Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft
File:                     60358884BF0F1C4D3024B709DD5734D538763EEC.mft (raw, json)
Hash identifier:          JmuVdI6mdAriKtzJElWwNWOpLkA96F/3kyhpP6F+sYc=
Subject key identifier:   7A:FF:F8:F5:68:43:C6:28:2F:24:B1:9C:FF:18:7D:2D:9E:66:98:A9
Authority key identifier: 60:35:88:84:BF:0F:1C:4D:30:24:B7:09:DD:57:34:D5:38:76:3E:EC
Certificate issuer:       /CN=60358884BF0F1C4D3024B709DD5734D538763EEC
Certificate serial:       199894E02D08D8D6B9879A65BDB3272BB8EC9B35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60358884BF0F1C4D3024B709DD5734D538763EEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft
Manifest number:          1F
Signing time:             Mon 20 Oct 2025 16:22:01 +0000
Manifest this update:     Mon 20 Oct 2025 16:17:01 +0000
Manifest next update:     Tue 21 Oct 2025 18:23:01 +0000
Files and hashes:         1: 60358884BF0F1C4D3024B709DD5734D538763EEC.crl (hash: YEQubKtKZt7W9FTxbJjSJTMdpUamt/Ewj5CgbMEujzw=)
                          2: 323830343a383234383a3a2f33322d3438203d3e20323732353130.roa (hash: FuLRg2mQnQb4bhpiLaVmWlnozUB8vSOFoWM8uHkcM+A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.crl
                          rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60358884BF0F1C4D3024B709DD5734D538763EEC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:98:94:e0:2d:08:d8:d6:b9:87:9a:65:bd:b3:27:2b:b8:ec:9b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60358884BF0F1C4D3024B709DD5734D538763EEC
        Validity
            Not Before: Oct 20 16:17:01 2025 GMT
            Not After : Oct 21 18:23:01 2025 GMT
        Subject: CN=7AFFF8F56843C6282F24B19CFF187D2D9E6698A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:81:a9:0f:da:0e:fb:67:81:c5:66:06:96:
                    af:05:f1:83:b7:ce:2b:f9:1f:72:e1:9f:3f:ad:de:
                    0b:b5:b3:8e:64:bb:5c:c4:82:93:3b:d4:30:97:56:
                    75:f3:b8:fc:ae:a5:bc:37:0c:a9:8e:0b:22:6a:23:
                    00:46:a8:b0:27:24:89:2f:16:08:fb:06:d4:f6:5c:
                    1f:20:7c:b5:fd:cb:2e:fb:78:b1:38:c8:09:ca:25:
                    46:da:0b:da:9c:5d:75:49:37:e8:5d:a3:5c:45:79:
                    02:64:dd:20:5e:58:16:33:49:9c:1f:9b:fc:84:d6:
                    c5:a2:80:9d:78:8e:80:87:7f:1f:e6:63:d8:2e:35:
                    60:ff:d4:04:ec:68:b3:5b:3c:78:dc:65:f7:1c:01:
                    c7:c3:4d:ed:20:b9:6c:b1:49:d4:96:6e:de:ce:31:
                    e7:f2:46:64:bf:fb:5e:73:62:9f:b4:71:f2:95:ff:
                    85:15:d6:10:21:75:fc:fa:16:65:02:5a:fd:09:1c:
                    39:4b:b0:a9:74:da:2e:ea:c3:b8:94:a3:a0:a3:ce:
                    1c:27:70:f5:18:c7:62:ba:2f:8d:a4:76:02:d8:e5:
                    4e:96:de:c1:00:1f:15:ed:90:f4:e4:c7:bb:b9:0e:
                    b5:3e:54:68:6d:45:93:5f:1a:4b:61:19:25:d6:f5:
                    2d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FF:F8:F5:68:43:C6:28:2F:24:B1:9C:FF:18:7D:2D:9E:66:98:A9
            X509v3 Authority Key Identifier:
                keyid:60:35:88:84:BF:0F:1C:4D:30:24:B7:09:DD:57:34:D5:38:76:3E:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60358884BF0F1C4D3024B709DD5734D538763EEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b0:b7:a2:17:45:60:31:62:2e:89:76:2c:b7:7b:34:db:be:
         c6:7e:43:c4:da:fd:0d:90:59:8e:1f:46:cd:42:cd:b0:72:3d:
         91:48:dd:90:a8:cb:77:a7:79:8c:75:5f:05:e0:d9:f3:5b:ae:
         70:2b:f7:27:57:cf:cb:f0:52:ab:15:71:8e:67:47:41:4e:fc:
         a8:43:e3:20:34:35:02:8f:87:89:8a:c0:2f:8d:f8:7d:e9:0e:
         e4:96:31:c6:a3:ba:ce:a1:64:20:a1:7a:0b:25:8a:47:3a:56:
         d7:48:44:db:dc:a4:2c:39:2f:9f:bf:9e:55:10:6f:a1:ba:3c:
         f3:60:81:c7:97:00:e1:fa:1e:42:7d:78:1d:45:73:ef:5a:87:
         7c:be:70:22:35:5c:72:72:9b:83:cb:f6:2c:61:26:e1:72:e2:
         dd:eb:d0:52:8e:9c:f2:61:f9:37:5b:1a:00:58:fb:a2:e8:33:
         e3:25:8b:5c:b4:ba:e7:08:02:d3:45:44:bd:e8:04:0c:95:8a:
         7a:d5:b6:0a:03:4a:57:fb:3a:5b:b2:bb:d1:dc:d0:67:f7:cb:
         70:f0:35:9a:7d:19:b1:4d:86:47:04:01:f3:a6:a1:ce:5d:80:
         5a:d1:9a:b1:a6:b9:51:45:37:38:46:8c:cc:49:a4:03:38:02:
         84:3f:c4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:55:39 2025 by rpki-client