Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.mft
File:                     60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.mft (raw, json)
Hash identifier:          n2V98QCB7jHuBIQkzaYr8uv0h4eK23PdbPXFWiTa7oU=
Subject key identifier:   B6:E1:D6:6F:51:E9:88:AA:E0:EC:BF:CF:52:3E:F1:D0:D1:2E:10:BC
Authority key identifier: 60:CB:1A:8F:EC:A3:BA:79:84:AB:DC:02:AD:DF:32:E3:D0:B9:FA:CE
Certificate issuer:       /CN=60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE
Certificate serial:       6A5FA87F2C4A283E18EE993628BFF75BC14CDB3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.mft
Manifest number:          4F
Signing time:             Wed 05 Nov 2025 08:08:25 +0000
Manifest this update:     Wed 05 Nov 2025 08:03:25 +0000
Manifest next update:     Thu 06 Nov 2025 11:40:25 +0000
Files and hashes:         1: 3137392e3132372e34302e302f32312d3234203d3e203532393133.roa (hash: 3XeEXdGm3FEmQIejx2o19T6QnKNhmnCEYFppYZ1rTOk=)
                          2: 3139302e3130392e38302e302f32322d3234203d3e203532393133.roa (hash: cY/EGISIvDqPzArLRiXiuQfyFMimoOe3BNRGHIlormE=)
                          3: 3136372e3234392e342e302f32322d3234203d3e203532393133.roa (hash: N9aNb5nRITMEXmQ99EkoNdxo9eOZ0P7QUmc142R3SnY=)
                          4: 323830343a313038383a3a2f33322d3438203d3e203532393133.roa (hash: axgSkmUjtBcUJhDdxY50OAl2F65WCIR0kpE7OknSiOs=)
                          5: 60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.crl (hash: A3vgNT/iu6HKn5MsygPh0XGkklfc6OTNKwlusPhGsrM=)
                          6: 3137372e32332e3136382e302f32312d3234203d3e203532393133.roa (hash: wUHEHgMMe8IV7JhvFyMRVTJBFafz4uTBCGPZ3TeIlqw=)
                          7: 3137302e3135302e37362e302f32322d3234203d3e203532393133.roa (hash: H1BpSabD7EjQpKt8GnC7GQFyTB0CtLfE3S/uH6VEQE8=)
                          8: 3137302e3234362e3136342e302f32322d3234203d3e203532393133.roa (hash: pKIlEjTJQdtfOgnsTf9kAZyFJKRBEZfwhcEAHrNiQhE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.crl
                          rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 11:40:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:5f:a8:7f:2c:4a:28:3e:18:ee:99:36:28:bf:f7:5b:c1:4c:db:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE
        Validity
            Not Before: Nov  5 08:03:25 2025 GMT
            Not After : Nov  6 11:40:25 2025 GMT
        Subject: CN=B6E1D66F51E988AAE0ECBFCF523EF1D0D12E10BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ae:da:e9:de:75:88:56:94:27:62:8a:e1:c5:
                    84:5d:e4:49:86:6a:f4:92:69:73:51:98:fd:d0:2c:
                    88:21:e4:e9:3b:58:e9:04:9e:ce:54:5c:dd:ba:dc:
                    35:be:22:e8:62:33:91:a9:34:7f:83:2f:ac:3e:ab:
                    c2:57:a2:74:fc:61:5b:60:70:d2:42:4b:26:66:6a:
                    f1:b1:1e:4d:1b:31:ed:94:0f:4a:e4:76:fd:a9:d5:
                    0e:2d:e3:9d:cf:01:c1:fb:9e:45:35:39:4c:66:ad:
                    11:18:3c:1f:19:13:0e:ef:12:7d:5e:f7:cb:6d:ad:
                    56:1a:89:7a:01:78:d1:d9:4a:a7:ee:02:e3:ba:30:
                    64:ef:4b:2a:bc:c1:19:5f:79:2f:5b:3f:83:01:13:
                    7d:af:fa:37:ae:f8:d8:3a:4c:80:06:82:bf:27:a1:
                    2b:60:b0:bc:40:63:ad:e1:f9:9f:25:8c:3b:f4:ee:
                    5d:fa:a1:35:5e:20:1b:10:da:16:62:ab:61:f8:f2:
                    f2:69:02:0f:f9:75:82:6e:98:f5:92:bd:1d:b8:0b:
                    fe:7e:26:d2:86:3b:76:10:f7:24:e2:13:d7:2e:cf:
                    fc:05:7c:7b:ec:54:f4:07:a3:90:76:c4:e6:af:28:
                    e4:d2:e5:17:f7:7c:f3:ff:96:a8:06:5a:b4:98:75:
                    70:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E1:D6:6F:51:E9:88:AA:E0:EC:BF:CF:52:3E:F1:D0:D1:2E:10:BC
            X509v3 Authority Key Identifier:
                keyid:60:CB:1A:8F:EC:A3:BA:79:84:AB:DC:02:AD:DF:32:E3:D0:B9:FA:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:af:0f:b2:e9:0b:1b:fd:c7:8d:ff:fe:28:95:8c:b9:b1:2e:
         f7:01:81:1e:3c:30:a1:fc:8d:14:84:38:12:f2:e2:a5:dd:08:
         8f:79:0e:96:ed:c1:a0:d4:19:12:2f:a4:67:0b:02:3d:c6:d0:
         82:b5:f7:b1:ef:ba:b3:f1:39:50:e9:7e:6e:cd:fa:d6:b5:da:
         3c:1a:f3:67:e9:d4:5b:54:46:d1:91:60:66:17:63:11:2f:a5:
         b4:43:68:82:aa:76:db:c5:02:a6:70:bc:73:5f:e7:c0:ba:de:
         a2:68:33:52:78:fd:1c:c0:55:a9:96:6a:46:94:a1:13:8c:bd:
         a2:4d:80:35:c1:90:ba:35:5e:6f:8a:df:b9:3c:8e:b9:19:de:
         e9:cf:78:34:9d:9a:74:57:bd:aa:1e:4d:48:57:3d:4d:9b:b7:
         51:94:58:f5:c6:ec:cc:ca:df:44:99:19:7b:bf:ec:55:ea:b9:
         0b:90:c2:19:96:64:1d:ef:69:b4:c7:fb:52:cf:6b:28:08:ef:
         cb:ab:e8:98:71:a8:89:ef:bb:da:9b:d8:b8:e9:79:d7:29:fb:
         c1:81:e6:25:cd:49:af:82:99:da:f0:fc:a8:f6:c7:55:8e:8d:
         37:01:8f:bf:c2:d0:7e:b4:f7:01:02:79:ae:84:57:0e:f0:07:
         32:e1:b7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:44:20 2025 by rpki-client