Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
File:                     2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft (raw, json)
Hash identifier:          sgby0aSOBFrkA0r2yCKqRkJOmLae6vqYmlNLmQkHboY=
Subject key identifier:   21:FC:64:D2:27:72:E9:9C:B1:6D:C4:2D:89:1B:4E:1A:1E:D2:4A:77
Authority key identifier: 2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70
Certificate issuer:       /CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370
Certificate serial:       4D9A314B825039EAC3BE46C0942724737849B1AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
Manifest number:          023A
Signing time:             Wed 11 Jun 2025 02:23:46 +0000
Manifest this update:     Wed 11 Jun 2025 02:18:46 +0000
Manifest next update:     Thu 12 Jun 2025 06:11:46 +0000
Files and hashes:         1: 2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl (hash: SyEHaxL0r/yGdLFq8ahFVAHVMkCW809/I4gzKXiR3dI=)
                          2: 34352e37312e38342e302f32322d3234203d3e20323637363032.roa (hash: 1NxEPZFmMr8y2/dlgVX6k0u/Jfu4X7J3Z/0pEUeqw54=)
                          3: 323830343a343431383a3a2f33322d3334203d3e20323637363032.roa (hash: SVa3n9CXuCMyjnUcZIuGz915kRDbHwqunvwZpWNFCqE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl
                          rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 06:11:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:9a:31:4b:82:50:39:ea:c3:be:46:c0:94:27:24:73:78:49:b1:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370
        Validity
            Not Before: Jun 11 02:18:46 2025 GMT
            Not After : Jun 12 06:11:46 2025 GMT
        Subject: CN=21FC64D22772E99CB16DC42D891B4E1A1ED24A77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c2:ef:64:5d:68:d6:12:bc:5d:a8:92:82:a5:
                    32:38:fc:87:38:58:df:54:b1:a5:96:1f:ac:63:97:
                    05:07:f0:be:76:99:b9:86:fc:66:40:92:1d:7c:75:
                    d4:95:ba:14:14:8a:97:97:79:b1:96:6a:c7:e7:83:
                    ac:8e:f5:06:ab:be:ed:ec:cc:27:d6:13:ec:cf:cc:
                    59:6c:57:c4:a9:fe:4a:3d:f0:d8:b7:fd:56:84:a2:
                    c1:a3:8d:70:56:01:e8:1c:67:ee:e1:4e:ca:02:18:
                    f3:ce:d4:ce:ab:36:bd:9c:f3:f6:b0:5d:2b:ba:81:
                    06:e7:52:11:dd:09:a0:af:da:fc:d1:cf:c7:6f:34:
                    82:2b:ee:d1:cc:92:44:35:9f:c5:52:26:56:79:ac:
                    8e:8e:5c:c7:99:ea:5b:85:8d:5b:99:80:1a:53:eb:
                    4d:0f:af:89:c0:41:60:2a:fc:5a:7a:81:36:7c:d2:
                    0a:25:db:5a:6a:aa:fb:62:6d:17:bf:6b:0c:b9:aa:
                    35:d4:ad:76:a8:25:c5:2d:ff:d5:d2:e9:58:e6:0e:
                    0f:ff:7f:fc:4f:3e:5e:d9:c0:29:5e:3c:63:6e:0a:
                    e3:07:22:ca:bd:22:8d:2c:12:17:eb:7c:ee:ca:16:
                    19:06:13:3b:39:07:20:5a:41:20:ca:1f:83:9f:3a:
                    b6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FC:64:D2:27:72:E9:9C:B1:6D:C4:2D:89:1B:4E:1A:1E:D2:4A:77
            X509v3 Authority Key Identifier:
                keyid:2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:63:4e:14:fb:aa:71:fe:85:a9:76:dd:6a:f3:75:51:70:6c:
         51:4c:a3:7f:28:cd:48:2a:d1:b8:3e:76:4a:50:a9:68:d6:18:
         6e:33:90:e1:cb:b4:30:1b:8c:41:8b:b0:0a:87:6b:be:a1:22:
         1d:d3:d8:d3:d9:6e:a3:53:ed:26:bb:de:7e:3e:56:be:69:03:
         03:16:92:52:93:c9:34:43:ad:05:ea:86:fe:f8:4d:55:c5:a4:
         d7:91:a5:3a:c3:ca:f7:2c:2c:1a:f3:8f:07:8b:82:e1:0c:26:
         53:ca:e9:83:38:53:29:06:80:6f:d1:0c:75:4d:7c:0d:bb:9d:
         21:7c:f1:2d:2f:75:66:1c:10:4c:04:28:e7:e9:1c:31:d2:10:
         e6:64:93:d1:64:44:f3:4f:1b:96:c6:97:17:48:58:be:7b:89:
         37:89:0c:8f:49:78:56:02:de:39:8c:f8:7b:70:33:cf:30:c2:
         23:6d:85:17:78:75:fe:6a:81:df:d4:77:7c:79:b1:4e:b8:d6:
         1f:3d:bd:fa:da:b7:ff:d3:b9:88:ba:6a:cd:dc:80:12:9e:f5:
         51:ab:05:7f:fc:58:fc:56:e2:6e:2c:e3:50:4b:89:bf:0c:0f:
         03:74:1e:51:c5:15:6e:b1:31:b7:ba:25:22:d7:61:dc:9e:bb:
         99:c3:67:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:46:37 2025 by rpki-client