Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.mft
File:                     AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.mft (raw, json)
Hash identifier:          2FGDYB8Szc0aQZrQZppt71T7YZwwbGPSuWf5qSpBn9I=
Subject key identifier:   46:34:B3:DE:C0:9C:24:6D:98:E5:1A:32:7A:29:1D:4A:2E:0A:C8:9A
Authority key identifier: AD:3E:03:F0:33:76:09:F9:F5:6E:CD:E6:83:43:DB:12:CC:14:C9:A0
Certificate issuer:       /CN=AD3E03F0337609F9F56ECDE68343DB12CC14C9A0
Certificate serial:       1E64769FDC2921DE0B87F2BA39D253E5798700C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.mft
Manifest number:          023E
Signing time:             Mon 30 Jun 2025 00:45:32 +0000
Manifest this update:     Mon 30 Jun 2025 00:40:32 +0000
Manifest next update:     Tue 01 Jul 2025 01:49:32 +0000
Files and hashes:         1: 323830343a386332343a3a2f33322d3438203d3e20323733373832.roa (hash: WtjmMp7Bep6h8xh9FRZHJddXwbfmCSBmONGWHCoQIGY=)
                          2: AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.crl (hash: kcXe6plj7SJwLwAjllCr4OklcYW1GFlamrdj7+qbtb8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.crl
                          rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 01:49:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:64:76:9f:dc:29:21:de:0b:87:f2:ba:39:d2:53:e5:79:87:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD3E03F0337609F9F56ECDE68343DB12CC14C9A0
        Validity
            Not Before: Jun 30 00:40:32 2025 GMT
            Not After : Jul  1 01:49:32 2025 GMT
        Subject: CN=4634B3DEC09C246D98E51A327A291D4A2E0AC89A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:31:ce:66:e2:b2:93:23:99:9b:c6:7a:6d:cc:
                    4d:a4:a0:e3:69:52:3a:0d:5e:96:95:2f:4f:ce:34:
                    87:f6:8a:17:4a:60:c1:68:d1:11:8a:85:a3:c9:6c:
                    5c:38:e9:29:68:0d:81:73:94:76:97:fb:20:36:9c:
                    89:b0:0b:69:c4:cf:00:4f:35:2c:b9:6f:f8:a1:4d:
                    67:30:1d:22:79:b5:a9:76:48:59:6b:1d:3b:f6:16:
                    05:7d:fb:71:24:f4:39:10:ca:c0:3b:a9:56:05:01:
                    ad:56:56:a8:d4:b4:2c:41:fe:15:54:b5:da:cf:9a:
                    e9:0a:44:82:5a:fb:6b:17:e2:01:25:e1:b3:75:5f:
                    7c:52:89:5d:cf:a6:9c:30:b0:db:47:41:c9:56:3d:
                    6a:06:39:12:9c:a0:08:cd:5d:ef:c2:76:7a:79:4d:
                    bb:50:08:e8:7f:44:77:05:08:0c:24:1e:ea:71:d3:
                    14:a9:96:3c:09:e3:96:5a:00:c6:86:5b:44:79:a5:
                    57:48:51:31:91:3d:b7:3a:03:44:30:ec:b4:b2:00:
                    b8:ee:be:91:11:59:e1:6d:8d:f2:21:92:26:32:b4:
                    cb:a0:0c:4a:89:82:57:b5:23:d8:cf:35:5e:d6:26:
                    a8:f0:a9:d8:49:78:25:ee:4d:f5:e3:05:3f:af:ae:
                    76:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:34:B3:DE:C0:9C:24:6D:98:E5:1A:32:7A:29:1D:4A:2E:0A:C8:9A
            X509v3 Authority Key Identifier:
                keyid:AD:3E:03:F0:33:76:09:F9:F5:6E:CD:E6:83:43:DB:12:CC:14:C9:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:fc:54:c5:f9:73:78:8b:8c:35:8b:51:bf:ed:48:dc:22:6b:
         13:10:db:72:9e:28:c4:85:ba:41:51:7e:8f:d3:b6:61:96:27:
         d8:6b:84:96:ff:2e:ce:dd:6a:5d:ec:c7:69:5c:0d:39:d9:94:
         66:65:68:fa:ed:c8:46:e5:b8:62:39:22:c6:3f:0d:64:ad:f8:
         91:ec:97:39:d0:14:74:db:d7:2d:3c:68:db:3a:f5:6b:42:f7:
         37:aa:89:32:95:41:c0:b8:2b:c3:70:9f:3c:c6:18:56:f2:40:
         44:e2:e8:a1:25:02:b5:bf:c6:70:76:17:f8:5d:ba:09:f5:a4:
         99:a5:c5:de:1a:4c:ac:b9:f8:cf:df:c8:e4:c6:00:05:76:73:
         55:28:b8:3b:ac:54:dd:84:48:1b:47:08:df:ae:03:9a:cf:0e:
         28:45:97:30:f5:33:59:95:b4:3d:96:51:36:61:a8:10:d1:81:
         f8:75:aa:53:be:2a:32:fe:e1:db:92:2d:e4:5d:6a:a1:ae:9f:
         55:3f:17:98:f5:67:76:60:ca:97:2c:7c:a3:81:4a:5e:0a:6d:
         dc:a2:44:ef:12:73:94:00:d2:a1:11:b2:8f:93:0e:da:b5:1e:
         47:a5:5c:7e:67:d4:2b:dc:18:78:da:20:c1:7a:f0:b6:a4:3c:
         5d:68:2d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:33:02 2025 by rpki-client