Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft
File:                     8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft (raw, json)
Hash identifier:          gPPy7yKCB+E/XY6AGo/4PUr7wjQC2KhYYUHOBRQoVWM=
Subject key identifier:   C8:9E:35:CB:D9:45:90:88:56:82:E4:40:3B:34:82:41:E2:8E:96:7E
Authority key identifier: 8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05
Certificate issuer:       /CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
Certificate serial:       560B52E0E3A69244EB283DA0E802CE05D6E92353
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft
Manifest number:          0209
Signing time:             Mon 28 Apr 2025 15:27:14 +0000
Manifest this update:     Mon 28 Apr 2025 15:22:14 +0000
Manifest next update:     Tue 29 Apr 2025 16:09:14 +0000
Files and hashes:         1: 8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl (hash: 90BJa7vNsTH8skNWZ642dCKwKAEiNMjoO+/KkIXwiVs=)
                          2: 3230302e3138372e3130302e302f32322d3232203d3e20323730363833.roa (hash: vzsfIDw2oqflztrjwgdkWaCyFMfSI1wnTfFDvenx+5k=)
                          3: 323830343a366663343a3a2f33332d3333203d3e20323730363833.roa (hash: iWQEVS0C8DVfLIMz9bB31DfU1u5I8R0Sy/J1DcnwxCk=)
                          4: 323830343a366663343a3a2f33322d3332203d3e20323730363833.roa (hash: b8rOdxAueUDBKIvJ4vG+pgUk9LycJhyEWxyDEcrksNo=)
                          5: 3230302e3138372e3130302e302f32342d3234203d3e20323730363833.roa (hash: nskPvpUAon2GR7geuGsQF/wkm/R59aEnIpAp4kUkmdg=)
                          6: 3230302e3138372e3130302e302f32332d3233203d3e20323730363833.roa (hash: BxB6GE4kHFzE5wUoGDmDFcb0CWCHJJOVcEpZmmtAjxI=)
                          7: 3230302e3138372e3130332e302f32342d3234203d3e20323730363833.roa (hash: KActml71cD6wjVfmrA4DV2SdMETPMc7+yZI29YEKnmM=)
                          8: 3230302e3138372e3130322e302f32342d3234203d3e20323730363833.roa (hash: +Z0ru9BsWPOHlK8tWb0IGKgXDXi0PyLC2vV8M76GVfU=)
                          9: 3230302e3138372e3130322e302f32332d3233203d3e20323730363833.roa (hash: o0hcy/9RDOTJR5RMuj3MyjZzVFgfCkfY0wQiAz+xBIc=)
                          10: 3230302e3138372e3130312e302f32342d3234203d3e20323730363833.roa (hash: rbaOKt87D3c/UdScnRw1BNEUloJVfu1i1+4xUlIseJA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl
                          rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0b:52:e0:e3:a6:92:44:eb:28:3d:a0:e8:02:ce:05:d6:e9:23:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
        Validity
            Not Before: Apr 28 15:22:14 2025 GMT
            Not After : Apr 29 16:09:14 2025 GMT
        Subject: CN=C89E35CBD94590885682E4403B348241E28E967E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ab:f2:d1:0e:ff:3b:91:eb:92:1b:80:10:ca:
                    a9:60:a5:f0:24:01:f5:91:48:28:3b:c8:26:54:33:
                    26:c8:d3:31:b8:ce:bb:68:7b:be:57:20:c4:aa:c5:
                    f2:5a:23:2a:19:40:16:99:bd:79:8d:ff:aa:11:98:
                    d5:fd:99:59:5b:d9:c4:04:ea:1d:37:ba:e7:ad:f3:
                    04:a7:80:38:8c:7a:e0:75:0d:5e:88:bd:1e:a0:55:
                    6c:d8:5c:18:b1:a9:a0:13:9d:31:af:4e:d2:95:15:
                    55:67:1e:9b:32:3a:67:54:ea:d0:f1:15:cf:1a:4c:
                    05:db:8c:dd:c2:99:3a:91:5e:77:10:c7:cf:05:3d:
                    93:19:3c:05:8b:57:b8:e0:43:93:1e:61:2f:5f:9c:
                    a7:3c:44:98:ef:eb:2a:cf:f4:d8:c6:90:5d:f7:3f:
                    0c:fd:b2:66:3f:ee:c0:7e:ee:c0:9e:67:18:1b:10:
                    1f:45:27:2a:20:c6:bc:ee:d8:db:6e:0b:48:fe:c0:
                    25:bd:16:76:f8:01:c4:a7:61:c1:82:08:74:7a:35:
                    4d:96:07:77:df:98:b3:60:cc:70:5b:ff:25:85:85:
                    b6:5c:d5:78:36:eb:ae:cd:d9:e9:0a:25:f4:48:4b:
                    ab:4b:04:56:50:e1:0b:25:2d:94:27:14:c5:41:7f:
                    68:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9E:35:CB:D9:45:90:88:56:82:E4:40:3B:34:82:41:E2:8E:96:7E
            X509v3 Authority Key Identifier:
                keyid:8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:3d:51:bb:47:0e:1e:a0:51:28:34:6c:c5:59:ed:30:df:4e:
         2c:62:80:a5:ca:10:8d:99:00:27:77:5f:7c:30:17:f2:39:52:
         69:43:5e:59:59:f2:6a:51:92:11:7e:a2:a5:1c:ca:e3:3b:a4:
         13:49:90:15:0d:86:b2:71:9d:34:4e:75:2a:03:12:f5:08:0a:
         12:4e:72:cc:b9:ca:39:6d:52:cf:04:aa:51:25:93:1b:65:86:
         1d:e1:b5:dc:af:2f:42:a0:19:39:2a:d8:91:c5:54:f4:87:fc:
         2c:5c:cf:ea:b3:d4:ba:b1:85:92:1e:8a:a7:c4:29:96:1f:a0:
         64:bd:7f:a3:eb:26:14:51:d9:ea:fa:1a:e0:71:65:67:cc:c6:
         74:3c:6f:e5:2c:82:b2:2c:a1:7b:39:f3:c3:8f:dd:b6:9a:2f:
         3c:45:6b:b5:f1:dd:c8:12:a0:4d:2e:da:72:b5:35:9b:0e:7f:
         2f:b2:fa:fe:c0:38:cb:c9:b7:71:2d:9c:1e:7d:43:f9:17:46:
         1d:c6:ed:66:ff:8e:97:44:f4:e0:9b:d6:a4:c5:cd:9e:f8:aa:
         d8:28:2b:ba:76:2e:25:b7:c4:b8:44:95:59:bf:45:38:76:4c:
         19:5d:d4:bd:ce:14:f7:22:c3:e5:0b:97:ba:f1:9b:c8:83:a7:
         70:7a:66:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:52 2025 by rpki-client on console.sobornost.net