Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.mft
File:                     2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.mft (raw, json)
Hash identifier:          YpUXd63kMqC5ZFvNak8yZMpqx9AlPLXYgDnWMU4hs4s=
Subject key identifier:   22:36:83:CE:16:F9:7C:1D:62:B2:88:19:9E:72:F1:41:FC:F1:EE:FD
Authority key identifier: 22:82:EB:AD:82:45:56:FE:B9:D1:B0:FA:38:0B:C1:AB:9C:ED:06:27
Certificate issuer:       /CN=2282EBAD824556FEB9D1B0FA380BC1AB9CED0627
Certificate serial:       57C8E64374EC4423132B3C4E6A2E7829DF6F9B82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.mft
Manifest number:          DF
Signing time:             Mon 28 Apr 2025 11:01:13 +0000
Manifest this update:     Mon 28 Apr 2025 10:56:13 +0000
Manifest next update:     Tue 29 Apr 2025 13:11:13 +0000
Files and hashes:         1: 2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.crl (hash: cSL3nZEvQPz041CKEMd3XfNVtatvljb+gJJqOUOJ3bU=)
                          2: 323830343a346666343a3a2f33322d3334203d3e20323638333630.roa (hash: tJ5PYHK8RamZW1g4KYUQ4+/gBPIjEo5ltYwMGy2gfkE=)
                          3: 34352e3233382e3230302e302f32322d3234203d3e20323638333630.roa (hash: Vlaqus02vzdhSSD5Qb9N/hh/OIkeHx5hl4tKXMmt7Tk=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.crl
                          rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 13:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c8:e6:43:74:ec:44:23:13:2b:3c:4e:6a:2e:78:29:df:6f:9b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2282EBAD824556FEB9D1B0FA380BC1AB9CED0627
        Validity
            Not Before: Apr 28 10:56:13 2025 GMT
            Not After : Apr 29 13:11:13 2025 GMT
        Subject: CN=223683CE16F97C1D62B288199E72F141FCF1EEFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:eb:15:07:8c:ff:29:d8:e4:df:17:f7:b7:
                    bc:09:41:cf:fa:29:be:c4:d1:9e:50:12:a2:44:dc:
                    70:c3:12:99:fb:d7:f2:3e:32:5a:b9:93:39:4d:84:
                    5b:c9:bd:7b:e9:07:35:4b:1d:b9:df:cf:62:2e:bf:
                    f3:e6:e7:70:74:00:ea:ff:84:e0:ec:9c:e7:c3:8b:
                    ba:e4:93:11:98:55:c3:fd:8d:60:eb:11:04:eb:12:
                    e4:1c:5a:45:e0:41:18:ba:e8:a2:04:ee:0d:62:93:
                    4c:43:7e:79:13:fd:aa:ee:90:ff:4d:30:ab:c6:ef:
                    81:6b:38:af:04:e1:f8:ef:df:bc:a6:f5:04:16:0e:
                    31:3a:2a:47:a5:fd:66:4a:de:a3:34:38:51:f7:11:
                    8f:59:b5:9e:8e:91:22:13:a8:6f:bf:98:4d:f9:94:
                    1b:ae:fd:30:ce:80:d6:28:8f:d2:73:57:25:64:45:
                    30:ab:61:9a:27:ff:87:09:ad:20:82:60:85:47:00:
                    26:26:3a:2b:0d:0a:13:bb:10:dc:21:ee:eb:ef:33:
                    50:41:2c:2f:3b:a6:9a:9c:c8:3e:e6:e1:d7:72:fb:
                    fc:35:85:15:e7:a0:96:03:bd:6e:f2:cf:21:d8:0b:
                    7b:7e:c2:5b:36:e0:ea:06:d8:d7:c4:d4:1c:9d:f3:
                    13:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:36:83:CE:16:F9:7C:1D:62:B2:88:19:9E:72:F1:41:FC:F1:EE:FD
            X509v3 Authority Key Identifier:
                keyid:22:82:EB:AD:82:45:56:FE:B9:D1:B0:FA:38:0B:C1:AB:9C:ED:06:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:90:9f:c9:59:bf:a9:a7:a6:af:6e:94:f3:3f:08:fb:b0:a8:
         cb:2c:a3:73:38:02:3d:93:97:97:91:22:50:d9:a1:59:02:dd:
         94:0d:1c:be:a0:fc:02:11:7c:f6:af:b5:96:3b:6b:9f:56:38:
         d5:b1:38:64:0e:37:66:ca:49:ff:45:20:b7:0d:0d:1a:bd:44:
         a8:f0:53:e4:d8:1a:0a:ea:09:aa:d7:3a:ac:48:c5:71:3a:9c:
         c6:03:50:f3:a9:1b:12:d8:38:b1:2d:7c:59:2b:3d:9e:44:d4:
         3e:87:81:42:4e:c0:4a:59:3b:47:b4:4d:62:e7:84:df:a0:48:
         f3:f3:81:b0:90:9b:ad:00:92:1f:f5:0c:62:23:25:82:c5:58:
         8e:eb:9d:4a:aa:b0:38:0b:06:28:f8:83:c1:87:68:f6:54:50:
         0f:4b:de:e7:a0:84:f1:e7:6d:fc:1e:37:e6:9d:68:c5:f7:cd:
         c5:12:80:b7:4a:7d:ba:57:81:5e:89:0e:af:18:80:09:e9:ee:
         95:a4:14:ef:49:3e:88:a7:53:a5:ab:5b:fe:5c:c6:60:2e:cf:
         47:db:b8:fb:6f:95:ff:27:a8:11:27:b8:e6:24:2a:eb:f5:c3:
         09:f7:ef:37:7d:16:a7:9a:6e:ae:31:ab:87:f0:6a:4f:31:40:
         ef:d0:73:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:53 2025 by rpki-client on console.sobornost.net