Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
File:                     3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft (raw, json)
Hash identifier:          9u34BM92VTQrZmraK3v0U7VYHCaFEM07lNxIPPe1d/U=
Subject key identifier:   91:73:35:A6:9C:62:55:69:B6:2D:FC:E9:3F:07:D8:6A:12:A8:16:CB
Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
Certificate issuer:       /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Certificate serial:       789D877550ECAF723DB5B6007AD0EB9D439FF4E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
Manifest number:          0258
Signing time:             Sun 29 Jun 2025 15:04:41 +0000
Manifest this update:     Sun 29 Jun 2025 14:59:41 +0000
Manifest next update:     Mon 30 Jun 2025 18:18:41 +0000
Files and hashes:         1: 323830343a363031383a3a2f33322d3332203d3e20323639313435.roa (hash: pukb5lj9ipcGQlV0LxsDM+V/GjI+AEgmTgzISsvatVU=)
                          2: 323830343a363031383a383030303a3a2f33332d3333203d3e20323639313435.roa (hash: Orz/ogX6qFnRjGYGiV2xeJsYmVdzFYD63V3ZXxKfl8k=)
                          3: 323830343a363031383a3a2f33332d3333203d3e20323639313435.roa (hash: nPpf0hhGMugZmNdbWERrNoc79wWP0pZTB/sPp3v04wk=)
                          4: 3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl (hash: wJj38UawC70XHITLevRU3iueiujXSRXLQAOuHSIudZ4=)
                          5: 34352e3138302e3138342e302f32332d3233203d3e20323639313435.roa (hash: 2RkNWBLR029RFRbh32kFnlXtZFOD9xnYisNTVjldsO0=)
                          6: 34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa (hash: /bpAsgSUi1LnoTyueVXmEbHEdvQmkmUVeA1xO4MqaNU=)
                          7: 34352e3138302e3138342e302f32322d3232203d3e20323639313435.roa (hash: kbu54ESKW1e5BIRWIv2H+d7R8holRL2gmDinoqBBatI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl
                          rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Jun 2025 18:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9d:87:75:50:ec:af:72:3d:b5:b6:00:7a:d0:eb:9d:43:9f:f4:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
        Validity
            Not Before: Jun 29 14:59:41 2025 GMT
            Not After : Jun 30 18:18:41 2025 GMT
        Subject: CN=917335A69C625569B62DFCE93F07D86A12A816CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:de:f9:da:cc:0f:87:31:f8:c6:52:ba:f8:97:
                    02:5e:cc:94:31:26:e6:ea:2b:bf:60:77:89:0b:1e:
                    01:32:81:c2:bc:64:92:a9:43:26:a9:a0:f5:b3:f3:
                    39:9c:14:70:37:ec:87:6b:06:58:05:72:f1:e5:fe:
                    de:a6:58:85:ac:d5:7d:4d:86:19:03:10:35:35:26:
                    d8:d5:be:6b:0b:0c:24:62:23:2c:8a:56:84:18:11:
                    1f:e0:ad:c7:a6:fe:04:a8:1c:5a:b1:1f:53:5e:d9:
                    b1:d8:ab:5c:b4:f8:17:bf:4e:48:67:0e:bf:ef:9d:
                    58:dc:75:b0:37:87:d0:fe:cc:50:9e:5c:d4:0e:d8:
                    1f:32:82:ab:e3:b6:43:07:fb:f0:f5:8c:50:6f:8c:
                    88:87:94:dc:66:2e:ef:da:50:cd:db:1c:86:88:cc:
                    ca:c8:8b:0f:f5:45:a4:49:cc:74:44:88:50:3f:5b:
                    e8:03:6b:6a:12:b4:23:03:fc:1a:7e:d4:a4:01:42:
                    8c:c0:0a:63:2d:db:23:da:3f:37:16:1f:57:a3:44:
                    a8:8b:f2:04:3e:a0:a3:fb:34:b4:56:df:d9:5f:e2:
                    e2:b4:76:77:7c:53:4d:25:54:1d:a2:35:80:a4:3c:
                    dd:4f:a2:71:d2:fd:22:7d:19:bf:82:5b:c9:00:dd:
                    3f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:73:35:A6:9C:62:55:69:B6:2D:FC:E9:3F:07:D8:6A:12:A8:16:CB
            X509v3 Authority Key Identifier:
                keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:4a:c2:63:71:48:ea:71:25:30:96:11:26:e9:ba:5d:8a:1e:
         0a:5a:26:db:7e:71:1d:32:c7:51:94:0f:58:4d:40:2d:5d:6d:
         50:66:0d:40:fb:f8:b8:bc:58:0e:be:76:52:3b:49:e9:15:6a:
         33:73:a5:44:81:c3:68:58:b2:7a:5a:3e:0a:d6:27:fb:bc:98:
         72:0e:54:7f:93:aa:7a:4b:6c:e6:85:51:6c:4f:38:0e:ce:47:
         ab:8e:20:82:87:96:4f:4d:10:b5:d8:27:4b:d9:28:28:d9:b1:
         38:17:db:25:f6:70:17:7e:fb:32:86:1e:ca:b2:5e:b7:6d:7c:
         0b:7d:3f:d7:0b:54:da:cd:a8:db:b7:00:ee:55:7f:5c:24:2e:
         75:57:9c:e0:af:f0:3d:55:8f:b8:76:d4:84:79:df:4a:0f:4c:
         07:8c:d5:7a:54:b2:be:9e:c7:f9:24:78:b5:9a:ff:d1:d0:b5:
         69:73:68:11:18:d8:4f:77:d3:eb:f7:66:20:36:0e:54:ba:00:
         57:c4:be:ec:02:88:d2:76:66:57:15:cb:55:18:f2:5e:a0:e7:
         22:4d:b5:c0:a1:fc:ec:e0:9f:2d:0c:06:1f:3f:65:3d:4b:06:
         1c:55:43:5d:e1:18:8e:52:fb:69:fe:0f:87:f1:67:c5:b8:9b:
         ce:b2:e7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:47:36 2025 by rpki-client