Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
File:                     1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft (raw, json)
Hash identifier:          QcZ7FXnEgnCZmCDCRfL7y/xey0qJLC3ifaxKT1X/AtU=
Subject key identifier:   FF:FE:8A:AE:51:C3:C1:A7:13:41:BA:6B:DB:95:73:DA:AB:F2:62:8B
Authority key identifier: 1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89
Certificate issuer:       /CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789
Certificate serial:       3DDF16F5D8F17B3E3AB1DEF65C9B3E30628D4189
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
Manifest number:          0D
Signing time:             Sun 27 Apr 2025 07:24:02 +0000
Manifest this update:     Sun 27 Apr 2025 07:19:02 +0000
Manifest next update:     Mon 28 Apr 2025 09:46:02 +0000
Files and hashes:         1: 3134332e302e3134302e302f32342d3234203d3e20323634303039.roa (hash: ADREfT9MheCE1Wjv94Tw9CnUHlS1l0PQ8XXqstyqAiQ=)
                          2: 3134332e302e3134312e302f32342d3234203d3e20323634303039.roa (hash: VeR/O+9Gf+ayE3m4Vl1nJkDnw89kGLb98SbW5qArQ/c=)
                          3: 3136382e3232372e3133322e302f32322d3234203d3e20323634303039.roa (hash: hVKZtPo2uOTvKf5GK1oLTTBexTI84WAT9zQJ3UV58/E=)
                          4: 3134332e302e3134332e302f32342d3234203d3e20323634303039.roa (hash: mEuK5L8cqAFP2ipXml/u6wiIus3ycpeZ8oNcV0ag2qo=)
                          5: 3137302e37382e3132302e302f32322d3234203d3e20323634303039.roa (hash: 1opYPtLVmJbgysJRSAW69AB3hcLNgtJAvVFzTTA/ISk=)
                          6: 3134332e302e3134302e302f32322d3232203d3e20323634303039.roa (hash: afJLR8PlUzFskdzVHFBs/+9++T5DKH+kQFl0KIelOiE=)
                          7: 323830343a323935343a3a2f33322d3332203d3e20323634303039.roa (hash: ZirqTWq7d7/lwQgHJx1DD+FiioGP1qk31ScfgX+AtN4=)
                          8: 1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl (hash: VG3APSj6SaFHRgx9Stym5xism/eqT3q578TMqfFVdK8=)
                          9: 3134332e302e3134322e302f32342d3234203d3e20323634303039.roa (hash: L29rQu6A2D/GRscHMRxgKff1Mj4otpbS7jgvNTfbqrM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl
                          rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:df:16:f5:d8:f1:7b:3e:3a:b1:de:f6:5c:9b:3e:30:62:8d:41:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789
        Validity
            Not Before: Apr 27 07:19:02 2025 GMT
            Not After : Apr 28 09:46:02 2025 GMT
        Subject: CN=FFFE8AAE51C3C1A71341BA6BDB9573DAABF2628B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1e:2a:6a:76:b1:0e:d6:63:6e:b9:df:72:5d:
                    b1:0a:a4:e5:a8:5e:f4:4c:0d:39:ac:a1:de:0a:5d:
                    ed:0e:d0:88:94:d2:74:61:95:68:07:66:25:87:14:
                    d4:cd:aa:43:cb:fb:63:5e:52:75:bb:1c:cf:01:84:
                    0c:3d:5e:1d:5e:ac:56:73:7a:0d:7c:19:e1:a4:e7:
                    18:48:38:f1:26:bb:b6:91:17:4c:5b:39:1b:7f:8d:
                    cb:e8:d0:51:e0:f6:9c:51:07:02:19:5d:0a:a8:00:
                    79:69:f5:da:28:2a:4b:d9:86:e1:2d:cb:27:31:17:
                    65:88:8d:89:ab:fd:63:30:f7:27:56:76:10:6e:e9:
                    9b:5b:d4:f3:04:1b:f3:14:c3:8d:8a:6d:f4:20:d5:
                    3b:4b:8c:14:86:4f:a9:02:0f:64:08:df:0f:ab:96:
                    78:e2:f5:cf:06:a6:27:fa:33:42:0b:1b:a3:71:03:
                    26:cf:16:a4:6d:71:80:7c:6a:87:bf:af:2f:78:10:
                    78:52:8e:b3:87:49:10:85:7d:e9:f8:8f:e1:52:aa:
                    05:c2:46:52:c0:99:36:e0:bf:b8:f1:65:f5:a5:55:
                    e0:f7:ee:2f:db:fb:d9:03:aa:dd:0a:12:e3:16:f0:
                    46:a2:fd:2f:00:21:d8:a7:ff:ba:69:4e:cb:15:3a:
                    89:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FE:8A:AE:51:C3:C1:A7:13:41:BA:6B:DB:95:73:DA:AB:F2:62:8B
            X509v3 Authority Key Identifier:
                keyid:1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b9:73:10:d3:4f:80:42:31:e4:66:0e:17:50:d2:0f:7e:aa:
         b8:f3:3d:b0:c0:f7:0a:64:eb:b7:11:d0:69:60:57:a6:de:ba:
         6c:dd:b9:87:9e:49:d1:df:3e:e6:b0:27:91:0e:7a:21:cf:3e:
         fd:92:22:76:2d:59:17:8a:c7:f5:44:6b:9e:a5:c7:0d:76:aa:
         c3:31:7d:f2:c0:01:6b:7c:3e:6f:12:b8:12:0a:28:34:3c:d9:
         e8:56:95:22:b3:51:ec:72:2e:0e:96:c2:23:e4:a6:60:b2:78:
         55:48:e2:a9:1f:4d:26:d6:18:03:41:c2:fd:f7:27:25:3c:32:
         87:a6:0c:60:a8:57:15:5f:3a:48:9a:6c:5c:64:15:c9:f4:36:
         54:62:e4:36:65:66:88:63:52:3d:a1:ff:91:31:ba:fb:57:62:
         59:67:d5:64:a1:1e:0b:78:90:a5:c8:be:91:68:06:a1:44:d9:
         bc:87:03:a3:31:0c:3e:34:9f:c0:3c:7c:24:db:23:43:f2:de:
         a1:88:df:ee:bd:1d:c2:b6:db:38:a1:22:1e:04:85:c5:b1:fd:
         4d:3d:25:f7:cc:c4:ae:a5:3a:9b:a2:22:31:17:4f:08:d2:49:
         de:3d:f4:26:3c:c9:46:9b:41:d9:54:b7:02:4b:f8:01:a2:ba:
         9b:30:61:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:44 2025 by rpki-client on console.sobornost.net