Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft
File:                     24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft (raw, json)
Hash identifier:          yBE4a4HuNvDaHQOMa+UHjK3bNgt3hpQ248EW5OztshQ=
Subject key identifier:   FD:49:5A:ED:04:A2:00:15:76:44:D2:58:B9:F3:CF:EE:53:06:5B:37
Authority key identifier: 24:22:07:76:A3:FC:E0:83:8B:2F:26:9E:B0:AB:47:3E:05:D5:9C:BD
Certificate issuer:       /CN=24220776A3FCE0838B2F269EB0AB473E05D59CBD
Certificate serial:       63A042CD4C04FFD8DEE770147B8E6FD32935EF37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft
Manifest number:          0231
Signing time:             Fri 13 Jun 2025 21:15:53 +0000
Manifest this update:     Fri 13 Jun 2025 21:10:53 +0000
Manifest next update:     Sat 14 Jun 2025 21:24:53 +0000
Files and hashes:         1: 24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl (hash: lKG9MZer1J+tNuWYzzK+IQVp5L+1g+MGcV08pBFWJVM=)
                          2: 323830343a383232343a3a2f33322d3334203d3e20323732353031.roa (hash: aoSEe9vgZrtfcwTR0oWLHW8rJL7zCJXvVWuuSVGzvNY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl
                          rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 21:24:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a0:42:cd:4c:04:ff:d8:de:e7:70:14:7b:8e:6f:d3:29:35:ef:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24220776A3FCE0838B2F269EB0AB473E05D59CBD
        Validity
            Not Before: Jun 13 21:10:53 2025 GMT
            Not After : Jun 14 21:24:53 2025 GMT
        Subject: CN=FD495AED04A200157644D258B9F3CFEE53065B37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:63:2f:1e:87:06:65:5c:bc:55:57:e9:c9:5e:
                    c5:cd:fc:8e:37:fc:69:5c:63:96:4b:9c:46:a2:0d:
                    49:e1:92:b6:d3:f8:10:5a:d2:b5:56:f9:36:46:2f:
                    c3:0e:5e:44:a3:ef:87:46:eb:06:ff:e3:74:2f:c9:
                    2f:36:88:92:91:c1:76:e0:73:4a:e6:9c:97:bf:a8:
                    36:22:63:c4:c3:8f:fd:cf:c5:41:3c:9f:44:49:3a:
                    aa:a1:7a:9c:60:35:64:a8:df:b9:e6:57:c0:22:a3:
                    22:f8:e9:77:65:e5:ef:c7:49:46:65:ce:4b:f5:20:
                    46:25:d7:38:4a:21:fa:7f:96:54:0c:c0:f4:81:a8:
                    54:e5:73:5d:2e:e6:b0:fa:b2:9e:98:5d:fa:e4:db:
                    2f:95:db:54:eb:d7:7e:eb:63:0a:7b:10:fd:02:2e:
                    bf:4c:0a:42:e0:2b:e5:cd:84:6e:25:f9:59:82:4b:
                    47:3a:c0:27:82:7e:41:42:8c:d2:ef:4b:1d:19:fb:
                    c8:50:14:d3:5b:a5:20:3b:5c:ec:58:05:2e:4a:d8:
                    42:81:86:0b:a8:12:bd:b7:22:2d:87:db:db:08:98:
                    d2:4f:80:3e:1d:45:ab:b2:30:05:08:9f:3d:26:73:
                    c8:19:cf:c3:12:36:2b:7b:9b:44:e9:29:1c:dc:f0:
                    84:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:49:5A:ED:04:A2:00:15:76:44:D2:58:B9:F3:CF:EE:53:06:5B:37
            X509v3 Authority Key Identifier:
                keyid:24:22:07:76:A3:FC:E0:83:8B:2F:26:9E:B0:AB:47:3E:05:D5:9C:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:2b:4e:fd:ea:f4:d0:74:dc:59:c5:07:09:76:a7:38:83:45:
         46:f1:41:cc:8b:ca:bd:0b:a1:84:82:98:a1:e0:97:03:ac:5d:
         49:4e:c2:b0:f5:0d:b4:77:91:fe:d8:ce:c8:16:2f:81:54:3f:
         0f:75:27:42:a8:62:4e:51:2a:3b:de:ea:a0:3f:14:a3:76:b8:
         30:80:88:d9:eb:f3:c4:e3:aa:f7:40:1c:3e:90:89:e7:a1:60:
         fa:e6:64:f3:18:0f:76:de:bc:66:a3:1d:5a:de:de:bc:1e:c8:
         6d:4b:d3:fc:c1:1d:be:a2:c0:d3:18:c2:6c:6e:b3:f2:91:02:
         58:c7:0f:26:61:e1:1b:ea:e5:1f:1b:82:00:20:d3:86:ce:7b:
         15:39:4e:b1:73:16:25:29:72:e2:9a:35:93:39:80:4b:62:a1:
         21:2f:2c:4a:29:6d:f2:5b:25:4d:8f:28:c3:e8:3a:a6:f0:c5:
         17:65:12:ca:c3:1d:94:18:90:2b:c5:82:d7:b9:79:ef:8c:88:
         77:7b:c5:5d:e4:11:9b:c5:08:1e:5c:dc:75:e6:b9:de:03:b0:
         20:e5:68:d5:6d:14:29:58:ba:51:0d:4c:12:25:77:af:17:0b:
         6e:3b:d2:62:53:aa:df:b3:08:c1:bd:19:ca:9f:25:f4:2f:f6:
         b3:1c:e8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:07:12 2025 by rpki-client