Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.mft
File:                     22AB1A545CAF610816572F26872DE7E11F24C4BC.mft (raw, json)
Hash identifier:          yYkE3LHFDdEKEssAgPeET3tWimvH78mPqBQwmdctRto=
Subject key identifier:   8D:5C:F6:CF:5F:D3:4A:67:D4:08:FF:DF:5D:66:8A:83:F2:51:DD:78
Authority key identifier: 22:AB:1A:54:5C:AF:61:08:16:57:2F:26:87:2D:E7:E1:1F:24:C4:BC
Certificate issuer:       /CN=22AB1A545CAF610816572F26872DE7E11F24C4BC
Certificate serial:       289355D797716B3373CA1F25BBED81E91D97A1DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AB1A545CAF610816572F26872DE7E11F24C4BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.mft
Manifest number:          01AA
Signing time:             Thu 15 May 2025 07:14:29 +0000
Manifest this update:     Thu 15 May 2025 07:09:29 +0000
Manifest next update:     Fri 16 May 2025 09:15:29 +0000
Files and hashes:         1: 3137372e36372e3136342e302f32322d3234203d3e20323731303435.roa (hash: N4xIc5puo8RgbwQ5Ut3LZtNTN/6pzC9NmTRl3nPpiOQ=)
                          2: 323830343a373536633a3a2f33322d3438203d3e20323731303435.roa (hash: D5ioELFZ6g/Oeg/lQyDuOUiVBKD5EnXS9P+anCrs1S8=)
                          3: 22AB1A545CAF610816572F26872DE7E11F24C4BC.crl (hash: 3QDbzTWLcnRYYfGc2zIiH0O2Z/R2aQcs+vEC686EP54=)
                          4: 3230312e35342e3138362e302f32332d3234203d3e20323731303435.roa (hash: 92Z0H73nMKStZ9S2kOzmTH6clXmbwpbZ6xajQavaHz4=)
                          5: 3137372e36372e3136302e302f32322d3234203d3e20323731303435.roa (hash: cjtYXkYDqZH9jR6tosGbyOfOLChfMvD+xNWjuCE1z58=)
                          6: 34352e36352e3136342e302f32322d3234203d3e20323731303435.roa (hash: WWqOr5aMxpDdRrhHf2UBuqkKRxZj67u8sYFjrFU99Lc=)
                          7: 3230312e35342e3138342e302f32342d3234203d3e20323731303435.roa (hash: gineNY8D0IkN5IYbHeWgx7Pn4kB7/XYOCj1waRPdc2A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.crl
                          rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AB1A545CAF610816572F26872DE7E11F24C4BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 09:15:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:93:55:d7:97:71:6b:33:73:ca:1f:25:bb:ed:81:e9:1d:97:a1:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22AB1A545CAF610816572F26872DE7E11F24C4BC
        Validity
            Not Before: May 15 07:09:29 2025 GMT
            Not After : May 16 09:15:29 2025 GMT
        Subject: CN=8D5CF6CF5FD34A67D408FFDF5D668A83F251DD78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e0:56:75:d1:a6:84:ea:ac:07:04:8a:e4:88:
                    01:51:62:49:6c:73:97:b6:d5:49:52:69:29:81:48:
                    5f:2c:34:ab:8d:17:a5:30:08:83:1c:63:8a:94:2f:
                    f9:a7:52:de:b9:a9:e9:b2:ba:e8:ea:73:e7:ad:60:
                    28:19:89:7b:b1:c3:2b:da:2c:3a:cf:2f:0c:23:ed:
                    24:61:47:c5:71:02:b5:4a:f6:98:e3:3c:b7:f4:54:
                    33:89:c1:2f:7b:f3:fd:f7:2a:d0:5c:df:ca:c3:27:
                    da:a9:26:66:ba:ec:d0:42:cb:63:4a:5c:a7:c0:d4:
                    9f:a4:7b:dc:2e:42:3d:d0:62:22:2c:6b:aa:ef:41:
                    85:6e:b4:86:57:1d:05:6b:cf:cd:a9:85:3d:b4:42:
                    41:d0:d7:4e:3d:bb:5b:42:6b:e5:3b:5e:28:ba:3b:
                    c8:ba:ed:6f:ac:0b:31:0a:63:26:42:f1:b1:3a:a8:
                    de:3e:9e:32:1e:2b:31:ce:bb:40:19:5f:6f:7f:b0:
                    6b:8b:04:3f:db:d7:86:c5:37:fc:b9:79:84:6f:71:
                    5c:80:d5:85:a6:ad:db:d5:db:da:84:cd:49:48:d8:
                    08:89:58:e1:35:01:0e:da:af:e4:9f:13:59:64:ee:
                    3d:29:c8:b6:dd:4d:5e:47:0d:23:43:97:6c:a5:2e:
                    66:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5C:F6:CF:5F:D3:4A:67:D4:08:FF:DF:5D:66:8A:83:F2:51:DD:78
            X509v3 Authority Key Identifier:
                keyid:22:AB:1A:54:5C:AF:61:08:16:57:2F:26:87:2D:E7:E1:1F:24:C4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AB1A545CAF610816572F26872DE7E11F24C4BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/22AB1A545CAF610816572F26872DE7E11F24C4BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ca:a2:1b:90:35:af:77:bd:38:43:26:da:67:4e:54:bf:25:
         ec:f5:8f:bc:4d:d5:72:1c:f9:00:1c:cd:68:e6:10:d5:2f:40:
         25:97:4e:c8:36:89:d6:98:7b:64:af:e9:6b:0e:55:7d:59:db:
         e2:94:3f:00:79:7c:ba:94:86:8c:40:57:93:d1:81:7a:af:be:
         73:00:85:8d:92:f1:25:c7:43:e1:96:7c:9b:bc:92:c2:38:4a:
         e7:12:1c:5c:ee:e2:6e:5c:2c:e5:a3:d7:92:ea:ba:30:40:98:
         86:d9:c8:73:38:3f:6f:d4:1f:21:d9:1d:b3:11:4d:64:a1:1a:
         34:fb:a4:11:6e:5a:dd:7f:4f:cf:e9:cb:ae:81:ff:48:5b:07:
         af:db:0f:b1:35:e5:b0:df:89:04:f0:76:ca:f5:85:3d:87:94:
         8c:49:e8:be:30:2e:fb:23:db:a3:7d:11:d5:33:5d:4f:5e:cd:
         cd:2c:19:eb:ee:20:48:7a:df:a5:12:95:18:f5:11:cc:17:63:
         91:89:71:8e:75:fb:70:8b:c5:9d:b7:33:79:4e:8a:48:31:30:
         4e:5c:be:13:bf:6f:cd:56:61:24:e1:81:43:61:3e:a6:56:c9:
         fb:3a:f2:e0:e6:d7:45:f3:a7:86:e8:5c:53:4d:7a:37:84:b2:
         71:24:08:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 21:20:04 2025 by rpki-client