Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.mft
File:                     A2E28E9F8644B6F21F026644C14C380CDCA6B11C.mft (raw, json)
Hash identifier:          g+89K37BZ/+irpkui/JPYIHxJ8GgYc40vN6q3EdG3kU=
Subject key identifier:   DE:CC:F9:C3:52:E5:37:12:DF:CA:76:C6:A8:E0:18:D2:86:F3:17:C5
Authority key identifier: A2:E2:8E:9F:86:44:B6:F2:1F:02:66:44:C1:4C:38:0C:DC:A6:B1:1C
Certificate issuer:       /CN=A2E28E9F8644B6F21F026644C14C380CDCA6B11C
Certificate serial:       45F3F44D169AB90CCD215CF48491A6DFE6596CD7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.mft
Manifest number:          01CD
Signing time:             Sun 15 Jun 2025 13:29:41 +0000
Manifest this update:     Sun 15 Jun 2025 13:24:41 +0000
Manifest next update:     Mon 16 Jun 2025 15:38:41 +0000
Files and hashes:         1: 323830343a386664633a3a2f33322d313238203d3e20323733353137.roa (hash: Vg9f8pJBE8A+Jidrm0Qom9uSFa089hk8ia+2oE44njc=)
                          2: A2E28E9F8644B6F21F026644C14C380CDCA6B11C.crl (hash: ZvIcx79p90+fKCxksjSPorepe4EmnzX9gWsLhtBOZCY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.crl
                          rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Jun 2025 15:38:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f3:f4:4d:16:9a:b9:0c:cd:21:5c:f4:84:91:a6:df:e6:59:6c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E28E9F8644B6F21F026644C14C380CDCA6B11C
        Validity
            Not Before: Jun 15 13:24:41 2025 GMT
            Not After : Jun 16 15:38:41 2025 GMT
        Subject: CN=DECCF9C352E53712DFCA76C6A8E018D286F317C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:15:39:c0:eb:a8:bd:f5:c7:08:62:d2:23:91:
                    12:58:fa:6b:e6:cc:65:c6:e3:ad:c1:f2:c2:3d:ec:
                    a5:d8:07:41:e6:85:91:51:60:5c:6c:cc:27:ac:a0:
                    8b:85:7b:99:e2:b3:03:1e:c7:66:95:20:e6:1c:bc:
                    5f:ad:75:76:2b:61:99:1c:eb:6e:81:a9:1d:ff:de:
                    03:80:2c:a3:59:aa:ed:0a:2a:eb:63:bf:5b:45:1f:
                    14:7e:22:b7:94:ff:5d:89:b2:ac:0f:9d:5c:23:88:
                    83:50:e8:91:1d:cc:0f:26:52:05:bc:fd:7d:92:d8:
                    9e:d5:60:e7:64:fb:3a:63:45:84:21:0c:59:f6:62:
                    b2:15:d3:6d:15:15:80:6d:a3:77:a4:e6:58:54:6f:
                    e8:cd:08:9c:fa:a1:b2:a6:20:8b:67:59:59:15:d4:
                    41:b9:c9:54:14:07:93:70:3a:5c:47:7e:55:9b:c8:
                    b3:87:4c:ef:b7:b8:b6:17:bd:d1:90:53:15:d0:1c:
                    1b:c7:03:04:32:a8:d7:45:48:40:ab:48:0c:27:22:
                    2c:e7:ff:06:7d:27:20:11:fc:37:82:e2:9a:41:e0:
                    53:b0:60:b8:31:50:26:a5:03:b0:fb:15:b6:6c:9e:
                    2b:82:91:d9:e6:c8:93:b2:ae:08:b8:40:4c:e9:66:
                    68:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CC:F9:C3:52:E5:37:12:DF:CA:76:C6:A8:E0:18:D2:86:F3:17:C5
            X509v3 Authority Key Identifier:
                keyid:A2:E2:8E:9F:86:44:B6:F2:1F:02:66:44:C1:4C:38:0C:DC:A6:B1:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:7d:e2:86:cb:f9:2f:9f:c5:47:f3:59:7b:b5:aa:ca:be:bc:
         1e:ad:3d:f1:ce:a2:67:01:3d:92:06:83:90:9c:df:a2:9e:4e:
         2d:36:5e:de:50:86:83:a3:d2:2c:9f:21:dd:03:df:ea:26:0b:
         02:9b:2e:8f:9c:37:42:96:72:e7:0f:ae:8a:b9:e3:be:21:9a:
         fb:3a:34:b4:13:12:6f:eb:2d:1a:3f:b8:ba:67:39:b8:a0:cb:
         8b:66:c9:58:be:d7:37:7e:67:06:e4:f5:00:16:7f:53:d6:2c:
         18:42:b7:88:f2:b6:09:2e:9e:0c:fb:4a:e6:35:79:33:d0:f3:
         d4:eb:a7:a9:32:18:ea:35:2f:14:41:0c:6f:4f:40:ba:23:9a:
         f8:96:94:01:cf:b2:83:3b:70:5a:9e:70:03:e7:54:43:44:34:
         95:87:e6:57:f6:49:62:20:16:0b:d6:7f:35:83:84:63:ac:0a:
         50:df:d5:38:90:98:47:ea:6e:98:2f:43:1e:44:ee:8f:10:22:
         d8:4e:ee:1f:80:8d:d8:62:0d:31:d2:8f:bc:6d:b2:95:dd:96:
         34:00:e8:72:59:86:3b:a1:1a:26:ef:ce:25:9f:81:fd:91:a2:
         bf:c9:6a:1a:4a:bb:53:8d:16:b6:53:ac:2a:1a:fc:9f:d2:9c:
         74:4f:88:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:36:43 2025 by rpki-client