Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft
File:                     3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft (raw, json)
Hash identifier:          b3P4yeZLHWgD2mjwsOJJOX+cBwNqDcootqM+CPZr47s=
Subject key identifier:   50:9B:6D:41:34:BD:90:62:EC:54:57:40:BC:7F:69:A7:1B:86:41:B3
Authority key identifier: 3A:5A:1F:BD:FB:AC:3B:0E:47:1D:80:73:BA:46:35:F1:7B:26:60:48
Certificate issuer:       /CN=3A5A1FBDFBAC3B0E471D8073BA4635F17B266048
Certificate serial:       559749C12FF0F5479BD11895B9228D5EAE354355
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft
Manifest number:          8A
Signing time:             Tue 01 Jul 2025 02:13:59 +0000
Manifest this update:     Tue 01 Jul 2025 02:08:59 +0000
Manifest next update:     Wed 02 Jul 2025 02:33:59 +0000
Files and hashes:         1: 3138392e33392e3138302e302f32322d3234203d3e20323730383338.roa (hash: 0U027hiG5j6MP8jXcfJ5yJvBy4z7e9JmZqPN/4bO+A4=)
                          2: 3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl (hash: i3gJYgDY8o/M2eXYlXuGBlYo/oA1gPOmknhsd1txVfs=)
                          3: 323830343a373233303a3a2f33322d3438203d3e20323730383338.roa (hash: 8Q0j1lTtgEWTeidT42m/MaKKKMdbqnM2l9pI0A3eweM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl
                          rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 02:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:97:49:c1:2f:f0:f5:47:9b:d1:18:95:b9:22:8d:5e:ae:35:43:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A5A1FBDFBAC3B0E471D8073BA4635F17B266048
        Validity
            Not Before: Jul  1 02:08:59 2025 GMT
            Not After : Jul  2 02:33:59 2025 GMT
        Subject: CN=509B6D4134BD9062EC545740BC7F69A71B8641B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f6:81:ff:3f:be:6b:79:d4:f7:4f:a1:5e:a6:
                    c0:25:ad:47:74:01:c4:16:18:b4:84:6e:a8:55:9a:
                    ad:c4:99:bd:da:f2:03:09:00:34:f9:af:79:c9:6c:
                    f3:bb:7b:d1:f1:aa:b2:8c:a5:19:c2:97:94:98:bd:
                    e0:2b:cc:dc:f9:68:44:2d:7e:64:85:47:80:ff:11:
                    b2:17:c5:b2:16:b1:91:15:05:38:05:b7:2b:d9:e6:
                    e6:4e:be:b9:3e:26:6c:2e:4f:15:c3:f9:31:7d:6b:
                    af:d0:f6:07:f9:a7:a7:aa:9d:62:0c:7c:90:76:4f:
                    06:b6:10:fb:83:d7:d6:d4:ad:bc:74:48:39:52:e9:
                    ed:89:26:95:6e:9f:93:c1:bc:e6:3f:4f:dc:2e:03:
                    e6:6f:4e:00:70:db:f6:e2:84:c1:e7:de:9e:80:74:
                    10:3c:02:d5:9e:33:b2:01:d0:71:ed:f6:4e:ab:38:
                    b1:10:97:df:b4:be:a1:bb:73:b5:3c:e8:94:a2:b9:
                    15:d9:7a:0e:2c:9f:3f:39:1d:e7:83:fe:a8:2c:af:
                    a9:5c:c0:e2:f4:3b:fe:9d:1a:43:3c:b9:5d:1a:79:
                    3f:b2:29:99:74:bf:02:31:84:70:fa:fd:c4:f2:06:
                    aa:60:e0:9d:61:38:4d:9b:47:46:a0:eb:20:e7:d4:
                    ec:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9B:6D:41:34:BD:90:62:EC:54:57:40:BC:7F:69:A7:1B:86:41:B3
            X509v3 Authority Key Identifier:
                keyid:3A:5A:1F:BD:FB:AC:3B:0E:47:1D:80:73:BA:46:35:F1:7B:26:60:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:f7:ae:ee:cf:a7:e5:2b:18:db:df:32:e1:0a:04:13:47:fd:
         77:93:7a:fd:ff:c8:f8:5c:78:99:a5:ae:10:80:4e:b4:92:b1:
         1b:e2:02:a0:6a:da:35:31:cd:00:6a:1b:54:f3:63:c5:7a:c9:
         c8:77:55:bc:c7:d0:fa:d1:d5:0f:bc:56:7f:84:44:c8:cd:68:
         a8:d8:32:5d:2e:7c:74:b9:43:1c:88:6e:77:52:ec:e5:f4:4a:
         67:fa:8e:c6:6f:b7:95:82:ae:91:e4:df:d5:77:7e:28:96:bf:
         a4:2d:35:13:6c:45:1f:05:54:ba:88:9a:b9:82:1a:a0:de:82:
         02:07:e0:fc:20:20:47:23:de:96:42:45:99:f5:85:a2:56:f8:
         55:a0:ad:e2:58:92:0c:88:50:f4:f2:c0:1e:2b:49:d2:64:42:
         53:e1:51:39:12:36:66:d3:39:3c:98:1f:24:d3:fa:9d:f9:12:
         12:64:f8:c1:4f:b5:8e:b5:8a:0f:ce:14:45:0b:b0:fc:6e:41:
         47:95:1d:6d:f6:f8:4f:71:2d:8d:12:50:33:cf:7b:c3:e7:02:
         44:5b:8d:78:d3:94:fd:65:49:5a:b5:69:5b:6a:c2:d4:84:a1:
         a9:4c:30:52:f0:16:b2:c4:ed:fa:c4:29:07:6c:7c:c7:c3:ee:
         76:2a:cc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:24:03 2025 by rpki-client