Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
File:                     A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft (raw, json)
Hash identifier:          aydeRWCM/Oeaxhjh3mgoGTj2YtSFl+UBm/VzvulDh0A=
Subject key identifier:   B2:DB:D8:84:0F:8D:BC:83:D0:51:26:D2:DA:07:19:05:1A:22:F0:EE
Authority key identifier: A8:0F:92:30:DA:24:0E:F9:87:BC:A2:B2:9E:46:49:A1:AB:1C:F3:41
Certificate issuer:       /CN=A80F9230DA240EF987BCA2B29E4649A1AB1CF341
Certificate serial:       454867511E68C1017F21D85A49397284EB8D8ACA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
Manifest number:          021B
Signing time:             Tue 13 May 2025 16:36:21 +0000
Manifest this update:     Tue 13 May 2025 16:31:21 +0000
Manifest next update:     Wed 14 May 2025 17:10:21 +0000
Files and hashes:         1: 323830343a383134343a3a2f33322d3332203d3e20323732343433.roa (hash: hPkw1ttlYJ42cUc0Dp0zOZqoQc0JKu0HxxZ15u/LszY=)
                          2: A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl (hash: ctRXu7ueTFV36cuAhx1RlAEl+4vzsdNebe2fVbs2Ylg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl
                          rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 17:10:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:48:67:51:1e:68:c1:01:7f:21:d8:5a:49:39:72:84:eb:8d:8a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A80F9230DA240EF987BCA2B29E4649A1AB1CF341
        Validity
            Not Before: May 13 16:31:21 2025 GMT
            Not After : May 14 17:10:21 2025 GMT
        Subject: CN=B2DBD8840F8DBC83D05126D2DA0719051A22F0EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:81:cf:2f:8d:8f:3d:05:b5:03:30:1e:ab:
                    94:12:27:4a:64:fb:b9:2a:a3:c6:bf:89:df:99:bd:
                    79:39:a1:27:ad:aa:b2:5f:bb:8d:d6:32:63:66:03:
                    b1:9e:1c:ab:49:85:8f:2b:70:b9:25:f1:01:24:ba:
                    36:b6:f6:70:00:f0:33:54:20:df:df:e4:b6:57:80:
                    ea:48:75:2d:f9:38:2e:3c:1f:33:5d:5d:38:cd:59:
                    ed:a1:fc:bd:8b:1b:4a:c3:20:07:97:d9:13:57:89:
                    a1:a9:da:3a:c7:1a:98:71:b2:59:98:73:a0:84:da:
                    75:9b:bc:3a:09:f9:3b:6c:fb:90:cb:8d:25:00:9c:
                    94:70:d5:4f:86:f4:2f:87:3f:e1:b8:77:95:25:5a:
                    1c:22:3f:81:9c:41:cc:c4:d0:a9:39:7a:68:f8:3e:
                    6e:4e:82:bb:3d:b2:ce:d0:b3:f9:5f:32:82:d4:4c:
                    48:9d:e9:62:7e:62:73:6d:e8:01:43:a3:fa:32:e7:
                    65:59:72:30:02:60:56:bc:b9:86:2d:e8:d3:ef:f5:
                    1d:77:58:1e:32:08:ad:f2:9e:e3:7f:71:9a:91:d4:
                    52:45:5c:0d:b9:6c:5d:dc:db:86:05:53:ec:ec:ca:
                    c6:0f:67:c7:25:14:43:a9:c8:8c:5d:5f:1c:e0:7c:
                    a5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DB:D8:84:0F:8D:BC:83:D0:51:26:D2:DA:07:19:05:1A:22:F0:EE
            X509v3 Authority Key Identifier:
                keyid:A8:0F:92:30:DA:24:0E:F9:87:BC:A2:B2:9E:46:49:A1:AB:1C:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:06:8c:68:6e:90:17:5c:af:a2:a3:3f:39:36:83:28:11:86:
         1f:a8:8c:77:90:0f:26:da:d6:21:92:26:3c:8f:3b:73:ac:98:
         4d:5c:3f:7f:92:2c:33:9d:10:f2:b7:a5:92:ff:1f:28:45:cb:
         4d:3d:60:e8:4e:17:5c:94:f8:8b:12:d5:5c:92:dd:e6:0b:07:
         75:80:11:39:6f:f0:62:90:0e:b2:2e:bd:c5:1e:f1:f2:62:fe:
         c3:49:ed:60:5c:3b:f9:5a:71:61:35:87:02:06:37:cc:b5:f3:
         33:cd:09:e1:2d:5b:cf:6e:6d:a6:47:c0:ef:35:1c:81:ac:55:
         5f:4d:d8:12:55:15:30:93:ee:4f:f0:18:99:0f:39:5b:7b:94:
         5c:38:32:c6:22:8d:49:fc:fc:20:57:66:7e:73:48:1c:93:bc:
         20:38:83:d1:a8:73:4f:45:87:53:43:aa:20:79:9e:3b:19:ec:
         d0:ef:6b:07:0b:58:da:91:be:a8:35:24:e6:b4:36:00:1f:08:
         53:77:fd:d5:8c:8a:76:a5:52:50:87:8f:b7:ff:05:c1:0a:35:
         dd:18:d4:ca:ad:89:73:f4:9f:1a:68:c2:f3:e3:c8:6c:66:33:
         63:f4:cd:25:0f:ee:39:fa:de:a9:16:39:df:f0:de:1d:00:9d:
         06:77:fa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:55:34 2025 by rpki-client