Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
File:                     3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft (raw, json)
Hash identifier:          GlqvbVKqeLBASLSra8dQkohb0Vk/gs6ALXIqz134ndY=
Subject key identifier:   68:D8:2D:F5:36:E4:FD:2A:B9:CE:B8:5D:3B:E6:68:88:88:E1:34:AA
Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
Certificate issuer:       /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Certificate serial:       0B85EE3C86B2C1FE8D45E3F4FDA7724A021130BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
Manifest number:          F8
Signing time:             Sat 14 Jun 2025 13:34:27 +0000
Manifest this update:     Sat 14 Jun 2025 13:29:27 +0000
Manifest next update:     Sun 15 Jun 2025 15:22:27 +0000
Files and hashes:         1: 323830343a6433383a3a2f33322d3438203d3e203533313538.roa (hash: ITX9zf4dR+WNiA0LigOZZoVUW70WV9yvBVhLZO4GzXk=)
                          2: 3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl (hash: n8J143m83Mcwaoc+bV7CjBlydtx8KszpomZM8EHpNP4=)
                          3: 34352e3138352e34382e302f32322d3234203d3e20323639333538.roa (hash: 0wG8Kdhrd/0bX9AxWy1LVhaUESlb5+tf37wS3PL0/Pk=)
                          4: 3138362e3230392e33322e302f32302d3234203d3e203533313538.roa (hash: hbNHm3JSWGn8mnXVU3f6OzBEDG47bAy239375lTILdQ=)
                          5: 323830343a363336343a3a2f33322d3438203d3e20323639333538.roa (hash: VI296uwuood9h+Wd5yWEBNZhOIon7U/ZPdTISOXmtE4=)
                          6: 3230302e3232392e38382e302f32322d3234203d3e203533313538.roa (hash: YqV0/Lhj2MxuOJ6HOw87Su9/s1ow22MaSfI8k8cZeuU=)
                          7: 3138362e3230392e34382e302f32302d3234203d3e203533313538.roa (hash: C3NsvjEBF/OuANGfe1hmeqGK89abCjbSxEGpoInJIQ4=)
                          8: 3137392e3130382e38302e302f32312d3234203d3e203533313538.roa (hash: rYYDvAwyGv1TrwvlF6zZdkFRQwmC93kFOfjgITu2fs0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
                          rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 15:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:85:ee:3c:86:b2:c1:fe:8d:45:e3:f4:fd:a7:72:4a:02:11:30:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
        Validity
            Not Before: Jun 14 13:29:27 2025 GMT
            Not After : Jun 15 15:22:27 2025 GMT
        Subject: CN=68D82DF536E4FD2AB9CEB85D3BE6688888E134AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:06:a8:54:0a:e4:51:88:b5:e3:9b:c1:99:64:
                    a1:62:ac:0f:ac:dd:b7:89:81:c9:35:c4:c9:54:67:
                    65:ad:1d:77:b5:be:06:e6:b9:36:11:77:b3:6e:12:
                    5e:be:67:0d:58:27:5b:6a:b9:5e:41:bf:60:a9:35:
                    b9:c9:b2:1e:6c:4c:95:91:0e:58:87:5d:bb:e7:1b:
                    50:e6:21:3a:86:fe:a9:fa:06:4c:02:91:ac:2f:fc:
                    79:cf:eb:a4:94:2b:3d:01:8e:05:4c:74:a1:16:0c:
                    e8:7f:ff:01:fe:42:11:c4:f0:03:7e:b2:77:46:a3:
                    93:e5:2b:46:ea:2f:d0:4b:e1:09:34:22:da:e3:3e:
                    c9:28:64:29:d8:96:53:95:01:1a:99:7f:2d:ee:6d:
                    55:a1:e2:51:6a:5d:f4:db:29:2e:56:15:6b:4a:1b:
                    7e:b3:9a:5e:2f:36:4b:79:71:82:04:bc:14:05:06:
                    2e:d5:4a:6d:86:dd:84:07:26:33:8b:e9:c0:09:cb:
                    a3:83:4c:d2:41:d2:17:ee:e2:cf:95:09:68:6d:ba:
                    ab:00:a4:9f:81:fd:cb:10:d9:84:3b:c1:4e:e9:9d:
                    09:14:8a:c7:b9:dd:f3:73:63:7f:6e:c8:f4:2d:70:
                    4f:b7:a0:f2:b1:c8:f4:a9:9e:d3:8e:7c:51:ee:1a:
                    0e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D8:2D:F5:36:E4:FD:2A:B9:CE:B8:5D:3B:E6:68:88:88:E1:34:AA
            X509v3 Authority Key Identifier:
                keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:bc:31:72:ad:25:d1:d6:a6:c8:cb:23:03:fc:57:29:d4:40:
         19:0a:43:ac:3c:38:99:38:05:c3:2b:fa:5e:b5:d2:15:2e:75:
         df:45:53:76:8a:f4:94:84:a7:67:c6:64:8c:63:23:44:da:00:
         48:cb:ef:9a:9a:c5:d1:a4:07:4a:3f:9d:56:e6:ed:a5:30:40:
         f4:8b:08:a7:0c:3f:36:e7:0a:e2:36:47:b4:76:87:7f:5a:f5:
         9a:a8:d6:77:e3:83:ad:99:95:5d:2b:23:f0:98:15:df:58:c3:
         3f:05:92:f1:c9:6e:a0:aa:1f:3e:23:d3:ac:e2:cd:86:11:04:
         0c:33:28:0f:bf:46:b6:b3:37:71:28:fb:7a:e8:7f:7d:70:c2:
         82:63:4d:8d:58:f8:9a:1e:a8:f9:1f:9d:57:b0:2b:06:21:e0:
         55:2a:33:56:03:ee:b3:6d:90:a7:ac:e3:ec:72:24:ac:89:2d:
         15:54:68:6f:95:b3:e0:9e:4c:31:2c:16:e5:cd:08:1d:3b:72:
         0a:11:17:cd:52:b9:39:8e:54:fa:f3:fb:63:91:4e:47:8f:39:
         0b:0b:e8:02:34:28:81:05:c7:25:9f:41:49:7a:b3:76:26:6c:
         61:7f:ac:88:ae:48:1a:8f:6d:84:3b:fe:72:8d:39:a0:08:0b:
         a5:91:b9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:57:44 2025 by rpki-client