Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
File:                     20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft (raw, json)
Hash identifier:          K5b6vU3qfFs/prNUItBBnBj8DO2Ln/kEH/PAuETl/cY=
Subject key identifier:   0D:84:10:30:11:B1:F2:D0:EF:8B:F7:8E:8A:9F:C2:8B:F1:C2:DD:F0
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Certificate issuer:       /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial:       09036F4631A561050FD0CFA3C1CF9C659F15FB3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
Manifest number:          3A
Signing time:             Mon 12 May 2025 00:10:18 +0000
Manifest this update:     Mon 12 May 2025 00:05:18 +0000
Manifest next update:     Tue 13 May 2025 03:38:18 +0000
Files and hashes:         1: 3139312e3234322e3231362e302f32322d3232203d3e20323633343832.roa (hash: Lq33j0nwbCzizkfK4ucoMHpApBuyKxtyssZQZqdA8SQ=)
                          2: 323830343a313238383a316666303a3a2f34342d3434203d3e20323633343832.roa (hash: b3Mxa09biE7viYKOLJ+XxJBPY/7XrSSeXbF/D18MFX4=)
                          3: 3139312e3234322e3231362e302f32332d3233203d3e20323633343832.roa (hash: SSkj68DGnAE2TCIVeNkVSjm2b44cCTMCHHhSeQT4tRg=)
                          4: 3137302e38332e3231322e302f32332d3233203d3e20323633343832.roa (hash: Li9yad9pRIt8j8e7uhRxuOJ6b+GkhPrhw4x8Fx81KIQ=)
                          5: 3138392e38342e34362e302f32342d3234203d3e20323633343832.roa (hash: wGqj+3xCHvy8WhrNXFK+/XHS3wwi7lO3SQxzNgG1tBc=)
                          6: 3138392e38342e34352e302f32342d3234203d3e20323633343832.roa (hash: LdD1tbfkMusLTq81tRbCXz6gWsdL6uUDAZEGYVsWEVE=)
                          7: 3139312e3234322e3231392e302f32342d3234203d3e20323633343832.roa (hash: 2980Xmok0r0pN8hwzqkXHEMD9+tYXIOlakQ8Smz6n7w=)
                          8: 3137302e38332e3231352e302f32342d3234203d3e20323633343832.roa (hash: 47fng3SFFp6wieCIbdzggNPehghgS7Iiba59mro4aM8=)
                          9: 3138392e38342e34362e302f32332d3233203d3e20323633343832.roa (hash: OPFQfHaJR5iJGCv7gvvYujGnJZJzuejiuRK+IW+vLRc=)
                          10: 323830343a313238383a663939393a3a2f34382d3438203d3e20323633343832.roa (hash: MseLEAHHPka7+xT1yUjOlQVjDF3DUmPkisA8FaEHhN0=)
                          11: 3139312e3234322e3231362e302f32342d3234203d3e20323633343832.roa (hash: q1viAa39vaxFSE1yqtK6yk224kBDBQ411MhycjLIs5o=)
                          12: 3138392e38342e34342e302f32342d3234203d3e20323633343832.roa (hash: 9DUeWnQRu8cqgvvbhSvo7DwMbOLuyeQjgv00VJvTBvk=)
                          13: 20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl (hash: u/8u+gaHIIBU96k89BdoBMqqImse7rXpu+tgOGy19zI=)
                          14: 3139312e3234322e3231382e302f32342d3234203d3e20323633343832.roa (hash: +luCSAlVJGhVRJtBed5VeRZK2e0ip0cv6IuRajfKwmQ=)
                          15: 3137302e38332e3231322e302f32342d3234203d3e20323633343832.roa (hash: iG9Rg3UY2i/r+RVJjn0ANVw8hutVJGMCaNw+bOsL5q4=)
                          16: 3138392e38342e34342e302f32322d3232203d3e20323633343832.roa (hash: hfAF8OuOIjtoMWCcwLMeTctDGGfqWtSFJ1UBwgoEYw0=)
                          17: 3139312e3234322e3231382e302f32332d3233203d3e20323633343832.roa (hash: gvPuHFNaGITtGK811VaWVMUCtpG96zT9I/mRt+eQIHM=)
                          18: 323830343a313238383a6630303a3a2f34382d3438203d3e20323633343832.roa (hash: NyLzw0cZ45JXuLEqwM1+JdGWMulIUQKbyFDa/epOTZo=)
                          19: 3137302e38332e3231342e302f32332d3233203d3e20323633343832.roa (hash: 5tNSiR8k3s9093GFxG18z8liYT/hqige88NCC2sf5j8=)
                          20: 3138392e38342e34372e302f32342d3234203d3e20323633343832.roa (hash: 4HBENazQyKoMxQEzGwB5TwktAojynsYBBuawqlF4XwA=)
                          21: 3137302e38332e3231342e302f32342d3234203d3e20323633343832.roa (hash: FU2pH0rE6XhWlgz8ddlIMwPu2p0o1BuPuTQRZvwYFMQ=)
                          22: 3137302e38332e3231332e302f32342d3234203d3e20323633343832.roa (hash: cs42jbFKSklrrj2z03hqjiLdZs2USw12CGQK3Z9IXyM=)
                          23: 323830343a313238383a3a2f33322d3332203d3e20323633343832.roa (hash: wEIrfXJkDUZrXej6iAG83659FwtHU8JdUB6JGl65GkQ=)
                          24: 3137302e38332e3231322e302f32322d3232203d3e20323633343832.roa (hash: ccPowp4ffMl00+nXkJxBPpe+iQV0cRpO7aaaEzTk6BA=)
                          25: 3139312e3234322e3231372e302f32342d3234203d3e20323633343832.roa (hash: IRIPnJ75guY+TWPkIi9uLutj2BEVaRmSsjfuqxV31oQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl
                          rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 01:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:03:6f:46:31:a5:61:05:0f:d0:cf:a3:c1:cf:9c:65:9f:15:fb:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
        Validity
            Not Before: May 12 00:05:18 2025 GMT
            Not After : May 13 03:38:18 2025 GMT
        Subject: CN=0D84103011B1F2D0EF8BF78E8A9FC28BF1C2DDF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b3:fb:e1:bb:34:05:00:86:22:41:9c:84:d7:
                    e8:8e:77:2a:dd:21:49:ef:00:d0:22:1b:18:b7:e9:
                    df:20:52:9d:bc:d3:dc:e0:24:6b:f3:94:06:69:61:
                    aa:02:3d:4f:4f:3e:40:c9:34:51:b7:20:c7:0d:ec:
                    75:eb:55:51:f3:9a:d0:66:f1:12:f3:e9:4c:50:40:
                    cb:79:eb:48:f1:55:ee:f0:78:d1:7e:d3:49:aa:20:
                    84:6a:7b:ff:79:f8:f9:51:2a:d6:ff:54:3e:da:33:
                    c5:aa:1f:d8:a9:08:6a:ea:b3:db:dd:1a:4e:ac:e5:
                    96:9c:24:64:80:ed:4d:cc:b2:b5:19:bb:13:94:35:
                    55:67:30:f0:1b:7b:86:04:21:d4:c3:25:89:92:29:
                    df:c9:4f:7e:c2:70:35:8b:1b:a4:d5:7d:16:3a:f2:
                    8c:11:39:5e:06:94:90:fb:e1:ed:49:4c:93:27:88:
                    be:84:fd:c1:57:a1:40:46:80:37:70:1b:a4:ab:a9:
                    57:b3:df:c1:0b:04:ff:6e:cb:e2:51:1c:ac:95:73:
                    a7:b7:59:9c:54:7d:46:24:d8:b9:9d:dc:d1:ab:73:
                    c5:f0:74:36:4e:6d:d7:53:b4:3c:8e:4e:5b:56:f4:
                    b1:f8:9b:ac:f0:e2:de:d1:12:74:3e:e2:eb:88:d0:
                    d0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:84:10:30:11:B1:F2:D0:EF:8B:F7:8E:8A:9F:C2:8B:F1:C2:DD:F0
            X509v3 Authority Key Identifier:
                keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:9c:15:8d:96:af:a7:38:16:06:cb:c2:1a:50:53:7b:17:68:
         a7:4f:0c:97:cc:93:9a:3c:30:7f:8b:a3:ac:9b:ec:98:93:7f:
         aa:63:1b:1b:35:ac:da:3d:14:fa:64:97:ec:04:b2:13:6e:18:
         7b:7d:41:49:e0:bd:dd:9d:b5:b6:2c:6d:a6:c4:ef:8d:22:7b:
         80:ef:d5:6a:0d:be:06:79:7c:5d:8c:7e:04:16:2e:ad:3c:08:
         60:97:a4:15:57:d7:3f:48:d6:a7:e9:4a:f4:29:48:78:53:61:
         45:99:42:9c:4e:13:d4:f3:e9:56:c6:62:f1:f3:f8:d2:f6:fa:
         2b:c6:6e:3e:8c:61:8d:88:94:9b:15:8d:74:18:00:7d:8c:dc:
         8c:14:e7:be:c0:87:a9:1d:32:26:24:08:60:4e:13:ba:a7:6a:
         40:be:d1:1f:e1:c1:cd:78:26:00:0f:eb:05:35:3b:42:9f:1b:
         af:66:4a:06:e0:31:de:5d:8c:fb:0e:f9:5f:f6:05:84:f4:42:
         c7:8f:7a:fb:db:83:55:18:42:95:ac:b5:c9:8b:d9:e2:82:8a:
         4b:36:9c:be:48:dc:9c:f3:e7:23:45:8b:69:a9:f1:98:1f:5a:
         3e:19:3b:5a:b1:7f:62:a9:24:2e:03:ac:de:8f:fd:7e:20:78:
         80:9b:1f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:39:07 2025 by rpki-client