Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
File:                     3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft (raw, json)
Hash identifier:          PpEH8QA3hQEiUthAXZXzToXQPOF0P1fIIapBQtLOl9U=
Subject key identifier:   1B:B7:C1:E6:9E:45:CB:D8:A1:6C:3B:D7:CF:98:BD:F4:7F:87:F0:6F
Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
Certificate issuer:       /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Certificate serial:       56E0ECD3E8E87D6CFC40887BBE50FC8DA403AB97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
Manifest number:          F5
Signing time:             Thu 12 Jun 2025 10:13:58 +0000
Manifest this update:     Thu 12 Jun 2025 10:08:58 +0000
Manifest next update:     Fri 13 Jun 2025 11:12:58 +0000
Files and hashes:         1: 3230302e3232392e38382e302f32322d3234203d3e203533313538.roa (hash: YqV0/Lhj2MxuOJ6HOw87Su9/s1ow22MaSfI8k8cZeuU=)
                          2: 34352e3138352e34382e302f32322d3234203d3e20323639333538.roa (hash: 0wG8Kdhrd/0bX9AxWy1LVhaUESlb5+tf37wS3PL0/Pk=)
                          3: 3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl (hash: gLOILtUbuO65xHVMA6b8wEBanbrWTjIo6uZ01JTC/3g=)
                          4: 323830343a363336343a3a2f33322d3438203d3e20323639333538.roa (hash: VI296uwuood9h+Wd5yWEBNZhOIon7U/ZPdTISOXmtE4=)
                          5: 323830343a6433383a3a2f33322d3438203d3e203533313538.roa (hash: ITX9zf4dR+WNiA0LigOZZoVUW70WV9yvBVhLZO4GzXk=)
                          6: 3137392e3130382e38302e302f32312d3234203d3e203533313538.roa (hash: rYYDvAwyGv1TrwvlF6zZdkFRQwmC93kFOfjgITu2fs0=)
                          7: 3138362e3230392e33322e302f32302d3234203d3e203533313538.roa (hash: hbNHm3JSWGn8mnXVU3f6OzBEDG47bAy239375lTILdQ=)
                          8: 3138362e3230392e34382e302f32302d3234203d3e203533313538.roa (hash: C3NsvjEBF/OuANGfe1hmeqGK89abCjbSxEGpoInJIQ4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
                          rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 11:12:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e0:ec:d3:e8:e8:7d:6c:fc:40:88:7b:be:50:fc:8d:a4:03:ab:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
        Validity
            Not Before: Jun 12 10:08:58 2025 GMT
            Not After : Jun 13 11:12:58 2025 GMT
        Subject: CN=1BB7C1E69E45CBD8A16C3BD7CF98BDF47F87F06F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d0:05:e8:93:f4:16:0d:d7:7b:e5:fd:3d:cf:
                    e2:f7:d2:e6:dd:cd:45:e8:2c:34:66:b0:5b:17:42:
                    8a:8f:73:45:20:2d:90:7d:dd:e9:a9:9d:21:44:26:
                    2d:ce:04:a8:f0:da:15:f3:b8:b5:0e:6d:e7:59:16:
                    85:aa:d4:df:fc:14:07:c0:bf:f0:66:b9:b6:d3:1c:
                    59:72:16:38:5e:9b:ef:a1:65:69:95:84:32:5f:4f:
                    87:6a:41:26:5b:2d:3e:bb:a8:b9:5c:f2:5b:d6:63:
                    1c:af:d9:c9:3f:70:cb:71:0a:20:5a:a1:07:de:69:
                    0b:5a:59:c3:91:1f:b4:78:50:1c:63:3e:aa:8b:c7:
                    57:af:0b:57:f8:b6:0f:9e:8d:12:d8:30:5d:57:cd:
                    b3:8d:b9:2d:25:4c:0f:1a:fb:7f:e8:3c:ae:aa:6b:
                    a6:e1:49:aa:85:37:6e:a0:6b:b9:a2:0e:f6:f4:11:
                    c3:c7:82:e5:d4:f2:e8:77:b8:e9:99:4c:36:12:14:
                    69:be:0b:fc:22:b4:80:a7:e7:a2:8f:79:a4:f2:cb:
                    08:3d:d5:bb:9e:1f:f4:34:71:ba:60:f7:ff:f4:ba:
                    ff:d9:89:4a:6c:47:ba:4d:28:36:a5:74:37:91:b9:
                    a9:6d:55:40:5c:e4:ed:30:58:18:a7:f7:e3:bb:f0:
                    11:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B7:C1:E6:9E:45:CB:D8:A1:6C:3B:D7:CF:98:BD:F4:7F:87:F0:6F
            X509v3 Authority Key Identifier:
                keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:ad:51:19:39:e2:58:69:68:bb:0a:d1:77:09:3d:74:f5:25:
         00:54:0c:2d:4f:5f:16:0a:2a:02:a0:82:76:9b:5f:06:ce:f8:
         38:b3:af:9d:21:ad:6c:4a:12:54:46:db:78:ac:99:67:00:60:
         69:a6:fc:72:d0:8b:8a:e5:e1:86:cd:26:65:3e:0f:2c:f1:45:
         38:96:96:1a:15:65:98:e1:53:96:ac:a3:e5:77:dc:23:77:9c:
         93:7b:70:03:fc:c0:e2:52:4d:71:96:62:6e:41:22:94:fa:1b:
         fd:ee:b1:17:e7:51:86:70:dc:5d:2b:d3:38:69:65:20:ad:bb:
         f1:86:41:ab:38:a9:9f:05:f2:d1:ee:53:c7:de:3d:67:21:bd:
         bb:ac:ca:b7:e5:61:91:c8:ef:68:2e:7e:b8:fd:de:0b:c3:0b:
         11:d8:e8:f2:6b:7f:b3:a2:bd:9c:28:f4:31:f7:96:6c:d1:cd:
         ff:97:2e:40:54:2c:6c:f2:35:bb:91:18:6d:6b:d1:cf:2b:99:
         40:5e:26:34:89:02:3e:3f:12:b5:70:26:f5:43:16:5e:48:62:
         78:65:b5:00:4b:c5:aa:7f:ad:3d:56:38:cb:d7:2b:03:24:c8:
         6b:aa:7f:4b:fe:76:16:5c:77:b6:11:61:b3:13:1e:b6:1f:f0:
         87:8d:35:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:57:28 2025 by rpki-client