Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.mft
File:                     9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.mft (raw, json)
Hash identifier:          9qOFk6vNKMZQ42tIE5QJgMtyFcfrJ2unhC6LaC1pH14=
Subject key identifier:   25:8F:C5:80:34:E2:AC:64:59:A2:32:E7:C1:A1:E2:20:B3:33:EF:15
Authority key identifier: 9F:FA:BF:FA:1B:28:AB:A1:D0:51:EC:CB:BE:57:DE:91:57:6D:3F:3B
Certificate issuer:       /CN=9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B
Certificate serial:       F39280B8291DF990CD9C99B597D373124ECAD1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.mft
Manifest number:          024A
Signing time:             Mon 28 Apr 2025 18:40:00 +0000
Manifest this update:     Mon 28 Apr 2025 18:35:00 +0000
Manifest next update:     Tue 29 Apr 2025 18:40:00 +0000
Files and hashes:         1: 9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl (hash: 1dK2WpFu1bXLtMVeZE2pMVZsb6ub480Rl1ZsthpDL3c=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl
                          rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f3:92:80:b8:29:1d:f9:90:cd:9c:99:b5:97:d3:73:12:4e:ca:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B
        Validity
            Not Before: Apr 28 18:35:00 2025 GMT
            Not After : May  5 18:40:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9f:c5:1b:96:11:b0:4b:75:7e:ed:7e:c6:79:
                    2c:e7:9a:68:74:8e:1c:9f:58:bb:d1:f0:31:98:58:
                    96:18:78:db:fd:78:fc:83:76:57:be:42:65:83:4a:
                    19:16:8e:c9:0c:29:36:6d:45:b4:72:38:6d:b8:db:
                    3e:a4:e8:6a:9b:f4:a3:af:37:fa:17:a1:bb:fc:48:
                    92:9d:bd:df:19:dd:9c:91:12:a9:49:da:38:66:c5:
                    27:c9:20:9e:9f:cc:3a:72:5c:e1:1a:2b:ff:aa:84:
                    e3:d5:57:33:20:34:00:eb:4a:43:9e:24:77:42:09:
                    b7:9a:95:64:01:63:c7:b3:96:2e:c0:a3:b6:ac:07:
                    17:c4:8d:40:54:4a:44:97:0d:d1:d4:82:93:99:e2:
                    13:29:7e:ff:9c:7c:f8:18:db:0c:0b:c2:16:2f:05:
                    9f:20:a5:e7:56:84:75:28:9e:5f:e8:36:27:0d:10:
                    6f:fa:32:61:b9:6c:fd:21:d2:51:00:a1:de:9e:3f:
                    f4:86:a9:c7:8d:7a:b5:4e:ff:b7:ed:74:f8:c3:4d:
                    18:0c:7d:01:10:06:2b:cf:e7:b2:09:df:c4:61:c2:
                    1f:7c:c7:63:14:9b:d5:d9:8d:3a:99:15:ad:2c:48:
                    e8:a3:08:b4:94:04:37:86:26:49:5d:76:b0:ca:a9:
                    3a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8F:C5:80:34:E2:AC:64:59:A2:32:E7:C1:A1:E2:20:B3:33:EF:15
            X509v3 Authority Key Identifier:
                keyid:9F:FA:BF:FA:1B:28:AB:A1:D0:51:EC:CB:BE:57:DE:91:57:6D:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:b3:b5:34:c7:21:01:a2:60:5d:d0:d6:05:22:c8:a6:5a:0b:
         84:0e:5d:55:11:0a:bc:b4:32:09:8a:8e:ac:21:36:5e:78:82:
         75:a1:02:dc:14:da:04:97:10:24:29:4a:3c:00:0d:17:d0:b1:
         d5:34:38:aa:87:27:1a:4d:29:0a:7b:27:a1:0e:d3:5f:2b:ab:
         ea:a7:47:eb:e7:ec:35:5f:75:80:bb:5e:63:7c:b6:d3:97:e1:
         74:34:e3:7b:85:9c:aa:60:bd:36:a2:a2:d4:a0:5c:f3:77:1f:
         10:01:4b:3a:54:c5:07:4a:b0:d2:5f:2a:0e:d1:36:17:db:f0:
         6e:93:cd:c9:3a:5d:e1:ab:d6:4c:f3:c1:8f:15:4a:97:6a:60:
         aa:b9:23:7d:9d:41:b2:9b:bf:68:16:31:29:bd:9f:73:c0:86:
         bd:34:56:94:8b:66:a3:35:fb:00:37:b7:a2:2e:3c:e2:c0:4f:
         88:6e:e0:64:da:79:97:ee:80:12:fe:aa:23:be:a9:75:90:d8:
         9e:4e:73:d2:70:d5:2a:fa:53:ce:75:26:27:8e:37:8e:cb:fd:
         a6:7b:d5:c8:5e:06:50:5c:37:c2:6b:3f:c4:b8:97:59:00:3c:
         55:83:48:7d:3a:73:80:45:83:15:9d:7e:85:9d:ef:1c:42:d7:
         e3:ca:1b:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:57 2025 by rpki-client on console.sobornost.net