Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft
File:                     AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft (raw, json)
Hash identifier:          J20l+aMy/cv4XFX83ziYKzarPhdjo1fBhM+eEVIVDvs=
Subject key identifier:   00:6E:FE:5B:DE:2A:44:60:6A:B3:9B:5B:F9:69:EC:F2:00:48:4C:D0
Authority key identifier: AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21
Certificate issuer:       /CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021
Certificate serial:       16F0B17ECF8F1AF655BEB6C3F55A81CF92A63B58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft
Manifest number:          0245
Signing time:             Fri 13 Jun 2025 03:50:01 +0000
Manifest this update:     Fri 13 Jun 2025 03:45:01 +0000
Manifest next update:     Sat 14 Jun 2025 04:46:01 +0000
Files and hashes:         1: 34352e3233362e3135382e302f32342d3234203d3e20323638323534.roa (hash: JHU7hFLVcz7KCri5GGmgpJSrExwyJApMd1LcVi/3ahc=)
                          2: AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl (hash: FsJDBW74iP0QT+Qa+eWY4Ulrk2mcUwLc5VQxMWVMLcw=)
                          3: 34352e3233362e3135362e302f32322d3232203d3e20323638323534.roa (hash: XrgPqt2d+yXrgA5qVsA3hVOyOYJP6pNSPVOYcSw37As=)
                          4: 34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa (hash: G+9fnKDKYzXcNVDiQbyVgNQLvfSyrAWnEylFjOb1cKM=)
                          5: 34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa (hash: g+h7ZeJQoiwltb4pTrWxNjM0uMiKUgQuoMSR90spDQE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl
                          rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 04:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f0:b1:7e:cf:8f:1a:f6:55:be:b6:c3:f5:5a:81:cf:92:a6:3b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021
        Validity
            Not Before: Jun 13 03:45:01 2025 GMT
            Not After : Jun 14 04:46:01 2025 GMT
        Subject: CN=006EFE5BDE2A44606AB39B5BF969ECF200484CD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:14:25:8d:da:2c:f6:b7:4e:12:83:1c:c5:0d:
                    c3:96:2d:0a:d9:2a:01:9e:a9:2e:ac:35:19:c0:b0:
                    39:65:45:c1:51:02:87:8d:dd:1a:bc:1e:62:08:a9:
                    59:4f:80:a0:b7:b4:ec:6c:d6:23:f0:d8:23:2a:77:
                    74:da:f8:2f:75:22:d7:cd:35:f1:e5:a8:63:33:7d:
                    8e:bd:31:4d:77:66:b3:c8:e3:a6:20:2e:aa:6b:1a:
                    0d:ed:61:87:10:4d:bc:8a:ff:a4:30:a6:48:ed:80:
                    cf:fc:e6:14:17:52:17:7f:90:08:c7:77:30:3d:f0:
                    f3:a8:81:f4:a4:05:ad:d7:eb:77:3c:e8:f8:2e:3f:
                    c0:94:30:8a:35:1b:2f:b4:d0:de:b1:5d:53:52:1a:
                    30:08:e3:cf:6a:b9:53:b4:68:c9:23:37:4d:3d:b3:
                    5c:ea:c8:db:24:73:bc:7b:37:37:23:ce:64:c7:a5:
                    3b:42:58:37:8d:64:ed:b5:dd:88:18:ed:a2:34:ea:
                    7b:59:07:61:55:ec:a2:5c:ce:41:ef:3a:7f:0e:82:
                    dd:94:83:fc:34:e2:50:9b:e2:02:27:ff:54:03:dd:
                    01:49:64:d7:da:8e:33:23:62:c4:e8:f7:34:5d:ff:
                    f2:eb:84:f3:8d:f6:a5:3a:17:0e:5b:f0:f0:44:32:
                    0d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6E:FE:5B:DE:2A:44:60:6A:B3:9B:5B:F9:69:EC:F2:00:48:4C:D0
            X509v3 Authority Key Identifier:
                keyid:AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:6c:62:1b:c4:f7:11:79:83:ba:c7:d3:4c:1d:38:a4:20:b4:
         a6:dd:54:7a:bd:34:03:19:7a:ff:8b:51:d7:51:81:ac:40:ab:
         52:25:e4:44:58:87:b1:a2:30:95:f5:d1:71:42:03:2e:09:cb:
         ce:a6:b2:65:86:76:b8:0d:87:6c:2c:0e:d3:a6:11:19:b0:ba:
         63:1d:40:cd:ea:96:88:dc:bd:9c:bd:a3:13:74:53:65:b1:af:
         f4:ba:d2:33:1c:6b:9a:45:97:31:3a:27:ab:48:1a:e3:ab:48:
         31:5a:52:ff:7d:d5:b1:83:13:89:94:35:27:a1:76:66:1e:bd:
         5a:5b:2e:75:7c:6a:25:7d:37:7b:09:ea:61:cd:6f:14:0c:52:
         46:8e:47:b0:5c:a8:c6:03:72:c8:a1:a4:2b:d2:c1:c0:07:62:
         b7:3c:f4:6f:fe:98:b3:fd:c6:58:4e:f2:eb:c0:bb:8a:b2:2f:
         13:ba:7d:6f:2a:cd:c8:02:40:4b:6c:36:74:2a:e3:d7:e3:a7:
         3f:e8:30:d7:c2:64:71:4e:bd:ed:d6:85:68:b8:96:53:a2:51:
         25:0f:52:99:87:0e:5b:8d:74:d0:6c:3d:29:6b:67:2b:c7:46:
         f7:0f:54:a8:02:df:63:88:6d:26:86:55:43:71:e2:03:39:17:
         5e:a1:8a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 08:22:41 2025 by rpki-client