Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/3DB191150FCD76CA20839F475687E6E6C70AC6A7.mft
File:                     3DB191150FCD76CA20839F475687E6E6C70AC6A7.mft (raw, json)
Hash identifier:          on7k80+IbpJYidZ1caJt61foAtQDuR9Nlzk/XLWWs80=
Subject key identifier:   11:B4:38:0A:37:6C:83:2C:B1:E1:93:A7:09:35:42:FB:A5:9C:E6:F9
Authority key identifier: 3D:B1:91:15:0F:CD:76:CA:20:83:9F:47:56:87:E6:E6:C7:0A:C6:A7
Certificate issuer:       /CN=3DB191150FCD76CA20839F475687E6E6C70AC6A7
Certificate serial:       0EB406384D1080BD270718BDCD709EC3DDDD7E51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DB191150FCD76CA20839F475687E6E6C70AC6A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/3DB191150FCD76CA20839F475687E6E6C70AC6A7.mft
Manifest number:          0149
Signing time:             Wed 02 Jul 2025 14:16:52 +0000
Manifest this update:     Wed 02 Jul 2025 14:11:52 +0000
Manifest next update:     Thu 03 Jul 2025 14:19:52 +0000
Files and hashes:         1: 3137372e3138352e3132382e302f32302d3234203d3e203532393336.roa (hash: aQUV6YKcHF3FkjB2CLgPl4GbjvvbpvBPm9jNzem55Ms=)
                          2: 323830343a6231303a3a2f33322d3332203d3e203532393336.roa (hash: BV5LS3cw4+xrh4zXEQ5nf0UkwST+ERdkWADJASaiWXk=)
                          3: 3DB191150FCD76CA20839F475687E6E6C70AC6A7.crl (hash: SFIaf/Qxy+rddLyH+YdWITgw0FNAMfH7gdxX4QjOfcs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/3DB191150FCD76CA20839F475687E6E6C70AC6A7.crl
                          rsync://rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/3DB191150FCD76CA20839F475687E6E6C70AC6A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DB191150FCD76CA20839F475687E6E6C70AC6A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 14:19:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b4:06:38:4d:10:80:bd:27:07:18:bd:cd:70:9e:c3:dd:dd:7e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DB191150FCD76CA20839F475687E6E6C70AC6A7
        Validity
            Not Before: Jul  2 14:11:52 2025 GMT
            Not After : Jul  3 14:19:52 2025 GMT
        Subject: CN=11B4380A376C832CB1E193A7093542FBA59CE6F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0b:8a:49:19:33:db:78:cf:99:1d:9a:c4:d4:
                    37:df:b3:a8:d1:15:7f:65:91:90:29:80:44:ca:70:
                    35:45:21:07:14:27:24:56:5a:8f:fb:d6:da:ef:92:
                    64:87:2a:5f:e7:9f:96:1d:41:8e:da:a1:8a:c1:4b:
                    d8:2f:ed:e2:65:8c:17:da:2b:91:b9:91:d2:b6:4d:
                    00:7d:6a:42:bf:47:c3:6c:82:c3:ba:e2:0c:74:f4:
                    a7:9a:61:ed:d4:84:95:38:13:72:dd:2a:16:e5:58:
                    c1:ac:58:54:40:84:29:67:6c:15:89:65:1d:3f:16:
                    37:7b:28:1e:6e:9e:19:56:fd:7a:1f:72:78:4f:94:
                    1e:50:57:40:1a:89:03:c3:37:66:09:b4:de:14:29:
                    a7:d4:97:14:74:2f:9f:c5:37:d4:1a:5d:f6:7c:6d:
                    7f:85:20:bc:18:c3:98:31:3c:20:6c:76:69:1f:37:
                    25:97:76:16:b0:4b:a3:02:83:fb:9c:5f:36:a6:2a:
                    1e:4d:b1:9a:55:d4:1b:2d:ff:9c:a3:f3:45:44:fc:
                    63:37:3c:ab:0b:a3:c4:22:4f:a7:91:79:2f:d4:ff:
                    2f:2a:ff:c7:2e:15:d4:1a:19:2b:4f:96:d1:6d:81:
                    3f:35:a3:b3:2f:b5:7d:fc:6b:c2:63:5d:7c:64:d6:
                    33:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B4:38:0A:37:6C:83:2C:B1:E1:93:A7:09:35:42:FB:A5:9C:E6:F9
            X509v3 Authority Key Identifier:
                keyid:3D:B1:91:15:0F:CD:76:CA:20:83:9F:47:56:87:E6:E6:C7:0A:C6:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/3DB191150FCD76CA20839F475687E6E6C70AC6A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DB191150FCD76CA20839F475687E6E6C70AC6A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/3DB191150FCD76CA20839F475687E6E6C70AC6A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:17:67:83:77:97:e9:65:59:8b:98:98:67:d7:1b:86:ac:6e:
         fd:95:66:dc:42:20:9e:56:ac:66:47:23:15:16:12:d0:08:70:
         c3:62:71:e8:6c:e2:37:21:2d:86:5b:1f:ed:69:3e:ff:f3:97:
         65:be:1b:fc:2a:6e:c5:f3:31:3b:0f:3a:e8:9d:0c:a4:e7:91:
         4c:09:47:7f:1f:01:05:8f:79:06:8a:3c:f2:0e:86:12:e5:fc:
         98:d1:22:11:f4:73:ad:b4:dc:46:3f:33:d5:04:b0:3d:45:df:
         df:07:5b:04:fa:eb:cc:86:16:44:97:02:36:37:f5:bb:55:d4:
         8a:fb:72:98:ec:99:14:a9:f8:e4:51:79:c0:75:9f:aa:67:d4:
         55:61:9a:38:e6:27:b2:97:3f:9a:ae:a0:72:42:1c:ed:c3:d1:
         33:11:89:28:82:55:ce:33:e0:f7:3e:52:6d:e8:59:db:4c:a4:
         ed:5a:f4:0b:63:d2:fc:c9:32:43:c3:c0:5f:25:20:78:ea:7e:
         a4:b0:64:c7:24:15:1a:c0:79:f4:82:4c:76:60:ac:26:cf:85:
         9a:25:41:fd:a8:cd:c6:32:1f:c1:6e:1c:1c:22:d4:81:93:7f:
         cc:6e:a0:76:46:3d:c7:a4:18:ed:e6:04:e3:3e:bb:b5:1b:69:
         ac:da:5d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 02:04:18 2025 by rpki-client