Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.mft
File:                     34B751FB87F97FC1716FBAC75D6ECEF3594D661B.mft (raw, json)
Hash identifier:          m576UyG2FknprqJzgvnOSD7ib3Cnqppid/e8hrvFnnQ=
Subject key identifier:   DB:ED:1E:4D:C8:1C:70:5A:57:00:81:F3:10:2B:E3:D1:B8:ED:EC:B1
Authority key identifier: 34:B7:51:FB:87:F9:7F:C1:71:6F:BA:C7:5D:6E:CE:F3:59:4D:66:1B
Certificate issuer:       /CN=34B751FB87F97FC1716FBAC75D6ECEF3594D661B
Certificate serial:       3338485DE675D12B00D288711BB3230CD1CA2182
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.mft
Manifest number:          0301
Signing time:             Mon 03 Nov 2025 10:56:04 +0000
Manifest this update:     Mon 03 Nov 2025 10:51:04 +0000
Manifest next update:     Tue 04 Nov 2025 14:49:04 +0000
Files and hashes:         1: 34352e3137362e3234382e302f32322d3234203d3e20323638393737.roa (hash: k8WHvroGzNVDRDKZ/1KYZipIDUsh8phyDXftCUcck54=)
                          2: 323830343a356438343a3a2f33322d3332203d3e20323638393737.roa (hash: kJL4BKrGU+ViLgLCeJPXRmj51oXTbtFUkkanJ7vnSyU=)
                          3: 34B751FB87F97FC1716FBAC75D6ECEF3594D661B.crl (hash: 1JITa5p5URnDF23XPnKTZz6wyaWERM7NViJmw+Vx1Zc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.crl
                          rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:38:48:5d:e6:75:d1:2b:00:d2:88:71:1b:b3:23:0c:d1:ca:21:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B751FB87F97FC1716FBAC75D6ECEF3594D661B
        Validity
            Not Before: Nov  3 10:51:04 2025 GMT
            Not After : Nov  4 14:49:04 2025 GMT
        Subject: CN=DBED1E4DC81C705A570081F3102BE3D1B8EDECB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4d:ab:31:db:f4:45:92:c1:c5:37:e2:4c:89:
                    38:f2:6e:e3:5a:93:95:f3:d8:a4:cb:4f:4f:8a:48:
                    17:11:59:37:dd:6c:07:06:0f:65:a6:b7:1e:8b:32:
                    47:d5:a2:9b:6f:da:65:eb:8c:8b:0e:31:6b:db:a4:
                    b2:c3:a5:62:4d:e6:db:7b:9e:5c:47:e5:d9:f9:fc:
                    af:57:05:a2:5c:41:6c:95:bd:e8:e6:d6:cf:7c:e8:
                    cc:44:3b:fc:de:af:a3:45:ac:28:b6:54:1a:88:73:
                    79:11:e2:9f:d2:c9:37:84:87:86:61:f5:5d:95:80:
                    47:28:b3:52:35:e1:b6:ba:6e:f6:9b:f3:27:f0:31:
                    59:86:10:fb:ec:f6:4e:ac:29:2f:00:34:82:75:5a:
                    0a:7e:ac:ff:8f:2f:58:9c:3b:4e:09:5c:26:53:47:
                    7d:5e:3f:da:4d:53:c2:90:70:b4:3f:ee:29:86:db:
                    c9:f6:6b:f7:27:c8:ad:64:62:9d:62:c8:f9:36:6a:
                    0e:7b:3c:53:8c:07:d5:55:59:ef:c1:a6:eb:76:6a:
                    61:be:8b:7d:62:4a:66:dc:66:93:28:b6:2d:dc:63:
                    85:7c:4f:b6:ab:79:dd:d3:be:96:30:42:a5:46:c8:
                    26:b0:91:d0:27:f1:c4:49:e9:44:7b:89:e2:ca:b4:
                    2b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:ED:1E:4D:C8:1C:70:5A:57:00:81:F3:10:2B:E3:D1:B8:ED:EC:B1
            X509v3 Authority Key Identifier:
                keyid:34:B7:51:FB:87:F9:7F:C1:71:6F:BA:C7:5D:6E:CE:F3:59:4D:66:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:d8:42:05:08:ee:bf:f5:3a:3e:05:d7:60:0e:77:e3:42:13:
         df:11:1c:5e:bd:5b:be:6b:47:e7:eb:28:1d:d2:1e:66:b0:b5:
         ca:e6:b3:c0:21:14:f3:16:6e:41:3e:fc:e6:ec:04:17:ee:f7:
         d0:07:ed:f4:f7:af:93:af:48:ef:04:4b:ea:63:e5:f7:a9:cb:
         db:1b:42:b7:96:28:ed:f1:f8:1f:42:a8:05:99:5a:6f:06:e3:
         cc:b6:85:0b:75:76:a6:e1:e3:c9:97:fc:1c:f8:97:8f:b2:0b:
         38:85:b9:af:eb:08:0c:6c:2a:82:8c:d0:75:4f:45:63:95:bb:
         ac:b2:00:3d:22:8a:7d:8a:c7:2e:cc:b5:1c:25:c7:ab:21:48:
         3b:23:f8:c4:cb:b1:6f:5a:86:54:04:ff:8f:22:da:fb:95:73:
         66:4c:e1:f4:83:06:5a:e2:a4:f4:a7:ac:fb:e4:cf:8c:2b:fa:
         96:f2:d9:3c:80:fa:04:43:d2:cf:08:a4:ac:77:a8:c0:e0:fc:
         1c:43:8d:fd:b7:e3:0a:da:ee:51:aa:98:95:3f:61:68:3a:4d:
         78:fc:9c:2e:10:1f:26:a0:8b:09:9f:8a:eb:35:0b:b7:59:a7:
         b3:a7:63:d2:ef:46:0f:41:c0:40:09:b3:11:1c:bf:20:fa:37:
         b4:68:3b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:25:36 2025 by rpki-client