Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.mft
File:                     2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.mft (raw, json)
Hash identifier:          /SnVXehAYf2o/GhMO1QVU92XNu8wftr5/whdg5cRXHk=
Subject key identifier:   40:AA:4A:49:DC:04:B1:A8:07:02:C8:98:CE:2C:FC:FA:B1:64:B7:D3
Authority key identifier: 2A:56:F9:74:D0:1E:D8:CF:D5:D2:40:22:C9:C3:13:E4:A6:7D:0B:82
Certificate issuer:       /CN=2A56F974D01ED8CFD5D24022C9C313E4A67D0B82
Certificate serial:       03B39B68A1A80B5439D543B4E30B14CCC85C4802
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.mft
Manifest number:          0260
Signing time:             Tue 01 Jul 2025 05:16:16 +0000
Manifest this update:     Tue 01 Jul 2025 05:11:16 +0000
Manifest next update:     Wed 02 Jul 2025 07:59:16 +0000
Files and hashes:         1: 2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.crl (hash: bzLGA6+LJ2YikIchYAx7G9cdkw0OnqpDqe9hog9K8PM=)
                          2: 323830343a386538383a3a2f33322d3438203d3e20323733343332.roa (hash: w+RGFIUO0fkMSWVC+1OJSOxgwJ3XnZ8bhoyISdqC9uM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.crl
                          rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 07:59:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b3:9b:68:a1:a8:0b:54:39:d5:43:b4:e3:0b:14:cc:c8:5c:48:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A56F974D01ED8CFD5D24022C9C313E4A67D0B82
        Validity
            Not Before: Jul  1 05:11:16 2025 GMT
            Not After : Jul  2 07:59:16 2025 GMT
        Subject: CN=40AA4A49DC04B1A80702C898CE2CFCFAB164B7D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f0:2b:88:66:51:ee:e6:0d:c8:b8:a9:1d:9e:
                    81:e0:77:5c:37:3b:5a:5c:1f:64:21:54:1f:72:7d:
                    db:47:e8:4e:b8:9d:cf:2a:23:25:fe:13:38:a9:71:
                    57:ea:1c:56:0a:97:57:42:0a:59:1c:b7:5b:d2:09:
                    68:c3:7e:40:78:49:1b:2a:56:30:6f:9a:8e:71:fb:
                    0b:f8:24:7b:f9:95:91:88:df:fb:34:12:d9:ab:21:
                    08:43:1e:ff:95:f3:0d:f1:2b:ad:56:d7:fa:af:84:
                    be:cf:68:b3:39:d6:14:65:7d:e5:d4:45:e1:10:52:
                    a6:5d:6a:aa:0f:f0:b1:6f:1d:91:75:4c:a0:53:30:
                    74:2a:b1:74:03:56:7f:dd:1b:00:cb:9d:2a:ff:34:
                    9d:41:e4:d8:71:c6:c7:28:51:e5:fd:e1:35:8b:9f:
                    58:41:88:18:d5:28:9d:2d:0d:78:e4:9a:c8:cc:a5:
                    41:d2:e9:4f:dd:bf:8a:a6:bb:93:0f:a8:1c:91:c3:
                    50:93:5d:26:8d:c1:56:9a:43:2e:60:fb:c6:18:55:
                    02:6a:02:6b:2c:fc:c8:72:93:c7:db:3c:13:59:98:
                    2f:51:64:15:08:28:59:c8:12:ba:c6:0e:24:f0:9a:
                    a3:ba:36:82:eb:79:45:99:e2:2c:3d:b1:88:17:e0:
                    fb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AA:4A:49:DC:04:B1:A8:07:02:C8:98:CE:2C:FC:FA:B1:64:B7:D3
            X509v3 Authority Key Identifier:
                keyid:2A:56:F9:74:D0:1E:D8:CF:D5:D2:40:22:C9:C3:13:E4:A6:7D:0B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:6d:f4:bf:92:66:f7:6c:e0:f1:ee:b7:28:5b:3b:58:aa:c8:
         7f:37:02:64:2b:5d:1b:6f:71:19:8c:12:41:7a:05:d1:b3:37:
         5f:aa:c5:92:89:61:61:36:6f:d8:a6:cf:79:de:94:c7:49:39:
         e0:c7:06:e4:3b:a0:30:84:a8:d1:0e:3d:28:03:71:b7:92:dd:
         d6:29:16:67:e0:7f:d3:59:0e:13:bf:3a:fc:ac:ed:e1:1b:f6:
         46:43:41:04:b7:9d:f9:9e:c3:c0:15:c2:ed:4d:88:01:ca:ec:
         99:86:83:e3:36:fc:8f:e2:16:57:69:27:96:6a:20:39:12:35:
         cd:58:62:3e:14:c3:36:93:fb:e7:cf:61:27:2d:91:0f:58:7f:
         4b:2e:41:09:33:21:5d:3a:14:56:7c:8d:57:7f:aa:18:4c:fa:
         25:a8:9a:d6:97:3b:42:30:77:12:e0:c6:85:12:4e:89:06:f3:
         7d:7f:36:c8:fd:59:4b:88:b5:3d:74:c5:f2:7a:21:66:4d:8c:
         63:3b:26:94:43:46:16:e2:04:be:b7:3d:42:b7:03:35:12:d1:
         6a:cc:ef:f0:53:c9:8c:42:43:c1:a3:32:83:87:e4:4a:94:9e:
         88:e4:4d:23:38:ec:f7:5a:12:8c:53:ea:df:85:c4:5e:c3:f1:
         6e:31:d0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:05:31 2025 by rpki-client