Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/1/FF2AF20B38CDDACBADD03E10C296F31339478DE7.mft
File:                     FF2AF20B38CDDACBADD03E10C296F31339478DE7.mft (raw, json)
Hash identifier:          2SnQKdqT6kdyQJu+YIDMxN/6TobB/+cAeZuEY5P5VDY=
Subject key identifier:   14:AF:9D:2F:80:A6:20:0B:51:9D:82:0F:DF:FA:04:96:40:EA:39:06
Authority key identifier: FF:2A:F2:0B:38:CD:DA:CB:AD:D0:3E:10:C2:96:F3:13:39:47:8D:E7
Certificate issuer:       /CN=FF2AF20B38CDDACBADD03E10C296F31339478DE7
Certificate serial:       1E2BF5C6A1EFCED0E587376775F3FD4A0223C5E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2AF20B38CDDACBADD03E10C296F31339478DE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/1/FF2AF20B38CDDACBADD03E10C296F31339478DE7.mft
Manifest number:          0258
Signing time:             Thu 08 May 2025 18:10:02 +0000
Manifest this update:     Thu 08 May 2025 18:05:02 +0000
Manifest next update:     Fri 09 May 2025 18:10:02 +0000
Files and hashes:         1: FF2AF20B38CDDACBADD03E10C296F31339478DE7.crl (hash: 28404k5qpO+FKRHDvZh+dgCjkmPddD1b+A/S+wTp97U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/1/FF2AF20B38CDDACBADD03E10C296F31339478DE7.crl
                          rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/1/FF2AF20B38CDDACBADD03E10C296F31339478DE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2AF20B38CDDACBADD03E10C296F31339478DE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 18:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:2b:f5:c6:a1:ef:ce:d0:e5:87:37:67:75:f3:fd:4a:02:23:c5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF2AF20B38CDDACBADD03E10C296F31339478DE7
        Validity
            Not Before: May  8 18:05:02 2025 GMT
            Not After : May 15 18:10:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0d:be:9b:ce:98:7c:fc:91:9e:80:21:e1:9a:
                    73:7b:f7:18:c3:61:78:71:22:47:47:81:fb:5c:10:
                    6c:35:b6:73:91:b1:d4:fc:d2:94:7f:10:1a:e7:87:
                    9a:55:9c:1a:11:02:47:40:da:8e:2d:11:ae:b6:71:
                    be:8e:76:04:26:94:ef:c9:17:6a:7d:ac:fe:37:c4:
                    1b:4a:12:20:c8:f6:5e:2e:9f:5a:c5:67:c0:70:6d:
                    a9:d7:22:12:af:4a:7f:56:11:4c:25:ac:01:75:ac:
                    2c:85:cd:35:11:aa:e1:a1:48:bf:3c:13:f4:20:91:
                    a6:7c:71:ed:80:2c:8c:67:ab:9c:90:81:86:bb:37:
                    c7:ea:7c:58:21:a0:55:04:cc:0d:65:f7:a5:4c:15:
                    a7:ad:1e:93:0a:e3:af:49:80:1e:20:74:00:fe:d7:
                    54:ac:0d:e0:56:30:ea:78:cc:e0:4e:a3:86:22:b9:
                    41:c1:5c:9b:44:b3:93:c0:4a:aa:82:92:3a:fb:cd:
                    8a:75:52:37:ff:52:a1:57:4f:5d:02:80:bb:1a:62:
                    88:dd:46:33:2d:89:eb:b7:6c:74:52:fc:f5:02:42:
                    be:be:43:b6:85:38:3a:84:13:3f:96:64:ea:22:2d:
                    5c:41:15:d1:14:67:56:44:ca:67:d9:f4:be:b5:7d:
                    79:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AF:9D:2F:80:A6:20:0B:51:9D:82:0F:DF:FA:04:96:40:EA:39:06
            X509v3 Authority Key Identifier:
                keyid:FF:2A:F2:0B:38:CD:DA:CB:AD:D0:3E:10:C2:96:F3:13:39:47:8D:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/1/FF2AF20B38CDDACBADD03E10C296F31339478DE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2AF20B38CDDACBADD03E10C296F31339478DE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/1/FF2AF20B38CDDACBADD03E10C296F31339478DE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:98:d2:4f:14:77:34:c8:5b:d2:03:d2:92:b5:4c:33:31:76:
         75:21:55:de:7f:d4:2a:2a:05:ab:4b:bb:71:eb:16:28:15:08:
         7c:f2:91:5f:3f:57:07:0e:61:58:ec:2a:ad:d5:18:17:19:01:
         a5:da:1a:d5:f1:41:6e:92:52:00:02:d4:ef:b8:49:72:04:cc:
         b7:f7:f2:66:a8:6b:1e:6a:d9:78:cf:9c:e1:d8:c7:d2:59:88:
         48:81:41:5b:a3:89:5c:3d:8e:53:b0:8a:48:c2:6f:34:86:11:
         74:0c:95:a6:82:aa:b4:21:9d:e4:0c:fa:ac:6b:4b:39:b0:57:
         6f:27:00:61:ed:6a:d8:e9:6c:4f:cc:d3:ff:8e:c6:d1:45:7f:
         ab:75:87:ed:8e:cf:e8:1a:8d:5c:51:68:1b:11:7b:51:de:9f:
         c1:3e:a2:d1:6f:da:4a:ed:24:f4:29:1a:e2:3f:ad:3d:3d:fc:
         ab:20:6a:a5:78:74:21:d8:2c:ef:83:b4:68:b9:06:69:1d:78:
         71:f7:5c:33:be:46:1c:d6:42:05:37:94:cc:79:a0:65:38:29:
         b0:af:7c:a1:b9:1e:5a:33:06:ea:ba:eb:cb:eb:c7:fe:89:a2:
         a2:2e:bd:2e:cd:5e:9c:0a:19:f3:22:f7:3f:7c:02:59:14:f0:
         0d:f1:1e:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 9 04:04:37 2025 by rpki-client