Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft
File:                     3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft (raw, json)
Hash identifier:          TiLD+V+oNu3jCvi+grZVLwTPWTGfTaUPOt8G4ORV6kg=
Subject key identifier:   32:F1:F1:B5:36:0D:AE:7C:95:C1:23:B8:47:D5:1D:D0:DB:8F:A5:F3
Authority key identifier: 3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8
Certificate issuer:       /CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8
Certificate serial:       5C5F50600E1E9D581B14229ECAA5AC7EFEA79769
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft
Manifest number:          010D
Signing time:             Wed 20 Aug 2025 03:26:37 +0000
Manifest this update:     Wed 20 Aug 2025 03:21:37 +0000
Manifest next update:     Thu 21 Aug 2025 04:39:37 +0000
Files and hashes:         1: 3137302e3233312e3135362e302f32322d3332203d3e20323635303632.roa (hash: SeYU5404iSokv/Gz5rw5RNitLBwfn0VjE4GkNS2MnrE=)
                          2: 3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl (hash: zy/f+pDQrNoB0tyi5sVfCT6QRLT+mM2B2GE8aPAbXno=)
                          3: 323830343a333233343a3a2f33322d313238203d3e20323635303632.roa (hash: tbkH5yeZvuDlAXrYeHvJYz6TwGXhqVtSN5MEPVbKHTU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl
                          rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 04:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5f:50:60:0e:1e:9d:58:1b:14:22:9e:ca:a5:ac:7e:fe:a7:97:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8
        Validity
            Not Before: Aug 20 03:21:37 2025 GMT
            Not After : Aug 21 04:39:37 2025 GMT
        Subject: CN=32F1F1B5360DAE7C95C123B847D51DD0DB8FA5F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:41:b8:53:b1:bd:75:5e:99:b7:92:f9:cb:33:
                    1f:70:74:b2:db:80:cf:13:4d:fb:e1:c2:6a:80:9b:
                    61:ee:9a:22:0f:d4:04:20:16:87:ce:f3:60:cd:2e:
                    2b:7e:7c:f4:03:f0:38:83:82:70:f3:a4:38:01:9a:
                    a5:ba:49:0a:1b:1d:5f:38:12:af:fb:50:01:b6:12:
                    83:5d:f1:b3:25:80:48:1a:73:bd:89:9d:c9:5c:b8:
                    80:de:95:67:8e:c0:38:d5:73:92:0a:e8:ca:73:15:
                    bd:c8:2d:1f:82:c0:3e:0b:cb:16:95:7d:5d:31:d3:
                    8d:36:b7:ff:7d:10:4a:58:72:c3:d9:50:8e:96:3e:
                    8a:35:18:1b:e8:ab:98:44:d9:19:18:6f:97:36:aa:
                    71:f6:29:39:32:a4:da:02:af:75:7e:f8:7a:38:78:
                    a7:4f:71:e2:ba:11:ab:c9:32:02:81:82:67:52:5d:
                    45:8b:c1:5f:47:91:32:f8:a9:2e:37:f5:8c:ae:84:
                    50:cb:5f:81:8e:25:bd:32:2d:8e:45:cd:33:b1:26:
                    4a:51:7e:e5:40:40:f0:ed:21:e0:10:7f:7e:ce:52:
                    6e:e8:1b:a9:e5:61:d6:a1:b8:d9:28:ec:25:7f:02:
                    28:31:fb:91:00:33:6d:93:31:69:62:f2:65:5f:84:
                    d8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F1:F1:B5:36:0D:AE:7C:95:C1:23:B8:47:D5:1D:D0:DB:8F:A5:F3
            X509v3 Authority Key Identifier:
                keyid:3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:79:0b:99:c7:01:dc:1b:79:c4:c6:d3:76:2f:d6:74:72:de:
         2e:66:08:fc:5b:24:43:a8:47:48:56:0f:20:a9:a6:4f:11:2b:
         02:70:d7:7d:a4:aa:38:12:eb:1e:92:1f:5c:cb:93:ce:09:bd:
         5c:49:e8:ee:1d:b0:c9:cc:d4:cb:f4:ce:4c:45:b1:ed:a6:35:
         00:ac:e1:a6:b0:8b:ac:d0:bb:6d:64:65:8f:82:c4:ac:1b:49:
         ea:22:95:1f:2d:22:21:c7:03:ef:eb:2a:ac:5f:1b:19:b4:dd:
         1b:75:e3:e5:1c:30:20:89:3b:2e:2d:c0:d1:ee:b3:50:76:12:
         41:ea:92:8e:d4:a2:b6:cd:8b:7b:f2:32:c9:c5:6e:4c:80:59:
         9b:c5:8a:46:d6:f9:57:5c:8d:d6:ec:c3:2e:df:d8:45:b9:6b:
         75:5c:0a:93:10:64:84:9c:37:90:2e:c9:55:28:cf:da:25:ce:
         d7:69:a2:9c:d0:82:80:3a:c5:ad:41:26:e7:11:8f:e8:34:95:
         72:2f:8e:b8:7c:10:58:dd:79:68:3c:eb:d3:b2:40:87:9c:b6:
         d9:8b:9e:a1:41:78:a4:38:fd:a9:02:b3:7a:40:c6:a9:6c:84:
         46:0f:ba:8c:fa:d0:6b:21:aa:b5:0e:7e:68:60:3f:85:c5:63:
         66:ad:d7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 16:11:11 2025 by rpki-client