Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.mft
File:                     24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.mft (raw, json)
Hash identifier:          kpynF9gf08MBhIb6+0aEWRk1F10KVZOMy2RwVwQ3wcc=
Subject key identifier:   FB:45:61:30:E4:89:99:42:B9:52:FE:00:4F:E9:FB:0A:03:4D:95:74
Authority key identifier: 24:DF:93:83:2F:F7:1F:76:C5:3D:63:DC:FD:F3:B5:BB:68:79:ED:76
Certificate issuer:       /CN=24DF93832FF71F76C53D63DCFDF3B5BB6879ED76
Certificate serial:       052B709727D61E14AD8DDCDF18AB382242C179F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.mft
Manifest number:          3A
Signing time:             Thu 21 Aug 2025 00:58:54 +0000
Manifest this update:     Thu 21 Aug 2025 00:53:54 +0000
Manifest next update:     Fri 22 Aug 2025 02:28:54 +0000
Files and hashes:         1: 24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.crl (hash: Mjk+d+ei1S6nFoKyCIwy91PXaFfrhweqS0zU4Bf1vdY=)
                          2: 323830343a363235383a3a2f33322d3334203d3e20323639323931.roa (hash: 4i35/DDK212Z4khUOosAUbxmpZ/wFg45Y7cXSY+E8/w=)
                          3: 34352e3138332e3230382e302f32322d3234203d3e20323639323931.roa (hash: UnGbdsoU9eY8lDsUGDJ+NceLPEN91iBYZFlapSh04As=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.crl
                          rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Aug 2025 02:28:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2b:70:97:27:d6:1e:14:ad:8d:dc:df:18:ab:38:22:42:c1:79:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24DF93832FF71F76C53D63DCFDF3B5BB6879ED76
        Validity
            Not Before: Aug 21 00:53:54 2025 GMT
            Not After : Aug 22 02:28:54 2025 GMT
        Subject: CN=FB456130E4899942B952FE004FE9FB0A034D9574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:87:0b:fc:1a:6b:27:02:00:3b:66:bf:9d:44:
                    1e:a7:a4:c0:88:2d:5a:20:88:1b:28:99:de:43:38:
                    5f:4d:a3:3f:f7:6f:27:90:3e:56:ba:39:45:23:51:
                    43:cf:6a:2a:23:bb:66:41:c8:b5:88:45:d2:49:b2:
                    65:af:64:b8:0a:72:0b:3a:04:77:22:56:ff:3e:35:
                    d5:a4:7d:c9:78:70:88:eb:a1:bd:46:b3:e3:9e:bf:
                    b3:4c:97:fc:d1:3e:c0:e2:98:99:a3:a6:db:29:ec:
                    82:2a:2b:a9:39:53:89:94:3f:b3:d0:96:d4:13:b2:
                    1b:24:58:87:b6:d2:e6:08:e3:59:b8:40:63:c8:9a:
                    fc:3e:5b:e9:f5:28:0c:8b:06:14:3f:57:e0:8c:d7:
                    b7:11:da:a5:13:74:3a:1a:23:ce:77:5c:59:47:07:
                    02:31:29:95:2c:12:4a:8d:6c:fb:6d:d4:a9:e1:a8:
                    42:38:5d:46:a7:1f:45:23:06:70:5d:8f:23:2b:81:
                    02:17:e3:8d:06:e8:c0:a2:17:0d:79:08:f6:ac:0b:
                    7d:60:bd:b8:5f:70:e0:8e:98:e2:5d:e3:f0:a4:82:
                    ae:cb:65:5f:2a:85:de:1e:0d:48:8b:ff:6f:c4:25:
                    f2:f1:aa:b2:77:2a:8d:16:cd:37:83:44:b4:b4:4b:
                    62:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:45:61:30:E4:89:99:42:B9:52:FE:00:4F:E9:FB:0A:03:4D:95:74
            X509v3 Authority Key Identifier:
                keyid:24:DF:93:83:2F:F7:1F:76:C5:3D:63:DC:FD:F3:B5:BB:68:79:ED:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d8:b9:da:d7:57:10:25:8c:15:6e:b0:1c:4e:87:a5:40:82:
         dd:57:59:e6:30:9b:d5:1d:d4:56:d5:08:f5:2a:db:46:96:bd:
         41:70:d4:b4:b5:f0:e3:aa:fa:95:d8:a5:7a:4e:10:56:b3:f8:
         36:a0:69:d1:82:22:22:c1:5d:64:16:8b:08:1d:f4:c9:e9:70:
         2c:11:2a:ae:bb:19:94:b4:3f:3d:03:ed:46:45:c1:42:44:4d:
         2b:f9:e6:5a:1e:7a:5e:43:b2:09:37:83:10:d5:66:75:83:52:
         72:1d:ab:36:bc:a2:77:b7:39:6a:35:cd:a4:60:6b:af:80:6c:
         0d:01:e3:c8:7c:17:fc:57:2a:52:16:a1:c3:09:1c:29:56:31:
         c6:78:51:b9:86:89:85:97:31:84:7e:90:b7:1a:23:b6:50:88:
         af:15:3a:fb:ca:0d:f5:9c:fb:98:c8:e5:66:f4:b7:2b:01:91:
         98:e4:e5:16:3c:d5:2d:7e:00:a7:82:97:27:d5:b3:01:7e:24:
         18:73:42:38:ab:37:82:62:c2:39:2c:e7:c7:f2:4a:98:f5:43:
         51:52:4c:9e:5d:69:34:68:a5:04:52:a4:6d:ab:cf:ab:17:96:
         73:eb:f0:11:dd:fe:99:e0:59:af:4f:3b:c9:a8:58:05:c1:76:
         32:73:ca:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 04:58:41 2025 by rpki-client