Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.mft
File:                     3811D3CF68BD6E1D457066AF72C5B80697140952.mft (raw, json)
Hash identifier:          N+nZfGWRKLq57W9w6WT4pT2giYyY83pSPnDfJ/RgQBY=
Subject key identifier:   CF:CF:62:1D:70:2C:87:DF:47:26:FC:B2:42:89:06:26:2B:49:EC:55
Authority key identifier: 38:11:D3:CF:68:BD:6E:1D:45:70:66:AF:72:C5:B8:06:97:14:09:52
Certificate issuer:       /CN=3811D3CF68BD6E1D457066AF72C5B80697140952
Certificate serial:       0DFD71F43BE6F304CCEF89E62BB7EE55E0B84FA6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3811D3CF68BD6E1D457066AF72C5B80697140952.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.mft
Manifest number:          6A
Signing time:             Fri 22 Aug 2025 22:33:44 +0000
Manifest this update:     Fri 22 Aug 2025 22:28:44 +0000
Manifest next update:     Sun 24 Aug 2025 01:57:44 +0000
Files and hashes:         1: 3137372e32302e3138312e302f32342d3234203d3e20323633303335.roa (hash: YPoZ1oALd4YkF918XERnqyxn+wnNHYgl+yOKAGKNGmk=)
                          2: 3811D3CF68BD6E1D457066AF72C5B80697140952.crl (hash: NaaNM5EUgIajK1QIaveXTze+UzsWUuqopybZAPPWgBM=)
                          3: 3137372e32302e3138302e302f32342d3234203d3e20323633303335.roa (hash: o3txryZN7XGKm5qsD/ctGaaortDnsd7WshL+oq06uak=)
                          4: 323830343a6133383a3a2f33322d3332203d3e20323633303335.roa (hash: JF+vt37xu7OxUG8guYjCdH1ca2d+IC4yEayqQxlRp6M=)
                          5: 3137372e32302e3137382e302f32342d3234203d3e20323633303335.roa (hash: XkP9LOdfEmzPgg2fO3EGL9EVZiVbYXNvoHMUXIAaIj4=)
                          6: 3137372e32302e3137372e302f32342d3234203d3e20323633303335.roa (hash: ohGZC0JFhKKJQiTCC8lUMakWB11fcxwJppSOtNxlK6E=)
                          7: 3137372e32302e3138332e302f32342d3234203d3e20323633303335.roa (hash: OVlz1EldR//b5LFSHEqX5cHURULAKEBLPVXjsazeTmE=)
                          8: 3137372e32302e3137392e302f32342d3234203d3e20323633303335.roa (hash: 624IAq74gYVg2o/YRcntsIQ4jDdp8xYPVypobjo24a8=)
                          9: 3137372e32302e3138322e302f32342d3234203d3e20323633303335.roa (hash: XLJO3Y5oOY5PTnPJ+zi3IILoKdSyGvfSmWod7OmvUao=)
                          10: 3137372e32302e3137362e302f32342d3234203d3e20323633303335.roa (hash: Kk+VNp/je2BEYWXyXG9TA8b6ZZVNni4pgYWiQssz7/E=)
                          11: 323830343a6133383a3a2f33332d3333203d3e20323633303335.roa (hash: F9JxKUIzoWhUK3lStPOzsWWdFdFQ/+y1E53aFid51NM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.crl
                          rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3811D3CF68BD6E1D457066AF72C5B80697140952.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 01:57:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:fd:71:f4:3b:e6:f3:04:cc:ef:89:e6:2b:b7:ee:55:e0:b8:4f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3811D3CF68BD6E1D457066AF72C5B80697140952
        Validity
            Not Before: Aug 22 22:28:44 2025 GMT
            Not After : Aug 24 01:57:44 2025 GMT
        Subject: CN=CFCF621D702C87DF4726FCB2428906262B49EC55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5f:21:78:39:36:9e:82:0f:38:36:99:ba:49:
                    c2:69:3b:11:1f:5c:bc:39:bf:ab:73:14:98:c1:31:
                    5e:5d:19:ba:63:f8:82:14:96:6c:63:34:4a:1e:6a:
                    b4:44:87:2c:39:21:94:23:ab:f4:23:5c:7e:40:df:
                    c2:23:5e:2a:ef:f2:25:12:91:02:05:fb:22:41:53:
                    ed:86:2f:01:ae:a0:c4:f3:46:ca:23:ab:7d:af:57:
                    3c:d1:ed:35:ef:54:d1:03:f2:86:fe:d7:5c:d0:1f:
                    f3:ee:59:54:7d:b2:4a:71:95:d8:2a:9b:1d:f1:81:
                    72:c2:94:9c:05:50:56:d2:bb:0e:2a:bb:87:9c:e6:
                    67:0e:e5:08:0e:bd:9c:09:98:1f:a5:77:c5:c6:b1:
                    52:af:0b:e7:e3:1b:65:a9:a3:80:7a:c2:80:a8:b1:
                    37:73:7f:00:97:e3:86:d6:a2:56:88:20:15:91:09:
                    40:d4:d7:8d:47:99:c8:10:e8:a6:7e:5e:db:7a:39:
                    c4:d2:e9:da:22:f9:e7:4b:8a:98:52:e8:f2:fd:87:
                    78:9e:83:f8:97:ec:96:dc:35:15:3c:2b:4b:1f:e9:
                    63:f9:2c:9a:f2:bc:19:ee:b0:99:26:fd:71:37:43:
                    33:c7:49:6d:58:b0:72:cc:aa:fc:bf:e6:0f:b7:f5:
                    4b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CF:62:1D:70:2C:87:DF:47:26:FC:B2:42:89:06:26:2B:49:EC:55
            X509v3 Authority Key Identifier:
                keyid:38:11:D3:CF:68:BD:6E:1D:45:70:66:AF:72:C5:B8:06:97:14:09:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3811D3CF68BD6E1D457066AF72C5B80697140952.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f4:b9:df:47:2d:7a:6b:24:11:ec:9f:b1:6b:98:72:2e:49:
         c4:fe:90:80:74:ac:b0:76:78:b4:be:31:68:45:ac:df:a5:c4:
         ac:2b:88:25:ca:16:87:2c:16:60:ff:62:18:a4:bb:b8:cf:5c:
         36:3d:36:da:c5:73:09:50:c2:26:d2:7f:43:70:93:3c:67:a9:
         6a:8a:0c:bc:cf:63:0f:32:ec:54:e1:cc:a9:72:d0:22:4d:10:
         ea:bb:d8:fe:0f:fb:9e:fe:0d:b5:dd:26:6a:60:5d:ea:df:a0:
         39:2b:01:c8:df:5d:8a:93:f1:99:d1:6e:1a:b4:33:ae:80:6a:
         83:cf:5b:c7:93:c6:18:04:d2:b8:77:48:51:d0:3f:42:0f:e0:
         ee:69:d4:a5:22:4a:53:db:74:be:4a:b4:ef:3c:ec:6c:e4:42:
         bf:32:7f:b0:f4:eb:c7:f6:17:f6:f7:d7:69:a8:99:14:4f:ed:
         8a:6e:36:e1:7a:fd:01:43:b1:3a:6a:38:7b:77:3a:ec:6e:c2:
         88:24:25:ff:93:71:80:e7:2b:29:72:f5:55:a2:7c:d6:23:f9:
         d1:2f:57:8c:79:a3:22:3c:a1:8b:c6:45:92:7a:0a:83:56:30:
         f3:64:d0:cd:b4:8f:99:b1:e5:ff:1e:2c:44:b5:f9:71:0d:f4:
         c9:9a:b2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:49 2025 by rpki-client