Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
File:                     3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft (raw, json)
Hash identifier:          ZKWBEsrVybfZGlTcSTuqljYU6zpmq16DC2JMtrthrpU=
Subject key identifier:   8D:DF:F5:B2:42:99:05:02:2D:FC:62:D7:B0:48:A1:65:7C:4E:6A:AB
Authority key identifier: 3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Certificate issuer:       /CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
Certificate serial:       798C5359D67EE76A334CF49E6C33B7CAC7868090
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
Manifest number:          02C5
Signing time:             Thu 18 Sep 2025 07:50:00 +0000
Manifest this update:     Thu 18 Sep 2025 07:45:00 +0000
Manifest next update:     Fri 19 Sep 2025 08:21:00 +0000
Files and hashes:         1: 34352e3136392e3230302e302f32332d3233203d3e20323638313337.roa (hash: PqhuJKMxhknh/zSUWtlU58E7lJnTuQM0XRIQnd5fkWs=)
                          2: 34352e3136392e3230322e302f32342d3234203d3e20323638313337.roa (hash: 8sE3+lB4qTVhhtM1NIU4VQWHMQtlI35NvIrHgZOfEwY=)
                          3: 34352e3136392e3230312e302f32342d3234203d3e20323638313337.roa (hash: X9NRdaPA/67Q3rg40/uJRlEJG3ESvFv49iLV4v0EXoI=)
                          4: 323830343a353839343a383030303a3a2f33342d3334203d3e20323638313337.roa (hash: ibpKzGLBhdMOnQXrZXah2wzdNkXLRH1QXQLXsrxUGUI=)
                          5: 323830343a353839343a3a2f33342d3334203d3e20323638313337.roa (hash: EsH33qZ0n5WHemEgPltsCizFjkzBHpHH/BQRdbVjCYU=)
                          6: 323830343a353839343a633030303a3a2f33342d3334203d3e20323638313337.roa (hash: JVC/u3FRdrND4dm0UTY3BsYwshuc3phA3+UmF203Vjg=)
                          7: 3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl (hash: LULOR5iPmdqpS2sYiXlPz+7I3sxpWBSlVC4+eEdCjf0=)
                          8: 323830343a353839343a343030303a3a2f33342d3334203d3e20323638313337.roa (hash: p1/VmojSdIc1qQpUP18UbyYfNp+p/paRq33apEp/AjE=)
                          9: 34352e3136392e3230302e302f32322d3232203d3e20323638313337.roa (hash: FvWmITQ8RemY4i4QO5Cy/WeYmWvU4PgTXnv7ANkNIac=)
                          10: 323830343a353839343a3a2f33322d3332203d3e20323638313337.roa (hash: ZncDmcAcmVngk0k7rmyCWcOwvgcmWcP/2o1TDjTZmhw=)
                          11: 34352e3136392e3230302e302f32342d3234203d3e20323638313337.roa (hash: 4cwBoGO5u7hU98/s5wTNDyZ1Fsf/hsPwm87bc/KCyUw=)
                          12: 34352e3136392e3230322e302f32332d3233203d3e20323638313337.roa (hash: +EmvEpwlzci+3qxsGRNVmMt9dMHW0tFOyBr4jcr9pKE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl
                          rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 08:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8c:53:59:d6:7e:e7:6a:33:4c:f4:9e:6c:33:b7:ca:c7:86:80:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Validity
            Not Before: Sep 18 07:45:00 2025 GMT
            Not After : Sep 19 08:21:00 2025 GMT
        Subject: CN=8DDFF5B2429905022DFC62D7B048A1657C4E6AAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:94:57:2b:21:69:73:2a:de:bf:e7:f2:5e:0e:
                    36:a4:01:83:94:e2:b4:08:cb:f6:46:13:4a:39:0f:
                    b5:0b:4e:d8:b7:86:4f:dd:71:12:c9:d7:c5:0a:da:
                    8d:e7:8a:8b:d5:6f:38:d6:94:bf:25:8c:b2:a2:03:
                    11:5f:8c:64:17:c0:9d:cb:65:68:6f:ec:bb:52:3c:
                    d3:10:52:32:a0:e7:b7:a2:50:7f:5c:48:f9:2f:1b:
                    27:a6:e4:66:72:ac:90:87:5f:a7:16:a6:ad:e6:b6:
                    81:2f:e3:56:73:2b:f6:c3:d3:cf:f5:a9:3b:82:a4:
                    fb:9a:77:31:6a:3d:c5:a2:09:0f:9e:e5:8d:4d:b9:
                    97:cc:44:b1:e3:42:10:e4:0f:0e:25:7a:a2:2b:0b:
                    c2:d9:8f:b4:9f:96:94:de:11:2d:ae:44:02:63:41:
                    09:5d:84:20:78:1d:c7:5d:84:57:51:38:9d:dc:5f:
                    3a:5f:c9:86:e8:ca:f3:aa:db:ba:ce:e6:e3:fe:dc:
                    3c:5a:c0:1f:dd:8c:95:be:0a:8f:5c:40:94:4f:08:
                    98:e6:b5:73:f4:56:ad:d6:44:3a:3d:1a:a9:a9:96:
                    7e:e1:4d:09:ee:28:e7:80:90:4b:71:ef:8f:82:9b:
                    4e:5c:ae:e8:32:19:db:c8:09:25:a7:cf:1c:3c:ef:
                    e7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DF:F5:B2:42:99:05:02:2D:FC:62:D7:B0:48:A1:65:7C:4E:6A:AB
            X509v3 Authority Key Identifier:
                keyid:3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:72:b2:d9:f4:aa:72:be:2f:db:ca:d8:83:6b:69:e9:17:67:
         2f:2f:c7:1f:1c:c1:d4:fc:2c:e5:72:9f:48:60:82:cf:35:30:
         ba:15:84:18:16:14:9e:33:b2:52:6c:87:af:19:04:cc:a4:79:
         01:3b:99:b9:19:01:88:9f:e8:42:36:eb:b2:4a:8c:cf:95:6c:
         86:02:ac:10:b3:af:8f:a2:a2:79:55:09:eb:29:51:e6:a5:b5:
         6b:a3:e6:a8:10:05:f3:d5:87:ad:87:b5:15:b1:04:97:16:c9:
         5d:31:f9:a3:16:28:c5:d9:1d:09:8b:31:c1:b5:ef:3d:fe:3d:
         16:63:ca:68:fd:da:6c:38:5c:de:a1:37:4d:aa:13:d3:fb:a1:
         a8:4f:cb:83:1d:d3:7e:fc:53:82:cc:38:52:06:c1:cd:77:fe:
         dc:a1:6a:0f:3b:e0:91:17:e3:9a:85:b0:d0:c6:1f:20:ad:37:
         9a:38:28:f9:b2:66:6c:9e:93:fe:20:36:25:eb:9b:84:9c:3e:
         77:15:e0:da:01:d2:de:86:b4:90:45:ea:6d:4d:02:86:ca:89:
         89:e0:b5:38:bf:92:a9:24:36:fc:27:9d:08:0a:6a:7c:7d:b8:
         55:91:c9:27:a6:f3:e4:10:b8:6e:df:1a:a4:8f:b2:c4:74:da:
         f9:27:88:6c
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUeYxTWdZ+52ozTPSebDO3yseGgJAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0RDNjkwQzBERTgwMTMxQjIyM0JFRTcwRDdGNkZGOTkw
QTE1RjM0MTAeFw0yNTA5MTgwNzQ1MDBaFw0yNTA5MTkwODIxMDBaMDMxMTAvBgNV
BAMTKDhEREZGNUIyNDI5OTA1MDIyREZDNjJEN0IwNDhBMTY1N0M0RTZBQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJlFcrIWlzKt6/5/JeDjakAYOU
4rQIy/ZGE0o5D7ULTti3hk/dcRLJ18UK2o3niovVbzjWlL8ljLKiAxFfjGQXwJ3L
ZWhv7LtSPNMQUjKg57eiUH9cSPkvGyem5GZyrJCHX6cWpq3mtoEv41ZzK/bD08/1
qTuCpPuadzFqPcWiCQ+e5Y1NuZfMRLHjQhDkDw4leqIrC8LZj7SflpTeES2uRAJj
QQldhCB4HcddhFdROJ3cXzpfyYboyvOq27rO5uP+3DxawB/djJW+Co9cQJRPCJjm
tXP0Vq3WRDo9Gqmpln7hTQnuKOeAkEtx74+Cm05crugyGdvICSWnzxw87+fZAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUjd/1skKZBQIt/GLXsEihZXxOaqswHwYDVR0j
BBgwFoAUPcaQwN6AExsiO+5w1/b/mQoV80EwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KdVlMSFBkS1k1WTFwaEY1TW9xcVdCa00yVjVQQW9uYmtyY3VQdTJSZUgy
LzEvM0RDNjkwQzBERTgwMTMxQjIyM0JFRTcwRDdGNkZGOTkwQTE1RjM0MS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zREM2OTBDMERFODAxMzFCMjIz
QkVFNzBEN0Y2RkY5OTBBMTVGMzQxLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0p1
WUxIUGRLWTVZMXBoRjVNb3FxV0JrTTJWNVBBb25ia3JjdVB1MlJlSDIvMS8zREM2
OTBDMERFODAxMzFCMjIzQkVFNzBEN0Y2RkY5OTBBMTVGMzQxLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
rXKy2fSqcr4v28rYg2tp6RdnLy/HHxzB1Pws5XKfSGCCzzUwuhWEGBYUnjOyUmyH
rxkEzKR5ATuZuRkBiJ/oQjbrskqMz5VshgKsELOvj6KieVUJ6ylR5qW1a6PmqBAF
89WHrYe1FbEElxbJXTH5oxYoxdkdCYsxwbXvPf49FmPKaP3abDhc3qE3TaoT0/uh
qE/Lgx3TfvxTgsw4UgbBzXf+3KFqDzvgkRfjmoWw0MYfIK03mjgo+bJmbJ6T/iA2
JeubhJw+dxXg2gHS3oa0kEXqbU0ChsqJieC1OL+SqSQ2/CedCApqfH24VZHJJ6bz
5BC4bt8apI+yxHTa+SeIbA==
-----END CERTIFICATE-----
Generated at Thu Sep 18 20:49:28 2025 by rpki-client