Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/46D2B31940627B8DA0E1405BFD2813DB97711E0A.mft
File:                     46D2B31940627B8DA0E1405BFD2813DB97711E0A.mft (raw, json)
Hash identifier:          Vh7obW+l3VkIm5Sa7R/2akgnBcbbnpYR2SVIRyTK2Tg=
Subject key identifier:   F0:D5:0E:91:95:7E:B0:F4:34:38:D8:5E:80:85:36:4D:24:C2:4D:1D
Authority key identifier: 46:D2:B3:19:40:62:7B:8D:A0:E1:40:5B:FD:28:13:DB:97:71:1E:0A
Certificate issuer:       /CN=46D2B31940627B8DA0E1405BFD2813DB97711E0A
Certificate serial:       5E3C965F9DF9F2417FE51B664DC5935439A213D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46D2B31940627B8DA0E1405BFD2813DB97711E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/46D2B31940627B8DA0E1405BFD2813DB97711E0A.mft
Manifest number:          A3
Signing time:             Fri 22 Aug 2025 18:09:03 +0000
Manifest this update:     Fri 22 Aug 2025 18:04:03 +0000
Manifest next update:     Sat 23 Aug 2025 19:49:03 +0000
Files and hashes:         1: 323830343a373736343a653030303a3a2f33352d3335203d3e20323731313735.roa (hash: lEEIBg9N8PXfRsS4CNCpLaMJ990Ye0kwLtLwusRZVyA=)
                          2: 3137392e35312e3137362e302f32342d3234203d3e20323731313735.roa (hash: ilSbgyAhNJl2XJy9Cg/FGZaMB6g+YwCrn7GaPIIjs4M=)
                          3: 323830343a373736343a3a2f33322d3332203d3e20323731313735.roa (hash: RAWpZvChAy0tbJhIk+XjKYxahZ+wXtcgwmfWe67xQBg=)
                          4: 3137392e35312e3137392e302f32342d3234203d3e20323731313735.roa (hash: hH1ow4GX7qAsuzvdfVhqxAz/yOaznrbYeHZyfiKGieQ=)
                          5: 3137392e35312e3137372e302f32342d3234203d3e20323731313735.roa (hash: P0pUoyNMLWvtRCsWESafGfgdeRUsGlQAsYFF1EfAcI0=)
                          6: 323830343a373736343a383030303a3a2f33332d3333203d3e20323731313735.roa (hash: Rxvhar6W1wuI+j3XK40Jc6gBK1TtZ7/ZdYuPoB6zKX8=)
                          7: 323830343a373736343a3a2f33332d3333203d3e20323731313735.roa (hash: m5+Ll/Y3WUide/G9BBXv/8qNORbwim57AKLaj+dzMdI=)
                          8: 3137392e35312e3137362e302f32332d3233203d3e20323731313735.roa (hash: y7jS8+eCy8yM4gv+NvrGzxkT4fV2ewuNPYntc+MfACI=)
                          9: 3137392e35312e3137382e302f32342d3234203d3e20323731313735.roa (hash: D3SfLugZwfq1/VMN2bvg50xMrbh2tyCmMT13tlZGd6A=)
                          10: 46D2B31940627B8DA0E1405BFD2813DB97711E0A.crl (hash: Qz0TEjI9N88Lv2vwS6P9aF4bPvMJJ4xBs6zoiRta434=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/46D2B31940627B8DA0E1405BFD2813DB97711E0A.crl
                          rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/46D2B31940627B8DA0E1405BFD2813DB97711E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46D2B31940627B8DA0E1405BFD2813DB97711E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Aug 2025 19:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:3c:96:5f:9d:f9:f2:41:7f:e5:1b:66:4d:c5:93:54:39:a2:13:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46D2B31940627B8DA0E1405BFD2813DB97711E0A
        Validity
            Not Before: Aug 22 18:04:03 2025 GMT
            Not After : Aug 23 19:49:03 2025 GMT
        Subject: CN=F0D50E91957EB0F43438D85E8085364D24C24D1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f6:98:94:eb:0e:1f:34:12:c1:b3:48:ce:98:
                    c9:c3:ed:98:8a:11:0f:2f:3c:f3:38:f6:c8:84:2b:
                    47:75:4e:b5:32:3e:7a:b4:65:53:58:41:1f:1d:66:
                    c0:a8:5f:37:62:a1:ce:33:b5:3a:a8:f4:c9:db:f3:
                    31:d7:52:3d:6c:1b:13:de:14:df:68:c7:e7:5d:f6:
                    22:b6:b0:89:ee:92:77:c0:01:c5:72:68:e9:f9:1c:
                    c3:fe:63:20:fc:e1:07:86:1b:6f:8e:55:c0:c9:6b:
                    9f:ee:73:02:88:be:c8:ef:51:13:7a:f7:5e:0d:f0:
                    9a:76:88:86:7a:c6:fa:fd:02:61:d3:0b:1d:de:1b:
                    62:e2:66:0b:cd:c5:87:67:46:cc:90:60:b4:fd:8a:
                    1a:62:4b:3f:4b:c5:bf:bf:a5:4c:4d:28:0f:d1:b8:
                    ad:89:c6:90:ad:2f:f4:e0:ed:33:83:8a:96:a9:4e:
                    06:2a:c5:04:46:05:60:18:a2:d9:ff:32:e4:05:ab:
                    20:7f:e6:0e:12:45:ce:ed:5a:12:b9:e2:bc:95:90:
                    bb:cd:38:14:2f:58:9a:5f:a1:f9:94:18:7f:25:46:
                    4e:9b:8f:a6:3c:cf:7c:92:dd:02:4f:9c:66:98:be:
                    24:20:e8:c0:54:b5:78:e7:38:5c:9f:ab:68:1c:ed:
                    b6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D5:0E:91:95:7E:B0:F4:34:38:D8:5E:80:85:36:4D:24:C2:4D:1D
            X509v3 Authority Key Identifier:
                keyid:46:D2:B3:19:40:62:7B:8D:A0:E1:40:5B:FD:28:13:DB:97:71:1E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/46D2B31940627B8DA0E1405BFD2813DB97711E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46D2B31940627B8DA0E1405BFD2813DB97711E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/46D2B31940627B8DA0E1405BFD2813DB97711E0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a2:ab:ed:22:82:23:96:47:49:43:58:7f:29:92:d5:bf:61:
         8d:5d:76:77:07:31:5a:80:ab:08:fa:2d:45:f3:25:17:a8:f3:
         b2:25:95:88:b5:72:5b:c7:5c:b4:41:4b:01:72:99:aa:af:44:
         34:cf:e4:a1:80:ea:6a:4d:9f:bf:e4:65:4b:4f:89:65:7e:3c:
         e2:18:71:7c:61:be:44:c7:b5:08:43:73:4d:be:42:ec:e1:24:
         1c:58:bd:c7:dc:6b:77:12:ca:9b:3f:29:84:b1:d8:64:12:e1:
         ab:a7:f8:6a:3b:17:73:9f:88:75:31:79:82:32:bf:5d:be:1b:
         18:f4:7f:fc:7a:b6:e3:f2:59:40:39:2f:b3:ee:57:40:7e:19:
         56:1c:dc:01:4a:75:06:66:cd:1a:a9:5d:2a:42:fb:4f:0d:b5:
         a8:a6:d9:8f:62:8b:a3:76:4b:65:1e:a4:e6:cc:42:68:08:78:
         f4:c6:35:26:3c:09:eb:d4:46:76:2d:92:3a:f6:2e:8d:e7:a3:
         b3:53:11:5f:bc:fc:27:da:e7:dd:1d:c3:58:22:1b:27:62:47:
         ea:41:74:39:38:e1:e3:d9:cf:41:4d:82:6b:8c:54:37:4e:92:
         5c:ca:52:98:58:de:a1:9d:60:f3:20:61:4d:b0:b1:b7:c3:61:
         0d:97:fe:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:43:14 2025 by rpki-client