Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.mft
File:                     561575F60242E48030BC35A771871EB47C6EFF55.mft (raw, json)
Hash identifier:          nayNGr2RZmybdbN02Qd03Mf5f+7yGedwLSh6/2YyIS4=
Subject key identifier:   F7:39:FD:EA:99:07:24:09:D7:CC:F7:71:66:D2:1C:21:98:BE:6C:12
Authority key identifier: 56:15:75:F6:02:42:E4:80:30:BC:35:A7:71:87:1E:B4:7C:6E:FF:55
Certificate issuer:       /CN=561575F60242E48030BC35A771871EB47C6EFF55
Certificate serial:       042E5672D87F1167EFA5A83BD25D0559B54DFCE2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.mft
Manifest number:          7D
Signing time:             Mon 28 Apr 2025 03:49:57 +0000
Manifest this update:     Mon 28 Apr 2025 03:44:57 +0000
Manifest next update:     Tue 29 Apr 2025 06:13:57 +0000
Files and hashes:         1: 561575F60242E48030BC35A771871EB47C6EFF55.crl (hash: m88kVCgNPr0FHPGQ/ipofCJiV73vDQZJUrpv+zVE70g=)
                          2: 3137372e3133362e37332e302f32342d3234203d3e20323633363036.roa (hash: yWg25YSIGn5ne4PsmFkjzr0N6QT/q6srY2+ahn/2xK0=)
                          3: 3137372e3133362e37322e302f32332d3233203d3e20323633363036.roa (hash: t7S2i81KcyrcoANm5d4BsvS471/FI2YRHfNUeMgGLe4=)
                          4: 323830343a6664343a3a2f33322d3332203d3e20323633363036.roa (hash: YcVgO/TqLV2RVsEcY5YxfTDDibwjME6ohrDzPZUeqZ0=)
                          5: 3137372e3133362e37352e302f32342d3234203d3e20323633363036.roa (hash: zky2j5e+djgNdAtqIowX31+SvrgWF85lsebPB8Oi+3s=)
                          6: 3137372e3133362e37342e302f32342d3234203d3e20323633363036.roa (hash: qe7r9EMBuA8PVM6G5o8rjU41GVgMR7iCARGYFxajE9Q=)
                          7: 3137372e3133362e37322e302f32342d3234203d3e20323633363036.roa (hash: wIV2/wL6lihesQ313z2vEBTVMqAU+CX0lMkYkyWVI0Q=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.crl
                          rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:2e:56:72:d8:7f:11:67:ef:a5:a8:3b:d2:5d:05:59:b5:4d:fc:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=561575F60242E48030BC35A771871EB47C6EFF55
        Validity
            Not Before: Apr 28 03:44:57 2025 GMT
            Not After : Apr 29 06:13:57 2025 GMT
        Subject: CN=F739FDEA99072409D7CCF77166D21C2198BE6C12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f8:88:aa:30:a6:c1:64:69:5b:30:b0:dd:89:
                    3a:ff:36:6a:c7:9a:a5:0e:3c:63:39:98:92:2b:f5:
                    a6:fa:71:73:f8:64:11:9b:26:0c:1a:89:cf:60:38:
                    40:9e:02:7c:22:36:13:6c:18:6c:cf:68:6c:71:73:
                    3e:72:1a:3d:93:4b:88:cb:12:84:89:74:7b:8d:4a:
                    de:db:a6:49:aa:33:a3:6e:96:38:b8:16:8f:84:c1:
                    e2:32:1b:ca:ef:9d:ba:08:38:16:bd:42:90:54:97:
                    c9:ca:59:da:5c:c9:3c:58:fc:7b:45:3e:37:6d:68:
                    5b:13:b9:b2:86:f3:a2:52:b2:fa:2c:96:25:d7:3b:
                    0b:a5:b9:a3:d7:62:6c:3a:b2:e7:80:3c:9c:bf:c8:
                    b4:a6:d9:bf:7e:4c:85:db:44:ef:c5:e3:a9:d1:8d:
                    ce:27:fe:2e:34:c7:fc:d3:9e:11:9a:a8:f8:01:27:
                    48:81:2a:ea:e5:a3:aa:2e:c5:58:b0:37:13:8e:ad:
                    29:ed:3d:25:5f:24:05:a2:61:8d:7b:7e:7f:b8:01:
                    fb:48:f1:06:6c:b6:2a:3c:41:50:ff:14:2b:8f:42:
                    b8:fa:f0:94:3c:30:3f:00:f4:ff:53:69:04:4d:09:
                    e2:06:89:28:c2:ad:ad:86:6d:ba:1e:de:e9:91:21:
                    3a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:39:FD:EA:99:07:24:09:D7:CC:F7:71:66:D2:1C:21:98:BE:6C:12
            X509v3 Authority Key Identifier:
                keyid:56:15:75:F6:02:42:E4:80:30:BC:35:A7:71:87:1E:B4:7C:6E:FF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:08:4f:a3:e3:3b:89:93:6b:10:40:fb:9c:9b:ea:da:49:6d:
         f4:9c:39:b8:f1:94:8a:3e:a1:5d:6f:41:b8:37:2a:a8:82:9f:
         e1:85:2c:2f:04:e5:3f:19:6d:17:f7:82:08:23:e2:96:c5:ba:
         c1:ac:1f:aa:7e:63:a1:b1:6b:bb:3e:d7:74:8a:81:bf:17:6f:
         f4:49:07:13:b5:bd:f2:fc:a0:02:fc:a7:ff:21:fc:3c:cf:92:
         40:7d:2a:5f:9f:5b:d9:3a:84:4f:68:34:e2:61:43:68:b0:1d:
         88:fd:5c:31:0f:e7:c4:6c:c4:f0:de:20:65:62:fe:f9:ee:8d:
         d8:18:da:cb:0b:79:90:ad:c7:64:ae:da:f3:da:fb:7e:c6:16:
         c2:81:ab:a7:88:c5:e3:ab:59:1f:81:2a:af:a3:f3:91:21:65:
         13:7b:62:3b:b6:9c:3f:48:69:22:2d:c4:24:2d:91:2c:db:9a:
         fe:bd:cb:f2:e4:b3:60:63:02:ae:d2:38:1f:e7:6b:7f:0e:20:
         89:3c:de:02:5d:37:9b:36:f8:5c:7d:0a:23:78:09:85:c5:e4:
         a8:86:e3:da:75:50:db:9a:1a:9d:c2:46:88:80:26:eb:94:ea:
         9d:ee:68:13:52:68:48:0a:52:6a:45:9e:50:1f:ec:2c:a9:48:
         77:50:d0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:49 2025 by rpki-client on console.sobornost.net