Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
File:                     0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft (raw, json)
Hash identifier:          t3hy1LgEnv7yd9JO3f2CnG+JpC7L7pwMGUovWPKZytI=
Subject key identifier:   4E:31:A8:74:61:B5:38:89:8F:FD:42:E6:00:3A:75:C8:08:22:D5:52
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       2554BDE480532E21541E119A5C1220CE73B26B8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
Manifest number:          028D
Signing time:             Thu 03 Jul 2025 01:13:54 +0000
Manifest this update:     Thu 03 Jul 2025 01:08:54 +0000
Manifest next update:     Fri 04 Jul 2025 04:39:54 +0000
Files and hashes:         1: 3137372e38372e3230322e302f32342d3234203d3e203532353837.roa (hash: qe9Jff+tGp27uj0Fv/r4SWJj8LOqDymfhQOPFTvPvVA=)
                          2: 3137302e37382e32392e302f32342d3234203d3e203532353837.roa (hash: ZVRpjy5LyDeaPoHH9Yq0IsvVayvZvPCcq+8GiojQ0YU=)
                          3: 3137302e37382e33312e302f32342d3234203d3e203532353837.roa (hash: GVb5ACoACo41NNBiKijTXhHtLaywGpWaqrMw6x6JqAQ=)
                          4: 3137302e37382e33302e302f32342d3234203d3e203532353837.roa (hash: OQrPAaufm/IIA/ux/gBP/eRTC7wVuWaor0CIJhQqO0M=)
                          5: 0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl (hash: wYrBoIAuSgWdX5MFSGXZ/S6xS1K71JBPiLcgvradx4M=)
                          6: 323830343a386563303a3a2f33322d3332203d3e203532353837.roa (hash: wpL10v59H954g33BuOd7BGNKMuPnDKrZ2Zn/nnChX1U=)
                          7: 3137372e38372e3230302e302f32322d3232203d3e203532353837.roa (hash: v/kBm1v+isP2XXTLmXnKuTp9Rqywg/NC0RFRzgAr/9E=)
                          8: 3137372e38372e3230302e302f32342d3234203d3e203532353837.roa (hash: tlWD0HzHIhfkJclR0v8ssrdgm/1+o7U+hMuXSlvl9Pc=)
                          9: 3137372e38372e3230332e302f32342d3234203d3e203532353837.roa (hash: IDaJJjIwRkalTiqK0J3wyePr87APf8T4eQ7uvcqZAhI=)
                          10: 3137302e37382e32382e302f32342d3234203d3e203532353837.roa (hash: Yx0PdaHHlk/TonVPlu7KZhE2E7Yl1bcPLdsKpLy0Ccg=)
                          11: 3137372e38372e3230312e302f32342d3234203d3e203532353837.roa (hash: iEOJ+g7sC95DXUReWOJ5kvXlAdgnFQ55nizfxDdLPSg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl
                          rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:54:bd:e4:80:53:2e:21:54:1e:11:9a:5c:12:20:ce:73:b2:6b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: Jul  3 01:08:54 2025 GMT
            Not After : Jul  4 04:39:54 2025 GMT
        Subject: CN=4E31A87461B538898FFD42E6003A75C80822D552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0a:db:fc:31:25:b8:d7:15:a0:8d:64:89:64:
                    d9:16:d3:e9:cb:b6:d2:e0:86:ce:c6:0a:62:08:e9:
                    c3:50:81:cc:6c:81:ab:4b:c3:00:e0:a4:97:3c:1c:
                    ae:ec:f1:41:e3:88:b5:84:a6:75:a4:fb:31:11:b6:
                    b6:cc:5a:a0:ed:24:f5:b7:1d:55:d5:3b:5b:30:b3:
                    81:55:20:5f:0d:b5:31:6a:6f:c3:ca:c5:0b:c1:77:
                    56:cf:0f:01:8f:90:6d:7b:72:97:1f:0d:43:c7:6a:
                    c8:24:9b:13:cc:22:44:84:f7:c1:94:a6:e8:ff:d2:
                    dd:6a:80:88:de:8e:1d:b0:80:85:e0:9b:f5:62:b2:
                    c2:70:83:37:5d:12:cf:31:79:ae:2e:4e:65:bf:25:
                    85:64:7c:66:02:13:4f:1b:73:1b:58:93:9d:69:bf:
                    f9:3c:8e:e7:18:00:b0:4c:97:c9:71:2b:92:ae:8f:
                    42:19:d2:0e:10:70:88:81:96:78:37:94:15:87:22:
                    e0:19:a7:c3:4f:4c:01:da:79:b0:9b:22:aa:94:b8:
                    5d:17:95:75:ac:b7:92:46:3d:a6:7a:d4:41:2f:43:
                    6a:90:8f:74:b5:31:d0:a1:c9:2c:2e:81:b8:26:8c:
                    a2:84:9b:ab:c6:35:67:1d:65:dc:80:cc:c1:78:f1:
                    a5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:31:A8:74:61:B5:38:89:8F:FD:42:E6:00:3A:75:C8:08:22:D5:52
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:c8:79:74:32:b5:e6:54:8e:f8:e7:b9:f2:c3:5f:86:e4:04:
         f4:cd:5b:f6:8f:ae:a7:b5:cb:17:b5:2f:ae:7c:2b:d9:72:34:
         10:13:3e:cb:df:72:8f:b5:3e:92:32:ea:89:f9:88:19:ae:0d:
         81:58:87:56:c4:cd:8e:8a:96:d0:17:35:b5:cd:27:36:4b:69:
         6a:ba:0f:19:d7:1e:49:31:b9:f2:4f:ca:4f:39:9f:66:ea:45:
         95:fd:1a:68:df:5a:3c:b4:01:b7:73:54:a8:9f:8e:01:49:d4:
         ec:06:3e:d9:57:45:a9:42:ab:9e:85:d0:dd:4f:11:a6:77:6b:
         bd:f9:f9:b9:e7:52:a8:43:6f:39:5d:db:8b:65:00:c4:25:d1:
         63:9e:61:c3:e8:d1:e5:aa:a7:57:13:23:be:25:ba:ab:d8:22:
         50:2f:61:6f:f7:1f:33:ea:ba:69:91:06:06:f2:5a:da:ed:97:
         dc:ce:c1:37:c9:10:b6:08:af:32:ea:df:a5:78:5b:5c:7f:81:
         54:e1:5b:7f:4f:5b:2b:be:2d:76:34:e9:ed:2a:53:fc:46:4f:
         93:64:a4:e7:b0:f4:c9:5c:80:da:21:2d:5e:20:6e:25:cc:01:
         db:5e:de:50:45:6b:43:87:3f:60:fc:3a:b3:f6:36:ba:7d:ad:
         2c:98:d9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:29:06 2025 by rpki-client