Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
File:                     3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft (raw, json)
Hash identifier:          K67X+IMeC/23lsdQU0uBSie4EeFatT1NiYHfi0ySiAc=
Subject key identifier:   B9:B7:22:B1:2F:94:8D:D3:30:97:61:D9:0F:04:D6:F2:4A:12:C8:AD
Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
Certificate issuer:       /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Certificate serial:       510FD18C04CCA950ACCF730C080ABC1A2C027DA9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
Manifest number:          F2
Signing time:             Tue 10 Jun 2025 02:38:35 +0000
Manifest this update:     Tue 10 Jun 2025 02:33:35 +0000
Manifest next update:     Wed 11 Jun 2025 05:31:35 +0000
Files and hashes:         1: 3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl (hash: G5kPCHy5JPGJwq3xUN2l/vVzVyUh1K9sGAjsVn6oLkk=)
                          2: 323830343a6433383a3a2f33322d3438203d3e203533313538.roa (hash: ITX9zf4dR+WNiA0LigOZZoVUW70WV9yvBVhLZO4GzXk=)
                          3: 3138362e3230392e34382e302f32302d3234203d3e203533313538.roa (hash: C3NsvjEBF/OuANGfe1hmeqGK89abCjbSxEGpoInJIQ4=)
                          4: 3138362e3230392e33322e302f32302d3234203d3e203533313538.roa (hash: hbNHm3JSWGn8mnXVU3f6OzBEDG47bAy239375lTILdQ=)
                          5: 3137392e3130382e38302e302f32312d3234203d3e203533313538.roa (hash: rYYDvAwyGv1TrwvlF6zZdkFRQwmC93kFOfjgITu2fs0=)
                          6: 3230302e3232392e38382e302f32322d3234203d3e203533313538.roa (hash: YqV0/Lhj2MxuOJ6HOw87Su9/s1ow22MaSfI8k8cZeuU=)
                          7: 34352e3138352e34382e302f32322d3234203d3e20323639333538.roa (hash: 0wG8Kdhrd/0bX9AxWy1LVhaUESlb5+tf37wS3PL0/Pk=)
                          8: 323830343a363336343a3a2f33322d3438203d3e20323639333538.roa (hash: VI296uwuood9h+Wd5yWEBNZhOIon7U/ZPdTISOXmtE4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
                          rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 05:31:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:0f:d1:8c:04:cc:a9:50:ac:cf:73:0c:08:0a:bc:1a:2c:02:7d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
        Validity
            Not Before: Jun 10 02:33:35 2025 GMT
            Not After : Jun 11 05:31:35 2025 GMT
        Subject: CN=B9B722B12F948DD3309761D90F04D6F24A12C8AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:f4:00:e5:d4:88:bd:55:9e:0c:8f:91:ca:07:
                    0f:45:65:3c:2e:a3:ad:74:74:e7:3c:89:27:d2:04:
                    85:df:f6:9b:05:02:3a:af:b5:b3:4a:0a:8a:d1:58:
                    56:6f:ec:3d:d3:a7:a8:ac:06:11:49:db:95:bc:4c:
                    c8:be:fa:9b:29:0c:24:e5:40:4e:b2:cd:07:4d:70:
                    ab:bc:75:15:6b:2f:50:93:5e:61:b3:4b:9b:cb:0a:
                    d2:80:9f:8f:77:c0:c7:73:36:88:d7:69:5f:dd:7e:
                    90:bb:88:c5:09:42:e2:65:27:2a:53:52:70:61:b8:
                    9c:3d:8a:66:d3:f2:f4:52:05:e4:ad:4b:c6:6b:89:
                    7b:14:6f:89:a7:54:49:b2:e4:9e:25:65:cd:6f:b2:
                    d4:0a:b5:f7:11:2a:63:97:a6:e3:9c:10:97:7f:cd:
                    dc:43:70:e5:44:ce:89:a4:cf:16:07:8f:0e:2d:67:
                    80:5c:37:a0:81:af:8b:f6:99:d3:24:9f:d6:0d:af:
                    b8:e5:c4:18:51:a0:bf:4c:88:4c:64:1f:e9:a5:3c:
                    1e:83:d1:80:fc:fc:95:a6:09:50:61:23:13:16:09:
                    6a:fc:75:dd:96:16:29:c0:d6:fd:2a:79:4b:7e:94:
                    de:4e:8a:c2:be:96:bd:ff:5e:83:2c:5a:2b:f1:57:
                    b0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B7:22:B1:2F:94:8D:D3:30:97:61:D9:0F:04:D6:F2:4A:12:C8:AD
            X509v3 Authority Key Identifier:
                keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e3:01:44:28:e7:df:ba:78:70:e3:dd:9e:fc:46:62:b7:44:
         e3:e0:56:ba:d6:c2:91:fa:67:f4:39:37:01:6a:65:ba:30:e4:
         bd:c9:ed:30:a6:4f:c7:a1:14:87:a2:93:2a:bc:37:b2:21:f1:
         de:e5:e9:9a:d0:62:a7:1d:01:46:30:d1:9e:6b:db:d2:e7:1f:
         37:62:14:23:28:4c:2f:fe:7f:03:01:b3:0c:bf:90:52:5f:66:
         5f:b9:29:0e:86:2b:dd:d2:a8:42:10:a1:85:cf:f0:68:93:1e:
         cd:24:6a:c0:21:c3:45:7f:d0:0d:c4:bb:6d:78:d9:10:c7:07:
         76:f8:fa:a9:f4:57:7e:f6:4a:72:c0:a1:d1:ff:21:66:1e:32:
         3c:74:bc:20:24:24:14:4e:8a:21:42:3b:aa:fc:e1:6a:dd:55:
         0b:91:4c:ab:a8:d1:80:a1:6b:8f:1d:e2:d9:cb:80:c9:02:83:
         b5:e5:d6:96:72:d9:12:d9:8f:62:2a:f3:4f:37:0c:2d:38:f2:
         9d:81:74:e9:35:84:84:09:9f:3f:45:7a:ec:83:1c:e3:57:b6:
         e6:88:aa:b5:7b:15:03:c7:4b:87:50:1c:ca:90:94:54:39:9b:
         62:57:af:08:50:56:e7:04:cc:37:4c:df:98:e2:d5:d6:e1:2e:
         63:71:84:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:35:57 2025 by rpki-client