Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft
File:                     3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft (raw, json)
Hash identifier:          WjzYk91DSe+n94EbYiZ75XSpSbxTRYtPFpWqJKXiODA=
Subject key identifier:   D2:5E:A5:C4:E3:20:16:2D:24:56:13:F4:EF:C6:09:55:9E:82:4E:A2
Authority key identifier: 3A:5A:1F:BD:FB:AC:3B:0E:47:1D:80:73:BA:46:35:F1:7B:26:60:48
Certificate issuer:       /CN=3A5A1FBDFBAC3B0E471D8073BA4635F17B266048
Certificate serial:       795F1948C19F28B577C53FF73CCBD19B55D97F39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft
Manifest number:          D0
Signing time:             Sat 23 Aug 2025 00:27:33 +0000
Manifest this update:     Sat 23 Aug 2025 00:22:33 +0000
Manifest next update:     Sun 24 Aug 2025 02:16:33 +0000
Files and hashes:         1: 323830343a373233303a3a2f33322d3438203d3e20323730383338.roa (hash: 8Q0j1lTtgEWTeidT42m/MaKKKMdbqnM2l9pI0A3eweM=)
                          2: 3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl (hash: UvpBpxVWDJibTMo/m5e/4mVW12zzZXI0xSml4w5hajM=)
                          3: 3138392e33392e3138302e302f32322d3234203d3e20323730383338.roa (hash: 0U027hiG5j6MP8jXcfJ5yJvBy4z7e9JmZqPN/4bO+A4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl
                          rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 02:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:5f:19:48:c1:9f:28:b5:77:c5:3f:f7:3c:cb:d1:9b:55:d9:7f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A5A1FBDFBAC3B0E471D8073BA4635F17B266048
        Validity
            Not Before: Aug 23 00:22:33 2025 GMT
            Not After : Aug 24 02:16:33 2025 GMT
        Subject: CN=D25EA5C4E320162D245613F4EFC609559E824EA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cb:64:be:27:6f:33:a0:d0:d8:8a:59:61:c6:
                    1f:9d:f5:8d:08:5b:e4:e8:55:6d:1e:b5:1e:6c:10:
                    b3:25:22:c4:d2:a1:f1:bd:31:59:80:bc:bf:1a:8b:
                    95:02:54:fc:a4:48:1f:e0:94:ad:b1:7a:a6:a1:fa:
                    eb:31:04:46:87:b3:ca:cc:f9:17:42:90:f6:4a:78:
                    2c:43:da:e5:df:e7:3a:56:e3:37:ee:84:49:6e:04:
                    f7:ec:e8:f5:e1:92:da:23:a4:bf:ff:6e:71:07:d9:
                    0a:d8:3c:68:5b:de:5d:eb:78:62:ca:f4:4b:24:e0:
                    4d:df:0f:12:99:b1:bf:f9:42:19:86:9c:e7:ed:6f:
                    cc:3d:56:25:33:60:ea:0d:e8:6d:3a:28:3c:2d:81:
                    2d:11:06:b5:82:43:4a:37:23:28:5b:ca:1c:d4:48:
                    88:8a:20:f5:39:48:3a:9d:30:d2:7d:3b:8d:13:3d:
                    96:7a:52:56:98:7f:dc:09:49:21:05:5b:19:6d:e5:
                    56:06:20:35:96:44:20:55:22:16:70:08:96:e0:63:
                    90:0f:31:c0:f8:b9:9f:62:37:7d:6e:ba:16:aa:9d:
                    33:2d:fe:60:97:f0:87:81:44:7f:57:eb:07:96:af:
                    93:1f:78:b6:6f:ba:46:33:47:a4:c6:3b:7a:0b:43:
                    e2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5E:A5:C4:E3:20:16:2D:24:56:13:F4:EF:C6:09:55:9E:82:4E:A2
            X509v3 Authority Key Identifier:
                keyid:3A:5A:1F:BD:FB:AC:3B:0E:47:1D:80:73:BA:46:35:F1:7B:26:60:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:3b:11:6e:39:2e:70:c4:30:b7:ed:29:bb:7a:b3:e9:22:7b:
         bc:80:3a:d6:ed:ca:c3:33:90:ee:50:e5:c8:a9:e2:fc:58:23:
         da:26:3d:4e:ff:d9:5c:84:3a:12:0f:ed:c6:91:3e:b2:7e:4f:
         28:3f:e9:71:0f:19:60:e8:a0:1d:fc:29:cc:72:58:72:aa:03:
         44:da:4e:d8:55:98:55:15:7d:b5:46:98:25:23:d0:69:e9:09:
         50:31:bc:9c:c8:a6:c9:ca:2c:ce:68:ab:69:9d:88:36:af:64:
         61:60:54:e1:fd:e2:2b:27:d7:ce:75:16:84:dd:23:c1:92:8d:
         2e:8b:51:b2:81:12:90:4c:c8:6c:32:db:a8:8f:be:0d:83:98:
         d0:30:4e:5c:1a:66:88:66:79:f4:d9:dd:62:ad:e1:84:34:f4:
         b9:13:9a:70:a2:9e:c4:47:ae:0f:3e:86:85:9f:4e:d6:39:4f:
         fe:95:5c:8c:c9:13:11:ad:de:e3:86:49:37:6e:0c:ac:0e:7b:
         a8:0b:9e:2e:54:33:fa:81:db:46:8d:1c:8e:1c:dd:14:8d:b7:
         ba:dd:b8:65:90:3f:4a:35:5c:e5:6b:f3:3c:df:c3:be:5e:fe:
         16:b3:36:86:02:c2:dc:00:2b:96:60:1c:df:0e:65:91:01:86:
         8b:bd:e7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:34:45 2025 by rpki-client