Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CYtctA17Kt71sFPy9Tz5M9RDurvKjxd3abCRfbPxsv16/0/AFE965BA817F79A154F92490C65530EB3402BE56.mft
File:                     AFE965BA817F79A154F92490C65530EB3402BE56.mft (raw, json)
Hash identifier:          a+Rn5TgfV5jP1MVGitZuLO8Ns8N/JL0t5+wJw5InvxM=
Subject key identifier:   0D:AD:05:93:8E:E2:B0:B6:9D:D2:CE:C3:A1:E7:3C:BA:F1:53:E5:16
Authority key identifier: AF:E9:65:BA:81:7F:79:A1:54:F9:24:90:C6:55:30:EB:34:02:BE:56
Certificate issuer:       /CN=AFE965BA817F79A154F92490C65530EB3402BE56
Certificate serial:       1C318BAEF8062D5DA0285145FC6D38D62AD408F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFE965BA817F79A154F92490C65530EB3402BE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYtctA17Kt71sFPy9Tz5M9RDurvKjxd3abCRfbPxsv16/0/AFE965BA817F79A154F92490C65530EB3402BE56.mft
Manifest number:          01DF
Signing time:             Wed 14 May 2025 14:53:52 +0000
Manifest this update:     Wed 14 May 2025 14:48:52 +0000
Manifest next update:     Thu 15 May 2025 18:44:52 +0000
Files and hashes:         1: AFE965BA817F79A154F92490C65530EB3402BE56.crl (hash: ODCGGKrS8HmOp6SEvEwjgJ/65Yp9S7Ia9Wd/so5gwoY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYtctA17Kt71sFPy9Tz5M9RDurvKjxd3abCRfbPxsv16/0/AFE965BA817F79A154F92490C65530EB3402BE56.crl
                          rsync://rpki-repo.registro.br/repo/CYtctA17Kt71sFPy9Tz5M9RDurvKjxd3abCRfbPxsv16/0/AFE965BA817F79A154F92490C65530EB3402BE56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFE965BA817F79A154F92490C65530EB3402BE56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 18:44:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:31:8b:ae:f8:06:2d:5d:a0:28:51:45:fc:6d:38:d6:2a:d4:08:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFE965BA817F79A154F92490C65530EB3402BE56
        Validity
            Not Before: May 14 14:48:52 2025 GMT
            Not After : May 15 18:44:52 2025 GMT
        Subject: CN=0DAD05938EE2B0B69DD2CEC3A1E73CBAF153E516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b7:2b:aa:26:f1:b4:72:ae:bd:9f:58:7c:07:
                    f5:9a:d5:ce:46:6c:df:ea:be:83:fd:63:03:9b:be:
                    19:00:c5:0e:9d:7f:49:84:e3:47:37:a2:e8:85:0c:
                    f2:18:5c:39:97:06:e0:1d:73:cf:42:4f:a3:b3:62:
                    91:42:28:de:cb:fe:3a:97:15:c8:bc:ce:ff:f6:d1:
                    47:dd:b5:16:e9:2e:82:24:c0:30:76:f1:01:11:22:
                    35:c3:08:d7:08:3d:77:04:59:6b:d5:55:ba:1c:c1:
                    3c:78:3c:59:0d:33:8a:b4:22:53:3b:2e:ce:47:51:
                    5d:9c:95:cc:25:5b:16:e3:19:41:b6:d8:1c:6f:96:
                    e6:a9:a3:30:d7:2f:d4:88:19:5f:09:90:35:2c:41:
                    cd:bb:03:00:68:23:7c:04:32:d2:a7:27:66:a4:57:
                    56:1a:98:23:77:e4:8f:a9:3c:8d:42:e6:7d:32:37:
                    5f:55:4a:e9:4d:98:c0:12:25:c9:78:74:0a:5e:e8:
                    88:86:1a:91:82:0c:34:f3:ad:73:4d:43:1e:48:4d:
                    76:d4:99:ec:14:75:e9:ed:9a:fb:70:24:49:c1:71:
                    3a:09:38:f7:1a:0f:52:74:02:05:3a:fa:62:b3:78:
                    b9:6c:96:00:a6:a6:4b:f0:d9:cc:ff:d4:f3:72:5b:
                    52:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AD:05:93:8E:E2:B0:B6:9D:D2:CE:C3:A1:E7:3C:BA:F1:53:E5:16
            X509v3 Authority Key Identifier:
                keyid:AF:E9:65:BA:81:7F:79:A1:54:F9:24:90:C6:55:30:EB:34:02:BE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYtctA17Kt71sFPy9Tz5M9RDurvKjxd3abCRfbPxsv16/0/AFE965BA817F79A154F92490C65530EB3402BE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFE965BA817F79A154F92490C65530EB3402BE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYtctA17Kt71sFPy9Tz5M9RDurvKjxd3abCRfbPxsv16/0/AFE965BA817F79A154F92490C65530EB3402BE56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:8d:01:31:fe:e5:c1:2f:bf:6f:2e:da:8e:b1:7f:8f:9f:bb:
         5e:31:f5:bb:de:50:34:30:80:a9:3b:49:da:73:f7:ac:2a:6b:
         5f:ee:e3:5e:35:89:58:55:95:aa:18:d3:1e:21:a2:c3:dc:4b:
         a4:8d:5c:be:07:66:72:af:59:77:ec:14:e9:cf:14:c4:30:38:
         27:9e:d8:1f:11:ac:46:fc:ea:c4:99:55:f3:28:fe:38:25:31:
         f2:46:f2:03:1a:09:aa:4d:40:c2:48:29:dd:81:d5:45:0d:42:
         3e:7a:25:33:90:50:8e:76:c1:ee:b9:c9:cb:01:fe:2a:96:80:
         86:52:20:30:2d:38:7f:4a:84:0e:3d:1a:26:91:66:10:ce:24:
         2b:c5:49:87:f0:1a:b2:d3:0e:48:c1:c6:8d:c4:e8:83:1a:c1:
         cb:20:5a:78:eb:37:fd:64:35:d7:c4:0b:fc:5f:63:01:e7:50:
         a0:8f:4a:5f:1e:63:bc:25:11:75:ad:07:16:79:1b:e4:ec:75:
         8a:28:7c:c1:77:45:f5:e5:2c:5d:2a:c0:ba:de:a9:73:a8:56:
         ac:e2:ea:f5:5d:64:12:8a:6a:a3:37:23:dc:cb:13:05:e0:3b:
         38:f6:66:f8:5e:4c:df:70:aa:14:6d:91:06:61:31:21:18:21:
         8c:23:61:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 23:01:56 2025 by rpki-client