Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Faya4QHZQqKK6AMBebddK7Y1JqiPebF8LKHTNSA93pHS/0/036B7A79D7EFC41A5BA7973D2E159066A6DF0CC2.mft
File:                     036B7A79D7EFC41A5BA7973D2E159066A6DF0CC2.mft (raw, json)
Hash identifier:          mprlbN7WawDEUKQeTKT9z3J2TRmLQh/YZxThpZqTgKw=
Subject key identifier:   E4:FA:09:7D:3F:A7:34:4C:9E:42:24:37:E9:48:80:7C:22:99:D4:94
Authority key identifier: 03:6B:7A:79:D7:EF:C4:1A:5B:A7:97:3D:2E:15:90:66:A6:DF:0C:C2
Certificate issuer:       /CN=036B7A79D7EFC41A5BA7973D2E159066A6DF0CC2
Certificate serial:       36AA30BC7EB12A389E1D9182A26CD96D4859D666
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/036B7A79D7EFC41A5BA7973D2E159066A6DF0CC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Faya4QHZQqKK6AMBebddK7Y1JqiPebF8LKHTNSA93pHS/0/036B7A79D7EFC41A5BA7973D2E159066A6DF0CC2.mft
Manifest number:          1B
Signing time:             Mon 30 Jun 2025 23:37:27 +0000
Manifest this update:     Mon 30 Jun 2025 23:32:27 +0000
Manifest next update:     Wed 02 Jul 2025 02:53:27 +0000
Files and hashes:         1: 34352e352e3232342e302f32322d3332203d3e20323636313133.roa (hash: Rvuygg/gSp2utcqumpb0lDQiV5+JKAfJzvpdoCGBiDc=)
                          2: 323830343a336164383a3a2f33322d313238203d3e20323636313133.roa (hash: i5T9AdMOovKrm/D+6gvfEU+6UA4O0B1ZiXlFuosj5gQ=)
                          3: 036B7A79D7EFC41A5BA7973D2E159066A6DF0CC2.crl (hash: XNeaAkebJcNDQIEC68KuiTF/J68aHryWtga+isu+mBo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Faya4QHZQqKK6AMBebddK7Y1JqiPebF8LKHTNSA93pHS/0/036B7A79D7EFC41A5BA7973D2E159066A6DF0CC2.crl
                          rsync://rpki-repo.registro.br/repo/Faya4QHZQqKK6AMBebddK7Y1JqiPebF8LKHTNSA93pHS/0/036B7A79D7EFC41A5BA7973D2E159066A6DF0CC2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/036B7A79D7EFC41A5BA7973D2E159066A6DF0CC2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 02:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:aa:30:bc:7e:b1:2a:38:9e:1d:91:82:a2:6c:d9:6d:48:59:d6:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=036B7A79D7EFC41A5BA7973D2E159066A6DF0CC2
        Validity
            Not Before: Jun 30 23:32:27 2025 GMT
            Not After : Jul  2 02:53:27 2025 GMT
        Subject: CN=E4FA097D3FA7344C9E422437E948807C2299D494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d6:f9:e3:a5:99:06:74:00:a4:ab:9f:02:a7:
                    f9:8e:e5:b4:d5:48:22:f5:13:92:cf:74:6b:ab:a2:
                    81:4b:db:1d:a5:c1:60:2b:63:3d:59:d8:27:9d:41:
                    57:7e:21:3f:7d:00:8f:46:bf:1e:68:77:02:66:ec:
                    df:a7:5e:47:ed:e0:3c:a1:f7:34:1b:97:45:ef:fa:
                    fa:e6:0d:3a:60:cc:a7:2b:76:72:0c:c7:13:5c:3c:
                    7a:e3:19:4b:0e:80:1b:f2:b8:f3:74:b2:df:fe:0b:
                    2c:50:d9:97:b6:de:4e:9c:d1:d3:28:3c:42:af:d0:
                    bb:03:8d:99:cf:6b:f1:0a:a7:f1:05:bf:ca:df:18:
                    c8:1b:f0:34:29:7e:a2:61:4b:5f:7c:1a:f8:67:2a:
                    70:28:61:69:92:1f:35:d5:22:ff:ec:17:f4:20:33:
                    1c:8a:03:17:03:98:40:a1:ab:e0:f4:97:12:6c:49:
                    99:35:46:0c:6a:ce:4f:e0:ab:69:5b:b1:00:56:1c:
                    6e:37:0f:a8:46:94:ec:f9:a4:fa:e8:6b:5c:f8:8a:
                    b1:3c:f1:b5:fe:3f:6e:1e:5c:f1:0a:b6:dc:3f:b7:
                    a5:a5:45:23:ef:43:77:6b:c7:74:fb:22:bb:41:31:
                    d3:5c:ab:28:f4:70:1d:42:8b:a2:11:f8:e7:97:3b:
                    aa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FA:09:7D:3F:A7:34:4C:9E:42:24:37:E9:48:80:7C:22:99:D4:94
            X509v3 Authority Key Identifier:
                keyid:03:6B:7A:79:D7:EF:C4:1A:5B:A7:97:3D:2E:15:90:66:A6:DF:0C:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Faya4QHZQqKK6AMBebddK7Y1JqiPebF8LKHTNSA93pHS/0/036B7A79D7EFC41A5BA7973D2E159066A6DF0CC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/036B7A79D7EFC41A5BA7973D2E159066A6DF0CC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Faya4QHZQqKK6AMBebddK7Y1JqiPebF8LKHTNSA93pHS/0/036B7A79D7EFC41A5BA7973D2E159066A6DF0CC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:06:4e:7a:66:c8:71:51:a2:a1:e9:9e:23:fb:55:7e:18:01:
         3b:4f:0a:41:ec:81:dc:e1:18:77:42:fc:cb:ee:f8:6a:16:12:
         ee:2a:b1:93:48:21:1f:71:24:e6:4d:50:0d:7b:ec:36:17:f8:
         60:12:1a:ce:49:17:e2:a2:fd:2b:00:65:31:d9:04:e9:92:1d:
         21:ff:0c:33:31:50:70:e9:ce:3d:1c:51:34:85:29:ea:dc:a6:
         fc:d0:11:7d:40:c1:fa:ff:21:3b:73:90:7b:3a:6c:21:a0:6e:
         dc:ec:58:23:6e:79:18:3e:05:a0:95:a5:44:d5:00:a2:47:78:
         72:23:02:d1:ba:d2:27:c7:2a:31:c2:66:9f:0d:d9:70:5a:9c:
         1c:f2:ca:69:e0:9b:29:52:18:5b:e6:22:da:e8:67:b8:94:ca:
         f4:12:72:ae:66:a5:6b:7f:b0:ef:13:49:35:a8:d1:b7:06:45:
         59:61:6b:ea:4e:3a:0c:dd:fa:f6:b3:53:e5:84:6a:e7:ce:c8:
         50:b7:be:2e:2d:41:b3:35:b8:78:ce:97:eb:95:71:05:c7:e4:
         0d:69:1a:cc:64:b0:79:cb:bc:86:3e:26:15:9c:12:a9:9f:5b:
         5a:c0:e2:10:f2:80:ec:df:a2:d6:44:2a:1b:67:48:ab:08:e9:
         2d:b7:a8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:47:16 2025 by rpki-client