Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
File:                     3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft (raw, json)
Hash identifier:          7u1gB6rbxDcPDK8lc7Eh2VnzZhZFDmCa8wtf9Kx7Fi0=
Subject key identifier:   32:C8:2C:B9:A4:34:45:AA:B1:BE:13:33:71:E1:4B:FF:71:1E:27:C0
Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
Certificate issuer:       /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Certificate serial:       4CDCAF176E34BA41E4864A293780170C9E512D75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
Manifest number:          FE
Signing time:             Thu 19 Jun 2025 03:20:17 +0000
Manifest this update:     Thu 19 Jun 2025 03:15:17 +0000
Manifest next update:     Fri 20 Jun 2025 05:36:17 +0000
Files and hashes:         1: 3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl (hash: L8JGoR2nhgUXxTUidDgfD6V/ZX8ehxaAEf2lrGIrROo=)
                          2: 3138362e3230392e33322e302f32302d3234203d3e203533313538.roa (hash: hbNHm3JSWGn8mnXVU3f6OzBEDG47bAy239375lTILdQ=)
                          3: 34352e3138352e34382e302f32322d3234203d3e20323639333538.roa (hash: 0wG8Kdhrd/0bX9AxWy1LVhaUESlb5+tf37wS3PL0/Pk=)
                          4: 3137392e3130382e38302e302f32312d3234203d3e203533313538.roa (hash: rYYDvAwyGv1TrwvlF6zZdkFRQwmC93kFOfjgITu2fs0=)
                          5: 323830343a363336343a3a2f33322d3438203d3e20323639333538.roa (hash: VI296uwuood9h+Wd5yWEBNZhOIon7U/ZPdTISOXmtE4=)
                          6: 3138362e3230392e34382e302f32302d3234203d3e203533313538.roa (hash: C3NsvjEBF/OuANGfe1hmeqGK89abCjbSxEGpoInJIQ4=)
                          7: 3230302e3232392e38382e302f32322d3234203d3e203533313538.roa (hash: YqV0/Lhj2MxuOJ6HOw87Su9/s1ow22MaSfI8k8cZeuU=)
                          8: 323830343a6433383a3a2f33322d3438203d3e203533313538.roa (hash: ITX9zf4dR+WNiA0LigOZZoVUW70WV9yvBVhLZO4GzXk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
                          rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 05:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:dc:af:17:6e:34:ba:41:e4:86:4a:29:37:80:17:0c:9e:51:2d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
        Validity
            Not Before: Jun 19 03:15:17 2025 GMT
            Not After : Jun 20 05:36:17 2025 GMT
        Subject: CN=32C82CB9A43445AAB1BE133371E14BFF711E27C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:72:15:20:de:52:ac:7b:24:3b:c8:cb:84:dc:
                    5b:fa:df:3d:15:2e:ed:e2:ec:ba:75:01:d3:c8:81:
                    bc:8d:5b:34:ea:f9:d8:91:2a:8f:94:5b:03:1b:5c:
                    dd:a7:f8:ba:82:ed:b1:52:f6:58:df:73:88:e8:b6:
                    bc:5c:74:cd:33:5f:e7:4d:22:65:57:09:9b:7a:b1:
                    34:56:01:90:7b:27:b6:d8:61:03:2b:f4:7c:43:65:
                    dd:8f:15:2b:fb:4a:e0:d0:bb:7c:2e:cb:91:b9:69:
                    ae:82:e4:5b:72:60:06:e2:1a:d9:9d:2a:52:b7:34:
                    bc:a5:07:2c:ee:74:31:9e:ec:63:35:68:03:91:16:
                    55:fa:43:33:68:5d:98:39:19:7d:92:7c:2b:42:95:
                    d0:8c:d2:a6:e4:0c:97:af:29:39:53:ef:b5:30:b6:
                    49:a5:7c:da:62:7f:dd:22:1c:af:ed:82:8b:0a:c9:
                    a8:38:2e:e5:af:36:ed:f7:cf:e2:30:77:36:a4:4e:
                    2d:bd:63:10:7a:dd:26:3e:ad:7c:ab:91:e8:1c:09:
                    b7:a5:ea:07:1f:5e:38:2b:bd:08:fc:5b:a0:4b:2d:
                    d8:2b:cf:fc:d1:92:9c:d6:ca:d6:29:70:81:c4:08:
                    63:ec:1b:15:f0:1a:ef:7f:e5:02:9e:a1:ea:9a:e5:
                    82:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C8:2C:B9:A4:34:45:AA:B1:BE:13:33:71:E1:4B:FF:71:1E:27:C0
            X509v3 Authority Key Identifier:
                keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d7:82:13:95:1d:05:bd:d6:49:65:4a:44:da:7f:8a:05:a1:
         72:14:fc:5b:09:ef:fb:8c:6c:54:41:cb:21:37:8c:9b:a7:67:
         1e:7c:cc:e9:86:6c:f9:f5:d6:01:f8:4a:6c:d1:1c:c8:01:22:
         ab:a2:a6:f0:9d:87:ef:19:4f:a9:8c:4c:f4:9a:8d:03:b8:a1:
         e1:e1:f9:65:00:cd:95:2f:e6:55:74:05:ac:c6:b1:03:e5:ec:
         2e:42:1b:87:20:0b:28:42:a8:0e:ee:9e:89:d6:b7:cc:a9:b8:
         ae:98:e1:a6:4d:21:21:20:38:e5:2d:9d:2c:53:79:49:44:ac:
         83:ff:5b:de:ef:0d:79:20:fb:48:1c:f1:57:73:aa:cb:e9:16:
         bd:57:42:37:cb:53:9e:98:06:da:5f:f8:98:7e:2e:e8:36:91:
         cd:f2:e1:28:9d:7f:43:e4:86:db:4b:33:7d:72:6d:18:c8:50:
         67:ef:f2:03:fa:8b:87:f8:58:10:61:4a:ce:2c:62:0f:0e:67:
         36:93:e8:66:35:8c:a6:8d:46:b7:7c:07:84:b0:ab:3c:3a:4a:
         86:8e:d5:47:51:38:61:1d:74:a1:99:d7:6f:f5:5a:ac:93:a0:
         3c:df:cd:26:72:13:02:dd:51:39:19:e3:bf:d6:45:6f:d9:5b:
         0f:d0:5d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:12:39 2025 by rpki-client