3137372e302f32342d3234203d3e20323633303335.roa (hash: ohGZC0JFhKKJQiTCC8lUMakWB11fcxwJppSOtNxlK6E=)
                          11: 3137372e32302e3138322e302f32342d3234203d3e20323633303335.roa (hash: XLJO3Y5oOY5PTnPJ+zi3IILoKdSyGvfSmWod7OmvUao=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.crl
                          rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3811D3CF68BD6E1D457066AF72C5B80697140952.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 22:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6e:2c:9f:e2:e7:09:4b:3e:7c:93:1c:82:a7:be:0f:c8:e4:89:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3811D3CF68BD6E1D457066AF72C5B80697140952
        Validity
            Not Before: Jun 13 21:02:12 2025 GMT
            Not After : Jun 14 22:12:12 2025 GMT
        Subject: CN=A6DFFF3F14D9D2885321ED4D4AC52404D1EF900A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:03:4a:72:54:96:ff:e9:b8:cc:27:cf:08:3d:
                    9f:e9:d0:2c:dd:33:d5:6a:4e:b3:b7:f9:77:24:84:
                    a1:41:11:bf:4b:0f:53:3d:30:ac:7f:a7:80:3f:e7:
                    70:a5:f8:56:db:6b:01:8a:3c:56:e6:2a:6d:ed:08:
                    82:ff:54:7b:1d:62:d7:e8:67:26:37:5b:60:9b:52:
                    3e:43:1d:af:91:78:f0:e2:e8:14:7a:3a:9b:1f:67:
                    a6:57:c4:45:67:b4:ee:8f:4f:fd:6a:04:35:7d:86:
                    de:68:33:89:90:45:8c:72:f3:92:3b:be:d9:e6:3f:
                    98:38:1f:fd:4f:8f:ef:7b:ae:3f:c3:7b:5f:12:70:
                    79:00:04:41:d1:29:64:93:3e:2c:f6:97:fd:97:1e:
                    fa:47:4a:bd:84:72:6a:35:3f:48:d5:74:06:4a:ca:
                    42:40:59:72:b8:a2:9f:8b:15:5d:86:b0:28:e1:a1:
                    43:98:5f:b2:3a:54:4f:5c:32:89:fe:02:1d:61:dd:
                    17:ed:c6:d3:30:92:50:0e:0c:00:81:dc:f9:df:d3:
                    b6:c5:a4:34:c2:cf:bb:20:4f:ea:d7:ab:d2:f2:1f:
                    f7:ec:cb:c1:ee:e4:7e:33:50:33:93:88:e6:6d:e6:
                    03:11:8a:76:51:c6:02:9e:ef:4b:b8:f8:8d:e9:01:
                    1f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DF:FF:3F:14:D9:D2:88:53:21:ED:4D:4A:C5:24:04:D1:EF:90:0A
            X509v3 Authority Key Identifier:
                keyid:38:11:D3:CF:68:BD:6E:1D:45:70:66:AF:72:C5:B8:06:97:14:09:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3811D3CF68BD6E1D457066AF72C5B80697140952.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:fd:0a:23:e1:81:8f:0d:a1:ad:68:32:45:2c:5f:99:7d:95:
         0d:99:b4:d6:e1:d3:2f:36:37:c7:e8:3a:85:39:86:6a:60:ad:
         b5:35:99:cb:3c:ed:93:d9:4d:35:a9:99:b7:8c:ba:cc:32:d0:
         31:67:67:48:5a:c8:61:19:47:fa:a5:e2:33:ab:c2:d2:de:19:
         f1:b5:1f:03:1b:54:61:8d:89:e2:1a:6d:5f:97:2e:e0:7e:55:
         61:18:cb:a0:27:d4:4b:af:b8:71:49:48:53:8f:a7:fd:a6:7c:
         97:84:1c:13:08:71:a5:51:d1:54:f2:f4:74:b4:0a:10:18:90:
         b6:fa:d5:1d:ab:e8:f7:cb:a3:f3:aa:38:c1:41:d0:17:88:e2:
         fc:d2:85:ae:32:c8:ed:47:af:cc:d0:ed:8d:57:05:f7:88:02:
         cc:70:27:2b:b4:25:b8:c3:12:06:6e:40:99:a4:f5:03:37:c6:
         94:69:cc:70:96:ed:78:7a:8b:19:94:4b:bc:cd:32:91:7e:d1:
         29:80:88:2d:fe:ef:b3:f0:7e:28:de:38:f4:e6:bd:81:d7:e9:
         e1:e2:ba:f1:cf:a3:2c:5a:51:4c:8d:3a:96:5b:57:c6:53:3b:
         62:9e:d1:22:61:d8:e0:6c:8c:f2:e5:57:6d:a5:65:34:37:11:
         96:95:75:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 00:53:23 2025 by rpki-client