Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
File:                     2AADFACED9C75E320914697A02E254A3D463839A.mft (raw, json)
Hash identifier:          hO1uu6CvawLKN9jr41XY2crtwnKu48pGO2u8Z83nRxo=
Subject key identifier:   16:58:DA:E8:8F:FB:11:CC:A4:DE:EA:6C:A0:39:36:83:03:80:A2:5C
Authority key identifier: 2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A
Certificate issuer:       /CN=2AADFACED9C75E320914697A02E254A3D463839A
Certificate serial:       6C4628099FE63C658AEBFF51F941479666ABB1EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
Manifest number:          0209
Signing time:             Fri 02 May 2025 03:56:37 +0000
Manifest this update:     Fri 02 May 2025 03:51:37 +0000
Manifest next update:     Sat 03 May 2025 07:33:37 +0000
Files and hashes:         1: 2AADFACED9C75E320914697A02E254A3D463839A.crl (hash: kwzvaCKnTmCt8Ld28vAek34bJupbzgxFy6WCBY9xbn0=)
                          2: 3138372e3131312e31362e302f32302d3234203d3e203533313230.roa (hash: olPEUYzQeXbpm2M5qdX3HUxqCDHC3YBr2Etr9x7gT/w=)
                          3: 3134312e3139332e3135312e302f32342d3234203d3e203533313230.roa (hash: DuI4Mug1p6teJxzujuasFd0ujWIU2EvbfZhNpCjPypI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl
                          rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 07:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:46:28:09:9f:e6:3c:65:8a:eb:ff:51:f9:41:47:96:66:ab:b1:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AADFACED9C75E320914697A02E254A3D463839A
        Validity
            Not Before: May  2 03:51:37 2025 GMT
            Not After : May  3 07:33:37 2025 GMT
        Subject: CN=1658DAE88FFB11CCA4DEEA6CA03936830380A25C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:cb:e8:67:b8:44:04:50:a2:5c:a6:0d:90:
                    dc:fa:b1:b8:32:6a:2a:26:f5:a5:b4:01:05:0a:29:
                    f7:b9:58:14:0b:01:53:0a:d7:b9:fa:33:ca:e1:26:
                    95:c8:60:80:30:59:5e:fe:b9:d0:5e:09:a4:46:1c:
                    c8:a7:28:ed:56:a3:df:41:8b:62:be:76:36:ac:d2:
                    f0:c5:c2:3a:0e:78:ac:4c:11:c4:89:a7:42:70:39:
                    d8:1d:ab:b2:7b:63:f9:19:30:10:bf:d8:ea:68:f9:
                    9a:32:2b:64:bf:af:74:1e:cb:b5:c1:22:fb:6e:9d:
                    11:6b:4a:e6:d6:2b:3f:55:22:2f:58:68:1c:ee:7a:
                    85:69:5c:04:26:79:7f:25:1a:29:71:c7:84:2b:4d:
                    6d:b8:58:8f:2d:f7:10:5d:d7:4e:30:62:5e:73:af:
                    22:46:fc:f8:5f:96:4e:30:47:0e:fe:09:24:36:3e:
                    ee:8e:9a:aa:ff:c8:b9:3a:28:1c:f6:b0:d7:e8:7a:
                    02:b2:e3:83:7a:4e:3b:96:2f:79:97:17:d4:94:b8:
                    0b:d7:fa:ac:94:87:06:de:55:5d:0a:dc:2d:2a:d1:
                    33:9e:ba:0e:25:85:3f:ae:9a:a0:d6:66:04:56:6f:
                    e7:39:63:2e:a2:03:cd:59:1b:e7:1a:5e:7f:1f:bc:
                    77:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:58:DA:E8:8F:FB:11:CC:A4:DE:EA:6C:A0:39:36:83:03:80:A2:5C
            X509v3 Authority Key Identifier:
                keyid:2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:92:24:c5:bb:dd:da:c1:4b:d8:80:cd:56:04:bc:b8:f5:63:
         44:ec:b7:08:63:b8:b2:cf:50:0d:67:5c:94:8f:3d:73:8e:af:
         31:52:99:b1:4f:70:06:9e:0b:e5:d4:a4:26:29:f6:25:3f:dd:
         5e:93:b6:28:e2:35:e1:8d:52:94:65:d3:14:2b:0f:49:da:3e:
         1b:69:fe:99:01:9c:05:86:c2:27:52:fd:35:15:22:2b:3f:d3:
         5a:a3:c1:61:f8:a6:c7:bf:ea:a8:fc:17:ed:d9:a0:df:5d:53:
         bf:ff:16:ad:ef:12:df:07:d3:28:a9:34:ab:65:79:b4:13:fa:
         8d:85:7f:54:94:b8:1d:91:8b:48:0c:ec:be:71:38:34:27:93:
         04:72:39:0d:3f:ab:d6:d8:7a:18:ee:d9:94:03:cb:7d:6c:6d:
         d2:31:40:53:b7:35:60:95:cd:f2:30:c1:9e:af:bb:83:f2:bb:
         dd:ea:10:71:64:a1:07:8e:e5:3b:68:cc:10:a2:69:91:cc:21:
         40:a8:c2:64:54:d1:ce:05:93:75:6b:30:b3:63:b4:ac:61:d0:
         28:5c:9c:50:a4:8a:22:5b:11:10:fb:43:d1:54:e2:bb:db:45:
         01:68:af:cc:21:c5:f1:15:b0:c3:0e:15:6b:75:a5:7e:6e:40:
         9e:ac:16:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:57:51 2025 by rpki-client