Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/FD4F4B25972C4E648507F9D49CACC2CF95322DFF.mft
File:                     FD4F4B25972C4E648507F9D49CACC2CF95322DFF.mft (raw, json)
Hash identifier:          rHyWex4akujxyn7M7LKEGU7wqv6naUotL+I8N408www=
Subject key identifier:   AF:8B:53:88:3A:8E:75:2F:35:83:1F:D8:64:23:9E:93:77:EE:F0:03
Authority key identifier: FD:4F:4B:25:97:2C:4E:64:85:07:F9:D4:9C:AC:C2:CF:95:32:2D:FF
Certificate issuer:       /CN=FD4F4B25972C4E648507F9D49CACC2CF95322DFF
Certificate serial:       5618FAA031E5A29D2278782C46ADEDD0882B4D4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD4F4B25972C4E648507F9D49CACC2CF95322DFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/FD4F4B25972C4E648507F9D49CACC2CF95322DFF.mft
Manifest number:          3A
Signing time:             Tue 13 May 2025 17:47:04 +0000
Manifest this update:     Tue 13 May 2025 17:42:04 +0000
Manifest next update:     Wed 14 May 2025 19:38:04 +0000
Files and hashes:         1: FD4F4B25972C4E648507F9D49CACC2CF95322DFF.crl (hash: 2yyE14ZRF6auAYLcErLIQVDo1G7POor9mkJlCQeLPC0=)
                          2: 323830343a383966383a3a2f33322d3438203d3e20323733363338.roa (hash: 68uG3lber5suMPM6mhIdiBGhAtIcNhXUjwW5pS61qYE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/FD4F4B25972C4E648507F9D49CACC2CF95322DFF.crl
                          rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/FD4F4B25972C4E648507F9D49CACC2CF95322DFF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD4F4B25972C4E648507F9D49CACC2CF95322DFF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 19:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:18:fa:a0:31:e5:a2:9d:22:78:78:2c:46:ad:ed:d0:88:2b:4d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD4F4B25972C4E648507F9D49CACC2CF95322DFF
        Validity
            Not Before: May 13 17:42:04 2025 GMT
            Not After : May 14 19:38:04 2025 GMT
        Subject: CN=AF8B53883A8E752F35831FD864239E9377EEF003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dd:e5:6d:af:11:08:10:b9:01:09:13:28:21:
                    ed:82:a4:41:8f:e6:fb:99:cf:66:cd:ac:de:2a:f2:
                    15:cb:39:19:f7:78:df:b8:75:91:e8:79:d8:05:1d:
                    e1:89:ef:6d:5c:14:e1:dc:37:e8:95:a5:a4:83:1d:
                    b2:26:0a:62:12:07:9d:b5:a2:03:33:1c:b9:25:38:
                    66:e1:22:4c:62:51:6e:32:e5:ef:0b:3e:b5:ad:d4:
                    4e:d0:f3:11:43:03:84:6f:53:ee:ea:f6:53:92:d7:
                    0a:8f:87:4f:cd:3c:f6:4e:99:5f:33:42:23:26:12:
                    7b:ae:8d:01:fd:ef:f5:c4:bc:7c:e5:2c:cb:05:cd:
                    c8:07:36:28:25:85:b8:d3:d3:65:d9:ab:1f:64:6d:
                    f9:d2:f8:8a:fd:39:4c:24:c5:88:5c:cd:5e:c6:c9:
                    4f:3d:b6:88:e4:1d:b8:bf:79:93:89:a4:c7:27:dc:
                    0d:c9:fc:d9:73:2c:16:f9:3a:5d:c4:7c:8b:3c:ea:
                    31:b5:ba:02:bf:e3:3c:8c:81:e9:98:d7:2c:23:ab:
                    d6:b4:ab:5b:14:eb:36:17:82:ba:10:e3:95:e7:53:
                    48:80:b2:cd:fc:e1:14:74:7b:d5:cf:17:ed:07:b7:
                    58:35:8d:6b:84:a6:5a:0d:b5:52:b0:9e:23:05:0f:
                    4c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8B:53:88:3A:8E:75:2F:35:83:1F:D8:64:23:9E:93:77:EE:F0:03
            X509v3 Authority Key Identifier:
                keyid:FD:4F:4B:25:97:2C:4E:64:85:07:F9:D4:9C:AC:C2:CF:95:32:2D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/FD4F4B25972C4E648507F9D49CACC2CF95322DFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD4F4B25972C4E648507F9D49CACC2CF95322DFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/FD4F4B25972C4E648507F9D49CACC2CF95322DFF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:db:9f:5f:49:47:9a:55:b7:38:e1:8f:25:10:d2:83:50:33:
         5d:72:27:42:d9:7a:91:28:0d:86:7b:d1:de:41:ce:f3:d0:14:
         e5:5c:4a:f3:d1:76:c6:01:7b:0a:7f:94:a3:ad:d2:0e:52:1f:
         90:df:ba:e4:8f:82:6a:34:4d:ee:b0:ac:46:f0:cf:6d:48:32:
         9b:52:87:40:c5:f2:99:59:63:7e:e9:aa:84:75:64:77:7d:f9:
         62:f1:d2:f6:ab:be:00:33:82:7d:55:75:7b:df:e5:09:e2:85:
         0b:14:0b:a1:b2:81:f0:f2:b6:8b:4c:5c:16:cf:5a:84:00:c4:
         a9:a0:c1:cb:8c:19:eb:bb:96:52:ae:a7:87:33:9a:2d:78:aa:
         06:73:6e:9e:d1:e9:d2:e5:4b:69:04:88:67:27:03:14:8c:7d:
         44:a0:05:67:c5:99:f4:38:71:4e:67:36:1d:cf:89:07:66:b7:
         da:2d:f5:32:5e:c9:76:fb:94:31:a1:5c:f8:a4:5f:43:f4:e4:
         2c:a9:33:58:a8:9e:a1:63:5e:e3:31:ea:8d:af:34:7f:c4:8e:
         fe:13:15:a6:50:c8:4e:42:00:42:f7:07:22:cd:f0:82:8a:f5:
         4b:37:20:8b:64:20:5c:dc:02:a1:a4:10:a2:72:6f:c5:f2:71:
         4b:c7:27:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:19:35 2025 by rpki-client