Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
File:                     67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft (raw, json)
Hash identifier:          1MOmOGPI96qMsL2QfSkK+LxCQ7KRu2dDixm4CGqG9Dw=
Subject key identifier:   DD:B9:D2:79:D7:67:2B:42:8F:D7:3D:94:D0:5A:C8:90:4D:18:ED:D3
Authority key identifier: 67:21:0E:55:22:F5:15:3F:DA:7A:73:E4:EE:2B:30:0B:C0:CC:9A:0B
Certificate issuer:       /CN=67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B
Certificate serial:       2645EE3017A637828567F46CB769EC6B1F2010DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
Manifest number:          024A
Signing time:             Mon 28 Apr 2025 05:40:00 +0000
Manifest this update:     Mon 28 Apr 2025 05:35:00 +0000
Manifest next update:     Tue 29 Apr 2025 05:40:00 +0000
Files and hashes:         1: 323830343a353231383a3a2f33322d3335203d3e20323638343934.roa (hash: gmytMNlxeH3j9hJIGBJLZdvIvhQMZEwJGXACmpzXzXk=)
                          2: 67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl (hash: 8F5FwsKfQHAFQva4f43T4hHILsImhlO+mtM2lQgP7Vo=)
                          3: 34352e3136322e33362e302f32322d3234203d3e20323638343934.roa (hash: 308U9YuTQinc/6h6pROcQyW/yhUpaoAEuJenvQ6ZLxc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl
                          rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:45:ee:30:17:a6:37:82:85:67:f4:6c:b7:69:ec:6b:1f:20:10:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B
        Validity
            Not Before: Apr 28 05:35:00 2025 GMT
            Not After : Apr 29 05:40:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8b:7a:78:d6:a9:01:17:75:e9:bd:48:c2:08:
                    d4:6f:d7:13:d3:72:1d:de:aa:3b:7a:5c:69:b1:76:
                    1e:dc:cf:97:2c:bd:42:4f:60:63:8b:7b:0c:13:ae:
                    6d:b3:09:07:1d:e0:d5:47:81:f2:55:ec:d0:bd:b1:
                    c9:97:1e:85:00:c8:d5:ac:46:d1:5f:67:6c:19:5e:
                    ea:84:ea:f0:3b:ee:0d:00:a9:06:cf:f4:29:93:be:
                    32:ee:bb:1b:f4:88:57:69:5a:28:14:02:08:ee:73:
                    ad:92:b3:54:cf:7b:da:62:20:00:4f:8d:05:67:48:
                    57:58:f0:31:a4:f7:32:fb:bc:b0:51:0c:f8:e7:9c:
                    b4:11:09:a5:43:0d:6a:90:bd:c9:7a:14:a0:87:4d:
                    37:3f:72:1e:57:5a:86:30:61:4b:76:23:8b:bc:e5:
                    8d:1d:ba:52:7c:31:c7:bd:2c:a2:74:2f:63:7c:3c:
                    d6:89:ec:25:6f:6e:d0:d7:7b:6d:9d:74:21:c0:ae:
                    31:02:ce:18:c5:91:d3:92:49:37:48:b8:15:b3:40:
                    42:e5:3f:02:f4:14:7c:48:e2:60:f7:95:ea:06:ac:
                    a7:05:a2:71:25:e6:80:15:cb:1c:c8:3a:42:7b:44:
                    21:fa:52:8d:48:c0:8a:f3:1f:94:6e:c5:d4:fa:f7:
                    12:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B9:D2:79:D7:67:2B:42:8F:D7:3D:94:D0:5A:C8:90:4D:18:ED:D3
            X509v3 Authority Key Identifier:
                keyid:67:21:0E:55:22:F5:15:3F:DA:7A:73:E4:EE:2B:30:0B:C0:CC:9A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ce:80:96:a1:fc:df:22:32:6b:c4:86:60:8e:0c:32:40:ef:
         a2:3f:35:38:b9:0d:3e:21:92:64:f2:1c:fe:1c:9c:17:12:6b:
         63:a2:ae:97:3a:ae:40:7f:8d:0f:10:6e:ef:5b:b1:d9:cb:ae:
         05:59:66:10:ac:7b:52:9c:7c:26:71:9a:22:7c:57:35:91:d8:
         ee:24:da:bf:c6:b6:f6:8b:cb:87:65:ee:24:67:3b:4e:33:dd:
         c6:cd:2a:e7:6b:9a:4c:aa:17:6a:75:90:5f:cd:6e:67:c3:63:
         45:af:35:8a:74:cd:61:46:9d:37:df:c3:25:9d:38:f3:07:f5:
         aa:34:67:a7:df:3f:09:07:e2:5a:f6:3c:cb:22:c2:bf:4b:61:
         3f:ae:4c:4b:36:24:61:92:2c:b4:76:d8:e3:44:f7:27:8e:c0:
         9c:65:c9:96:fe:4b:e1:19:92:ad:0c:5d:8a:99:1c:77:75:e4:
         cf:3b:89:ec:d2:8c:47:fc:18:01:71:9e:28:fb:e3:e6:1e:7b:
         30:4c:8a:a9:a4:12:19:46:39:57:01:b0:f4:61:50:de:c8:c7:
         60:84:3b:2e:92:8e:ab:73:fc:86:5e:c5:db:dd:3a:d8:8a:57:
         9a:5d:a4:b9:52:12:aa:83:9c:5e:59:7f:ae:ff:e1:bb:cb:fe:
         d3:1e:98:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:24 2025 by rpki-client on console.sobornost.net