Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
File:                     A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft (raw, json)
Hash identifier:          BNYPc0zGbp6N6LrACu3Cn+51kLDUeV8UyeqNnc+WDcM=
Subject key identifier:   22:3D:42:CE:CC:BA:6F:E9:42:86:83:F6:73:56:90:B8:12:26:37:8F
Authority key identifier: A8:0F:92:30:DA:24:0E:F9:87:BC:A2:B2:9E:46:49:A1:AB:1C:F3:41
Certificate issuer:       /CN=A80F9230DA240EF987BCA2B29E4649A1AB1CF341
Certificate serial:       115C6982497703ACA7606DDFF60204A2C761C644
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
Manifest number:          0238
Signing time:             Wed 04 Jun 2025 07:31:08 +0000
Manifest this update:     Wed 04 Jun 2025 07:26:08 +0000
Manifest next update:     Thu 05 Jun 2025 10:58:08 +0000
Files and hashes:         1: A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl (hash: Rr2fDRvDAJmY83bOhBt9PEQN4ay+k1WDUk7MG1uns44=)
                          2: 323830343a383134343a3a2f33322d3332203d3e20323732343433.roa (hash: hPkw1ttlYJ42cUc0Dp0zOZqoQc0JKu0HxxZ15u/LszY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl
                          rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Jun 2025 10:58:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:5c:69:82:49:77:03:ac:a7:60:6d:df:f6:02:04:a2:c7:61:c6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A80F9230DA240EF987BCA2B29E4649A1AB1CF341
        Validity
            Not Before: Jun  4 07:26:08 2025 GMT
            Not After : Jun  5 10:58:08 2025 GMT
        Subject: CN=223D42CECCBA6FE9428683F6735690B81226378F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1a:10:94:ab:1b:f9:a9:8f:21:51:4a:de:d9:
                    bc:78:4b:79:41:05:0a:94:a4:33:f3:a8:95:be:ea:
                    ed:03:d9:79:48:aa:0c:7e:a8:90:44:fb:3a:95:29:
                    f8:e2:90:92:68:69:c0:af:e1:fb:52:12:1c:42:c0:
                    fb:1a:4e:03:f5:42:06:90:35:18:01:ab:d4:83:4f:
                    f1:de:35:f3:e9:4d:0a:fb:6a:48:73:8c:3d:8d:b9:
                    0c:d2:87:d5:b8:c2:f6:b9:09:ab:e4:3a:d1:92:d2:
                    af:b8:8b:e1:be:5d:e4:94:7f:e6:fe:9e:e3:c0:9e:
                    02:3d:48:66:2e:52:fd:36:2a:bb:55:d2:9e:7c:9f:
                    4c:57:db:39:87:76:0f:30:f4:dd:22:f2:0b:70:b9:
                    d9:14:3e:da:9a:c4:15:9b:ba:ea:c1:5d:8d:75:7e:
                    c1:87:9e:4e:61:e0:d4:95:e1:a1:ff:2d:c6:76:d6:
                    df:a1:07:00:9e:f7:a3:9e:f8:7b:82:7e:f5:89:90:
                    58:d5:11:09:cc:a5:a9:a3:7b:36:66:5f:2e:9b:2c:
                    1e:7f:15:b8:5b:29:a5:a4:8f:f2:c4:4e:1f:49:0e:
                    90:d5:3c:d4:4e:6c:07:85:a6:d3:8f:e2:1f:f7:91:
                    8d:99:4d:dc:2a:1d:96:01:52:c0:b4:36:c3:67:dd:
                    cb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:3D:42:CE:CC:BA:6F:E9:42:86:83:F6:73:56:90:B8:12:26:37:8F
            X509v3 Authority Key Identifier:
                keyid:A8:0F:92:30:DA:24:0E:F9:87:BC:A2:B2:9E:46:49:A1:AB:1C:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:cc:23:33:06:2f:a3:c6:e6:03:39:8f:85:58:ae:8f:f5:54:
         58:d9:2a:3b:a7:3d:41:43:38:d0:ea:8d:c0:97:9f:88:ef:77:
         fc:7a:12:2d:fd:5a:6c:96:5d:ec:45:90:f5:db:d9:3d:40:d1:
         06:aa:98:9f:60:dd:74:e0:e3:e1:4a:1a:af:90:ef:b7:26:6f:
         0b:89:de:ed:45:f9:50:44:1a:c4:36:81:14:1e:12:ab:0e:e8:
         be:f2:59:a3:73:52:a0:d9:28:b9:ae:0a:e0:15:27:88:03:76:
         10:6b:5f:a8:80:7b:56:d8:2b:61:bf:a3:64:5a:b7:09:00:07:
         3d:ea:df:79:f8:56:00:69:29:3a:89:b9:39:81:75:b5:48:a7:
         29:90:77:9e:aa:8d:3e:5e:a6:a1:a1:40:86:b1:e0:b4:36:09:
         7f:e6:89:75:a9:2d:21:58:c1:5c:78:d2:47:2c:c5:6c:51:0f:
         c5:25:0c:13:2e:b1:7a:7b:91:95:ad:2a:22:aa:bd:8f:bb:b7:
         c8:54:6d:8f:d6:71:3a:df:b4:bd:c7:73:f4:fe:05:cc:48:3b:
         b1:86:87:82:d0:5e:5d:01:0a:a6:55:aa:0b:a2:ba:ac:51:07:
         82:df:ee:d6:24:50:e9:bc:2b:8a:95:dd:13:96:25:e7:36:42:
         0b:30:ed:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:04:34 2025 by rpki-client