Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft
File:                     411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft (raw, json)
Hash identifier:          iXjd0e9DgSxmlli0WJ3BglTyBujAjBMtzlecZc4uxq0=
Subject key identifier:   85:BD:B9:D0:55:17:98:47:91:3D:0F:27:FA:A3:59:DB:0C:39:27:8F
Authority key identifier: 41:1F:4F:8C:4C:5A:70:80:7A:28:FC:3C:85:F6:C6:BA:F0:11:24:5B
Certificate issuer:       /CN=411F4F8C4C5A70807A28FC3C85F6C6BAF011245B
Certificate serial:       3B33A6A2BD05E88121103B7BB69EA075023C7ADC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft
Manifest number:          82
Signing time:             Tue 01 Jul 2025 06:30:00 +0000
Manifest this update:     Tue 01 Jul 2025 06:25:00 +0000
Manifest next update:     Wed 02 Jul 2025 06:30:00 +0000
Files and hashes:         1: 411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.crl (hash: zTpwaq1OoTGBtZc/Hn1dL/xdZmIvWcYkO+x0IGVP9SY=)
                          2: 323830343a343235303a3a2f33322d3438203d3e20323637343932.roa (hash: /LHvi05kCt9zKgKY+WIZNYGkbzjxuWi5IXygDqTTTek=)
                          3: 3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa (hash: bqvZ1PV8LUhBf5JFS4uCb4PW7l97mORSa3iC75GRr/8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.crl
                          rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 06:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:33:a6:a2:bd:05:e8:81:21:10:3b:7b:b6:9e:a0:75:02:3c:7a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411F4F8C4C5A70807A28FC3C85F6C6BAF011245B
        Validity
            Not Before: Jul  1 06:25:00 2025 GMT
            Not After : Jul  2 06:30:00 2025 GMT
        Subject: CN=3082010A0282010100EE8B9C97A82233C9180CFB622680E427E955C6C58B865394792874813036281A616A6535E4B5EABA38CEC589A6616B456CF2DF50F51CE53B6073C109DF4BF1BB177FC3DF0E9FD3B829E495A9743DE4F794816BE3F3CD2EFA1AA9A38E9EDA141956C360B3C6B8B7E89A78C5D1DDDE613235908D1DEEADECE63E3164264EB73449EDC66DF45ECA1D523B63386123F777463AAB8CF8BD16F93CE63E979FDAB2FD0AF563B79C04C9EAC2C196C0E974F0BD50B4DD2B0FAFCD32CAF4993E65496F90C4972C07E818D288AB8B9304ECBEF3612FFFAF22C78DE3CE2812C74E12753F4EE16A6AC48CBA98096B49DEA648D0D679E5C8CB0A13A24B4A0204198E0FDF5311710203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8b:9c:97:a8:22:33:c9:18:0c:fb:62:26:80:
                    e4:27:e9:55:c6:c5:8b:86:53:94:79:28:74:81:30:
                    36:28:1a:61:6a:65:35:e4:b5:ea:ba:38:ce:c5:89:
                    a6:61:6b:45:6c:f2:df:50:f5:1c:e5:3b:60:73:c1:
                    09:df:4b:f1:bb:17:7f:c3:df:0e:9f:d3:b8:29:e4:
                    95:a9:74:3d:e4:f7:94:81:6b:e3:f3:cd:2e:fa:1a:
                    a9:a3:8e:9e:da:14:19:56:c3:60:b3:c6:b8:b7:e8:
                    9a:78:c5:d1:dd:de:61:32:35:90:8d:1d:ee:ad:ec:
                    e6:3e:31:64:26:4e:b7:34:49:ed:c6:6d:f4:5e:ca:
                    1d:52:3b:63:38:61:23:f7:77:46:3a:ab:8c:f8:bd:
                    16:f9:3c:e6:3e:97:9f:da:b2:fd:0a:f5:63:b7:9c:
                    04:c9:ea:c2:c1:96:c0:e9:74:f0:bd:50:b4:dd:2b:
                    0f:af:cd:32:ca:f4:99:3e:65:49:6f:90:c4:97:2c:
                    07:e8:18:d2:88:ab:8b:93:04:ec:be:f3:61:2f:ff:
                    af:22:c7:8d:e3:ce:28:12:c7:4e:12:75:3f:4e:e1:
                    6a:6a:c4:8c:ba:98:09:6b:49:de:a6:48:d0:d6:79:
                    e5:c8:cb:0a:13:a2:4b:4a:02:04:19:8e:0f:df:53:
                    11:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BD:B9:D0:55:17:98:47:91:3D:0F:27:FA:A3:59:DB:0C:39:27:8F
            X509v3 Authority Key Identifier:
                keyid:41:1F:4F:8C:4C:5A:70:80:7A:28:FC:3C:85:F6:C6:BA:F0:11:24:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:fb:a1:9d:21:b8:bb:5f:c9:07:e7:8f:50:98:8d:1a:20:f5:
         dc:31:ca:ff:3e:92:6d:b7:52:9c:d6:5c:3a:16:1a:f6:fd:fd:
         6a:a5:51:4a:93:8d:31:cf:aa:eb:f4:1d:12:f9:82:72:6a:d7:
         86:5c:40:72:88:33:3a:dc:06:45:cb:1c:3c:67:bc:f4:89:00:
         84:b1:1a:ef:3e:f3:1a:8c:e4:2c:c8:dd:c5:8e:9b:e5:6b:f4:
         e5:ea:33:e6:f9:e5:ad:dc:81:34:70:a9:3e:88:7e:d7:7d:24:
         ab:8e:d6:c3:03:25:ee:14:ff:44:4e:9f:a0:05:18:47:5e:1d:
         72:49:db:05:7c:30:d6:e7:b2:e3:91:b3:b5:e4:b1:2b:b2:56:
         c3:23:4e:24:09:62:bd:aa:f4:a4:54:2c:eb:b8:8e:f1:07:fb:
         4f:e1:f0:c9:e8:22:11:dc:32:67:a9:b9:bb:93:4f:f8:45:86:
         27:69:bc:b9:44:75:6b:c0:1a:d4:62:5a:ce:3e:43:d6:71:59:
         cd:3b:45:3a:74:7f:95:29:44:14:5e:c7:46:7f:f7:30:f7:0f:
         0f:3c:32:d1:bd:d4:29:95:17:2c:1f:99:d9:59:48:9c:e4:ee:
         72:de:a9:12:99:a7:e8:00:41:df:3e:88:29:6a:46:11:5c:0c:
         5f:07:c3:d4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 1 20:17:30 2025 by rpki-client