Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3865E3537268319DD70D1072B951BD12CEB4D7D2.mft
File:                     3865E3537268319DD70D1072B951BD12CEB4D7D2.mft (raw, json)
Hash identifier:          BDV0GjgFdiM+V3HEA5VKQDKP+HeHXlXhoHKU0oaHTM4=
Subject key identifier:   0C:87:31:A8:45:1F:B2:C1:38:7E:C1:B7:45:15:39:7F:0A:A9:DC:87
Authority key identifier: 38:65:E3:53:72:68:31:9D:D7:0D:10:72:B9:51:BD:12:CE:B4:D7:D2
Certificate issuer:       /CN=3865E3537268319DD70D1072B951BD12CEB4D7D2
Certificate serial:       2140B45D4EDAA458E52A0862780998DDA4D68625
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3865E3537268319DD70D1072B951BD12CEB4D7D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3865E3537268319DD70D1072B951BD12CEB4D7D2.mft
Manifest number:          39
Signing time:             Wed 20 Aug 2025 12:27:36 +0000
Manifest this update:     Wed 20 Aug 2025 12:22:36 +0000
Manifest next update:     Thu 21 Aug 2025 14:08:36 +0000
Files and hashes:         1: 323830343a316564303a613230303a3a2f34332d313238203d3e20323632323836.roa (hash: TLDIp+Wws0CgUE5aTruWd9keyMg7L/SEhhA+E/81z1I=)
                          2: 3133322e3235352e32342e302f32322d3332203d3e20323632323836.roa (hash: kFfUlyTs5mx5FarSpSwBX6eqNiy4Jt15s91Z7iMxXEY=)
                          3: 323830343a316564303a613030303a3a2f34332d313238203d3e20323632323836.roa (hash: 0ErNebNMEPCoMUd15aHXvhoEW1efX54LYcbDcBeGK9Q=)
                          4: 3137372e35322e3235322e302f32322d3332203d3e20323632323836.roa (hash: fRKdaK6CSCMuCWkyOMX75SAvD1p/Q54T81ZI/4oIs8Q=)
                          5: 323830343a316564303a3a2f33322d313238203d3e20323632323836.roa (hash: 0vBQW8VIQ6w3eN65xfZXLNzOMU6VYDtHu1s6w/Ctj3w=)
                          6: 3865E3537268319DD70D1072B951BD12CEB4D7D2.crl (hash: CZItwqyCXfingR3M4TucMF4d71t8M5zzQl5tl31jDAY=)
                          7: 3230302e322e3130302e302f32322d3332203d3e20323632323836.roa (hash: YXiF5E/AHk1/YwJ6Etza9CoXbmWY3smZW7N4AtC/Uhc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3865E3537268319DD70D1072B951BD12CEB4D7D2.crl
                          rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3865E3537268319DD70D1072B951BD12CEB4D7D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3865E3537268319DD70D1072B951BD12CEB4D7D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 14:08:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:40:b4:5d:4e:da:a4:58:e5:2a:08:62:78:09:98:dd:a4:d6:86:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3865E3537268319DD70D1072B951BD12CEB4D7D2
        Validity
            Not Before: Aug 20 12:22:36 2025 GMT
            Not After : Aug 21 14:08:36 2025 GMT
        Subject: CN=0C8731A8451FB2C1387EC1B74515397F0AA9DC87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0c:1c:7a:63:91:76:b1:dd:7d:52:4e:f7:98:
                    1b:d3:cd:84:e5:89:59:3a:59:28:6f:49:4a:77:dc:
                    db:e8:ec:38:95:ec:b8:4a:ec:da:f2:3d:98:b4:92:
                    7a:5c:6a:07:42:94:99:6c:30:bf:3e:26:72:bb:67:
                    e2:f8:a5:27:40:02:39:b0:c4:9c:02:cb:9e:25:60:
                    cc:0a:45:8f:d1:43:40:70:58:f9:14:47:ab:ff:4c:
                    4c:34:2f:c2:e3:3a:c1:3b:f9:bd:d9:05:e2:c4:fb:
                    49:49:68:af:47:6b:e0:cd:b3:63:5f:8f:35:5d:58:
                    c4:05:1d:ce:49:3b:58:f2:8e:cc:01:0b:54:75:39:
                    76:63:cf:fb:b2:17:3b:80:32:e1:26:0b:0c:ac:17:
                    b8:a7:1f:b7:52:84:3c:a5:c2:d7:06:c6:75:a8:fa:
                    9d:a0:a5:5c:63:ca:d5:e3:56:14:62:66:00:9e:bc:
                    05:65:62:28:1e:c6:eb:2d:79:9b:e0:1f:02:c7:c2:
                    d7:37:d0:4f:f3:8d:60:6e:a2:32:6a:7f:cc:3c:00:
                    3e:87:b5:a1:d9:91:f3:a1:e0:cc:7e:1c:be:00:0c:
                    ac:b3:00:4b:b2:62:7f:b8:67:32:2f:c1:98:c4:4f:
                    d5:7d:6c:2c:0e:f0:93:23:42:1e:f4:5f:61:83:59:
                    56:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:87:31:A8:45:1F:B2:C1:38:7E:C1:B7:45:15:39:7F:0A:A9:DC:87
            X509v3 Authority Key Identifier:
                keyid:38:65:E3:53:72:68:31:9D:D7:0D:10:72:B9:51:BD:12:CE:B4:D7:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3865E3537268319DD70D1072B951BD12CEB4D7D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3865E3537268319DD70D1072B951BD12CEB4D7D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3865E3537268319DD70D1072B951BD12CEB4D7D2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e6:62:df:4b:77:7f:72:92:ef:c1:2c:8b:88:5b:40:b7:04:
         68:60:b8:53:cb:99:a0:53:ae:23:6e:b3:63:53:ae:d7:7d:ad:
         44:3a:73:f7:de:90:c9:45:be:63:4e:23:6e:11:f5:36:26:19:
         e0:b1:18:4f:d2:bc:35:91:f5:84:23:01:c9:74:e1:2c:93:70:
         98:a5:f2:32:cd:4f:35:c4:bd:67:da:05:b1:04:2e:17:99:1a:
         97:4e:83:44:b0:a5:f4:a8:d1:9e:04:f6:7f:67:d1:48:2e:25:
         52:39:39:ce:2a:62:e1:21:37:16:35:05:be:2f:1d:7d:ac:91:
         e8:ca:29:ba:28:b4:c7:81:4e:bc:8f:69:8b:b5:cf:d4:5d:30:
         63:fc:fd:da:aa:23:85:ee:8a:2c:92:58:38:85:a3:3a:12:9f:
         e6:b1:39:1a:1c:49:bf:0f:99:81:2e:b2:f7:9d:32:e1:6f:87:
         f8:4c:15:7d:7e:cd:be:c1:c4:a8:2c:be:3f:53:10:af:7b:5c:
         4f:fc:72:8b:e9:84:60:11:75:ed:5b:2b:4b:1c:dc:e2:f9:c7:
         5c:eb:04:58:13:92:36:a7:0f:8d:e3:26:c1:8d:48:7a:b0:55:
         0e:ed:04:a1:29:ee:c2:98:0f:0b:44:60:90:6a:d0:43:75:cd:
         d1:a9:1c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 18:37:35 2025 by rpki-client