Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft
File:                     3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft (raw, json)
Hash identifier:          tpGp9+K0T7BYNXnK4SwyfLUwmKYEFKQ++A8Cb0nJrls=
Subject key identifier:   2B:3E:50:9B:A1:84:D9:FF:DB:7C:4E:A8:3E:D2:43:AA:DF:22:B6:2C
Authority key identifier: 3E:F7:09:C8:F0:D0:D3:C6:A4:EE:47:57:C8:48:2F:4E:6D:52:5E:91
Certificate issuer:       /CN=3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91
Certificate serial:       3B9FB038694B51881E541850A1871E1742657F64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft
Manifest number:          02D5
Signing time:             Tue 29 Jul 2025 03:00:00 +0000
Manifest this update:     Tue 29 Jul 2025 02:55:00 +0000
Manifest next update:     Wed 30 Jul 2025 03:00:00 +0000
Files and hashes:         1: 323830343a363534303a3a2f33322d3336203d3e20323639343738.roa (hash: smBh1jOxiL6mXMibovlt7reUW8x0Aoc05Rh0DO5+hfQ=)
                          2: 34352e3138372e3132342e302f32322d3234203d3e20323639343738.roa (hash: mpZHAAPJTUQXooOaT1oXKL/6OVYZoElxqPmWeW2/+og=)
                          3: 3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.crl (hash: qnLt1K9GLRD87H4MbZn2rzdcA/OZ1eE9fe4jVxDAy8E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.crl
                          rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9f:b0:38:69:4b:51:88:1e:54:18:50:a1:87:1e:17:42:65:7f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91
        Validity
            Not Before: Jul 29 02:55:00 2025 GMT
            Not After : Jul 30 03:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:32:cd:16:f1:1e:55:2f:27:54:c3:77:80:fd:
                    d6:ff:d1:c4:b3:10:16:5c:2d:eb:5d:43:b7:23:38:
                    83:46:c4:31:51:ff:b0:6b:b7:09:1e:7a:6f:d4:51:
                    f5:60:09:35:2c:45:c8:10:d6:b6:c9:d5:4d:64:d9:
                    36:02:40:6c:37:00:27:72:1e:7d:48:2a:3b:97:ce:
                    fe:a0:18:af:88:41:23:39:34:cb:dd:e5:34:76:5a:
                    2b:dd:e0:79:70:5c:62:b7:5e:9a:c9:33:f6:03:8b:
                    29:36:33:41:ea:cc:2e:f8:5d:af:9e:e6:65:5d:3d:
                    d6:07:a3:dd:9c:5c:73:6d:d0:17:f3:dc:ea:4a:c4:
                    1e:0e:b0:0d:76:a7:36:61:f2:d4:5c:8b:38:08:c1:
                    2f:83:ea:6f:f4:dd:5a:0b:19:23:d6:72:fe:fc:d4:
                    db:da:af:9e:da:9a:1d:f0:eb:a2:f5:31:98:b2:80:
                    88:25:8a:9f:ef:c0:37:fb:a2:58:29:06:83:98:e6:
                    a7:40:d7:57:fc:8c:82:c5:0c:68:1f:24:90:23:07:
                    29:d8:58:26:dc:12:4b:c7:df:7f:b0:13:1f:65:a9:
                    93:dd:27:7d:1a:31:d7:bc:c1:c0:35:5c:09:a7:72:
                    50:70:c9:2d:c2:0d:ac:a6:39:73:2d:bf:74:3c:43:
                    f6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3E:50:9B:A1:84:D9:FF:DB:7C:4E:A8:3E:D2:43:AA:DF:22:B6:2C
            X509v3 Authority Key Identifier:
                keyid:3E:F7:09:C8:F0:D0:D3:C6:A4:EE:47:57:C8:48:2F:4E:6D:52:5E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:17:dc:c5:93:dc:91:7c:ed:5b:97:39:4a:c2:65:c3:85:66:
         d1:4d:5a:38:72:16:48:1a:8b:0c:6d:6a:63:76:07:a5:86:c8:
         4d:7d:50:54:c0:80:09:09:f8:90:22:1a:ff:85:0c:22:c4:9d:
         10:a6:82:ac:2d:7c:46:c1:ff:d9:74:71:aa:46:58:95:bb:8f:
         83:9e:7c:89:1e:29:05:cd:dd:c5:00:ee:93:8b:35:39:43:5f:
         42:ab:9e:a7:ce:3b:a6:7f:71:3a:31:ab:67:3a:91:4f:a4:19:
         34:92:82:fb:3d:ab:5d:c3:29:b1:f0:8e:90:17:a8:a0:11:ea:
         80:ed:d4:6a:da:29:1e:b5:7b:8b:d9:74:2f:54:5e:04:41:03:
         1f:b1:cf:27:a8:dc:99:37:aa:c1:c0:9e:e2:92:2f:6f:80:67:
         53:3d:64:88:77:97:a0:69:50:f4:6e:f1:e2:cd:5a:88:f6:0a:
         0e:07:0f:33:d9:ca:f9:19:72:bb:aa:33:60:24:7a:46:87:83:
         da:ed:7e:b9:96:33:0b:c5:3a:fe:88:5b:7f:99:8b:bf:87:cf:
         7d:b5:99:67:b2:1f:85:6b:c3:b0:ee:14:92:6f:0f:37:3a:53:
         b8:31:20:4e:9a:c7:38:8c:33:a3:75:53:83:7f:92:7d:46:27:
         df:e5:63:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:41:26 2025 by rpki-client