Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
File:                     A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft (raw, json)
Hash identifier:          ikSDPNHu2UnsB9qangAyDNNkfq+AmZO8RLATTVCJd7A=
Subject key identifier:   A1:33:5E:AA:EE:BD:FB:96:13:FC:14:BC:72:70:96:6A:B5:3E:73:49
Authority key identifier: A8:0F:92:30:DA:24:0E:F9:87:BC:A2:B2:9E:46:49:A1:AB:1C:F3:41
Certificate issuer:       /CN=A80F9230DA240EF987BCA2B29E4649A1AB1CF341
Certificate serial:       038A255BD606ECC6C771121C4E18973BA574A71C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
Manifest number:          0249
Signing time:             Mon 16 Jun 2025 19:34:59 +0000
Manifest this update:     Mon 16 Jun 2025 19:29:59 +0000
Manifest next update:     Tue 17 Jun 2025 21:49:59 +0000
Files and hashes:         1: A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl (hash: 1SzxKfmO/Du3kyF+C0U+g6aoak5mPGXpzFOGjmYZYkg=)
                          2: 323830343a383134343a3a2f33322d3332203d3e20323732343433.roa (hash: hPkw1ttlYJ42cUc0Dp0zOZqoQc0JKu0HxxZ15u/LszY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl
                          rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 21:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8a:25:5b:d6:06:ec:c6:c7:71:12:1c:4e:18:97:3b:a5:74:a7:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A80F9230DA240EF987BCA2B29E4649A1AB1CF341
        Validity
            Not Before: Jun 16 19:29:59 2025 GMT
            Not After : Jun 17 21:49:59 2025 GMT
        Subject: CN=A1335EAAEEBDFB9613FC14BC7270966AB53E7349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a8:ed:c1:c9:c9:4f:d2:db:65:73:54:1a:7b:
                    09:e6:aa:39:a1:e2:dc:05:eb:94:d7:0a:83:7c:c9:
                    86:9e:b9:2d:0f:65:7f:48:ce:de:7a:80:63:b7:d5:
                    38:08:33:9a:9b:db:b9:91:22:43:43:2e:72:7d:85:
                    08:f3:f9:83:e1:f6:95:e1:08:27:ae:d3:eb:3d:33:
                    df:74:07:d9:32:71:0a:3a:4f:fd:b6:ae:1a:74:ca:
                    42:b0:04:89:b9:e9:45:59:77:91:2e:35:81:21:f5:
                    ae:63:25:a3:78:69:f3:00:0f:83:b2:6b:53:d7:51:
                    10:0e:0a:8f:35:34:95:f9:c3:94:e9:d2:d1:f2:62:
                    0a:8e:ec:31:ce:f1:f3:11:33:95:da:cc:64:09:83:
                    3a:22:3f:11:f3:44:64:67:cd:02:72:b6:54:69:2f:
                    cb:3f:5c:c1:fa:e9:f3:6e:9f:9e:0a:25:0b:08:2d:
                    47:33:6d:56:77:39:d9:04:fe:ad:da:15:34:e3:fd:
                    7b:5b:84:b6:8c:40:9f:ec:ba:db:a8:08:28:0e:18:
                    e2:05:09:ef:67:29:02:61:f1:0f:a7:0f:5e:c8:a0:
                    a5:cd:33:33:b3:79:8f:46:75:09:1a:de:cf:46:1d:
                    67:6f:b5:21:61:ca:08:23:0b:3e:23:f4:b5:12:41:
                    33:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:33:5E:AA:EE:BD:FB:96:13:FC:14:BC:72:70:96:6A:B5:3E:73:49
            X509v3 Authority Key Identifier:
                keyid:A8:0F:92:30:DA:24:0E:F9:87:BC:A2:B2:9E:46:49:A1:AB:1C:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ec:6d:50:6f:5a:09:c9:8b:ed:a8:8a:d1:74:f4:b2:ed:cf:
         ac:c5:9d:e5:d9:d1:b2:d3:68:29:7f:7b:92:9f:1b:a1:6a:6f:
         6d:e1:26:25:5c:0d:a4:b2:af:36:c4:dd:60:4c:12:d6:22:e1:
         2b:f5:3c:07:d9:d2:36:69:a6:a1:33:3c:93:20:54:eb:5c:18:
         0d:30:b9:ab:28:9c:40:85:ab:67:97:85:14:1e:67:e7:df:b5:
         11:01:04:af:0d:52:89:b0:4c:a8:c2:f8:42:3e:52:c9:28:52:
         d0:20:f4:bf:0e:73:b8:50:6d:42:70:63:a9:7c:c5:d2:15:78:
         cd:d0:b6:96:e8:ac:51:aa:0f:87:98:1f:a1:aa:f2:ef:62:a1:
         74:63:56:f4:28:71:86:67:6f:53:c0:cd:7c:10:c2:3c:90:f4:
         df:2a:02:0d:f4:1c:5e:b9:0e:11:2c:72:44:66:38:55:60:50:
         2b:68:b3:6f:36:43:68:41:b8:3f:4e:ed:da:bd:fc:87:93:09:
         29:8b:4f:73:a4:4b:5b:e9:2f:3b:0a:fd:60:84:fd:bc:24:7d:
         3a:38:64:e1:60:32:84:ca:1f:bd:8d:01:ea:8d:1a:1b:7a:87:
         75:b7:ef:73:c1:62:5e:9e:49:b8:35:3c:03:8c:8c:8a:34:b6:
         37:ef:e1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:04:51 2025 by rpki-client