Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3865E3537268319DD70D1072B951BD12CEB4D7D2.mft
File:                     3865E3537268319DD70D1072B951BD12CEB4D7D2.mft (raw, json)
Hash identifier:          ecq++eMcxgjzmyTPIs7vGteY6J1hmcp+uKzE7eBFjeY=
Subject key identifier:   2B:4F:DA:55:9B:89:DB:A9:94:B9:5C:66:33:B5:6D:D8:BC:A1:B7:94
Authority key identifier: 38:65:E3:53:72:68:31:9D:D7:0D:10:72:B9:51:BD:12:CE:B4:D7:D2
Certificate issuer:       /CN=3865E3537268319DD70D1072B951BD12CEB4D7D2
Certificate serial:       607A8FE5E38853FCAAD06A012FB99BF7DCA42831
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3865E3537268319DD70D1072B951BD12CEB4D7D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3865E3537268319DD70D1072B951BD12CEB4D7D2.mft
Manifest number:          3D
Signing time:             Sat 23 Aug 2025 13:32:40 +0000
Manifest this update:     Sat 23 Aug 2025 13:27:40 +0000
Manifest next update:     Sun 24 Aug 2025 15:56:40 +0000
Files and hashes:         1: 323830343a316564303a613230303a3a2f34332d313238203d3e20323632323836.roa (hash: TLDIp+Wws0CgUE5aTruWd9keyMg7L/SEhhA+E/81z1I=)
                          2: 3230302e322e3130302e302f32322d3332203d3e20323632323836.roa (hash: YXiF5E/AHk1/YwJ6Etza9CoXbmWY3smZW7N4AtC/Uhc=)
                          3: 323830343a316564303a3a2f33322d313238203d3e20323632323836.roa (hash: 0vBQW8VIQ6w3eN65xfZXLNzOMU6VYDtHu1s6w/Ctj3w=)
                          4: 323830343a316564303a613030303a3a2f34332d313238203d3e20323632323836.roa (hash: 0ErNebNMEPCoMUd15aHXvhoEW1efX54LYcbDcBeGK9Q=)
                          5: 3133322e3235352e32342e302f32322d3332203d3e20323632323836.roa (hash: kFfUlyTs5mx5FarSpSwBX6eqNiy4Jt15s91Z7iMxXEY=)
                          6: 3137372e35322e3235322e302f32322d3332203d3e20323632323836.roa (hash: fRKdaK6CSCMuCWkyOMX75SAvD1p/Q54T81ZI/4oIs8Q=)
                          7: 3865E3537268319DD70D1072B951BD12CEB4D7D2.crl (hash: 493J10lTrlQbgG4jXpyn7xkxqf/scZxOn0NskDULaRs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3865E3537268319DD70D1072B951BD12CEB4D7D2.crl
                          rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3865E3537268319DD70D1072B951BD12CEB4D7D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3865E3537268319DD70D1072B951BD12CEB4D7D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:7a:8f:e5:e3:88:53:fc:aa:d0:6a:01:2f:b9:9b:f7:dc:a4:28:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3865E3537268319DD70D1072B951BD12CEB4D7D2
        Validity
            Not Before: Aug 23 13:27:40 2025 GMT
            Not After : Aug 24 15:56:40 2025 GMT
        Subject: CN=2B4FDA559B89DBA994B95C6633B56DD8BCA1B794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3b:75:21:43:90:d8:63:71:bb:5f:71:b3:87:
                    26:c3:af:4b:2a:31:5c:2a:52:54:47:97:5b:98:e2:
                    93:95:6b:61:b4:8b:8a:cc:d5:c5:a9:97:ff:49:1c:
                    c4:36:b1:dc:98:4c:1f:9c:24:f7:6f:6c:a4:48:2d:
                    15:05:42:21:5f:77:93:ef:13:d0:e5:8b:18:53:7b:
                    54:6f:3f:fc:f9:f8:1f:4d:8c:10:2e:03:0f:9a:ea:
                    10:d1:a2:2c:bd:b7:41:9e:37:9d:e6:7a:b9:82:37:
                    74:dc:26:ea:41:31:80:81:f0:a0:bd:93:de:a3:01:
                    8f:31:e3:ca:eb:63:05:85:c0:84:f4:6d:81:76:fc:
                    ba:2d:35:89:d0:59:6b:2d:ba:3c:45:c3:40:48:66:
                    15:63:5f:17:4f:36:1f:2d:2f:08:75:9b:c4:65:10:
                    6f:33:62:19:48:3b:8a:52:58:a4:66:2a:09:df:13:
                    79:70:08:45:dd:3f:c0:04:8e:04:24:9e:a0:01:85:
                    9c:67:cd:ed:3c:4d:74:42:7f:f5:49:3d:73:e4:77:
                    49:0b:af:f6:cd:00:35:40:b5:27:86:00:88:f9:a2:
                    2d:17:62:b8:4f:1e:45:c4:44:de:4b:79:18:37:22:
                    51:bd:c3:9b:79:c4:bf:39:c9:b0:3d:ff:d2:51:ef:
                    44:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4F:DA:55:9B:89:DB:A9:94:B9:5C:66:33:B5:6D:D8:BC:A1:B7:94
            X509v3 Authority Key Identifier:
                keyid:38:65:E3:53:72:68:31:9D:D7:0D:10:72:B9:51:BD:12:CE:B4:D7:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3865E3537268319DD70D1072B951BD12CEB4D7D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3865E3537268319DD70D1072B951BD12CEB4D7D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3865E3537268319DD70D1072B951BD12CEB4D7D2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ea:da:d3:96:3d:cf:d4:6b:a0:42:9f:cf:f6:67:4f:71:7b:
         84:07:d2:62:88:df:fc:7b:5d:49:d1:62:f8:ae:58:6e:73:ff:
         7a:a8:6d:2c:68:4f:ee:f0:70:5e:78:2c:40:c9:d2:34:91:a6:
         72:0b:e5:31:b9:20:b2:63:52:3e:28:cd:d9:47:c4:00:fa:c1:
         9a:de:e9:4e:c2:7c:30:46:40:c9:e3:39:9a:72:2c:f1:6a:a4:
         62:00:cf:99:b9:77:93:06:af:24:91:d6:7f:36:e1:48:4a:71:
         58:d2:50:38:eb:e9:ab:33:b9:c1:3f:ed:5e:e8:31:b1:7b:96:
         17:c1:4e:88:b4:5d:99:6e:01:47:b1:7e:87:68:85:5d:7f:bc:
         9a:14:e2:d5:8a:ff:6b:6a:2f:a4:85:2e:14:c8:a8:da:e7:c6:
         d8:be:92:fc:24:39:13:60:85:85:c8:40:ac:5f:cb:ac:fd:52:
         2a:3b:50:ed:27:91:ce:6f:b5:07:89:4a:5f:e0:74:43:14:c7:
         ad:20:0c:1e:27:7a:5e:9c:dd:ef:b7:71:ea:ef:3f:1e:f2:fd:
         f8:c1:37:1d:22:f6:39:8d:c2:9b:d3:e4:05:6b:42:fa:72:cc:
         d7:26:bf:bf:b8:47:9e:4b:71:9e:b2:0a:8d:f6:06:5d:ad:df:
         1f:fd:af:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYHqP5eOIU/yq0GoBL7mb99ykKDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzg2NUUzNTM3MjY4MzE5REQ3MEQxMDcyQjk1MUJEMTJD
RUI0RDdEMjAeFw0yNTA4MjMxMzI3NDBaFw0yNTA4MjQxNTU2NDBaMDMxMTAvBgNV
BAMTKDJCNEZEQTU1OUI4OURCQTk5NEI5NUM2NjMzQjU2REQ4QkNBMUI3OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFO3UhQ5DYY3G7X3GzhybDr0sq
MVwqUlRHl1uY4pOVa2G0i4rM1cWpl/9JHMQ2sdyYTB+cJPdvbKRILRUFQiFfd5Pv
E9DlixhTe1RvP/z5+B9NjBAuAw+a6hDRoiy9t0GeN53mermCN3TcJupBMYCB8KC9
k96jAY8x48rrYwWFwIT0bYF2/LotNYnQWWstujxFw0BIZhVjXxdPNh8tLwh1m8Rl
EG8zYhlIO4pSWKRmKgnfE3lwCEXdP8AEjgQknqABhZxnze08TXRCf/VJPXPkd0kL
r/bNADVAtSeGAIj5oi0XYrhPHkXERN5LeRg3IlG9w5t5xL85ybA9/9JR70QtAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUK0/aVZuJ26mUuVxmM7Vt2Lyht5QwHwYDVR0j
BBgwFoAUOGXjU3JoMZ3XDRByuVG9Es6019IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1VIZExLOXA4VHRLM2pyaXZUaXRSN3NkNnQ2Rng5VVNWU3hIcWNacTlE
dFQvMC8zODY1RTM1MzcyNjgzMTlERDcwRDEwNzJCOTUxQkQxMkNFQjREN0QyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4NjVFMzUzNzI2ODMxOURE
NzBEMTA3MkI5NTFCRDEyQ0VCNEQ3RDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1VIZExLOXA4VHRLM2pyaXZUaXRSN3NkNnQ2Rng5VVNWU3hIcWNacTlEdFQvMC8z
ODY1RTM1MzcyNjgzMTlERDcwRDEwNzJCOTUxQkQxMkNFQjREN0QyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKura05Y9z9RroEKfz/ZnT3F7hAfSYojf/HtdSdFi+K5YbnP/eqhtLGhP7vBw
XngsQMnSNJGmcgvlMbkgsmNSPijN2UfEAPrBmt7pTsJ8MEZAyeM5mnIs8WqkYgDP
mbl3kwavJJHWfzbhSEpxWNJQOOvpqzO5wT/tXugxsXuWF8FOiLRdmW4BR7F+h2iF
XX+8mhTi1Yr/a2ovpIUuFMio2ufG2L6S/CQ5E2CFhchArF/LrP1SKjtQ7SeRzm+1
B4lKX+B0QxTHrSAMHid6Xpzd77dx6u8/HvL9+ME3HSL2OY3Cm9PkBWtC+nLM1ya/
v7hHnktxnrIKjfYGXa3fH/2vDw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:38:29 2025 by rpki-client