Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
File:                     3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft (raw, json)
Hash identifier:          jj+pWBOW7Fl2OOtWESN0ncE6OxU38oz0PsWJe0k17OA=
Subject key identifier:   5B:04:ED:54:76:90:B6:5B:24:EC:22:FF:A7:39:33:5A:BA:91:C1:20
Authority key identifier: 3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Certificate issuer:       /CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
Certificate serial:       2FCE1FEB3B880EC5279C0545ABDEEC02EC990C42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
Manifest number:          025D
Signing time:             Tue 01 Jul 2025 13:50:00 +0000
Manifest this update:     Tue 01 Jul 2025 13:45:00 +0000
Manifest next update:     Wed 02 Jul 2025 15:06:00 +0000
Files and hashes:         1: 34352e3136392e3230312e302f32342d3234203d3e20323638313337.roa (hash: X9NRdaPA/67Q3rg40/uJRlEJG3ESvFv49iLV4v0EXoI=)
                          2: 34352e3136392e3230302e302f32332d3233203d3e20323638313337.roa (hash: PqhuJKMxhknh/zSUWtlU58E7lJnTuQM0XRIQnd5fkWs=)
                          3: 323830343a353839343a3a2f33342d3334203d3e20323638313337.roa (hash: EsH33qZ0n5WHemEgPltsCizFjkzBHpHH/BQRdbVjCYU=)
                          4: 34352e3136392e3230322e302f32342d3234203d3e20323638313337.roa (hash: 8sE3+lB4qTVhhtM1NIU4VQWHMQtlI35NvIrHgZOfEwY=)
                          5: 34352e3136392e3230302e302f32342d3234203d3e20323638313337.roa (hash: 4cwBoGO5u7hU98/s5wTNDyZ1Fsf/hsPwm87bc/KCyUw=)
                          6: 34352e3136392e3230322e302f32332d3233203d3e20323638313337.roa (hash: +EmvEpwlzci+3qxsGRNVmMt9dMHW0tFOyBr4jcr9pKE=)
                          7: 3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl (hash: /pDb8SsFJGxOux0k8SxTpjNP3PAvm0/5+2/u1ZM3300=)
                          8: 323830343a353839343a633030303a3a2f33342d3334203d3e20323638313337.roa (hash: JVC/u3FRdrND4dm0UTY3BsYwshuc3phA3+UmF203Vjg=)
                          9: 34352e3136392e3230302e302f32322d3232203d3e20323638313337.roa (hash: FvWmITQ8RemY4i4QO5Cy/WeYmWvU4PgTXnv7ANkNIac=)
                          10: 323830343a353839343a383030303a3a2f33342d3334203d3e20323638313337.roa (hash: ibpKzGLBhdMOnQXrZXah2wzdNkXLRH1QXQLXsrxUGUI=)
                          11: 323830343a353839343a343030303a3a2f33342d3334203d3e20323638313337.roa (hash: p1/VmojSdIc1qQpUP18UbyYfNp+p/paRq33apEp/AjE=)
                          12: 323830343a353839343a3a2f33322d3332203d3e20323638313337.roa (hash: ZncDmcAcmVngk0k7rmyCWcOwvgcmWcP/2o1TDjTZmhw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl
                          rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ce:1f:eb:3b:88:0e:c5:27:9c:05:45:ab:de:ec:02:ec:99:0c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Validity
            Not Before: Jul  1 13:45:00 2025 GMT
            Not After : Jul  2 15:06:00 2025 GMT
        Subject: CN=5B04ED547690B65B24EC22FFA739335ABA91C120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b0:05:a9:20:6a:20:3d:3b:b7:03:91:dd:82:
                    78:07:9f:ec:d4:65:e6:0f:51:ab:6e:04:7e:58:a7:
                    d7:8a:c0:b3:dd:80:ff:4d:d4:a2:27:cb:b0:60:73:
                    4b:46:a0:67:c2:22:9d:f1:c9:9d:0f:21:c5:1e:b0:
                    87:4a:f6:87:7c:22:27:bf:45:72:f2:ea:06:5c:0e:
                    5d:fb:06:e6:0d:1f:8b:b1:51:c8:ef:d9:03:5d:1e:
                    42:e2:f9:a0:98:a7:25:2a:f0:b3:bb:44:c4:15:73:
                    4c:fd:6f:a2:f2:25:37:a1:1d:77:b1:7c:6b:41:6a:
                    96:d0:19:72:8b:74:c9:88:4a:9b:83:b4:84:f1:69:
                    9a:3f:28:cb:24:26:53:67:18:e0:d7:0b:ce:7c:18:
                    0d:de:ab:c7:d2:ae:fb:62:ce:47:4e:bb:70:51:14:
                    05:c2:cb:71:cd:54:d1:36:5a:a7:e9:d3:d2:84:e1:
                    66:fd:9e:da:d4:96:5e:72:d7:16:2b:17:46:5c:e8:
                    0c:fb:e0:ee:6d:64:d9:5f:da:4b:c9:cc:d1:c7:e3:
                    86:d7:5e:7d:4d:6f:8c:f7:14:0d:03:b7:76:01:53:
                    bf:3c:94:aa:e1:47:34:1c:52:30:73:ae:2f:8d:5e:
                    6a:a5:bf:94:ce:9b:d7:76:95:9d:10:c3:7a:67:19:
                    92:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:04:ED:54:76:90:B6:5B:24:EC:22:FF:A7:39:33:5A:BA:91:C1:20
            X509v3 Authority Key Identifier:
                keyid:3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:3a:37:74:df:b9:19:60:ea:72:7d:38:97:fa:ba:5a:d0:c3:
         5d:ab:bd:47:72:df:84:59:2a:94:12:a3:0c:be:34:2d:45:f2:
         5a:78:4d:a3:59:67:57:10:11:0c:77:67:81:3f:c2:5a:ea:b3:
         93:bd:9c:3b:ec:3f:ce:7f:be:0a:b5:5e:19:e2:81:2f:23:04:
         62:4a:3f:d6:47:ad:0f:ff:db:49:51:b8:97:a2:d3:40:35:60:
         d1:6c:0e:d2:89:f2:29:9c:b3:19:1d:9f:7e:dc:69:f3:2e:4b:
         05:11:ac:04:1e:01:aa:11:e8:10:da:17:40:48:51:ee:ea:84:
         88:1f:c6:1c:fe:c8:8c:d9:6b:f1:3f:1f:af:65:31:6f:d5:bf:
         bc:90:d4:33:9e:12:cf:9d:06:b4:43:49:43:5f:3f:39:c0:13:
         1f:aa:3b:36:8a:3d:9d:16:fc:92:06:6e:71:14:66:a6:18:6b:
         4c:d6:8e:f3:9a:d0:52:20:31:86:8a:6a:33:80:e5:1c:e7:6f:
         4f:99:b3:6d:7f:6f:fa:f6:a0:fc:4d:4f:54:1c:34:40:23:21:
         62:07:36:d1:05:b0:56:c5:87:7f:3e:e5:a6:4f:5d:4f:61:fe:
         3c:74:29:e4:3b:32:6c:31:81:2f:d5:42:67:6f:d4:b8:cf:77:
         a4:d0:bf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:08:45 2025 by rpki-client