Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
File:                     3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft (raw, json)
Hash identifier:          tMzORPGaUdUsmYUak5OxWQlEkmyoPkqCoWVPmfBDSaY=
Subject key identifier:   75:7C:46:46:7B:A5:ED:BE:8F:DE:F9:38:E3:D0:AF:62:D8:2D:37:76
Authority key identifier: 3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E
Certificate issuer:       /CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
Certificate serial:       1D836AC1458D51764BC155026A78B5D4137858F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
Manifest number:          0166
Signing time:             Mon 20 Oct 2025 12:12:16 +0000
Manifest this update:     Mon 20 Oct 2025 12:07:16 +0000
Manifest next update:     Tue 21 Oct 2025 14:05:16 +0000
Files and hashes:         1: 3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl (hash: NvbZUL0aCgQspPOQV8jr9vzLPQ30lwNX+TFXBvDyaGM=)
                          2: 3138392e35302e3232322e302f32342d3234203d3e20323730353531.roa (hash: UsQOMyZHtsc6TaHqA0joIAL0Xfjc2PpvhLLL00pQDVA=)
                          3: 3138392e35302e3232332e302f32342d3234203d3e20323730353531.roa (hash: tg53L27JqwL4FND+rLzsbtuLYRRo/BSqrNhOQnodd2w=)
                          4: 3138392e35302e3232312e302f32342d3234203d3e20323730353531.roa (hash: a5PrF0/f461Ynit6WvECovL5BWmEJeQoBlDUQq7HxQo=)
                          5: 3138392e35302e3232302e302f32342d3234203d3e20323730353531.roa (hash: XIK3trgOduFvYXpauvrEY/zSl++zplK4JsYkuaGD2gw=)
                          6: 323830343a366462383a3a2f33322d3332203d3e20323730353531.roa (hash: FV+S+TZX84Q03vR1jKTgDhNyXgTv5smpg9WGAeALcHM=)
                          7: 3138392e35302e3232302e302f32322d3232203d3e20323730353531.roa (hash: AX9jQRnpyOWBuTJjKmVSaEOA2ZYYCjSkvfBgQQ9WXbA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl
                          rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:83:6a:c1:45:8d:51:76:4b:c1:55:02:6a:78:b5:d4:13:78:58:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
        Validity
            Not Before: Oct 20 12:07:16 2025 GMT
            Not After : Oct 21 14:05:16 2025 GMT
        Subject: CN=757C46467BA5EDBE8FDEF938E3D0AF62D82D3776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:21:29:c2:65:3c:d4:38:87:dc:aa:46:b9:78:
                    ad:ac:1a:71:30:8d:02:7c:77:c6:ab:19:82:ef:33:
                    15:7a:64:a3:7d:d4:06:30:37:ad:e4:bc:35:0e:16:
                    d4:94:eb:6e:af:9a:85:1b:f7:56:d9:58:59:be:10:
                    b5:b7:8a:e7:c7:3c:6e:f9:a7:64:9a:65:38:15:b3:
                    2d:1d:51:71:21:cf:f8:dd:ef:6b:91:4c:59:22:ac:
                    bf:81:05:88:26:f6:0d:ae:b5:61:b6:20:80:f2:78:
                    5b:a1:bc:36:00:cc:00:71:6d:0d:34:9d:87:82:04:
                    b2:fe:a1:4c:bf:ca:73:01:d5:02:e5:0c:09:9d:d7:
                    55:6e:22:75:6f:05:f6:28:8e:c9:71:76:be:ce:48:
                    20:fd:37:22:c0:a5:cf:db:4f:d6:76:bd:f2:25:13:
                    e4:29:1a:e1:e6:a5:21:9f:18:e2:64:93:d8:18:b8:
                    f6:03:33:90:80:d0:3e:f7:28:97:a8:46:5a:38:e8:
                    b4:24:93:1b:d1:59:11:90:43:58:c3:ff:5f:34:2e:
                    b3:8a:72:98:04:5c:70:08:b3:36:ec:a9:27:dc:6e:
                    55:c5:86:17:71:ce:fd:46:88:67:94:3e:8f:ce:4b:
                    bd:e1:35:e4:33:4a:13:66:a2:6b:f7:fb:65:40:cd:
                    d8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7C:46:46:7B:A5:ED:BE:8F:DE:F9:38:E3:D0:AF:62:D8:2D:37:76
            X509v3 Authority Key Identifier:
                keyid:3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:2d:d8:c2:e3:8e:c2:52:3a:1b:17:42:64:56:c2:57:97:ee:
         a7:10:84:a8:b7:4e:d3:ec:b1:99:e8:7e:db:da:36:40:5c:81:
         79:35:2f:de:1b:28:50:ac:39:b8:47:85:04:9e:be:1e:3f:1c:
         8a:b6:dd:59:8c:50:4f:87:92:ec:7c:52:e3:9b:e5:f1:54:35:
         f7:11:e2:ca:b3:11:02:f9:28:0a:49:71:b8:d2:cd:95:fc:51:
         0f:e6:d4:4f:0b:33:41:b1:15:fd:b0:b1:bf:c2:94:c0:c4:d7:
         b2:d9:1e:ac:92:d5:93:27:5e:51:6d:0e:3b:d2:93:fd:f3:26:
         9f:64:f2:51:60:28:77:9e:d7:e5:63:5d:3f:ea:bb:88:f4:bf:
         84:e6:48:be:f8:19:ad:2f:17:b9:eb:df:8d:be:49:fb:a6:52:
         70:3b:b5:b7:b2:a0:7f:12:28:cb:d1:71:77:02:70:61:71:76:
         89:3c:0d:ca:89:21:11:d3:36:ac:29:0f:41:46:b6:3b:39:3f:
         92:2c:1a:e0:0f:7a:df:32:46:f7:ba:6f:21:9b:72:bf:c8:3f:
         84:9f:c7:89:fd:f4:92:e6:0d:03:90:12:85:3b:7d:fa:c5:a1:
         9f:d6:47:d1:c0:e2:5a:ea:57:b4:e4:21:54:74:95:5c:0f:4f:
         9e:b4:13:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:57:47 2025 by rpki-client