Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft
File:                     60358884BF0F1C4D3024B709DD5734D538763EEC.mft (raw, json)
Hash identifier:          aYy+EmFQRpr7RDL2r+023yjIy1SKHJ7vefkDSRp6Ewk=
Subject key identifier:   B5:46:AD:BE:E7:B7:48:30:60:47:4E:1F:E3:0E:89:C5:71:65:F5:9E
Authority key identifier: 60:35:88:84:BF:0F:1C:4D:30:24:B7:09:DD:57:34:D5:38:76:3E:EC
Certificate issuer:       /CN=60358884BF0F1C4D3024B709DD5734D538763EEC
Certificate serial:       75878AFEDA90730DA4B704CC7062BF2B0F13790B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60358884BF0F1C4D3024B709DD5734D538763EEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft
Manifest number:          34
Signing time:             Wed 05 Nov 2025 06:52:01 +0000
Manifest this update:     Wed 05 Nov 2025 06:47:01 +0000
Manifest next update:     Thu 06 Nov 2025 09:44:01 +0000
Files and hashes:         1: 323830343a383234383a3a2f33322d3438203d3e20323732353130.roa (hash: FuLRg2mQnQb4bhpiLaVmWlnozUB8vSOFoWM8uHkcM+A=)
                          2: 60358884BF0F1C4D3024B709DD5734D538763EEC.crl (hash: yi/Kp0p7/qgDQv6unGggkB3PgZHUVsssZXvbwWnscb8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.crl
                          rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60358884BF0F1C4D3024B709DD5734D538763EEC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 09:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:87:8a:fe:da:90:73:0d:a4:b7:04:cc:70:62:bf:2b:0f:13:79:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60358884BF0F1C4D3024B709DD5734D538763EEC
        Validity
            Not Before: Nov  5 06:47:01 2025 GMT
            Not After : Nov  6 09:44:01 2025 GMT
        Subject: CN=B546ADBEE7B7483060474E1FE30E89C57165F59E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7b:36:d0:99:ce:aa:94:f0:4b:79:75:bd:af:
                    5f:5e:41:2c:42:b5:78:d7:17:20:f8:ec:1b:e8:f7:
                    52:92:e4:72:a9:20:dd:a5:a1:42:57:7b:a9:13:df:
                    9b:0c:c9:46:c0:61:f4:d5:06:b2:66:22:3f:8c:32:
                    9f:cf:fb:94:bf:40:25:f9:97:13:9b:bb:49:99:0a:
                    65:19:15:9e:ce:56:93:e6:94:22:ea:a2:77:8e:c1:
                    f4:6d:a4:b3:08:03:46:3d:ca:2f:0f:a2:db:4e:30:
                    a6:b2:89:d3:b0:1d:31:93:95:8b:1c:07:60:73:6d:
                    79:c9:72:70:ee:98:25:b7:94:98:45:51:af:49:b3:
                    0b:79:e9:4d:56:64:1b:61:b4:f4:af:47:2a:52:64:
                    7f:73:93:a0:ce:e7:ad:8e:6b:80:c7:5f:f6:c4:51:
                    25:3f:59:82:0b:5a:36:7a:0b:fe:9e:97:24:8a:16:
                    f1:25:23:14:1e:3d:3f:fc:77:df:1d:1f:6c:eb:cf:
                    44:67:bb:3d:c6:2d:91:db:19:17:e5:a4:92:7a:99:
                    5f:9f:c8:19:68:84:93:2e:b2:77:a5:08:c5:69:99:
                    e1:05:ea:ec:39:95:eb:9a:80:59:ee:53:88:ce:ef:
                    03:97:4e:74:31:eb:80:d4:cf:2b:cf:46:46:c4:3d:
                    d6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:46:AD:BE:E7:B7:48:30:60:47:4E:1F:E3:0E:89:C5:71:65:F5:9E
            X509v3 Authority Key Identifier:
                keyid:60:35:88:84:BF:0F:1C:4D:30:24:B7:09:DD:57:34:D5:38:76:3E:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60358884BF0F1C4D3024B709DD5734D538763EEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:fd:37:58:f1:d8:53:ba:ff:41:cc:2a:bb:68:4f:db:33:66:
         35:af:ed:cc:cb:db:5a:fb:fe:48:61:c1:a1:99:7c:4a:31:d6:
         1c:c1:34:90:9c:11:dd:0d:f4:10:2d:4f:eb:d0:2a:2c:c7:a9:
         71:e0:8d:68:62:61:7b:d8:44:3e:48:47:18:03:02:3c:8e:2b:
         6e:9b:74:10:a3:e7:a0:2e:c1:38:00:09:9e:83:17:a8:2e:21:
         fa:f1:13:8c:b8:46:95:fe:c8:47:a2:ed:a9:60:42:7a:6d:b4:
         a2:54:00:c9:f9:f8:6a:0c:3f:a1:62:bd:37:d5:28:db:c9:6a:
         6e:cb:45:9d:bd:ab:d9:d6:6d:97:a3:f8:ce:6e:4f:ef:a9:ae:
         31:58:86:3f:0d:cb:6e:6c:21:4d:dd:f1:7c:fc:b4:ae:69:56:
         f2:da:18:2a:a9:63:14:b7:44:7f:fb:67:b5:13:00:6f:5f:9e:
         47:09:f9:02:c7:4c:5d:0b:f3:de:aa:dd:05:68:5d:53:30:cc:
         e0:f5:d7:aa:f5:17:62:71:65:ac:98:50:6e:5f:2b:d2:b7:ad:
         18:1c:6b:07:f9:ec:b1:a0:3f:d1:cb:74:ba:f5:45:67:5a:4e:
         40:c3:64:b9:37:08:0a:d5:d2:7c:a7:c4:06:1b:75:87:48:14:
         24:be:ae:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:12:15 2025 by rpki-client