Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.mft
File:                     3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.mft (raw, json)
Hash identifier:          Fz3iq0Z08DxIFw1YYgS775/NZOxb1PcZmHkd0TiVZOY=
Subject key identifier:   5D:F1:A1:E5:F4:AE:3E:AA:B3:87:5B:17:E8:76:21:AD:14:05:57:4E
Authority key identifier: 3B:45:A4:74:FD:BC:EC:A9:4B:B8:CB:C3:6E:10:7B:C9:6D:7A:91:94
Certificate issuer:       /CN=3B45A474FDBCECA94BB8CBC36E107BC96D7A9194
Certificate serial:       555EDB77730C02221A628C781240732425367A61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.mft
Manifest number:          7F
Signing time:             Thu 03 Jul 2025 01:38:10 +0000
Manifest this update:     Thu 03 Jul 2025 01:33:10 +0000
Manifest next update:     Fri 04 Jul 2025 03:04:10 +0000
Files and hashes:         1: 3133312e302e37362e302f32332d3234203d3e203533303632.roa (hash: ccEJnmdzk8q8tgR7fGWDOlowzu6zl24JdpPspXztJMc=)
                          2: 3137302e3235342e3132362e302f32342d3234203d3e203533303632.roa (hash: BksfCh97P3skr/KAnxWeqB1LtsBmdcir2+ii7/6vkbQ=)
                          3: 34352e3233352e31362e302f32332d3234203d3e20323632333931.roa (hash: 4LCrrvQ+BOGjGSkG8ar/hsHvykbg7yIYfD3mBcm+ssY=)
                          4: 3133312e302e37382e302f32332d3234203d3e203134343537.roa (hash: B3YJT4OkSj3f3GE/IreEZUNq8elgRsldnNgOu27cKOc=)
                          5: 3230302e35332e33302e302f32342d3234203d3e203533303632.roa (hash: KJOWz0QfTo36kqaIAzKx8Eofd4TnCvjIXSc2fXKc1Nk=)
                          6: 3137302e3235342e3132342e302f32322d3232203d3e20323632333931.roa (hash: /wdGBabkw49BE93a9WdYFCunh8ac8mzDRVGZ7W4xgJ0=)
                          7: 3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.crl (hash: z7AuSu6UvN9OGtjLOL3xxcf5YmY9M3bgiZke93jrSrE=)
                          8: 3137372e3133312e3131322e302f32302d3234203d3e20323632333931.roa (hash: isZsv5SLy6qI3HVl3VZ53/pr4AHR1jWz6l8eoST0O40=)
                          9: 34352e3233352e31382e302f32342d3234203d3e203533303632.roa (hash: FT2n3Nve+4NBhm2yaO4IWr0tpgIpdTkHF//Jn+tQvyk=)
                          10: 323830343a316136343a3a2f33322d3438203d3e203134343537.roa (hash: 6iY1zndixAn5ZY1DWjuKH2RNa8ra729mfRK1iWNosQw=)
                          11: 34352e3233352e31392e302f32342d3234203d3e20323632333931.roa (hash: FP1QshehJIsDJCGVkgbgfGKGoeRUzLGdWDTrP4zBja8=)
                          12: 3230302e35332e31362e302f32302d3234203d3e20323632333931.roa (hash: obrSbo/Wnm3abygHl3opGbFbRH8Zk9dbqrGFGEdQziI=)
                          13: 3137372e3132352e3232302e302f32322d3232203d3e20323632333931.roa (hash: 1FrRKaFJEJfOFEsEvVWU1ovY7ryh64jA+ma6x3vQEnE=)
                          14: 3139302e38392e3130342e302f32322d3234203d3e20323632333931.roa (hash: dqgirgUzMJ+TScUEDKBJeQH/1qQiFwmR4IU8wOqy3EQ=)
                          15: 323830343a3863303a3a2f33322d3438203d3e20323632333931.roa (hash: YKwG00j0fRBCjw+CdOU3whAtn8J3rw+T6gUyr30+diU=)
                          16: 3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa (hash: x+HQcVXFvmO5UYRgOSxzr+KJnThCbcX3hmiJW5nzyeU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 03:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5e:db:77:73:0c:02:22:1a:62:8c:78:12:40:73:24:25:36:7a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B45A474FDBCECA94BB8CBC36E107BC96D7A9194
        Validity
            Not Before: Jul  3 01:33:10 2025 GMT
            Not After : Jul  4 03:04:10 2025 GMT
        Subject: CN=5DF1A1E5F4AE3EAAB3875B17E87621AD1405574E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:05:42:e3:8e:72:92:0d:f8:9e:f2:08:ab:e1:
                    b5:7a:f5:94:58:97:75:fd:9b:c4:9c:60:79:76:47:
                    02:63:0b:49:00:4d:fb:9e:1f:ae:5e:3a:9f:15:d2:
                    06:5a:a7:14:86:76:df:37:49:93:f0:2f:74:fd:db:
                    4a:80:9e:e9:32:cf:15:33:ba:3e:eb:80:d0:6f:c9:
                    bd:95:80:bc:04:8f:81:ff:74:9e:d4:2b:d9:20:4d:
                    4a:27:5e:38:d6:8a:70:ef:67:89:fb:2d:da:91:cb:
                    58:90:1c:ec:21:4d:82:96:1d:b0:d2:88:c6:9d:7d:
                    d3:71:8b:18:91:9a:5c:1e:fa:25:ad:03:fb:38:f7:
                    e0:a0:56:17:04:cb:2e:05:94:38:6c:cd:6a:8f:25:
                    14:83:0f:df:64:61:fc:b9:85:63:ef:98:fa:c0:c6:
                    7d:d7:84:a8:6b:ce:28:04:a0:7a:07:42:b3:5e:9c:
                    0e:98:23:44:ce:3d:70:55:e7:79:f4:85:f2:ae:78:
                    fd:58:96:f9:fa:1d:84:56:58:d9:5d:24:49:35:e0:
                    4b:2d:85:87:a0:4c:52:9d:2c:41:78:1d:45:74:14:
                    f2:4e:cf:88:36:da:85:ba:39:a6:ff:e5:14:3a:70:
                    f7:03:ad:07:c2:c0:67:4c:14:6a:d1:df:18:f6:f4:
                    19:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F1:A1:E5:F4:AE:3E:AA:B3:87:5B:17:E8:76:21:AD:14:05:57:4E
            X509v3 Authority Key Identifier:
                keyid:3B:45:A4:74:FD:BC:EC:A9:4B:B8:CB:C3:6E:10:7B:C9:6D:7A:91:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d6:26:c9:d5:63:8d:dd:d4:d9:45:2d:55:8f:55:3d:9b:66:
         be:bf:89:16:7d:06:6e:0f:b2:f1:6a:ad:c0:2a:1f:1f:2f:ce:
         81:09:8a:40:d2:27:3c:3b:0e:2e:c4:c5:63:b9:25:d1:14:df:
         11:c8:44:8c:47:de:a8:d8:48:db:86:2b:8c:81:64:2a:82:ca:
         3d:bd:cb:ac:60:d8:40:cb:be:56:9d:f6:68:dd:c6:d3:08:e3:
         2e:65:9c:8f:98:b0:5e:c5:ff:64:ca:3e:c1:0e:5b:04:cb:c8:
         0d:37:c7:22:0b:14:29:17:f4:2a:0d:f5:d2:7a:d5:8e:5c:97:
         ed:ed:f9:3b:80:66:33:ac:26:58:9b:a9:62:4c:12:3e:f8:b3:
         b7:bb:71:56:97:ce:b8:7a:28:75:61:36:b8:94:1a:bc:05:96:
         ec:bb:1f:ad:d3:d5:04:05:73:82:ce:33:0e:12:6d:44:b8:22:
         ce:75:bc:67:aa:c9:36:39:07:e2:1e:ab:92:d3:00:04:d3:86:
         87:ce:10:8c:d0:d8:88:28:64:e4:a8:08:3e:8b:9c:dc:b4:aa:
         fc:ba:ec:93:dc:63:bb:83:96:14:9a:5e:19:20:f1:a1:f6:cd:
         31:fe:f2:79:1a:c3:ed:85:36:28:43:33:7b:60:b9:a1:70:22:
         64:f5:97:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:15:58 2025 by rpki-client