Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
File:                     3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft (raw, json)
Hash identifier:          VTW4U6GuNIEqJtHy3EmkmqMY+rqEXpLKsHG6i6V1E2c=
Subject key identifier:   E4:79:C3:17:63:B3:53:D4:B1:8C:76:DC:FF:02:80:C3:FE:CF:24:EF
Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
Certificate issuer:       /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Certificate serial:       647B4385F35DCE9DA8F2E99976716B5FB20A3656
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
Manifest number:          CC
Signing time:             Mon 12 May 2025 23:43:18 +0000
Manifest this update:     Mon 12 May 2025 23:38:18 +0000
Manifest next update:     Tue 13 May 2025 23:58:18 +0000
Files and hashes:         1: 3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl (hash: k9+d15cxH7ThtQ/O+iPeru9vdx3NZG8zoSu+6VKqm6A=)
                          2: 3230302e3232392e38382e302f32322d3234203d3e203533313538.roa (hash: YqV0/Lhj2MxuOJ6HOw87Su9/s1ow22MaSfI8k8cZeuU=)
                          3: 323830343a363336343a3a2f33322d3438203d3e20323639333538.roa (hash: VI296uwuood9h+Wd5yWEBNZhOIon7U/ZPdTISOXmtE4=)
                          4: 323830343a6433383a3a2f33322d3438203d3e203533313538.roa (hash: ITX9zf4dR+WNiA0LigOZZoVUW70WV9yvBVhLZO4GzXk=)
                          5: 3138362e3230392e33322e302f32302d3234203d3e203533313538.roa (hash: hbNHm3JSWGn8mnXVU3f6OzBEDG47bAy239375lTILdQ=)
                          6: 3138362e3230392e34382e302f32302d3234203d3e203533313538.roa (hash: C3NsvjEBF/OuANGfe1hmeqGK89abCjbSxEGpoInJIQ4=)
                          7: 34352e3138352e34382e302f32322d3234203d3e20323639333538.roa (hash: 0wG8Kdhrd/0bX9AxWy1LVhaUESlb5+tf37wS3PL0/Pk=)
                          8: 3137392e3130382e38302e302f32312d3234203d3e203533313538.roa (hash: rYYDvAwyGv1TrwvlF6zZdkFRQwmC93kFOfjgITu2fs0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
                          rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 23:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:7b:43:85:f3:5d:ce:9d:a8:f2:e9:99:76:71:6b:5f:b2:0a:36:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
        Validity
            Not Before: May 12 23:38:18 2025 GMT
            Not After : May 13 23:58:18 2025 GMT
        Subject: CN=E479C31763B353D4B18C76DCFF0280C3FECF24EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:12:0a:ee:9d:ba:30:42:e9:e1:1a:98:70:95:
                    da:d6:ea:1b:5a:1f:4d:07:3d:f1:01:5c:04:3c:61:
                    5c:e6:f2:4a:8b:90:eb:f2:6e:e7:75:7d:5f:ac:5c:
                    f1:e3:16:02:5b:cb:17:06:1e:0f:c0:c9:08:f5:c4:
                    1a:ac:e6:10:14:29:7c:53:20:45:59:88:e1:65:c5:
                    31:d0:9e:e5:29:e0:a6:f1:59:a7:ed:b0:81:aa:c4:
                    5a:66:0d:75:66:10:ec:10:cb:04:f8:ca:ec:bb:5d:
                    66:05:43:dc:ff:29:62:41:48:f3:34:bf:6e:56:76:
                    1e:00:d7:85:ed:2d:8b:c5:ba:dd:5a:a0:b9:dc:4c:
                    76:48:9e:3f:b8:87:cc:be:c6:ac:5a:e2:cb:8d:23:
                    d9:a9:54:81:b3:06:62:d7:c3:b0:e8:5b:c4:66:f8:
                    37:b8:d2:1f:55:89:4c:b1:4b:f3:27:35:bd:01:5a:
                    9c:47:1e:42:b4:ea:e3:6f:26:56:99:77:13:a1:95:
                    c9:cb:b9:14:43:92:61:a3:86:fc:45:4e:ba:a7:09:
                    46:00:6b:3a:97:48:c8:d7:66:2d:1d:50:2e:80:74:
                    d7:54:dc:87:a6:f0:71:e4:8d:30:15:70:09:9c:60:
                    4c:4b:dd:41:62:00:8d:33:60:1c:19:4c:3e:d9:e0:
                    94:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:79:C3:17:63:B3:53:D4:B1:8C:76:DC:FF:02:80:C3:FE:CF:24:EF
            X509v3 Authority Key Identifier:
                keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f3:47:d8:31:5f:25:61:20:c1:e8:29:9b:1b:78:29:24:a2:
         c9:3b:29:80:21:8c:56:6d:8c:7c:90:10:57:5c:d3:bd:d1:86:
         f6:11:65:c7:45:66:9f:96:af:c7:bf:71:20:85:0d:ca:c7:98:
         e3:15:5a:5a:27:a3:2d:d4:ee:ed:59:4a:92:cd:b8:7c:94:18:
         2e:24:ad:05:54:03:97:a9:fb:ea:2c:5a:73:cd:ba:bd:02:cd:
         09:9d:d1:32:b2:72:0e:ac:d5:c9:2b:5a:48:b5:16:80:38:e6:
         f8:55:af:69:77:03:07:44:84:07:5b:bc:cf:a0:a7:3c:9f:8f:
         f0:ce:ef:11:40:9d:0a:0c:9e:0f:42:c2:68:ef:5b:b3:77:e7:
         42:61:15:c0:5d:54:7a:d2:23:46:8f:8f:38:5d:e0:cb:32:30:
         35:f7:c4:f3:51:b0:56:28:8c:a1:a2:4d:e0:1c:da:c0:dc:88:
         0b:15:9e:8d:36:74:1c:a8:fc:79:f2:15:76:79:57:9a:3f:f7:
         8f:cf:ed:0f:2c:67:96:7d:43:14:80:e7:cc:86:1f:5e:5b:b0:
         fb:fc:4e:42:48:5f:fe:24:48:ce:b8:8e:dd:96:53:2a:67:ae:
         d8:4e:36:aa:d4:8e:3d:14:28:ed:d4:8b:f7:29:bb:dc:db:27:
         e1:de:e2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:20:07 2025 by rpki-client