Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.mft
File:                     3B4B1D11DA1C8532237B102F0C1C617E70A272C5.mft (raw, json)
Hash identifier:          4gFNFro8pBWOHuLEq9FuhbKySBWItwuX2zFxCi5uNfU=
Subject key identifier:   2D:4D:1E:D3:E0:B4:BA:D4:CE:23:24:C0:10:7B:B3:06:2E:2C:DD:72
Authority key identifier: 3B:4B:1D:11:DA:1C:85:32:23:7B:10:2F:0C:1C:61:7E:70:A2:72:C5
Certificate issuer:       /CN=3B4B1D11DA1C8532237B102F0C1C617E70A272C5
Certificate serial:       237092D7A179194C2EEB507A6224208CC8D03757
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.mft
Manifest number:          E9
Signing time:             Sat 12 Jul 2025 13:15:44 +0000
Manifest this update:     Sat 12 Jul 2025 13:10:44 +0000
Manifest next update:     Sun 13 Jul 2025 14:43:44 +0000
Files and hashes:         1: 34352e3232342e3131322e302f32332d3234203d3e20323637363537.roa (hash: Tx0FjievZ1fIALoALR+dZPiezsWqP+kaA3FYqPdlF7Y=)
                          2: 323830343a343464383a383030303a3a2f33332d3333203d3e20323637363537.roa (hash: B7E00C1Vxzm7LGbcrVzCf9CW2okcJ2rZZJ8BHdI0fJY=)
                          3: 34352e3232342e3131342e302f32332d3233203d3e20323637363537.roa (hash: ufX0QnRDG9Qtm6AUOnyqKnDEdXFfSqBv9A8zdNqIPhI=)
                          4: 323830343a343464383a3a2f33322d3332203d3e20323637363537.roa (hash: d5s2JyEN4cNkPgu2RyAG0Tl4mWwr4eYppkTDVzH7Grw=)
                          5: 323830343a343464383a3a2f33332d3333203d3e20323637363537.roa (hash: DFCs6nRQiS3p4kYOFx9qyfLKWu82j04EjjVQEUhlvRU=)
                          6: 3B4B1D11DA1C8532237B102F0C1C617E70A272C5.crl (hash: GkkTcZFOe68rjoCSfMzoY6iCq83wv3pE580Z/uAkVu4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.crl
                          rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 14:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:70:92:d7:a1:79:19:4c:2e:eb:50:7a:62:24:20:8c:c8:d0:37:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B4B1D11DA1C8532237B102F0C1C617E70A272C5
        Validity
            Not Before: Jul 12 13:10:44 2025 GMT
            Not After : Jul 13 14:43:44 2025 GMT
        Subject: CN=2D4D1ED3E0B4BAD4CE2324C0107BB3062E2CDD72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cc:60:df:e1:82:92:e2:b8:e6:f1:23:8e:cb:
                    fd:22:59:eb:fe:c6:08:ac:e6:3b:56:19:c4:45:c1:
                    5d:ec:d8:b5:76:ee:1f:57:5b:f1:8e:ec:60:7f:16:
                    fe:e4:32:74:37:3c:2f:d2:86:18:43:2e:d2:89:0c:
                    23:45:8d:a7:b5:64:31:b5:1c:cf:d5:c4:81:e8:90:
                    37:8b:b5:84:ce:55:ce:3d:e2:22:bf:c7:6a:c9:6b:
                    ea:89:36:33:79:de:63:16:c6:12:43:fb:cb:0e:3a:
                    31:56:77:cc:5c:e7:21:88:2e:92:74:43:e6:12:c0:
                    b4:97:1e:44:72:2c:a0:db:fc:45:03:e1:68:18:41:
                    21:49:52:d2:5c:97:ce:0a:f6:09:9f:b2:66:08:6a:
                    ec:6d:9d:32:63:78:26:8e:7b:ba:8a:1e:0e:f1:13:
                    27:ba:53:bd:4a:b6:15:6b:6e:0e:e9:e5:aa:23:2f:
                    af:48:63:3c:74:26:65:39:dc:07:ba:d4:16:3a:31:
                    8f:38:64:a1:06:67:60:ac:70:01:0f:d4:da:53:bd:
                    42:73:d6:6f:dc:e8:d3:7b:9d:88:dd:55:31:03:3a:
                    c7:21:97:6e:04:fe:08:bc:7c:7f:a7:f7:2f:9d:35:
                    4f:1a:74:11:11:d4:22:48:1d:f0:be:1d:79:07:28:
                    16:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4D:1E:D3:E0:B4:BA:D4:CE:23:24:C0:10:7B:B3:06:2E:2C:DD:72
            X509v3 Authority Key Identifier:
                keyid:3B:4B:1D:11:DA:1C:85:32:23:7B:10:2F:0C:1C:61:7E:70:A2:72:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:9e:98:f5:47:bd:4e:29:ae:bf:f0:2d:11:f3:5e:f0:fa:d7:
         fc:12:b3:56:64:1b:00:a7:3f:a2:0f:61:b1:d2:da:1c:20:f4:
         fa:75:42:10:b0:07:a3:40:b4:a2:f4:d5:44:0e:45:f6:a3:6a:
         f4:59:51:c5:c2:8f:42:82:85:af:8a:66:1c:0e:b6:10:17:dd:
         95:22:35:cb:42:08:7c:2a:cb:82:3d:f9:d4:53:08:df:ea:26:
         5f:f6:a0:5c:6a:b4:59:72:4e:9b:d6:3c:15:8a:89:8a:a3:c4:
         fc:43:31:54:60:09:f8:29:96:9e:3c:4a:bc:32:af:2e:b6:73:
         d5:fc:1c:5e:12:d3:25:e7:23:b4:00:4c:d3:ec:6a:a8:74:7e:
         12:8c:0d:d5:8d:44:58:e9:28:64:34:cb:93:a1:1b:36:01:c2:
         4c:10:97:8b:11:bb:b5:f7:1b:06:d6:af:e5:50:3a:5a:73:5e:
         ac:ed:b8:52:01:fa:a5:6a:8d:46:de:97:28:0e:70:9a:9b:6f:
         69:43:95:93:45:57:2e:22:7a:4c:df:7a:68:45:83:ba:f4:2e:
         d9:63:1c:13:40:1b:18:1f:01:cf:76:3a:58:22:e6:84:32:b9:
         21:6b:40:56:e9:57:09:3b:be:ba:ff:28:f7:78:3b:13:70:1a:
         0a:c9:df:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 23:39:32 2025 by rpki-client