Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
File:                     3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft (raw, json)
Hash identifier:          A+C+p/57IbuxAKmX/Yk4tQsKQVmknH/YSscF5fRhA2U=
Subject key identifier:   67:4F:9B:DD:5C:35:E7:D7:8C:63:B9:B5:9C:25:DA:9A:CD:CF:64:5D
Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
Certificate issuer:       /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Certificate serial:       3902A1299C40A4A2EF040C6AC19EE681D12EB47D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
Manifest number:          0253
Signing time:             Mon 02 Mar 2026 00:41:28 +0000
Manifest this update:     Mon 02 Mar 2026 00:36:28 +0000
Manifest next update:     Tue 03 Mar 2026 02:02:28 +0000
Files and hashes:         1: 3138362e3230392e33322e302f32302d3234203d3e203533313538.roa (hash: EKqdQFIheFPrygqIVnqpg9rmQepPLJCHCnxqkhoBtbc=)
                          2: 323830343a363336343a3a2f33322d3438203d3e20323639333538.roa (hash: y69Is5luUmXcZxNE3bqqFfTIRfDYtQZ9bTwKiEy/7ps=)
                          3: 3138362e3230392e34382e302f32302d3234203d3e203533313538.roa (hash: CyzTzT4126u5822CNIUl3acuE72zxftAppkFEtFEpFI=)
                          4: 3137392e3130382e38302e302f32312d3234203d3e203533313538.roa (hash: nu55xWeT9yQOed/eFbtXZTB95jZKYQjcNmdN0inIWHQ=)
                          5: 323830343a6433383a3a2f33322d3438203d3e203533313538.roa (hash: ncsphoZ09smyapKDgZA2FUw/VNkNQ4ipQW+O5b1GSMM=)
                          6: 3230302e3232392e38382e302f32322d3234203d3e203533313538.roa (hash: uLO5TLoSKSJ1ibbAmrisrwOcWSkRjyjU06VO251FdHw=)
                          7: 34352e3138352e34382e302f32322d3234203d3e20323639333538.roa (hash: bvUq85Wh8ftDOyg/8+3jZmE0gxoPfowoMhAClMGAt2E=)
                          8: 3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl (hash: lE40JzwON4gugMdOhhZCaQLBfSGxxsNUDs5kmJj9fRI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
                          rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 02:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:02:a1:29:9c:40:a4:a2:ef:04:0c:6a:c1:9e:e6:81:d1:2e:b4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
        Validity
            Not Before: Mar  2 00:36:28 2026 GMT
            Not After : Mar  3 02:02:28 2026 GMT
        Subject: CN=674F9BDD5C35E7D78C63B9B59C25DA9ACDCF645D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:42:11:e4:93:42:5f:c8:fe:8d:50:72:8d:07:
                    0b:d3:b6:5e:c6:3c:e8:d1:1a:78:7d:18:d8:d4:62:
                    60:d6:2e:7b:8d:29:27:47:cb:74:e3:24:ec:99:fd:
                    bd:fa:67:f0:86:96:3e:f7:90:e0:65:0d:c7:fd:d7:
                    6a:b2:94:8c:c6:bc:4b:79:6b:1d:ec:2e:57:3e:9a:
                    e3:d0:01:90:29:a8:dc:3d:8c:ba:3a:65:c8:59:3a:
                    dd:70:50:1d:07:b7:cd:4c:0f:59:7f:ec:a8:12:65:
                    a8:6f:15:66:7b:a2:ba:37:fe:e2:f4:aa:08:58:ef:
                    0c:f9:2a:66:8b:82:a2:c8:9a:de:d1:8e:23:30:c4:
                    1c:1c:dd:66:23:a0:d7:16:d5:00:15:dd:87:07:f8:
                    15:df:70:84:c1:ea:2a:b4:66:31:f4:e0:4a:b7:29:
                    38:3a:7f:d7:db:2f:80:6a:36:9e:3e:96:f0:21:cb:
                    49:9e:0c:a7:f7:09:cf:8f:a8:b8:c7:17:fe:bc:40:
                    57:4a:be:90:e1:cc:43:21:cd:bf:95:58:ba:59:02:
                    21:e8:e1:64:b7:7d:b4:23:f0:78:23:5a:d0:c7:fc:
                    96:30:43:a9:71:9e:30:9e:fe:8e:c8:41:ac:0b:f8:
                    2a:6d:ab:dd:0b:b7:b9:9d:2f:16:a7:e4:2a:df:7d:
                    3b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4F:9B:DD:5C:35:E7:D7:8C:63:B9:B5:9C:25:DA:9A:CD:CF:64:5D
            X509v3 Authority Key Identifier:
                keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:32:45:05:52:45:8e:c1:7b:a3:d6:7a:bd:9e:4c:89:61:01:
         58:b4:06:1b:51:ff:60:db:4f:14:99:9b:b4:29:2f:b4:53:2d:
         2f:f6:a9:66:6f:8d:07:58:c8:08:2e:0f:f7:b2:2d:94:a4:4f:
         9c:e2:18:e9:d5:55:46:80:fa:ab:eb:92:ad:c0:39:01:c4:f5:
         73:1e:e2:b2:ba:97:14:de:90:1c:ae:79:bd:a3:6c:aa:76:95:
         fa:cb:62:97:1c:3f:7c:5f:17:57:11:45:06:f9:e8:2d:11:6b:
         05:ef:fb:1f:92:4c:a4:85:9d:e7:ba:ac:7b:7b:03:8c:36:6d:
         b1:2a:62:d8:15:4f:e3:17:dc:3a:ff:81:d1:09:f5:9a:5b:9e:
         0e:9b:12:86:d9:82:2f:09:bf:86:66:78:9c:ec:ca:4c:f0:c4:
         60:66:1c:0f:67:e3:10:c9:75:49:54:5a:66:b0:e8:8b:6e:db:
         99:ac:a2:07:8a:ac:e2:36:cf:1e:77:7c:c3:92:52:45:e0:97:
         be:91:3e:20:ea:73:7b:d3:45:fd:f3:be:3e:54:63:ed:9c:e4:
         45:b9:ff:e2:60:0f:b2:4d:43:35:8d:ae:89:50:f1:64:6f:2d:
         7a:e1:19:d3:a2:37:d3:e9:e9:5e:d9:6c:22:67:ea:b9:7e:29:
         6c:f9:3a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:33 2026 by rpki-client