Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.mft
File:                     9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.mft (raw, json)
Hash identifier:          pGXdQa0aX1ngDCLV9dns3kDQEDXsrCG7ydIiV3Ii5IU=
Subject key identifier:   5B:D7:0D:6A:43:E5:D2:03:E0:6E:3E:41:4B:A6:EB:19:80:F7:DF:E2
Authority key identifier: 9F:FA:BF:FA:1B:28:AB:A1:D0:51:EC:CB:BE:57:DE:91:57:6D:3F:3B
Certificate issuer:       /CN=9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B
Certificate serial:       2DA16E2ABAF256F0C459291FFA2DC305EE5F8D22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.mft
Manifest number:          023A
Signing time:             Fri 18 Apr 2025 02:40:00 +0000
Manifest this update:     Fri 18 Apr 2025 02:35:00 +0000
Manifest next update:     Sat 19 Apr 2025 02:40:00 +0000
Files and hashes:         1: 9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl (hash: Rn/zrCUtHV8eGMu5E9P3QHG2cTZJ3gQ3UoW/DT94v98=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl
                          rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 02:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a1:6e:2a:ba:f2:56:f0:c4:59:29:1f:fa:2d:c3:05:ee:5f:8d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B
        Validity
            Not Before: Apr 18 02:35:00 2025 GMT
            Not After : Apr 25 02:40:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:35:5d:db:38:91:e5:7c:64:0f:cc:1b:77:c5:
                    c1:56:a0:c6:fc:c5:3d:b6:61:4e:ea:32:8b:26:00:
                    33:70:9d:3f:d1:a5:51:73:d3:15:de:51:e3:9a:90:
                    d1:90:08:24:c1:69:f6:85:e4:5c:dc:70:84:31:91:
                    20:03:fc:bd:2b:3a:ef:2a:2a:6a:22:9e:b5:72:86:
                    25:de:dc:1a:5e:94:58:aa:5d:ff:b1:48:bd:bd:91:
                    0f:ea:3d:da:f0:72:1c:9b:36:a3:b0:a8:a3:97:4a:
                    0b:9c:fb:d2:14:23:1b:36:7e:63:00:d2:bc:68:76:
                    c2:55:32:0b:da:64:fb:9b:6a:77:3b:74:4f:26:07:
                    86:8d:ed:cb:c7:e6:85:99:c7:92:7e:50:4b:05:eb:
                    b5:e1:cc:ab:6d:42:c0:fb:75:a3:bb:ae:50:25:c9:
                    b2:19:4a:4a:13:fa:9e:9a:4c:7b:37:7c:68:dd:07:
                    bb:6e:1e:a5:f5:e5:57:8d:36:81:f6:da:4b:61:27:
                    ce:6e:0e:43:c3:59:db:f2:20:78:2d:ad:e6:25:18:
                    0b:14:48:93:7f:58:e3:11:f2:0d:29:52:ea:77:c0:
                    e7:9d:61:38:ad:a3:1e:c5:56:00:51:dc:dd:30:b7:
                    f4:ae:e5:72:cb:2e:66:e3:55:87:73:83:20:9b:e4:
                    a6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D7:0D:6A:43:E5:D2:03:E0:6E:3E:41:4B:A6:EB:19:80:F7:DF:E2
            X509v3 Authority Key Identifier:
                keyid:9F:FA:BF:FA:1B:28:AB:A1:D0:51:EC:CB:BE:57:DE:91:57:6D:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:1a:c9:d0:cf:13:08:40:cc:38:9f:62:3d:c6:ae:cd:49:9f:
         a0:da:03:8e:9f:2b:21:2a:9e:ee:65:41:b7:e8:1a:d3:f0:bd:
         4b:6e:d3:cc:50:17:4b:f0:64:0b:86:3b:99:a4:c2:30:c5:8e:
         de:58:e7:c5:6d:8f:85:34:90:e9:44:70:7d:c6:a9:99:5f:3e:
         69:6e:40:9d:8e:92:be:70:ed:21:21:2d:3c:19:54:cf:eb:76:
         24:60:26:93:33:d3:d8:c1:34:dc:68:7f:47:be:8d:cb:0f:07:
         0a:04:99:5d:ba:b5:06:2d:b5:39:a4:a3:bd:d7:16:7a:12:13:
         67:ac:bd:77:c1:97:87:a0:99:5f:72:dd:c8:ed:38:b0:de:17:
         6f:81:08:92:5a:b2:e5:e6:41:87:00:19:82:86:7d:9d:37:f1:
         23:c4:4d:98:14:8e:ad:70:18:91:de:cc:48:75:21:22:74:8c:
         60:34:f7:d3:a5:24:31:81:0e:28:0e:be:58:84:28:fe:74:d1:
         90:75:b0:a8:46:03:12:ed:bb:1b:9a:48:00:f0:3a:2b:d2:56:
         98:0c:45:80:23:1e:2c:fc:b6:ef:39:ca:8f:96:1f:12:9c:24:
         88:b0:e0:41:b3:e8:37:6d:19:fb:3a:de:6d:be:36:05:c1:60:
         18:dc:d1:70
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 18 19:37:36 2025 by rpki-client