Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft
File:                     D296B69B93C13271557656EE54E2511823349A12.mft (raw, json)
Hash identifier:          bJ+IxE7/nnHW8Ax2hwuWHBwaMDXkIYeX8KQxVYPpKHU=
Subject key identifier:   46:FB:10:0B:CF:7A:54:D8:F3:47:24:7C:F6:6D:05:2B:77:BE:7D:85
Authority key identifier: D2:96:B6:9B:93:C1:32:71:55:76:56:EE:54:E2:51:18:23:34:9A:12
Certificate issuer:       /CN=D296B69B93C13271557656EE54E2511823349A12
Certificate serial:       269BAC9B29057225E1695A05B9CFA204B480CE0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296B69B93C13271557656EE54E2511823349A12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft
Manifest number:          0249
Signing time:             Mon 28 Apr 2025 12:48:00 +0000
Manifest this update:     Mon 28 Apr 2025 12:43:00 +0000
Manifest next update:     Tue 29 Apr 2025 12:48:00 +0000
Files and hashes:         1: D296B69B93C13271557656EE54E2511823349A12.crl (hash: 5ZcgUxZvwxRvoVNAXZ70hT2M2ydt5TsVu3KGWgqHd98=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.crl
                          rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296B69B93C13271557656EE54E2511823349A12.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:9b:ac:9b:29:05:72:25:e1:69:5a:05:b9:cf:a2:04:b4:80:ce:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D296B69B93C13271557656EE54E2511823349A12
        Validity
            Not Before: Apr 28 12:43:00 2025 GMT
            Not After : May  5 12:48:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cc:0d:84:37:3c:1c:52:99:ba:94:bd:a9:5c:
                    72:3d:0e:a4:84:8b:c8:34:b3:6a:14:dc:03:c0:e9:
                    77:9b:41:0c:92:99:68:2e:bc:77:f9:4b:86:54:5d:
                    7c:c6:f5:14:eb:53:18:c5:48:25:5f:66:0d:7f:f0:
                    43:9b:68:c3:56:e3:81:0d:8c:dd:55:bb:30:2b:99:
                    26:4c:d4:5a:a3:45:31:67:09:72:8e:93:21:d6:32:
                    3c:6f:9b:dc:65:e6:fd:fc:81:d7:fd:fa:74:32:e5:
                    67:d7:89:5e:4a:32:45:15:00:7f:4e:a3:99:cc:a4:
                    d8:cb:ef:72:1b:47:72:9c:50:38:a1:57:5b:7a:05:
                    27:18:f6:41:f9:5b:3e:4a:8e:5c:db:aa:02:74:8e:
                    d0:ad:4a:78:76:3a:f8:40:c3:77:2e:aa:21:cd:0f:
                    d8:4c:84:1d:a3:d9:38:a7:5f:fb:db:34:4f:16:18:
                    c4:e0:01:2c:9a:c7:b8:85:ee:53:b6:8b:eb:3d:91:
                    fe:96:df:cf:23:67:f4:41:ad:7b:15:4f:5f:9d:91:
                    25:f6:da:11:d7:9a:19:67:29:61:3a:e8:a5:e8:d5:
                    3c:3c:99:e4:2f:27:e7:3b:db:39:48:e4:10:74:9c:
                    cf:fd:57:df:b9:b3:1a:81:37:45:07:d0:ea:e0:c3:
                    58:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FB:10:0B:CF:7A:54:D8:F3:47:24:7C:F6:6D:05:2B:77:BE:7D:85
            X509v3 Authority Key Identifier:
                keyid:D2:96:B6:9B:93:C1:32:71:55:76:56:EE:54:E2:51:18:23:34:9A:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296B69B93C13271557656EE54E2511823349A12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:05:ee:ab:e0:4d:3d:19:e9:3b:e3:ef:81:cb:85:ea:ec:8b:
         c8:69:59:d8:57:14:f4:09:5b:8c:a1:90:70:de:e0:c4:78:3c:
         a5:05:a7:85:37:16:44:0b:80:37:f5:5a:7c:ea:06:c2:88:dc:
         5e:91:8e:18:90:8b:c2:55:a0:23:d5:9a:5e:2b:1d:3e:26:0e:
         8e:c8:6e:51:11:62:42:a5:39:a7:22:51:9c:bc:0d:7f:8d:9c:
         32:87:9f:14:3e:66:cf:86:7e:7d:4d:b8:b7:8c:26:c3:58:d0:
         40:1d:9e:fd:ca:e0:b1:26:6a:2a:fb:ca:dc:40:0e:a7:16:60:
         61:51:b0:54:60:cc:e7:8c:74:b2:a4:15:57:fe:b1:5a:b6:e7:
         c4:b1:9b:9d:c2:cd:98:f1:a2:34:a6:4e:97:1f:aa:c7:b6:4f:
         43:03:47:20:8b:42:87:79:37:6e:78:f3:78:fa:36:22:0f:d1:
         82:6c:5f:48:23:cd:65:3d:ff:d9:cf:a8:35:58:f0:7a:86:61:
         0e:58:8b:58:0e:0f:98:60:0b:b6:18:5a:d9:9e:14:96:6e:f3:
         31:c4:35:9a:0e:e9:f2:02:83:f9:61:20:0c:a2:5d:b3:4d:96:
         7a:9c:9e:b2:e6:d6:8a:84:23:39:c7:6f:e6:fb:93:c2:3e:3f:
         13:e4:1a:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:10 2025 by rpki-client on console.sobornost.net