Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.mft
File:                     3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.mft (raw, json)
Hash identifier:          wrmMwiqsxvbwQBDNeHfSNvJN4uaul9l4I7AQTbxPjII=
Subject key identifier:   23:C7:42:F8:D7:5C:59:F5:19:0F:E4:84:0B:EF:8A:62:AD:D0:E2:EE
Authority key identifier: 3C:0F:B6:F8:3D:6C:A4:9D:A6:6C:B1:CE:15:9A:49:38:5C:83:0F:FE
Certificate issuer:       /CN=3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE
Certificate serial:       54175BD5E013D2170083245A686731048986CFEC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.mft
Manifest number:          025D
Signing time:             Mon 30 Jun 2025 23:09:57 +0000
Manifest this update:     Mon 30 Jun 2025 23:04:57 +0000
Manifest next update:     Wed 02 Jul 2025 02:23:57 +0000
Files and hashes:         1: 3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.crl (hash: QYA70QbVF1b3YqWnwgko3lRIDISh0szpDaKpp6I0wbM=)
                          2: 323830343a386235383a3a2f33322d313238203d3e20323733373237.roa (hash: /FOAutYWZzsnbWC4Nqdxqv/tDu+98Wh+rhe0TZEfFrI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.crl
                          rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 02:23:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:17:5b:d5:e0:13:d2:17:00:83:24:5a:68:67:31:04:89:86:cf:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE
        Validity
            Not Before: Jun 30 23:04:57 2025 GMT
            Not After : Jul  2 02:23:57 2025 GMT
        Subject: CN=23C742F8D75C59F5190FE4840BEF8A62ADD0E2EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:20:22:0e:a2:6a:16:e3:4e:18:72:18:00:0d:
                    3a:22:6a:b8:32:64:39:be:6a:b8:aa:07:33:19:ab:
                    1b:19:f0:75:f4:c6:46:2d:07:24:90:fb:68:bd:27:
                    95:f9:e7:36:a2:e8:a0:15:24:20:07:42:81:06:71:
                    e9:8e:e5:09:21:68:4e:29:e3:ea:17:08:5c:f7:dc:
                    a7:8c:e5:95:fa:29:ba:3e:9b:9e:04:43:8c:f0:8e:
                    0b:94:c4:7f:a1:e2:04:51:4c:17:cc:23:63:f7:88:
                    be:bf:f9:ab:6e:c7:1e:06:41:d3:f8:12:24:b8:d9:
                    c6:ce:f9:a9:a2:d2:61:41:88:92:a3:09:c5:08:bb:
                    70:00:ae:31:0d:8c:76:df:60:6b:7c:44:e8:d1:86:
                    7a:c4:9b:06:ad:ca:1d:3d:22:f0:67:a5:a4:15:69:
                    33:ea:ff:b1:55:6b:d4:69:8b:d1:54:24:d1:3f:69:
                    ba:ba:ce:41:a1:52:c6:4a:27:af:f9:c8:25:87:51:
                    a3:c3:0c:11:77:dc:2d:80:9d:34:e2:91:72:b3:51:
                    f3:40:09:6b:17:21:86:1f:77:7b:75:07:74:bf:ea:
                    ba:64:8e:b2:8f:a5:37:5f:1a:46:1c:e2:74:8b:85:
                    b1:29:4a:47:3a:e0:2e:21:50:27:a0:c7:7a:68:6b:
                    f9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C7:42:F8:D7:5C:59:F5:19:0F:E4:84:0B:EF:8A:62:AD:D0:E2:EE
            X509v3 Authority Key Identifier:
                keyid:3C:0F:B6:F8:3D:6C:A4:9D:A6:6C:B1:CE:15:9A:49:38:5C:83:0F:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:77:10:24:fe:95:70:59:11:5e:b0:92:f8:64:0e:38:16:2f:
         2f:5d:1b:97:30:e2:de:3d:5f:46:78:a2:e3:ce:43:c4:0b:fc:
         86:d4:0b:82:c1:e0:aa:7f:60:ce:48:42:b8:a2:4b:74:0e:28:
         a6:0f:39:ca:7d:5b:60:5e:21:5c:53:35:7d:bc:9b:13:d6:46:
         aa:c2:54:05:04:6f:ea:6c:88:dd:1a:fc:fe:c5:51:cf:e5:a9:
         d2:af:82:8b:ed:e5:09:d0:4c:0b:fe:d7:6e:aa:0f:5f:cb:ec:
         55:8d:74:45:b3:e7:b5:47:e1:2b:50:f3:cf:7a:4a:c6:c1:67:
         6e:26:1e:c5:ce:46:5e:b7:87:80:74:ff:44:b7:d1:e3:27:22:
         0a:e8:af:9c:6e:35:94:98:84:2e:94:79:3f:12:81:7c:3a:0e:
         5f:20:0f:e2:14:72:fd:48:f0:6b:d2:bd:da:7d:97:93:05:c8:
         2f:a3:97:c5:94:1e:75:b9:39:91:6d:c0:19:f3:64:9d:a5:44:
         8a:af:01:48:00:06:fa:81:f0:e0:bc:02:9e:8a:92:0b:f5:bf:
         e3:e0:67:6f:0c:d7:bc:e2:05:e1:28:6a:fc:96:9e:14:03:d5:
         d7:6a:37:a1:fb:ac:36:1e:2f:e6:1f:da:3b:90:ff:5d:bf:05:
         ec:3d:76:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVBdb1eAT0hcAgyRaaGcxBImGz+wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MwRkI2RjgzRDZDQTQ5REE2NkNCMUNFMTU5QTQ5Mzg1
QzgzMEZGRTAeFw0yNTA2MzAyMzA0NTdaFw0yNTA3MDIwMjIzNTdaMDMxMTAvBgNV
BAMTKDIzQzc0MkY4RDc1QzU5RjUxOTBGRTQ4NDBCRUY4QTYyQUREMEUyRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnICIOomoW404YchgADToiargy
ZDm+ariqBzMZqxsZ8HX0xkYtBySQ+2i9J5X55zai6KAVJCAHQoEGcemO5QkhaE4p
4+oXCFz33KeM5ZX6Kbo+m54EQ4zwjguUxH+h4gRRTBfMI2P3iL6/+atuxx4GQdP4
EiS42cbO+ami0mFBiJKjCcUIu3AArjENjHbfYGt8ROjRhnrEmwatyh09IvBnpaQV
aTPq/7FVa9Rpi9FUJNE/abq6zkGhUsZKJ6/5yCWHUaPDDBF33C2AnTTikXKzUfNA
CWsXIYYfd3t1B3S/6rpkjrKPpTdfGkYc4nSLhbEpSkc64C4hUCegx3poa/ndAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUI8dC+NdcWfUZD+SEC++KYq3Q4u4wHwYDVR0j
BBgwFoAUPA+2+D1spJ2mbLHOFZpJOFyDD/4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFhzNjlYejFXQktqSlNGYWVneDlwb29HUFkzd2N3anNWUG9Eem1ZSjk2
ek0vMS8zQzBGQjZGODNENkNBNDlEQTY2Q0IxQ0UxNTlBNDkzODVDODMwRkZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDMEZCNkY4M0Q2Q0E0OURB
NjZDQjFDRTE1OUE0OTM4NUM4MzBGRkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SFhzNjlYejFXQktqSlNGYWVneDlwb29HUFkzd2N3anNWUG9Eem1ZSjk2ek0vMS8z
QzBGQjZGODNENkNBNDlEQTY2Q0IxQ0UxNTlBNDkzODVDODMwRkZFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhHcQJP6VcFkRXrCS+GQOOBYvL10blzDi3j1fRnii485DxAv8htQLgsHgqn9g
zkhCuKJLdA4opg85yn1bYF4hXFM1fbybE9ZGqsJUBQRv6myI3Rr8/sVRz+Wp0q+C
i+3lCdBMC/7XbqoPX8vsVY10RbPntUfhK1Dzz3pKxsFnbiYexc5GXreHgHT/RLfR
4yciCuivnG41lJiELpR5PxKBfDoOXyAP4hRy/Ujwa9K92n2XkwXIL6OXxZQedbk5
kW3AGfNknaVEiq8BSAAG+oHw4LwCnoqSC/W/4+BnbwzXvOIF4Shq/JaeFAPV12o3
ofusNh4v5h/aO5D/Xb8F7D12+A==
-----END CERTIFICATE-----
Generated at Tue Jul 1 09:44:15 2025 by rpki-client