Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft
File:                     3895E2089A93A58E1062DE9612B321CA505C51FA.mft (raw, json)
Hash identifier:          9rB89VaUHVFRjDskfMKxRKgACP5riccrB+NhB8ckTSo=
Subject key identifier:   0B:23:EC:CF:BD:38:07:4A:F7:2F:38:58:93:8A:98:84:36:9C:2F:FC
Authority key identifier: 38:95:E2:08:9A:93:A5:8E:10:62:DE:96:12:B3:21:CA:50:5C:51:FA
Certificate issuer:       /CN=3895E2089A93A58E1062DE9612B321CA505C51FA
Certificate serial:       11109A7E2B77AF7D6F25C8603C9653ABEAD18F2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft
Manifest number:          02AA
Signing time:             Wed 02 Jul 2025 11:50:01 +0000
Manifest this update:     Wed 02 Jul 2025 11:45:01 +0000
Manifest next update:     Thu 03 Jul 2025 11:50:01 +0000
Files and hashes:         1: 3895E2089A93A58E1062DE9612B321CA505C51FA.crl (hash: TiPYk6J2u9jafUxFXQyJqJAZA9gJd1MQvxQAuA7cDOE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.crl
                          rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 11:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:10:9a:7e:2b:77:af:7d:6f:25:c8:60:3c:96:53:ab:ea:d1:8f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3895E2089A93A58E1062DE9612B321CA505C51FA
        Validity
            Not Before: Jul  2 11:45:01 2025 GMT
            Not After : Jul  9 11:50:01 2025 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:75:6f:89:38:d5:7f:d8:fe:2e:6b:f6:66:
                    e9:39:fc:2f:25:b3:4a:8e:87:d6:4e:61:88:c1:ec:
                    cd:e0:35:70:7e:a5:aa:8c:02:49:97:45:54:c6:c6:
                    a5:4a:65:eb:52:49:01:7f:13:39:b9:04:6a:ca:4f:
                    f9:9a:78:64:5b:83:de:55:4a:74:51:f1:93:5c:f5:
                    ad:d0:82:09:60:8a:94:32:61:12:e5:9a:89:0f:24:
                    a0:fd:e7:f9:6c:81:1d:53:21:16:23:ca:69:fd:d1:
                    1f:f4:e6:71:34:55:25:c4:d3:3e:b4:81:dd:41:90:
                    02:5d:67:26:3f:76:ef:4b:6c:c8:77:e9:ac:7e:2f:
                    14:65:b3:de:35:27:f0:e4:9e:4c:46:40:27:f2:f4:
                    1a:d7:96:e3:02:42:4d:19:70:3e:25:06:c0:84:36:
                    a4:04:3c:f4:d3:fc:07:71:4b:b4:74:c5:ac:37:9d:
                    4e:9b:63:d3:a1:40:06:3f:f6:39:37:04:2b:2f:13:
                    da:04:08:43:c3:e6:37:ab:86:50:d4:6e:27:17:a9:
                    cf:93:fa:03:ec:b7:61:44:ce:97:88:35:4d:e3:90:
                    66:f8:14:b0:ab:9c:7d:57:8e:47:b6:29:7f:4c:2e:
                    fa:56:7a:d1:d3:62:93:a9:a4:a8:85:c3:20:79:b4:
                    06:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:23:EC:CF:BD:38:07:4A:F7:2F:38:58:93:8A:98:84:36:9C:2F:FC
            X509v3 Authority Key Identifier:
                keyid:38:95:E2:08:9A:93:A5:8E:10:62:DE:96:12:B3:21:CA:50:5C:51:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:9e:7c:02:50:b9:17:cd:03:f8:6b:93:e7:37:1b:39:b4:95:
         4d:65:04:b0:2a:72:6a:1f:e3:c7:8e:72:15:06:cf:b8:c6:46:
         49:e9:59:c5:53:30:af:2b:4c:a3:0f:98:c7:e7:07:78:7c:a6:
         8b:fe:70:64:fe:b7:3d:4a:d3:4c:0a:3f:5c:29:4a:fc:43:54:
         0c:b0:81:c2:38:88:54:da:76:ff:07:16:46:2e:3a:38:b1:a8:
         99:3b:8a:19:0a:98:b2:30:38:a3:62:f3:99:47:d5:31:96:12:
         05:cd:00:c9:62:6d:e3:b6:cc:0e:1d:75:cb:a6:01:95:33:59:
         9f:d7:50:32:d0:78:f9:12:3b:e2:87:49:47:fb:5b:68:bb:d2:
         f0:6e:55:b1:20:10:77:fb:ad:ef:b8:90:d5:67:0e:c8:5d:56:
         d2:eb:d7:9b:cb:2e:3b:07:9b:df:4a:96:4b:ed:e9:0a:d2:64:
         9e:44:e6:28:b6:57:98:15:33:c7:02:0d:ea:f8:7d:7f:24:de:
         79:44:f7:23:74:bd:3d:ba:e9:17:e7:f8:4f:4f:67:a7:ce:99:
         f7:b0:6d:27:99:6f:ae:ee:ae:75:9e:96:28:25:7e:a0:01:17:
         a5:ff:9c:10:b1:41:e3:ef:dc:2a:9d:27:da:5a:4f:73:71:9f:
         e3:e7:18:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 3 03:50:19 2025 by rpki-client