Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.mft
File:                     3FF4610BF1D06106BA50D14E85900089D08C658F.mft (raw, json)
Hash identifier:          6KN1dXdGnI5jXAivOMb4aLU0/HgKxJoBIQoKwKeXNzc=
Subject key identifier:   E9:CF:2D:C7:AA:E3:C5:18:5A:5F:E5:4D:A9:47:DA:A5:95:3D:4E:66
Authority key identifier: 3F:F4:61:0B:F1:D0:61:06:BA:50:D1:4E:85:90:00:89:D0:8C:65:8F
Certificate issuer:       /CN=3FF4610BF1D06106BA50D14E85900089D08C658F
Certificate serial:       709D5D281B0F4EB0FC89E0D17EF2AD2924223293
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.mft
Manifest number:          21
Signing time:             Fri 18 Apr 2025 17:03:23 +0000
Manifest this update:     Fri 18 Apr 2025 16:58:23 +0000
Manifest next update:     Sat 19 Apr 2025 20:44:23 +0000
Files and hashes:         1: 323830343a353639303a3a2f33362d3336203d3e20323638303039.roa (hash: 1PGudNSzSh14o/3YG7xRNwDw6uxKcBqj0onHXb5M5IA=)
                          2: 323830343a353639303a633030303a3a2f33362d3336203d3e20323638303039.roa (hash: QeFqceaBHr13d8r5+LZ6hD0YWZsTXY4A1Oom0n9P9gU=)
                          3: 3FF4610BF1D06106BA50D14E85900089D08C658F.crl (hash: HC+dRZixq22UeqTrJkbOPrZyVaZHK1F495u7Uyjou4E=)
                          4: 323830343a353639303a323030303a3a2f33362d3336203d3e20323638303039.roa (hash: Lu2vegyCeF0fTqVCb0dlnC7z13Cqf/WCaLZD9mzmdiA=)
                          5: 323830343a353639303a353030303a3a2f33362d3336203d3e20323638303039.roa (hash: /WyumNs9dACrGT09pBCwj3KObcqmfQYxfY3FpvZ56tE=)
                          6: 323830343a353639303a3a2f33322d3332203d3e20323638303039.roa (hash: t+gLBzkcf5H0sKjKxF9vgWaJkJWdMOlhZUUSj9ViOFc=)
                          7: 323830343a353639303a313030303a3a2f33362d3336203d3e20323638303039.roa (hash: DkWjwv4z9aRqc2VwM1lUUXqsV0E7/qaIl6xQbvtotFk=)
                          8: 323830343a353639303a663030303a3a2f33362d3336203d3e20323638303039.roa (hash: 1zpcnl5fBzaXOL9c2rxGqnTwUeEDQbIsSY+zuL60/0g=)
                          9: 34352e3136372e3231392e302f32342d3234203d3e20323638303039.roa (hash: bF8PEIsMZblXdQA60mKZ+cYlzGqtPUZ4kP84Tn6BwRk=)
                          10: 323830343a353639303a373030303a3a2f33362d3336203d3e20323638303039.roa (hash: KzcoZMBpQtlJnsdsao4546a/3a+NP3Ldd24POamtoGE=)
                          11: 323830343a353639303a643030303a3a2f33362d3336203d3e20323638303039.roa (hash: bv3+a9mGmvrcJFhUw8HpW/SsCkp4F+nDKu9xNnNlDHU=)
                          12: 34352e3136372e3231362e302f32322d3232203d3e20323638303039.roa (hash: OPsaNWElsxskL5O+K0dsNxC9+y3TLH+ZSAiV4iE3FA8=)
                          13: 34352e3136372e3231362e302f32342d3234203d3e20323638303039.roa (hash: Ts9QqFl5WbX1WL+0PVk/nTZXZRgf8NSF5JXq+JeiZ/Y=)
                          14: 323830343a353639303a393030303a3a2f33362d3336203d3e20323638303039.roa (hash: EfdOszltilS8j8oEz8FJjNHsxgkS0IgsvarNI6+NT+M=)
                          15: 34352e3136372e3231372e302f32342d3234203d3e20323638303039.roa (hash: TK8QmpRuBHG1o5YwZiBpn+DWLQFjoMljSAImbeOgvoc=)
                          16: 323830343a353639303a653030303a3a2f33362d3336203d3e20323638303039.roa (hash: 6Qd588iRH8+QeZLDE94o/NQTUN7alijYXXp80lun3wY=)
                          17: 323830343a353639303a623030303a3a2f33362d3336203d3e20323638303039.roa (hash: 5voFTpGGbQgBcui6COVX3mB8yKNv4/rqZ2BOYwC4GNI=)
                          18: 323830343a353639303a333030303a3a2f33362d3336203d3e20323638303039.roa (hash: WT8SzomBJxoioYQPP706eN8FdL1TNCPRQGS6vhndjF8=)
                          19: 323830343a353639303a383030303a3a2f33362d3336203d3e20323638303039.roa (hash: PTxyQ4z9BFL+Gr7ENX8wv7k8GSlckQNZamT82knj3E8=)
                          20: 323830343a353639303a343030303a3a2f33362d3336203d3e20323638303039.roa (hash: OFHbkijnro+oVVi6Ai8+uHwlbDQVqVwfOLYy/6OPSDI=)
                          21: 323830343a353639303a363030303a3a2f33362d3336203d3e20323638303039.roa (hash: ruOgsRfhW147/WrMPsk5wUNqA1q+759HUHNKe08mNv0=)
                          22: 34352e3136372e3231382e302f32342d3234203d3e20323638303039.roa (hash: y/vwmLrW6WGS6QqfS/e0QadMBDEigYsaajaBKCPHpA4=)
                          23: 323830343a353639303a613030303a3a2f33362d3336203d3e20323638303039.roa (hash: MMjFKctpTaA5N06YqNeSBfQAhejEBqxjwr20k10Owcs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 20:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9d:5d:28:1b:0f:4e:b0:fc:89:e0:d1:7e:f2:ad:29:24:22:32:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF4610BF1D06106BA50D14E85900089D08C658F
        Validity
            Not Before: Apr 18 16:58:23 2025 GMT
            Not After : Apr 19 20:44:23 2025 GMT
        Subject: CN=E9CF2DC7AAE3C5185A5FE54DA947DAA5953D4E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b1:92:7a:6b:c8:8a:08:c8:df:50:d8:fe:ea:
                    55:c1:7f:14:05:24:94:9a:54:63:67:8d:06:1a:f0:
                    57:6b:4c:c1:44:13:e9:b6:45:57:87:5b:84:42:48:
                    ee:cf:42:c4:c3:f0:27:a5:dc:7f:d5:99:66:c2:b6:
                    62:7c:ca:1a:7d:7e:d1:7c:6d:0d:e8:f1:ed:b1:03:
                    e3:93:8b:93:1a:39:61:82:61:5a:8f:f7:d8:72:14:
                    04:cc:46:a8:bb:72:9d:40:14:13:e1:3c:19:1c:88:
                    4a:d4:2b:91:6a:5e:35:44:ba:df:c5:10:58:fa:f6:
                    08:18:ec:0d:0d:41:4a:54:54:0a:0d:6c:6c:b7:ea:
                    28:c7:00:66:1c:cb:8e:56:47:98:78:ab:4c:5f:0f:
                    44:e2:b4:ef:35:85:14:bd:39:b4:5a:87:58:e0:8c:
                    31:ed:b9:4e:55:a7:83:ae:4d:0e:28:40:05:ba:7a:
                    45:0d:11:97:df:f5:e8:3d:67:02:c2:90:87:95:9e:
                    fb:36:eb:64:3f:70:f6:26:d6:26:37:01:2e:f9:90:
                    6f:06:d0:5c:53:b8:c3:b2:0f:9c:3f:ed:a9:38:15:
                    93:04:e8:87:c4:69:fd:a0:f9:c2:81:0e:10:5c:3e:
                    63:cd:d8:4b:5f:48:58:40:d2:71:02:b9:2b:e6:bb:
                    d0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CF:2D:C7:AA:E3:C5:18:5A:5F:E5:4D:A9:47:DA:A5:95:3D:4E:66
            X509v3 Authority Key Identifier:
                keyid:3F:F4:61:0B:F1:D0:61:06:BA:50:D1:4E:85:90:00:89:D0:8C:65:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:2b:df:33:d9:04:ba:15:ca:5b:18:54:c7:c3:99:da:2d:85:
         67:3a:62:d0:22:c9:83:f2:c2:cc:8e:3e:4b:99:bd:1c:4c:d4:
         9f:0c:19:3e:4a:50:f3:a7:02:71:77:a4:2f:a4:f8:27:3e:f2:
         0e:bc:55:9a:87:69:14:1d:8b:d4:29:5e:b5:d1:e4:d9:24:15:
         58:83:c5:34:7d:b9:f3:c3:95:04:ee:e1:f9:f1:4b:b4:9e:e0:
         9b:b8:69:8f:72:8f:d5:e9:33:08:8d:c6:52:c5:d0:8c:09:e2:
         d7:52:b7:95:27:2b:1f:d8:9c:3b:fa:65:ac:7f:80:00:ac:7d:
         1b:34:9b:a0:59:d7:69:00:72:a6:05:28:8c:0d:57:f1:ce:c0:
         d5:d9:04:91:03:9a:15:a2:c5:e0:cf:00:a5:10:59:c1:9b:71:
         36:e4:94:dd:40:b6:8e:6b:d1:ca:d0:95:0c:34:07:23:b0:32:
         3c:5d:26:5f:e9:a9:d6:7e:04:28:9d:f4:c7:72:5a:73:d2:94:
         ea:3e:d3:66:bf:a3:c2:3c:71:b9:81:87:93:f1:c5:4d:fd:f6:
         48:70:fa:ac:5f:97:8c:a8:60:83:d9:b3:f8:e7:83:1d:00:ae:
         da:80:1d:91:a7:11:4c:6a:ce:cb:01:5e:61:85:b4:83:91:20:
         cf:0f:ad:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:34:18 2025 by rpki-client