Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft
File:                     8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft (raw, json)
Hash identifier:          wIFOqYJzhnumFOpzqU7XkaWEstIw/6eRO+ozRC4Skn4=
Subject key identifier:   08:40:C5:33:46:2F:4C:19:5C:ED:99:83:E4:F8:C4:C1:DA:FD:6D:11
Authority key identifier: 8A:11:41:64:BB:A9:BC:4B:3A:50:A7:29:11:6B:C7:57:4D:2C:D6:EF
Certificate issuer:       /CN=8A114164BBA9BC4B3A50A729116BC7574D2CD6EF
Certificate serial:       41B65AA08DA4C3A64BCCE017ECC1637A79D62D65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft
Manifest number:          0206
Signing time:             Mon 28 Apr 2025 14:07:58 +0000
Manifest this update:     Mon 28 Apr 2025 14:02:58 +0000
Manifest next update:     Tue 29 Apr 2025 17:59:58 +0000
Files and hashes:         1: 8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.crl (hash: Mdwjjq8oCfpD6dFjfFvBMCK+jfsS+wXvpK1p+HLnwl0=)
                          2: 323830343a366162383a3a2f33322d3438203d3e20323730333535.roa (hash: mZN4AszSQT36UMwFtHkIGpU8mMiqKNrNGykEzvf6hdU=)
                          3: 3139302e38392e34382e302f32322d3234203d3e20323730333535.roa (hash: SLEHFECRXQmMYbYlcQhzLdJpI1AWkv5FBYpLZmL4zfY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.crl
                          rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b6:5a:a0:8d:a4:c3:a6:4b:cc:e0:17:ec:c1:63:7a:79:d6:2d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A114164BBA9BC4B3A50A729116BC7574D2CD6EF
        Validity
            Not Before: Apr 28 14:02:58 2025 GMT
            Not After : Apr 29 17:59:58 2025 GMT
        Subject: CN=0840C533462F4C195CED9983E4F8C4C1DAFD6D11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a8:12:d1:13:ea:35:78:3c:72:a8:82:2c:d8:
                    ea:dc:db:b9:5c:ac:e3:93:6b:61:02:64:2e:95:79:
                    54:73:be:f5:57:80:9a:0f:5e:d1:fc:9f:8f:78:3d:
                    f4:ff:80:ef:d0:b9:89:7c:72:bb:a5:8f:ab:d4:ab:
                    a9:b7:5e:5b:2d:ea:ad:22:22:85:7b:8e:8a:85:fb:
                    e4:71:34:73:a7:41:d6:42:6b:84:b8:94:3a:40:40:
                    f6:97:71:f8:1b:90:68:6e:82:e4:86:15:77:ad:5a:
                    f8:ad:04:bc:16:71:d2:95:a1:61:1a:52:d7:ac:b1:
                    02:bf:9f:27:26:60:07:47:2a:8d:8b:b1:e8:0d:9c:
                    cd:ff:d2:c6:ce:97:4a:88:78:77:33:8e:6b:cd:37:
                    1a:40:2d:a9:a3:89:64:0d:cf:73:68:86:53:aa:40:
                    ac:51:4a:ff:50:97:60:9d:84:22:c9:20:05:ab:59:
                    de:43:e0:1c:4e:37:73:93:de:9e:be:61:7b:28:bd:
                    32:ab:ee:f1:54:04:7d:b6:d9:27:5d:63:a1:f2:e7:
                    11:1c:df:d8:fd:55:3b:ad:8b:79:a8:de:57:57:9c:
                    4f:c4:fa:e9:a3:b5:82:17:23:ad:80:a0:c3:92:5b:
                    00:09:0b:c5:a9:58:3e:e9:4c:13:4a:6f:69:b7:81:
                    36:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:40:C5:33:46:2F:4C:19:5C:ED:99:83:E4:F8:C4:C1:DA:FD:6D:11
            X509v3 Authority Key Identifier:
                keyid:8A:11:41:64:BB:A9:BC:4B:3A:50:A7:29:11:6B:C7:57:4D:2C:D6:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:31:ba:0c:17:8e:0a:01:74:f6:40:dd:de:ed:32:2f:a6:8f:
         28:86:0a:4e:35:b8:84:a7:07:e2:03:72:cc:cf:fc:be:54:7f:
         1c:6e:47:00:30:2c:0d:9a:28:6f:a4:a3:40:c6:b3:d6:d1:50:
         f1:04:22:f2:64:a7:36:a7:45:24:a6:d9:4f:5d:d0:3f:bc:fe:
         b0:7e:da:db:1a:fe:e6:28:6e:f3:3e:a7:14:ff:d6:83:f3:cb:
         6f:55:b8:44:3b:47:cf:1e:f5:9d:60:78:49:bd:c8:fc:0d:91:
         ba:ff:1c:15:7b:7a:71:ce:c8:70:6f:fc:39:4c:8b:56:f3:ce:
         10:a7:24:59:c0:3d:9f:1d:ab:66:69:51:3d:ca:30:f5:0d:fd:
         c3:22:71:cd:fe:bb:53:2d:05:89:8f:8c:25:b0:4c:ed:1e:bf:
         d0:d8:ed:ec:6b:d0:70:a3:e3:a0:d9:9c:db:2c:da:c8:5b:42:
         0b:e6:9b:e9:6c:2a:1a:07:b6:c1:ea:a4:1b:14:8e:70:42:4d:
         ea:98:eb:b3:7e:94:d6:1f:07:15:cc:53:27:17:8d:2e:a5:be:
         f4:f0:5c:c4:e7:b0:06:af:d6:d0:d0:20:33:26:cb:b2:c6:68:
         38:04:60:67:e4:e7:d6:bc:07:65:dd:5a:95:4f:a9:73:ae:92:
         d8:44:16:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:52 2025 by rpki-client on console.sobornost.net