Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
File:                     3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft (raw, json)
Hash identifier:          DOH58GKENiArmfENjfyxGPScC1vAhVWBRpOpifl1+Ck=
Subject key identifier:   5C:FC:74:29:6F:18:7E:E3:86:AB:E8:DD:3A:26:46:4A:5C:49:F1:09
Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
Certificate issuer:       /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Certificate serial:       778FB796F8D9D05BB047CDADB007E8FE7C2D5DFB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
Manifest number:          AF
Signing time:             Mon 21 Apr 2025 15:03:03 +0000
Manifest this update:     Mon 21 Apr 2025 14:58:03 +0000
Manifest next update:     Tue 22 Apr 2025 15:27:03 +0000
Files and hashes:         1: 3137392e3130382e38302e302f32312d3234203d3e203533313538.roa (hash: rYYDvAwyGv1TrwvlF6zZdkFRQwmC93kFOfjgITu2fs0=)
                          2: 3138362e3230392e33322e302f32302d3234203d3e203533313538.roa (hash: hbNHm3JSWGn8mnXVU3f6OzBEDG47bAy239375lTILdQ=)
                          3: 323830343a6433383a3a2f33322d3438203d3e203533313538.roa (hash: ITX9zf4dR+WNiA0LigOZZoVUW70WV9yvBVhLZO4GzXk=)
                          4: 3138362e3230392e34382e302f32302d3234203d3e203533313538.roa (hash: C3NsvjEBF/OuANGfe1hmeqGK89abCjbSxEGpoInJIQ4=)
                          5: 34352e3138352e34382e302f32322d3234203d3e20323639333538.roa (hash: 0wG8Kdhrd/0bX9AxWy1LVhaUESlb5+tf37wS3PL0/Pk=)
                          6: 3230302e3232392e38382e302f32322d3234203d3e203533313538.roa (hash: YqV0/Lhj2MxuOJ6HOw87Su9/s1ow22MaSfI8k8cZeuU=)
                          7: 3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl (hash: dZDWKpERwwt4fYGSmwd1CzohhYYQa50td6AsBNKyEQ4=)
                          8: 323830343a363336343a3a2f33322d3438203d3e20323639333538.roa (hash: VI296uwuood9h+Wd5yWEBNZhOIon7U/ZPdTISOXmtE4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
                          rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 15:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:8f:b7:96:f8:d9:d0:5b:b0:47:cd:ad:b0:07:e8:fe:7c:2d:5d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
        Validity
            Not Before: Apr 21 14:58:03 2025 GMT
            Not After : Apr 22 15:27:03 2025 GMT
        Subject: CN=5CFC74296F187EE386ABE8DD3A26464A5C49F109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d0:ff:6a:16:48:3d:2d:71:ca:b2:1d:04:2e:
                    24:87:99:9c:be:bd:da:a8:73:ec:a8:ba:b3:2f:bf:
                    bb:3c:ea:69:b7:cd:1e:ac:f4:9d:4a:9a:79:89:c9:
                    40:00:ca:f4:6c:b8:f3:32:ba:a5:5f:4e:c9:e0:9e:
                    e7:98:a4:91:e9:d1:02:30:10:00:73:69:e7:51:aa:
                    6c:77:b8:a1:0c:de:88:ec:a8:8c:19:de:53:65:70:
                    ee:85:cf:aa:ba:7e:d4:96:7f:77:7a:81:8d:c2:b5:
                    a8:4c:1b:7e:f3:78:89:60:d9:28:3a:0e:93:fb:28:
                    53:d4:7e:8e:98:31:a4:b2:35:c1:8c:35:e7:b0:37:
                    ea:55:90:ed:1d:09:19:a4:d9:04:50:9f:51:23:09:
                    de:e7:6e:fe:83:96:d6:7e:68:42:7b:1e:aa:3f:78:
                    7e:a5:db:71:90:3d:21:5a:03:ec:8b:bd:1d:09:51:
                    c9:b6:a9:c3:45:41:17:4d:cb:3b:ef:cf:62:7f:ab:
                    d2:02:7c:15:de:d3:76:23:a5:c0:ed:b0:62:e0:b7:
                    11:78:a4:d9:64:a1:d3:a4:a6:ec:b7:30:ff:e1:f4:
                    d3:45:c1:4d:9d:3f:1a:65:9a:ae:b0:71:ad:72:72:
                    c1:28:5e:e9:21:d8:9f:f6:37:cf:01:7a:07:93:cc:
                    31:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FC:74:29:6F:18:7E:E3:86:AB:E8:DD:3A:26:46:4A:5C:49:F1:09
            X509v3 Authority Key Identifier:
                keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:98:27:6f:43:61:63:f6:b3:a0:fb:48:c9:08:b1:74:11:be:
         a8:86:25:62:5f:12:40:67:ae:1e:e3:37:34:95:7d:62:9e:7f:
         dd:11:53:73:03:bc:93:95:6a:c8:37:2f:aa:32:f3:e1:f6:53:
         d3:8a:c1:03:e4:d7:b6:ac:b2:b8:e8:59:61:9f:a0:40:5b:da:
         dd:4b:16:f2:a9:74:40:d5:f0:c3:50:43:b3:e1:11:73:d9:ef:
         d3:92:6c:15:f5:a6:66:70:7e:89:12:b4:e5:50:8c:27:68:bc:
         64:ee:f5:c3:06:86:96:a0:95:be:dc:6c:b7:6f:c9:14:6a:9b:
         49:ac:b0:59:48:0a:f8:04:d4:29:d5:55:5d:16:37:d4:17:35:
         22:78:23:15:4e:1d:ca:bd:95:5a:1c:a2:db:c4:cc:d5:59:cf:
         33:df:49:14:8d:37:47:1c:16:ed:67:5d:c6:b0:95:bf:ac:6f:
         6a:25:fe:d5:78:b8:5b:68:af:85:f3:be:27:f0:9b:95:ca:a1:
         83:47:9f:71:cb:d3:85:46:eb:d3:75:b3:fd:3e:75:2c:e7:f8:
         50:7a:ef:86:ee:54:42:a5:85:d1:a3:69:56:15:b2:15:09:af:
         b6:bb:a5:16:4c:4b:aa:7f:09:9f:a8:ed:b0:dd:81:b4:bf:03:
         cc:ff:aa:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:05:35 2025 by rpki-client