Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.mft
File:                     02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.mft (raw, json)
Hash identifier:          LMjl17vFNGfY4k6VkLjAUQuFFVaY5q5aIcn6q7jC230=
Subject key identifier:   81:CB:24:A3:8B:5F:77:A9:03:4C:D5:E6:44:4F:B0:B1:6C:84:AB:FA
Authority key identifier: 02:AF:15:78:6C:E0:3E:FA:4A:63:F9:B5:B5:E9:50:54:9A:B9:7D:A5
Certificate issuer:       /CN=02AF15786CE03EFA4A63F9B5B5E950549AB97DA5
Certificate serial:       1A3209ADE2EE30BC18F30196909E8FA9F3F7E37B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.mft
Manifest number:          1F
Signing time:             Fri 09 May 2025 13:26:17 +0000
Manifest this update:     Fri 09 May 2025 13:21:17 +0000
Manifest next update:     Sat 10 May 2025 14:53:17 +0000
Files and hashes:         1: 323830343a386261633a3a2f33322d313238203d3e20323733373438.roa (hash: IXtbrZ88S7iaYvfOEJ+5JHb4koMATl5+ir1CrW4Xk+Y=)
                          2: 02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.crl (hash: ykrEZB/IG7a5oYUV/C5rpIrsg5bB5HpVLw6+8IZsy38=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.crl
                          rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 14:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:32:09:ad:e2:ee:30:bc:18:f3:01:96:90:9e:8f:a9:f3:f7:e3:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02AF15786CE03EFA4A63F9B5B5E950549AB97DA5
        Validity
            Not Before: May  9 13:21:17 2025 GMT
            Not After : May 10 14:53:17 2025 GMT
        Subject: CN=81CB24A38B5F77A9034CD5E6444FB0B16C84ABFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b8:8b:6e:b4:5c:b9:5b:cd:44:98:4b:36:47:
                    17:ed:34:ad:de:cc:2d:f0:10:95:82:9c:10:a4:58:
                    c9:e6:ac:33:c3:c1:d5:83:21:d6:d8:e1:6a:20:69:
                    cd:64:1e:91:9a:76:b5:c4:f7:97:4e:28:d2:96:db:
                    8d:55:55:a6:91:a7:6b:29:82:1f:e0:c3:38:90:7c:
                    b5:5d:b2:43:3e:74:f0:a2:99:89:5a:d0:6c:30:77:
                    da:4a:dc:ec:e3:b2:b8:9c:10:8b:04:d1:23:d7:30:
                    d3:57:35:fb:a1:b5:b6:26:25:cb:d5:bf:fd:73:aa:
                    11:78:fb:7a:f0:b1:e1:b5:f4:27:39:6f:80:d2:ff:
                    e7:6d:55:96:e9:ef:46:15:17:08:93:d9:a4:98:d8:
                    33:25:b1:03:eb:9b:60:cd:57:8d:17:8d:b9:18:ed:
                    0a:51:07:a8:c9:e6:0a:8e:56:3e:b5:73:49:57:5d:
                    c9:46:c2:e1:60:c2:cf:4d:80:99:f2:c5:fe:47:7b:
                    db:ee:a5:3e:ca:5b:20:67:b0:5b:2e:0c:c1:e3:6e:
                    d4:84:e5:f0:b4:66:20:95:fe:18:ed:85:71:5f:95:
                    6c:19:68:d7:68:b1:7c:18:a6:0d:4e:9b:a1:f2:02:
                    26:68:ca:d4:45:c9:bb:70:07:68:45:d1:87:b8:e1:
                    0d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CB:24:A3:8B:5F:77:A9:03:4C:D5:E6:44:4F:B0:B1:6C:84:AB:FA
            X509v3 Authority Key Identifier:
                keyid:02:AF:15:78:6C:E0:3E:FA:4A:63:F9:B5:B5:E9:50:54:9A:B9:7D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:99:56:e5:90:29:91:9a:e9:c1:f9:44:61:7f:6e:7c:2a:e7:
         1e:3c:21:cd:9f:75:87:04:de:34:b5:ae:75:b0:57:22:9a:7b:
         ac:3e:a9:2f:21:e5:ba:e2:c7:cf:c5:b2:e7:3a:04:3b:33:a9:
         53:f9:b9:d9:7c:5e:16:7e:4e:28:a1:0f:07:34:22:80:0e:4d:
         43:30:e9:02:dc:3b:b3:6c:10:39:49:d7:3b:a3:9e:5e:a5:36:
         21:3d:04:97:cb:91:d0:b7:3c:45:a3:87:0f:22:0d:70:e2:f8:
         23:11:da:db:df:3c:6e:10:4e:6f:62:c1:fb:ef:4d:f1:40:f2:
         90:55:88:bd:9d:4d:4e:77:3a:1b:3d:e6:c8:d6:b3:9b:88:5d:
         66:e0:19:2c:05:2b:d8:f1:6a:37:84:0a:c0:b5:2d:55:12:a1:
         f0:0b:19:88:3c:13:f2:fe:0a:84:38:92:4c:6e:68:be:12:02:
         1a:6d:46:87:e0:4c:61:5e:6d:11:20:81:f9:78:56:ef:84:c5:
         d6:2f:ee:17:30:77:98:e5:72:9e:af:29:ac:39:11:dd:9e:a4:
         34:a4:67:43:0d:81:6d:c2:ad:da:07:94:d4:82:fa:55:a1:4b:
         4b:63:7d:7e:92:e4:c3:39:20:fe:45:15:28:80:5d:5d:5a:8e:
         88:59:da:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:12:42 2025 by rpki-client