Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
File:                     3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft (raw, json)
Hash identifier:          fXg8Np6FN64VCvAqbab8Rkh21AvzIYlmqhD9Lxp/p44=
Subject key identifier:   C9:36:E4:DF:00:C3:0A:2B:D1:C4:B8:54:79:FF:8C:1A:FF:F3:AE:97
Authority key identifier: 3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Certificate issuer:       /CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
Certificate serial:       4971D8355EE02CD16A6726292C6DC896409B2BFD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
Manifest number:          0302
Signing time:             Mon 03 Nov 2025 00:20:00 +0000
Manifest this update:     Mon 03 Nov 2025 00:15:00 +0000
Manifest next update:     Tue 04 Nov 2025 02:30:00 +0000
Files and hashes:         1: 34352e3136392e3230302e302f32342d3234203d3e20323638313337.roa (hash: 4cwBoGO5u7hU98/s5wTNDyZ1Fsf/hsPwm87bc/KCyUw=)
                          2: 323830343a353839343a343030303a3a2f33342d3334203d3e20323638313337.roa (hash: p1/VmojSdIc1qQpUP18UbyYfNp+p/paRq33apEp/AjE=)
                          3: 323830343a353839343a3a2f33342d3334203d3e20323638313337.roa (hash: EsH33qZ0n5WHemEgPltsCizFjkzBHpHH/BQRdbVjCYU=)
                          4: 34352e3136392e3230312e302f32342d3234203d3e20323638313337.roa (hash: X9NRdaPA/67Q3rg40/uJRlEJG3ESvFv49iLV4v0EXoI=)
                          5: 34352e3136392e3230302e302f32332d3233203d3e20323638313337.roa (hash: PqhuJKMxhknh/zSUWtlU58E7lJnTuQM0XRIQnd5fkWs=)
                          6: 3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl (hash: 5qXj2QJJo7uFf0PKk0XgPVSeZ9Gws1qinovVF1FaEnM=)
                          7: 34352e3136392e3230322e302f32332d3233203d3e20323638313337.roa (hash: +EmvEpwlzci+3qxsGRNVmMt9dMHW0tFOyBr4jcr9pKE=)
                          8: 34352e3136392e3230302e302f32322d3232203d3e20323638313337.roa (hash: FvWmITQ8RemY4i4QO5Cy/WeYmWvU4PgTXnv7ANkNIac=)
                          9: 323830343a353839343a633030303a3a2f33342d3334203d3e20323638313337.roa (hash: JVC/u3FRdrND4dm0UTY3BsYwshuc3phA3+UmF203Vjg=)
                          10: 323830343a353839343a3a2f33322d3332203d3e20323638313337.roa (hash: ZncDmcAcmVngk0k7rmyCWcOwvgcmWcP/2o1TDjTZmhw=)
                          11: 323830343a353839343a383030303a3a2f33342d3334203d3e20323638313337.roa (hash: ibpKzGLBhdMOnQXrZXah2wzdNkXLRH1QXQLXsrxUGUI=)
                          12: 34352e3136392e3230322e302f32342d3234203d3e20323638313337.roa (hash: 8sE3+lB4qTVhhtM1NIU4VQWHMQtlI35NvIrHgZOfEwY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl
                          rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 02:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:71:d8:35:5e:e0:2c:d1:6a:67:26:29:2c:6d:c8:96:40:9b:2b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Validity
            Not Before: Nov  3 00:15:00 2025 GMT
            Not After : Nov  4 02:30:00 2025 GMT
        Subject: CN=C936E4DF00C30A2BD1C4B85479FF8C1AFFF3AE97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:1a:ec:82:39:f5:d8:27:6b:6d:0c:a3:b5:
                    86:26:38:f0:b8:12:1a:f9:12:ec:e0:42:9f:3e:d5:
                    65:3a:fe:1e:ba:29:a0:37:02:33:f3:0d:f4:d3:7d:
                    17:a1:0f:38:3d:6d:fb:ff:b2:1b:cf:a5:a3:07:6f:
                    2e:91:18:5a:4b:1a:e8:b3:03:97:b3:d1:bf:08:f9:
                    76:4e:78:96:8f:78:03:14:44:57:36:d7:f8:87:8e:
                    6c:5d:38:48:88:c2:2f:67:48:a4:79:6b:f1:3d:3f:
                    e3:5e:e5:c9:3e:3b:75:38:e6:2b:ff:da:03:90:87:
                    af:42:2f:10:5f:6c:a2:e6:e6:5a:33:0d:60:03:bb:
                    8f:0a:c3:be:57:32:62:58:b9:aa:ac:f4:12:e1:83:
                    9e:3b:2f:ac:50:c7:32:54:e3:ed:18:07:1b:ea:55:
                    ba:4c:22:58:93:e5:55:7a:2e:54:0b:c5:2f:dc:9f:
                    e9:95:4d:84:d1:59:25:dc:11:e8:12:bc:de:ef:5a:
                    64:3d:7d:72:df:20:5e:ee:4a:39:ac:a3:9f:07:3c:
                    a5:4d:08:da:d2:e2:d2:2c:4f:41:25:8a:43:2f:5a:
                    60:fe:e1:f2:d5:45:2b:59:3a:7e:fa:7f:3e:75:22:
                    f6:0b:c6:f7:34:a0:2e:7e:f7:e0:19:a1:e5:36:3e:
                    3c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:36:E4:DF:00:C3:0A:2B:D1:C4:B8:54:79:FF:8C:1A:FF:F3:AE:97
            X509v3 Authority Key Identifier:
                keyid:3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:13:97:c9:f2:00:90:6a:aa:48:54:21:ef:a6:66:60:c8:df:
         5d:73:46:ee:87:bc:7c:b6:03:8f:d8:95:2a:48:6d:40:f1:da:
         1e:6f:96:f4:66:34:a1:d0:55:db:ea:c3:59:c1:17:53:8f:14:
         a4:aa:d3:78:86:2d:3a:fc:0e:a2:0b:e5:0c:f5:f8:ef:53:19:
         65:0d:3a:5a:b0:7f:ca:44:8c:a5:cf:b2:e4:1e:f4:fc:7e:80:
         1c:9b:09:8d:7f:cb:dd:cd:00:5e:0e:c1:22:63:63:29:3e:c7:
         fa:49:1b:73:65:c6:91:cc:59:e6:c7:89:0b:d1:84:e2:4b:b7:
         70:96:f8:af:b9:5f:f8:b6:ea:a2:a4:32:18:e9:15:39:3c:fa:
         6c:95:fa:75:b4:84:4e:7c:fe:aa:a8:40:cb:85:99:37:d3:d6:
         35:cf:ad:77:3f:8a:b8:4e:f0:a4:57:55:e6:11:8c:f2:1e:9e:
         d0:dd:89:d5:12:2b:06:92:67:c7:1b:7d:ce:aa:0d:17:63:9b:
         c5:db:a1:7f:66:f2:a4:46:b1:6e:45:31:35:a3:62:bc:41:36:
         00:37:29:7e:0d:88:a8:3f:ad:12:de:99:ef:dc:4b:d0:8e:60:
         e8:a8:48:42:26:bd:56:57:e9:f0:d0:b1:4b:2e:07:b3:a9:68:
         17:19:43:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:41:22 2025 by rpki-client