Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft
File:                     33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft (raw, json)
Hash identifier:          dI51hGUsNBv9RAEvfC6S3bgCU7Sj2jXCCDMGm3TTLWo=
Subject key identifier:   38:E8:EC:26:CA:87:56:5F:84:C0:04:88:4A:16:11:2A:F8:E0:F4:BD
Authority key identifier: 33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68
Certificate issuer:       /CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768
Certificate serial:       07693DA2C6C9028C178395C35F08CE0BE3E79F0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft
Manifest number:          0150
Signing time:             Sun 29 Jun 2025 05:45:16 +0000
Manifest this update:     Sun 29 Jun 2025 05:40:16 +0000
Manifest next update:     Mon 30 Jun 2025 09:08:16 +0000
Files and hashes:         1: 323830343a333336303a303a33303a3a2f36342d3634203d3e20323632373235.roa (hash: PHplbTnXXeq+ONmNsldvZhcMoF9KEK65+ZkGU2g4Cac=)
                          2: 323830343a333336303a3a2f33322d3438203d3e20323632373235.roa (hash: Vzzy94kvUWUhTx7QLr4vzuitWlbJCB8GpWrdimQi6+8=)
                          3: 3138362e3139322e302e302f32302d3234203d3e20323632373235.roa (hash: 7Tsl7qx1NouUrFNWT4qI6MJPqrTpsHOTmqv/UGnXNJg=)
                          4: 3138362e3233352e36342e302f32302d3234203d3e20323632373235.roa (hash: 1Hkni3TKW3kNQ83mB3nTYeJWQ9mBS7c7zWqWXIg/zDI=)
                          5: 33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl (hash: mm8MAIEwoqvd1fGIgjQ4/CLBRWn3WCYkfFROWV0dikA=)
                          6: 323830343a333336303a303a3230303a3a2f35352d3535203d3e20323632373235.roa (hash: YnAj4nnRHR0yIlpmVv3W9tpP6AuEMBjIff491ksaPns=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl
                          rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Jun 2025 09:08:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:69:3d:a2:c6:c9:02:8c:17:83:95:c3:5f:08:ce:0b:e3:e7:9f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768
        Validity
            Not Before: Jun 29 05:40:16 2025 GMT
            Not After : Jun 30 09:08:16 2025 GMT
        Subject: CN=38E8EC26CA87565F84C004884A16112AF8E0F4BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bc:57:7e:47:5e:f3:4b:18:99:bf:83:c9:8c:
                    34:71:7d:84:8c:b5:40:73:74:40:3e:a1:63:aa:ef:
                    3e:bd:29:2a:c0:b5:18:15:d2:af:e8:cc:31:94:9f:
                    1f:2a:3e:36:f6:3e:a4:df:d4:9c:92:e0:8a:57:95:
                    67:12:02:d2:7d:92:6c:96:cd:2a:27:68:d0:70:49:
                    52:5e:54:69:e5:af:83:c8:27:30:64:64:9e:f9:39:
                    2c:94:db:3f:9a:1a:9f:b5:ad:08:53:5f:1d:cd:db:
                    b8:a9:9a:a2:38:5c:3a:89:b2:0b:5d:20:ba:8c:95:
                    cb:c7:9f:69:c4:e7:1f:52:c4:a5:e6:34:64:59:fe:
                    c5:33:5a:09:c2:b4:64:cd:b2:a3:25:7a:ce:a7:c8:
                    6c:69:1b:c2:e3:9f:d2:0f:1a:6f:d2:0d:0a:8d:aa:
                    80:de:cd:c4:71:2a:82:6d:b1:c2:8b:e0:ff:9c:bb:
                    75:ea:1e:c4:d6:40:02:70:bf:cf:9a:17:39:28:d9:
                    fc:7f:14:32:17:30:63:5d:50:8f:05:7b:c3:4b:c8:
                    cd:a7:a9:10:1a:73:c2:c0:d5:13:f2:ef:3a:a7:d1:
                    cf:3e:c3:e4:b4:38:e1:b0:a6:8e:26:b9:0c:a7:37:
                    84:ba:b2:97:9d:16:74:d1:df:26:ab:99:ed:a5:a6:
                    2c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E8:EC:26:CA:87:56:5F:84:C0:04:88:4A:16:11:2A:F8:E0:F4:BD
            X509v3 Authority Key Identifier:
                keyid:33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:67:bf:97:02:29:33:ef:e6:3d:21:3d:18:09:2b:f3:23:7d:
         29:2b:e9:9b:a3:bf:4c:0f:72:99:10:f6:18:5e:09:9b:9f:79:
         07:d4:59:b9:4b:7d:4c:80:8d:f9:8c:66:a2:85:a4:22:aa:5e:
         7a:dd:9b:7d:b8:bf:47:26:8a:b7:76:16:ea:04:9c:4c:99:9c:
         22:89:2a:4b:a5:2a:5c:9e:3a:61:f0:84:38:2b:1b:d7:4a:50:
         bf:65:92:20:84:14:6c:73:7c:e8:73:99:36:e5:01:ec:ae:ed:
         91:97:61:d1:1f:48:87:2b:b0:b0:95:2e:f2:51:39:eb:0b:c5:
         55:81:40:65:07:fc:84:44:8c:c9:91:0d:eb:36:fd:42:3b:bd:
         18:67:28:a4:40:de:df:87:a2:e7:68:3c:48:4f:04:13:21:43:
         73:86:7e:b6:cb:b1:3b:62:6d:be:c5:7e:20:fe:10:c1:c7:c5:
         ef:9a:ba:68:99:ed:0c:4a:28:f7:d9:77:a7:dd:ce:ab:fb:e2:
         59:b9:c4:54:bf:a9:3a:e9:a6:5d:85:bd:82:66:86:2b:cc:54:
         d2:db:9f:73:55:99:65:33:b8:e5:9e:38:f3:03:07:20:4d:81:
         43:5e:bb:54:e2:35:61:31:79:df:71:3c:ff:6f:7f:03:53:10:
         ab:09:05:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:15:39 2025 by rpki-client