Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.mft
File:                     3438EF474B88120C954212EE504ACF2C02AF3889.mft (raw, json)
Hash identifier:          YaF25F7rntDqJEk2WCCPUqWxyg35QqO1wcUoB/xZyNk=
Subject key identifier:   61:89:5C:A7:F8:69:28:EE:AD:23:5D:4A:9E:26:F6:4A:32:93:D5:00
Authority key identifier: 34:38:EF:47:4B:88:12:0C:95:42:12:EE:50:4A:CF:2C:02:AF:38:89
Certificate issuer:       /CN=3438EF474B88120C954212EE504ACF2C02AF3889
Certificate serial:       0AEAE9F618CDA5998C06CEB8C73071EF07A324
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3438EF474B88120C954212EE504ACF2C02AF3889.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.mft
Manifest number:          AD
Signing time:             Fri 22 Aug 2025 18:57:08 +0000
Manifest this update:     Fri 22 Aug 2025 18:52:08 +0000
Manifest next update:     Sat 23 Aug 2025 19:34:08 +0000
Files and hashes:         1: 3139312e35332e302e302f31362d3235203d3e203238323032.roa (hash: fzlJfuNfGs98/1MXM9FAPOukrmfvjUc9Upo5Ah/hiSo=)
                          2: 3138362e3231362e36342e302f31382d3235203d3e203238323032.roa (hash: 1/pyHMIAfL06J0VEIZqoHDUBduatU86nbTixn3aNe10=)
                          3: 3138392e39312e302e302f31392d3235203d3e203238323032.roa (hash: Hu0ei8r8XFIYW5cidhumkYDbO6Mg8ZzPdHu1MTyIKx8=)
                          4: 3137372e3133302e3136302e302f31392d3235203d3e203238323032.roa (hash: yweAROg5FhlocO1xEgi3/tdYFuc2BclWrzJHyGWs2t8=)
                          5: 3137392e3138392e3136302e302f31392d3235203d3e203238323032.roa (hash: FcLauEny8HFG+9CDE+cOc2OPV8xlyXFVblqydZFLii8=)
                          6: 3139312e3234302e302e302f31372d3235203d3e203238323032.roa (hash: 4NnsqoSeT+5Zn5TL9p8ulO45uiNKI73CuiSSE2jhQp8=)
                          7: 3137372e3133302e3132382e302f31392d3235203d3e203238323032.roa (hash: Z6pIhsjnVhIGFKWYZKvCVj5vy8bkp1QZ7wOc64Sp6nY=)
                          8: 3438EF474B88120C954212EE504ACF2C02AF3889.crl (hash: fmfad64eDPSXKaTEw8dHodLA+DgDysvMJsbw0IFE1iY=)
                          9: 3138372e34342e302e302f31382d3235203d3e203238323032.roa (hash: k4ZEWqStZqdeiizwzpxYS/y21HrZDTgVMksarnxQxvM=)
                          10: 3137372e34342e302e302f31372d3235203d3e203238323032.roa (hash: /U/OngAc0MYV9SINp90LnkMguo0z2IqQ0Y1lvs4W4uw=)
                          11: 323830343a3837633a3a2f33322d3438203d3e203238323032.roa (hash: 3U8v5wWVU5DKuoqKxOZlyA4aH6wQWVHyDsBw39wyRng=)
                          12: 3138372e3132302e36342e302f31382d3235203d3e203238323032.roa (hash: CUmohz5mDhwwGIiRcgFRXXFnq1N8P5j4aNSMS9oPTwc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.crl
                          rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3438EF474B88120C954212EE504ACF2C02AF3889.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Aug 2025 19:34:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ea:e9:f6:18:cd:a5:99:8c:06:ce:b8:c7:30:71:ef:07:a3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3438EF474B88120C954212EE504ACF2C02AF3889
        Validity
            Not Before: Aug 22 18:52:08 2025 GMT
            Not After : Aug 23 19:34:08 2025 GMT
        Subject: CN=61895CA7F86928EEAD235D4A9E26F64A3293D500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5a:d0:dc:08:52:3d:d9:43:f7:04:94:1a:83:
                    fe:79:9d:d4:15:0e:57:5f:17:e6:2b:34:10:6e:56:
                    47:22:91:08:83:13:52:60:ff:16:94:b3:d6:ee:a6:
                    a5:29:49:50:8a:cf:31:6c:86:af:a8:0c:e9:5e:a3:
                    a6:ee:7d:4e:70:9f:05:46:4e:6c:75:91:6a:96:79:
                    3c:a9:e8:d2:84:5e:41:f3:fd:90:09:56:36:68:64:
                    05:73:65:ff:f7:1c:95:7a:2d:ef:5e:53:c2:e6:a7:
                    fd:16:a2:17:ca:a8:4e:4c:89:dc:e2:82:74:90:76:
                    2d:53:55:e3:31:f3:04:12:68:ee:35:3a:e2:3a:2f:
                    8f:4a:37:e2:cd:1e:ad:c3:0e:c4:17:ab:28:98:7d:
                    2f:81:58:82:86:f0:ca:67:95:59:40:fb:84:1a:b5:
                    1f:62:f4:e9:4c:4a:9a:e5:cc:13:1a:ea:a1:23:41:
                    41:d2:86:dd:c4:7a:89:bc:e5:45:c2:7f:d8:42:74:
                    13:8f:ee:31:6d:6f:17:97:88:4b:92:71:25:ba:44:
                    56:66:a2:0d:98:65:79:3e:e6:7b:0e:24:25:bb:f0:
                    60:1e:cc:d0:e6:5a:bd:d6:b8:5b:75:22:9d:e4:86:
                    89:f2:49:fa:eb:f5:0a:72:c4:5e:e7:75:0d:1c:4a:
                    df:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:89:5C:A7:F8:69:28:EE:AD:23:5D:4A:9E:26:F6:4A:32:93:D5:00
            X509v3 Authority Key Identifier:
                keyid:34:38:EF:47:4B:88:12:0C:95:42:12:EE:50:4A:CF:2C:02:AF:38:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3438EF474B88120C954212EE504ACF2C02AF3889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:6c:10:33:30:d2:85:92:7a:a7:d4:7a:ea:79:be:67:1c:a5:
         62:11:3a:f2:1a:5e:9d:07:bc:c4:52:00:5f:f8:db:ed:82:ea:
         db:0f:b4:54:d0:43:6d:92:35:12:fe:a8:3c:30:b9:0b:99:c2:
         c2:73:46:ba:21:39:92:9b:55:65:8a:3b:3e:b4:b6:97:4a:66:
         d1:0c:1e:04:80:cd:50:48:0c:1b:04:57:e8:84:5d:be:a1:83:
         f7:1a:13:5e:06:dd:54:73:3e:de:a8:14:32:16:e5:d6:4e:0b:
         8b:45:df:60:89:d2:4a:4d:a0:76:77:0b:af:12:26:7f:69:e6:
         cb:32:e1:4e:4b:42:dc:2c:d4:65:6b:85:0e:58:a9:3f:2b:ed:
         21:1d:50:b4:49:65:79:d2:f1:bf:8a:cf:01:d8:86:24:98:94:
         ec:18:6a:e7:39:67:88:a7:9f:64:9d:f5:d9:e7:1c:3a:fc:05:
         0e:81:05:c6:97:eb:e9:54:d1:3a:75:cc:96:a9:90:e9:0f:49:
         4e:46:aa:62:38:d0:61:df:f1:32:da:c9:ae:17:e6:b0:f6:62:
         d5:0c:e1:b5:ce:19:1d:74:44:be:7c:92:b8:6e:2f:35:be:d4:
         ca:b2:1f:16:68:9a:20:73:56:ef:50:26:a1:2d:59:f3:bc:ca:
         01:df:1f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:36:59 2025 by rpki-client