Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft
File:                     3332A8C3B68FE79476953E58B1857203FA676F0F.mft (raw, json)
Hash identifier:          WrPPOhyWY76lNZte040Imx0POgvRX0hkiTVOAW6qsNs=
Subject key identifier:   CF:6A:D8:46:44:66:8B:76:32:04:93:B8:28:31:5E:00:07:E3:CC:2C
Authority key identifier: 33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F
Certificate issuer:       /CN=3332A8C3B68FE79476953E58B1857203FA676F0F
Certificate serial:       434A1823CFE314C3206E85C120F560176B5F5C62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft
Manifest number:          0241
Signing time:             Thu 18 Sep 2025 21:57:58 +0000
Manifest this update:     Thu 18 Sep 2025 21:52:58 +0000
Manifest next update:     Sat 20 Sep 2025 01:38:58 +0000
Files and hashes:         1: 3138362e3235312e38302e302f32312d3332203d3e203533323233.roa (hash: 492Ebg7iQemc/TE4N/iR58FeCmeAA91V38unRlDznt8=)
                          2: 323830343a323038383a3a2f33322d313238203d3e203533323233.roa (hash: 5fQ3uPb5SVDlUX3RSxQAq0TlweJO1u7jbGHmsCaKc/w=)
                          3: 3137372e36372e3134382e302f32322d3332203d3e203533323233.roa (hash: e3lF6O0/izSqcl2PK/nGJ0F7KicvIwfhh8Bq3/aSRyE=)
                          4: 3133322e3235352e3134302e302f32322d3332203d3e203533323233.roa (hash: xfBj7EHGkXfpaVkg+i26+Pm0zpmELHrz6cERLXLO/bA=)
                          5: 3332A8C3B68FE79476953E58B1857203FA676F0F.crl (hash: mRdxIBwBRjmjdN1ZW05gKOpNRKBanPGdVqmt8ZHJVno=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.crl
                          rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 22:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:4a:18:23:cf:e3:14:c3:20:6e:85:c1:20:f5:60:17:6b:5f:5c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3332A8C3B68FE79476953E58B1857203FA676F0F
        Validity
            Not Before: Sep 18 21:52:58 2025 GMT
            Not After : Sep 20 01:38:58 2025 GMT
        Subject: CN=CF6AD84644668B76320493B828315E0007E3CC2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:da:4a:92:e6:d3:2d:dc:d8:33:df:a0:6a:f6:
                    db:fd:ef:fa:c3:95:38:ce:ee:2b:a1:5a:3e:d3:3a:
                    ca:9d:b6:4a:9a:0f:56:e9:33:fa:b2:a0:2f:4d:dd:
                    62:9b:0f:0f:56:9d:d2:52:df:6c:6f:a6:5f:be:b2:
                    e4:f3:e9:c0:1a:58:a2:a4:85:ba:0e:4f:99:5a:e1:
                    7c:66:ba:c6:7e:d1:fe:62:8d:f8:68:84:7f:7e:cb:
                    0a:bf:07:bc:c5:33:7d:89:e0:74:a9:ce:35:8f:d7:
                    41:71:b6:33:a2:b8:fe:20:66:ee:7c:39:59:27:05:
                    7b:f6:32:4e:66:77:43:f1:71:c9:39:28:2f:91:9d:
                    a5:fb:bc:f1:03:da:f6:f2:fa:ad:f2:36:b5:4d:db:
                    46:4f:58:2b:79:ef:e5:de:1b:29:24:e1:cd:72:22:
                    b5:a9:73:6c:d3:e8:3c:00:fe:4f:87:3c:d2:c6:1d:
                    11:98:fc:0e:58:37:22:a7:d1:c7:c6:8a:0f:c0:88:
                    24:39:30:c8:77:ce:7c:5b:01:83:a0:6f:d0:58:61:
                    71:38:7a:2e:a0:0e:b7:65:f7:d1:c8:d6:22:da:88:
                    38:e8:d7:6d:94:de:99:e2:0b:ac:dd:47:42:00:6d:
                    62:45:53:94:74:13:91:3e:18:2b:83:b0:52:cc:88:
                    e3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6A:D8:46:44:66:8B:76:32:04:93:B8:28:31:5E:00:07:E3:CC:2C
            X509v3 Authority Key Identifier:
                keyid:33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:a1:d3:04:1f:f1:c9:58:27:1b:bd:e0:82:9b:7d:f4:8d:74:
         6d:36:cd:f0:15:79:22:22:d6:a9:49:3f:76:da:83:c5:a0:36:
         e7:83:89:69:fa:32:12:95:8f:c0:1f:b3:ea:70:70:27:fd:2c:
         83:c7:62:20:e7:aa:2b:b0:25:0e:92:97:cd:2e:88:99:56:cd:
         d7:47:bf:b6:b1:d1:02:15:42:8b:42:a5:f4:bd:ae:70:ba:24:
         d7:f1:f6:0b:a0:65:d7:6c:dc:6c:ed:07:bc:e3:2f:ab:f5:42:
         e1:77:56:21:a3:9d:8d:0d:bd:d5:ba:02:e6:99:d9:68:bb:47:
         a8:42:b5:20:aa:d5:8a:dc:1c:4f:d7:ff:4d:77:5d:4c:34:76:
         c0:3e:c3:89:48:1a:3e:bc:8d:75:29:ca:5a:ac:fd:dd:8a:ff:
         08:e5:0b:a4:ad:64:7d:45:cf:a4:1a:9b:6e:26:e1:93:fa:51:
         20:90:63:55:57:95:97:ee:36:76:0f:cb:c2:8d:d1:b4:eb:f7:
         09:ea:0d:f3:97:65:36:c1:9c:7c:c0:be:80:59:9e:60:d0:1d:
         db:e4:c8:e7:2e:45:2c:51:9f:8f:cc:9a:fa:ea:92:c0:11:b6:
         73:a9:eb:55:3b:bb:6b:66:dc:e7:5e:69:e8:35:1c:6c:fe:0b:
         a6:03:f9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:40:09 2025 by rpki-client