Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/1/AB2A97FB18AC96C06177343B1FB982A8506F104A.mft
File:                     AB2A97FB18AC96C06177343B1FB982A8506F104A.mft (raw, json)
Hash identifier:          Hqr8Jd9pbkF7F8K1SzY9zUU4FG5PXNZ2MCIstYDRLno=
Subject key identifier:   25:FD:B6:00:BF:37:01:8E:7D:AA:61:32:72:98:C1:25:73:9C:6C:C6
Authority key identifier: AB:2A:97:FB:18:AC:96:C0:61:77:34:3B:1F:B9:82:A8:50:6F:10:4A
Certificate issuer:       /CN=AB2A97FB18AC96C06177343B1FB982A8506F104A
Certificate serial:       1A8FDDD06494496EC231E67DB346FEE4D8412464
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB2A97FB18AC96C06177343B1FB982A8506F104A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/1/AB2A97FB18AC96C06177343B1FB982A8506F104A.mft
Manifest number:          028B
Signing time:             Wed 11 Jun 2025 02:40:00 +0000
Manifest this update:     Wed 11 Jun 2025 02:35:00 +0000
Manifest next update:     Thu 12 Jun 2025 02:40:00 +0000
Files and hashes:         1: AB2A97FB18AC96C06177343B1FB982A8506F104A.crl (hash: EMP4TG/FbE9lmyj/Dh8LQPhjBLhGbIcs7Z7VeuZbW3I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/1/AB2A97FB18AC96C06177343B1FB982A8506F104A.crl
                          rsync://rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/1/AB2A97FB18AC96C06177343B1FB982A8506F104A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB2A97FB18AC96C06177343B1FB982A8506F104A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 00:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:8f:dd:d0:64:94:49:6e:c2:31:e6:7d:b3:46:fe:e4:d8:41:24:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB2A97FB18AC96C06177343B1FB982A8506F104A
        Validity
            Not Before: Jun 11 02:35:00 2025 GMT
            Not After : Jun 18 02:40:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f3:35:cb:e5:af:e0:c9:80:ce:d0:6a:c8:a4:
                    ed:49:7d:ad:06:81:7e:85:bd:1c:03:ff:18:9c:be:
                    ce:19:24:31:8f:1d:cc:1d:9f:c0:be:d0:4a:0a:57:
                    05:a8:55:0a:0a:24:b2:7b:7b:50:aa:90:42:13:aa:
                    7d:55:14:bc:ba:cc:c5:b7:c9:1e:c5:2e:bc:3b:b7:
                    9c:30:a6:f1:e8:12:20:2a:42:2e:3b:43:b3:1e:a6:
                    fb:90:d9:2d:b0:51:cc:c9:65:1f:78:09:39:ae:62:
                    1d:f6:b0:a9:62:55:8d:8b:46:de:a4:ac:e1:86:43:
                    30:fa:32:4b:90:b0:66:ad:f9:85:b4:61:1a:98:07:
                    a1:f2:7f:26:5c:8f:9b:29:db:72:7f:19:0e:e8:5c:
                    96:e7:e7:e0:90:01:e8:a3:84:ea:f4:0a:9f:1c:98:
                    01:08:3a:2c:5d:9e:28:a6:fa:f0:03:1f:ff:a0:75:
                    ea:d8:11:3e:96:b7:25:cb:28:0c:79:dc:87:59:cc:
                    36:f2:f1:1e:a3:2c:53:e7:85:81:35:70:8e:ea:2e:
                    b1:d6:2a:f3:e2:87:85:ab:3c:34:85:4d:1e:23:23:
                    aa:79:b3:cd:a5:be:21:1f:a4:6f:f1:e0:7d:8c:70:
                    76:9c:e1:2e:c5:27:c3:e4:b7:6a:55:d6:3e:1e:7a:
                    3c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FD:B6:00:BF:37:01:8E:7D:AA:61:32:72:98:C1:25:73:9C:6C:C6
            X509v3 Authority Key Identifier:
                keyid:AB:2A:97:FB:18:AC:96:C0:61:77:34:3B:1F:B9:82:A8:50:6F:10:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/1/AB2A97FB18AC96C06177343B1FB982A8506F104A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB2A97FB18AC96C06177343B1FB982A8506F104A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/1/AB2A97FB18AC96C06177343B1FB982A8506F104A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d0:87:69:19:8d:b6:d4:3a:ac:b8:1a:7f:8d:00:f1:56:ed:
         08:cd:15:de:5b:8e:2e:de:aa:1a:74:34:2c:d8:a5:5e:69:4d:
         e0:4b:94:af:87:cb:89:9a:5a:c8:d0:3d:6f:e3:90:c4:45:5a:
         60:49:1d:1a:89:3a:40:79:d1:3a:79:8d:2d:c3:c8:31:7e:05:
         26:e9:e1:fc:b1:52:de:f4:c0:6d:e7:3f:c2:34:e7:e0:02:68:
         1c:95:92:46:44:09:93:f5:e1:b5:e5:20:25:31:20:f9:0b:70:
         01:59:d6:6f:4b:54:c0:f5:b7:ff:dd:43:94:aa:e0:c2:12:53:
         81:dd:66:73:05:26:b0:db:4a:0d:99:ab:f3:1a:d0:71:b8:d9:
         00:f7:c6:f2:00:06:35:fe:40:2e:05:8a:ac:74:81:17:4a:32:
         99:83:c4:e5:77:7b:af:55:51:b4:36:c8:9e:8b:91:c3:60:af:
         22:1d:5a:bc:6f:a3:4d:b2:14:91:91:ed:52:58:b1:41:e3:31:
         8c:39:85:17:ce:5b:cc:5c:3f:38:2e:cf:7e:91:53:ee:ff:80:
         79:1d:af:9d:05:5d:46:c0:78:9a:25:4a:9d:f6:1c:4b:8b:b4:
         a5:01:40:71:55:6c:ef:b6:02:d5:96:14:63:ff:d2:3e:a3:14:
         6e:c5:f8:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 11 07:23:12 2025 by rpki-client