Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.mft
File:                     3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.mft (raw, json)
Hash identifier:          4+ocOaO4yzOYaQ8hnytqwMXsXR/Asd3N/s/BZHZZUJ0=
Subject key identifier:   37:D1:1A:D0:CA:F0:71:4D:74:FC:C0:9B:82:5A:AB:90:2D:F3:35:13
Authority key identifier: 3A:CA:CB:0D:E5:9E:3F:7F:5D:3F:B4:9A:B3:DF:C4:C9:80:8D:CA:ED
Certificate issuer:       /CN=3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED
Certificate serial:       5DD451220BA98840A131FBB775AF959033168DA6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.mft
Manifest number:          52
Signing time:             Sat 23 Aug 2025 02:48:19 +0000
Manifest this update:     Sat 23 Aug 2025 02:43:19 +0000
Manifest next update:     Sun 24 Aug 2025 06:24:19 +0000
Files and hashes:         1: 34352e3233302e33302e302f32342d3234203d3e20323637313435.roa (hash: HtF4NuFnVBsi6nCSys4LOtR3ffP/O1dMnNM3cO2FUxs=)
                          2: 323830343a343863633a3a2f33332d3333203d3e20323637313435.roa (hash: L2eax2W/p0AzDbU62q45YCkXbId03LyLtEs/c9sfyQY=)
                          3: 34352e3233302e33302e302f32332d3233203d3e20323637313435.roa (hash: P9E4CSTIzR8ub3UjYPuD3ojXiSHsSzq/hJMmZe1qwVs=)
                          4: 3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.crl (hash: OC1s7e+7dxwC3upD0OKNroyVq3wcW/rzr/Y2dvmM8EY=)
                          5: 34352e3233302e32392e302f32342d3234203d3e20323637313435.roa (hash: 2NM85Vs2nVN0gzy5hDe3TkuUDADgxb95JdpNTfwTJFo=)
                          6: 34352e3233302e33312e302f32342d3234203d3e20323637313435.roa (hash: WM3UE/aleCwA2X4QZQpV09N15uiKdGc4NjOTrLav7mY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.crl
                          rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 06:24:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d4:51:22:0b:a9:88:40:a1:31:fb:b7:75:af:95:90:33:16:8d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED
        Validity
            Not Before: Aug 23 02:43:19 2025 GMT
            Not After : Aug 24 06:24:19 2025 GMT
        Subject: CN=37D11AD0CAF0714D74FCC09B825AAB902DF33513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:a0:ff:40:76:5f:2d:06:0f:41:a2:9a:84:
                    b7:2c:49:3a:6e:d8:e6:56:67:96:2b:e7:b6:49:99:
                    3e:d0:87:b7:76:ff:b0:24:d1:45:cf:46:73:8a:07:
                    dd:8b:f3:40:e0:64:73:4a:36:23:4c:cf:8d:b4:17:
                    fd:29:03:0c:9a:43:a0:49:25:61:57:f2:d5:18:04:
                    e6:6a:08:73:7e:dc:05:32:d6:2b:b4:54:83:8a:33:
                    79:44:63:b0:0b:b7:86:f5:e3:58:2e:e5:3b:74:54:
                    be:1f:76:e8:99:91:49:6a:0f:ee:a2:3f:74:94:69:
                    f1:9f:68:cd:65:0d:af:3e:c0:52:19:88:30:82:56:
                    7f:0c:f3:da:63:27:6f:2b:cd:49:3e:a1:37:b2:e6:
                    96:8f:36:e1:04:6c:fe:28:a7:4e:68:50:9f:0e:16:
                    6d:3e:2c:32:48:df:34:9d:51:6a:64:83:63:27:d3:
                    e3:f8:78:c7:6d:66:4c:78:eb:20:70:42:43:03:06:
                    20:f4:4d:14:1c:70:32:bd:41:97:0f:a7:bc:fa:a8:
                    41:0a:d1:ba:78:09:ad:1b:4e:ac:67:bb:1c:ca:0a:
                    d8:0f:59:f8:e0:ca:4d:a3:f5:db:e2:26:74:b7:09:
                    b0:60:aa:79:ac:db:e3:84:9d:ab:7a:5f:eb:79:fc:
                    26:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D1:1A:D0:CA:F0:71:4D:74:FC:C0:9B:82:5A:AB:90:2D:F3:35:13
            X509v3 Authority Key Identifier:
                keyid:3A:CA:CB:0D:E5:9E:3F:7F:5D:3F:B4:9A:B3:DF:C4:C9:80:8D:CA:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ec:d9:fb:90:b4:07:98:70:2d:d7:ee:fe:22:57:47:76:d1:49:
         86:a0:ed:9f:2f:65:44:06:a4:e4:ff:b1:96:87:f8:22:07:09:
         fb:02:3f:e6:7c:19:ea:7b:19:93:74:d6:09:c7:5b:21:b2:32:
         4c:2f:d2:6d:8d:70:34:86:f0:47:c3:2b:7f:c4:0e:55:fc:90:
         3e:2b:66:cc:74:d6:88:2e:80:8f:7e:40:eb:09:e2:cb:f0:2c:
         e8:07:f3:4d:c0:6e:12:b1:da:d7:30:f3:c2:dd:b9:c1:4d:bc:
         2a:b8:c0:2e:43:86:5e:85:2d:36:21:d7:31:58:33:fb:3b:2d:
         02:48:95:ee:79:3d:ee:2c:c5:e1:f3:c2:2a:6c:a9:4b:f9:ed:
         02:c0:5c:0f:c3:d6:21:29:28:34:29:03:7f:5b:97:29:48:7a:
         41:85:12:89:7c:e5:e9:ae:18:8a:71:cf:8f:51:1f:39:24:af:
         e1:b5:f0:b6:a2:cc:5c:8a:30:34:22:f4:0f:9c:35:2c:b4:d4:
         fe:eb:bb:70:8b:6f:d7:2d:96:fa:10:1a:a6:86:74:c8:f8:d4:
         f1:40:db:b8:37:ef:fa:1f:16:70:c1:3e:c8:56:b0:70:3d:4d:
         8c:d1:e6:50:bb:2f:c5:01:83:ed:90:7b:d9:69:c1:d1:ed:d5:
         8b:04:b7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:24:39 2025 by rpki-client