Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.mft
File:                     36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.mft (raw, json)
Hash identifier:          MRloql+jVQ1D75/6s15HAT4IkGD9MKqIbaui49jcGTE=
Subject key identifier:   35:4A:07:C6:D1:75:8D:56:13:06:CA:A8:45:43:C2:C5:D3:8D:43:40
Authority key identifier: 36:DA:71:80:22:D5:4A:30:E9:3B:38:78:E7:B4:1A:3B:BA:D1:BA:EB
Certificate issuer:       /CN=36DA718022D54A30E93B3878E7B41A3BBAD1BAEB
Certificate serial:       5295C87FD4AB4EE2A79E1B881414F4C0A0382C73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.mft
Manifest number:          7F
Signing time:             Sat 26 Apr 2025 18:07:00 +0000
Manifest this update:     Sat 26 Apr 2025 18:02:00 +0000
Manifest next update:     Sun 27 Apr 2025 18:55:00 +0000
Files and hashes:         1: 36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.crl (hash: LXMfCeSIhELD5NhuqKd70ERCjYO4V3cqqVrD2JYOFe4=)
                          2: 34352e3137332e3130322e302f32342d3234203d3e20323638383039.roa (hash: 3vzzUKd35dY+j8ruqbNGlIN6Zjr20VuCS61cy2hn3Cw=)
                          3: 34352e3137332e3130302e302f32332d3233203d3e20323638383039.roa (hash: 8Ybv6WrmgkMLBRYO39t2s0BF8QxAGKyHKpS21auj8ho=)
                          4: 34352e3137332e3130312e302f32342d3234203d3e20323638383039.roa (hash: 5gmWK9mRFx6tkcEhgdl6zrYoWrrD9DF7gX7xpfmnrQY=)
                          5: 34352e3137332e3130302e302f32322d3232203d3e20323638383039.roa (hash: fIzzeZzlliX4+kD3/rm0+LjzNSyQQFfd/UuTADmZfT4=)
                          6: 34352e3137332e3130332e302f32342d3234203d3e20323638383039.roa (hash: y0Jt2Yypp9Ohu2UOGvNPoH5zWfwslbslej7xUtPgvPk=)
                          7: 323830343a356166343a3a2f33322d3438203d3e20323638383039.roa (hash: 2Ie0Qt8s7U97uqkw8hO8ihS3AhL+T5mOrG5YQiOqSHY=)
                          8: 34352e3137332e3130322e302f32332d3233203d3e20323638383039.roa (hash: j/7pN3taNtbDczxaC0PGg7ED4w2QZGMYGysmxaWxQ/E=)
                          9: 34352e3137332e3130302e302f32342d3234203d3e20323638383039.roa (hash: Jt2WL0U4QEgyRsE84EEHJ2gYChm06i8iQSLEyUOgeMc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.crl
                          rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 18:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:95:c8:7f:d4:ab:4e:e2:a7:9e:1b:88:14:14:f4:c0:a0:38:2c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36DA718022D54A30E93B3878E7B41A3BBAD1BAEB
        Validity
            Not Before: Apr 26 18:02:00 2025 GMT
            Not After : Apr 27 18:55:00 2025 GMT
        Subject: CN=354A07C6D1758D561306CAA84543C2C5D38D4340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:78:d2:da:c8:3e:f5:d3:a5:a7:53:dd:29:2e:
                    57:a5:8b:be:7e:69:40:4e:90:06:20:5d:be:5c:4a:
                    ba:de:2d:94:d8:75:aa:a5:33:82:81:6e:e6:a4:3d:
                    0a:99:d7:cf:b4:03:67:f9:10:36:34:bb:92:22:78:
                    d7:53:bb:5f:ef:15:9b:46:cd:66:2f:26:b8:57:71:
                    67:c2:d8:24:40:f7:59:cc:4e:68:4c:10:5d:82:46:
                    e6:7f:98:60:ce:b2:43:a6:43:4a:c4:ab:58:77:3f:
                    b3:e3:5c:4b:e5:89:07:fd:2b:84:8f:b6:57:b9:f5:
                    d3:94:c0:c4:74:04:fa:2c:6f:30:2f:2e:6e:2c:89:
                    24:22:77:4c:57:44:c1:d9:06:c4:23:fa:04:f4:fb:
                    0d:db:4a:c0:c7:aa:e9:9b:0b:44:4c:5e:dd:35:e5:
                    83:9a:99:a8:6e:9a:b7:6c:f1:dc:c0:0d:c3:3f:74:
                    2d:7e:fb:c1:52:68:7c:43:83:c5:4a:c9:ea:72:bb:
                    c9:69:ef:c5:ed:55:ee:14:47:d1:53:64:72:bb:6e:
                    f1:cb:78:d9:f4:4e:29:8f:46:11:97:84:fb:32:ec:
                    e4:70:03:fb:08:87:d8:e0:25:c0:ea:12:60:31:fc:
                    fa:e3:3d:eb:fc:42:3a:7c:7d:27:ff:7e:be:46:10:
                    ef:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4A:07:C6:D1:75:8D:56:13:06:CA:A8:45:43:C2:C5:D3:8D:43:40
            X509v3 Authority Key Identifier:
                keyid:36:DA:71:80:22:D5:4A:30:E9:3B:38:78:E7:B4:1A:3B:BA:D1:BA:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:17:e3:de:4b:58:86:a3:bc:3c:54:33:5c:60:09:05:fc:74:
         84:82:f9:41:28:33:a9:e7:7e:46:14:90:6d:5f:ae:a3:89:f3:
         06:cd:f1:b5:02:d8:91:40:1a:fa:bc:b4:30:4d:79:37:11:08:
         b7:d5:fe:06:46:46:50:32:cb:ed:4e:71:8a:2d:1f:ba:7f:49:
         91:48:c8:77:27:43:8b:15:72:e7:ed:98:d8:29:86:d3:69:cd:
         b4:2d:0a:18:74:a0:5c:4e:f4:6c:57:5d:c9:16:83:01:06:2b:
         0d:f4:53:23:8e:68:42:6f:39:69:2f:57:c5:34:66:23:3b:ba:
         3e:46:95:02:35:29:35:b0:81:6b:d8:ef:e2:a5:83:76:bf:e3:
         cc:97:7b:b3:3d:b6:89:dc:12:cd:3f:3c:db:78:26:43:fd:f6:
         3d:d9:c9:5f:5e:56:6f:27:f9:41:24:4d:92:ed:f7:81:94:34:
         5f:9e:60:33:f4:47:f1:23:4f:b4:fa:a8:fe:a1:e9:b6:d0:44:
         19:a1:95:ce:e3:6d:ae:cb:50:59:e6:9f:92:af:e7:33:c3:44:
         1a:ae:af:ac:6c:16:b5:06:e1:f0:8a:20:d4:05:1a:69:a5:2d:
         13:d3:5c:b7:a7:e2:fc:8a:59:d6:a9:05:8c:8d:a9:38:40:f3:
         08:25:2a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:02 2025 by rpki-client on console.sobornost.net