Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
File:                     38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft (raw, json)
Hash identifier:          L69YqOZmudkFaSZh3mgHfsTPQ9pUi9EEkB9tDpENgr0=
Subject key identifier:   88:68:19:22:6D:86:49:75:C8:13:8A:05:2E:DA:A5:F9:09:94:75:08
Authority key identifier: 38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6
Certificate issuer:       /CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
Certificate serial:       1A6B9454D625529A6219B052F3887C50F8B1C07D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
Manifest number:          52
Signing time:             Wed 20 Aug 2025 17:05:54 +0000
Manifest this update:     Wed 20 Aug 2025 17:00:54 +0000
Manifest next update:     Thu 21 Aug 2025 20:50:54 +0000
Files and hashes:         1: 3136382e3139372e3135352e302f32342d3234203d3e20323635343834.roa (hash: +MeOKyYM0p0XGjUyx4vlgTCn375XhEQTf8sFNxrJNsg=)
                          2: 323830343a333464383a383030303a3a2f33342d3334203d3e20323635343834.roa (hash: zuQiAIOJ+ZS/ropb8EjQjUEWysJVZ+9WV54nzLTqbmw=)
                          3: 323830343a333464383a343030303a3a2f33342d3334203d3e20323635343834.roa (hash: e8/V55oyxKMD2kRIZ3R5netibA9M1wN5NIDFQOgF8nA=)
                          4: 3136382e3139372e3135332e302f32342d3234203d3e20323635343834.roa (hash: mU9j1eH/ij0pYMxywalB5xSaBOdQ6VaAayECuuFpXko=)
                          5: 323830343a333464383a633030303a3a2f33342d3334203d3e20323635343834.roa (hash: 36CmdseByt18edrqGOwO6jO/ADuqymhG8/4H177lLZQ=)
                          6: 3136382e3139372e3135322e302f32342d3234203d3e20323635343834.roa (hash: tEzMkwxnxtvEU2wXxlFFw5Tb2aEh0v3SW6BXNU2rURE=)
                          7: 323830343a333464383a3a2f33342d3334203d3e20323635343834.roa (hash: zt6CDyXNajt2tU1ITWsX4t1cpsGBPoMVHVY3j9JOWJE=)
                          8: 3136382e3139372e3135342e302f32332d3233203d3e20323635343834.roa (hash: x9aOdfFvH3VEu4sk7sDZlptBHbKpqSCl0IgxVOsEsl8=)
                          9: 38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl (hash: q20UuZa6sP/XcNQtIVipQfPFDJBOFvRl5eUXUDthKgU=)
                          10: 323830343a333464383a3a2f33322d3332203d3e20323635343834.roa (hash: zwF8uAxp0Y9mWlMcIGpcEdDQI4UXWaeyagKZ5G1gYXM=)
                          11: 3136382e3139372e3135322e302f32322d3232203d3e20323635343834.roa (hash: eRNs97HyB0u62rEBYqNoT2MZ/OrIvvvQ685ph/Anf10=)
                          12: 323830343a333464383a3a2f33332d3333203d3e20323635343834.roa (hash: U7LwLqKHuoMSYFazJUUaIirfWRssObY0fuSR3+Ju+oI=)
                          13: 323830343a333464383a383030303a3a2f33332d3333203d3e20323635343834.roa (hash: bzUwb9vCcXHaFyB0RM9vUz+JLvelmkvURETnOF+U06Q=)
                          14: 3136382e3139372e3135342e302f32342d3234203d3e20323635343834.roa (hash: 5l+tJQJrcMlijNHk6lzmu7K2C/kncgrrLnSopr/x5T4=)
                          15: 3136382e3139372e3135322e302f32332d3233203d3e20323635343834.roa (hash: I7+GzxzOLMovqWw1X3+jBkfJhsi0JQOxHv2XvVhfK4k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl
                          rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 20:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:6b:94:54:d6:25:52:9a:62:19:b0:52:f3:88:7c:50:f8:b1:c0:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
        Validity
            Not Before: Aug 20 17:00:54 2025 GMT
            Not After : Aug 21 20:50:54 2025 GMT
        Subject: CN=886819226D864975C8138A052EDAA5F909947508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:81:21:05:dd:90:08:c3:93:2f:a9:7f:62:65:
                    da:97:1c:6a:ae:2f:34:e4:f0:1b:dc:2d:2c:fc:eb:
                    91:ba:df:fa:d0:da:3a:e1:66:3f:38:37:d3:d2:27:
                    98:6e:21:fe:fe:0a:eb:4a:9f:71:63:09:9d:e4:61:
                    99:cf:ac:07:74:7f:d4:4c:26:9f:ff:a8:08:02:ca:
                    4c:47:c0:50:d1:ca:8f:8d:72:bc:79:be:77:df:81:
                    a8:20:bf:85:93:98:ba:ae:ed:1f:9c:e2:58:28:a0:
                    01:2a:4a:ea:1a:b6:ce:4c:21:4b:7f:d0:7d:89:be:
                    ee:d0:56:ff:56:ba:49:23:65:b8:fb:f8:df:2a:c1:
                    82:44:d8:8f:ac:fe:f2:f2:28:a7:8e:fc:03:a5:31:
                    19:c2:1d:35:d8:4b:58:1d:7d:ce:35:e6:bd:ea:0b:
                    a2:dd:e8:00:ec:fe:1d:bd:e6:f0:48:f9:e0:d1:92:
                    e1:27:01:34:ea:08:4d:24:a4:12:0d:99:45:84:f0:
                    0a:cb:f8:da:16:29:e6:48:e0:01:96:6f:9a:cd:aa:
                    52:4c:e3:54:b2:79:98:39:a9:0a:8b:e2:f1:5d:22:
                    27:c0:5a:97:7a:48:13:46:0e:8a:2d:52:5c:66:4f:
                    64:0b:ad:a2:5d:46:ca:d8:24:a2:4e:59:af:be:cf:
                    fb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:68:19:22:6D:86:49:75:C8:13:8A:05:2E:DA:A5:F9:09:94:75:08
            X509v3 Authority Key Identifier:
                keyid:38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:82:65:f4:30:5f:b8:cb:9f:ae:7a:a8:0b:54:10:84:bf:7a:
         5d:b9:c6:73:0b:68:7f:54:54:49:b2:99:88:d1:6e:04:95:c8:
         5b:ba:4d:70:8a:13:2c:62:61:bd:6c:18:5f:aa:be:30:2a:58:
         94:34:29:32:e4:b3:a8:1b:a8:1d:aa:d9:df:26:a4:62:ba:a8:
         b1:44:0c:be:c8:4d:71:3a:40:e9:4f:66:a3:95:64:7e:93:05:
         f6:3a:57:1d:7a:54:a0:f5:a8:1f:dd:0e:df:40:d0:f4:ef:9e:
         c9:23:52:6d:12:6c:51:83:24:ca:7b:dd:af:5c:ef:80:9c:38:
         aa:82:aa:5a:4d:74:6f:ad:9d:ae:30:c1:16:c0:0d:5f:44:8e:
         1a:8d:f7:fe:e1:29:5f:08:44:65:11:89:e5:f4:a9:a8:0b:0f:
         72:ae:8a:61:79:43:01:29:34:ef:a7:3d:2f:19:bb:f9:da:d0:
         bc:b6:c2:0d:41:28:6e:f6:51:d2:06:26:4f:16:3a:37:b0:0e:
         f7:b5:a4:01:d2:4e:8e:aa:08:15:55:1c:15:68:23:c8:86:5b:
         72:ff:e8:cd:02:27:e6:61:eb:70:ef:5b:af:09:dc:f7:52:91:
         64:ee:b8:5c:f0:ac:c4:2c:15:7e:f4:71:38:29:95:98:26:76:
         21:2c:4a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 04:24:15 2025 by rpki-client