Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/17E4F0D3C469415DC7E16F41B958536392F1E579.mft
File:                     17E4F0D3C469415DC7E16F41B958536392F1E579.mft (raw, json)
Hash identifier:          x2O3se20lLgXM4+CZRM6uDXg+Sg4geWg2KteWydNotk=
Subject key identifier:   1C:28:D2:9A:59:06:B2:FC:04:7D:37:F7:26:2B:A5:12:18:2A:D1:39
Authority key identifier: 17:E4:F0:D3:C4:69:41:5D:C7:E1:6F:41:B9:58:53:63:92:F1:E5:79
Certificate issuer:       /CN=17E4F0D3C469415DC7E16F41B958536392F1E579
Certificate serial:       59185F0A60ABD0C1FAB95333816F6055478D7435
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17E4F0D3C469415DC7E16F41B958536392F1E579.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/17E4F0D3C469415DC7E16F41B958536392F1E579.mft
Manifest number:          43
Signing time:             Sun 27 Apr 2025 12:18:46 +0000
Manifest this update:     Sun 27 Apr 2025 12:13:46 +0000
Manifest next update:     Mon 28 Apr 2025 13:42:46 +0000
Files and hashes:         1: 3133382e3235352e302e302f32342d3234203d3e20323633393530.roa (hash: KmRIgD3fPM3hGSPd66qq5S4vF+jrz8d573jPd3TILlk=)
                          2: 323830343a323834303a3a2f33322d3332203d3e20323633393530.roa (hash: igfS/h9PoM74a8WzOOYkM/cPWduSByQvu0MPYzbQ0ec=)
                          3: 17E4F0D3C469415DC7E16F41B958536392F1E579.crl (hash: qYnfY3E+LIS7960Ld8ARy773zPJsdHnPaCv6Q4MAjJg=)
                          4: 3133382e3235352e322e302f32332d3233203d3e20323633393530.roa (hash: UH5wxIRJ/7EzO8sMeu6nOA+9TIeSHJ6lg6yzZVogJxg=)
                          5: 3133382e3235352e322e302f32342d3234203d3e20323633393530.roa (hash: VE+drky5N5ozZqzGiArFdxFbtjrBd4hnSlRh6fkWzAk=)
                          6: 3133382e3235352e302e302f32332d3233203d3e20323633393530.roa (hash: rNGp6C3uA54Ragm7+K+Ahv8zmO28OWQz0gkdsweJEDs=)
                          7: 3133382e3235352e332e302f32342d3234203d3e20323633393530.roa (hash: DL42xlGdfFraQc4N0t3WB423yh+RTia/G08ApZGH4yw=)
                          8: 3133382e3235352e312e302f32342d3234203d3e20323633393530.roa (hash: fBT6D2jLD+njqZeic3l5TwlJCiBd50XOJPIP0ojJHrE=)
                          9: 3133382e3235352e302e302f32322d3232203d3e20323633393530.roa (hash: N5Ov20kQQV3Voj51ATerUtGT+zaXU4lF5AgkR5X11JE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/17E4F0D3C469415DC7E16F41B958536392F1E579.crl
                          rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/17E4F0D3C469415DC7E16F41B958536392F1E579.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17E4F0D3C469415DC7E16F41B958536392F1E579.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:42:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:18:5f:0a:60:ab:d0:c1:fa:b9:53:33:81:6f:60:55:47:8d:74:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17E4F0D3C469415DC7E16F41B958536392F1E579
        Validity
            Not Before: Apr 27 12:13:46 2025 GMT
            Not After : Apr 28 13:42:46 2025 GMT
        Subject: CN=1C28D29A5906B2FC047D37F7262BA512182AD139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a9:3b:22:ae:d8:dd:a8:ed:e8:53:93:f4:64:
                    b1:a5:88:2f:36:9d:76:a0:43:d7:37:d0:34:72:3e:
                    3a:ee:71:7d:de:19:42:23:21:90:2d:32:e6:03:01:
                    d7:5e:df:65:f9:74:2b:cd:8d:a5:c7:7d:79:4b:ae:
                    f7:aa:1c:c1:e1:bf:4c:f9:1d:81:80:5a:6d:11:fb:
                    15:6d:d3:a1:cb:72:72:15:2f:46:da:66:65:cd:ed:
                    ae:6f:8c:fb:1b:6a:57:9f:45:c7:fc:8f:35:59:58:
                    5d:bf:fa:06:bc:ec:b6:9a:f3:f1:6a:f3:dd:60:65:
                    8f:ce:49:1d:c1:d5:08:cf:8e:e0:70:5d:62:99:d7:
                    21:27:0d:cd:fa:02:8d:17:16:9a:e3:af:5d:60:57:
                    58:c1:72:94:b0:52:e8:11:af:72:aa:72:02:20:40:
                    c0:2d:0a:a2:f8:23:7d:de:e1:ef:51:08:cf:cf:cc:
                    9d:ac:66:48:b9:10:dc:12:96:30:ee:0e:6e:48:4c:
                    8d:6c:12:91:45:ba:eb:73:77:57:86:8c:bf:20:3c:
                    4c:a3:68:c3:5e:fa:f3:be:8b:c5:59:58:a3:3c:56:
                    8a:a2:04:9c:69:52:03:ff:a3:ba:c2:60:3c:09:34:
                    d8:dd:fe:c2:62:8e:5f:47:4b:80:a9:a7:cf:66:2f:
                    c9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:28:D2:9A:59:06:B2:FC:04:7D:37:F7:26:2B:A5:12:18:2A:D1:39
            X509v3 Authority Key Identifier:
                keyid:17:E4:F0:D3:C4:69:41:5D:C7:E1:6F:41:B9:58:53:63:92:F1:E5:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/17E4F0D3C469415DC7E16F41B958536392F1E579.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17E4F0D3C469415DC7E16F41B958536392F1E579.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/17E4F0D3C469415DC7E16F41B958536392F1E579.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:76:2a:d9:a8:92:4d:14:fa:62:21:9d:e1:9f:e8:af:44:24:
         03:a3:52:6b:5e:cd:fa:b3:16:92:06:48:4f:fb:26:dc:ff:76:
         e4:06:a2:25:99:2e:a5:43:ca:e0:ca:04:20:56:9b:40:c9:92:
         50:5a:da:58:12:f8:ba:37:36:00:ec:03:18:f9:20:52:6b:f6:
         67:a8:37:2b:20:d6:33:f2:a8:ce:84:00:5a:60:27:db:ff:27:
         42:f2:36:cc:9e:ba:4c:00:f8:49:a6:d4:03:7d:bb:1b:fa:b9:
         61:86:cb:d5:cc:3c:4e:fc:fc:1f:2f:8e:86:a1:65:de:fe:01:
         d5:53:88:7c:9e:a9:d1:6a:84:cd:b7:95:76:ad:e6:6f:00:9a:
         2f:82:2d:99:11:38:57:95:d3:f1:68:ab:5a:b6:03:5c:42:7e:
         0b:bb:4b:56:1f:d8:72:d0:54:bd:87:30:0a:7b:2a:ad:88:fc:
         e9:b6:84:a3:2f:db:e7:7d:b4:7d:50:dc:fe:2f:22:74:6d:2c:
         7a:9a:1b:ac:b3:4d:34:c7:82:a3:a3:e2:2c:76:a6:7f:90:7d:
         2e:2d:11:3f:a0:6c:44:47:8d:7b:28:3c:29:08:54:4c:af:9c:
         a2:6e:b4:16:ec:a1:3b:dc:cf:b0:e0:e8:47:09:b4:9f:8b:0f:
         68:9f:d4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:39 2025 by rpki-client on console.sobornost.net