Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.mft
File:                     30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.mft (raw, json)
Hash identifier:          C9FdrT93iU7yjS8EBJEkAy0HNx51mGMexMhnLRfZ3ps=
Subject key identifier:   A5:12:C3:16:C4:A2:00:58:0B:3E:E3:C7:0B:F8:C4:91:66:94:F9:FB
Authority key identifier: 30:CB:0F:58:B1:D7:9A:75:9D:91:4A:F9:7B:A1:28:7C:39:FE:9D:FD
Certificate issuer:       /CN=30CB0F58B1D79A759D914AF97BA1287C39FE9DFD
Certificate serial:       71B554CE25D5D5227D8AF3C8E0302AB7FB140ECA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.mft
Manifest number:          020C
Signing time:             Mon 28 Apr 2025 16:11:30 +0000
Manifest this update:     Mon 28 Apr 2025 16:06:30 +0000
Manifest next update:     Tue 29 Apr 2025 19:04:30 +0000
Files and hashes:         1: 3230312e3135392e3132302e302f32322d3234203d3e203631383132.roa (hash: QLRJ4/fyDzYvXnclF3NRy/s0hJIu5kEYq31YQwf3h+4=)
                          2: 30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.crl (hash: Qesku+pzUB+x/9jh3jQi08nlt3OX8Zp/WUecYC2p/C4=)
                          3: 323830343a313962303a3a2f33322d3438203d3e203631383132.roa (hash: UpXZvMnfN7ZQ4csvZrx/3+9tud0/4UDi/+GurEGzm2I=)
                          4: 3137302e38332e3132382e302f32322d3234203d3e203631383132.roa (hash: +j3WMwV/2NxbsL9VEgWaiA9Vc0I6O5E82YW+EKzRPAU=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.crl
                          rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b5:54:ce:25:d5:d5:22:7d:8a:f3:c8:e0:30:2a:b7:fb:14:0e:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30CB0F58B1D79A759D914AF97BA1287C39FE9DFD
        Validity
            Not Before: Apr 28 16:06:30 2025 GMT
            Not After : Apr 29 19:04:30 2025 GMT
        Subject: CN=A512C316C4A200580B3EE3C70BF8C4916694F9FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ca:43:c3:d8:a5:dc:60:3c:95:bd:2b:c9:21:
                    e7:c9:11:ad:52:a6:a8:5e:03:9c:28:54:96:be:ff:
                    77:77:dd:b8:34:c9:45:34:54:9c:29:05:19:c9:37:
                    5a:23:27:ff:67:99:0c:7d:ae:6c:4c:b4:2b:b0:94:
                    21:6b:14:c2:ce:f6:13:57:3c:85:cc:70:d4:b4:e3:
                    16:50:97:13:22:41:ad:34:0f:80:9f:ce:99:c0:e9:
                    9d:f9:78:b0:f7:77:e9:a3:19:ec:51:5f:a6:3c:88:
                    ac:4f:ce:75:68:28:fd:10:6b:ec:71:6b:4c:0a:8c:
                    aa:85:1c:b7:51:a3:50:2d:03:3f:3e:37:29:79:10:
                    28:8a:b9:1c:8c:b6:25:6f:4f:e8:aa:b0:37:cf:ac:
                    a3:ec:de:9e:16:02:b8:ac:ca:2b:17:84:d4:d4:2d:
                    ff:6d:f8:c3:b3:82:78:9a:f9:fb:ff:04:ef:1f:b2:
                    4a:8c:9b:e7:6a:10:6b:98:02:b6:20:9b:89:16:5b:
                    6d:d1:23:65:5a:25:dc:c4:d3:83:54:86:18:bf:ee:
                    e4:f9:3a:75:81:d6:18:86:07:cb:67:3c:86:42:09:
                    08:b5:c9:08:83:99:37:17:f6:a6:a4:6c:61:7c:dc:
                    3a:67:14:cc:c1:a1:3a:fb:d5:1c:7c:46:ae:f1:7a:
                    5e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:12:C3:16:C4:A2:00:58:0B:3E:E3:C7:0B:F8:C4:91:66:94:F9:FB
            X509v3 Authority Key Identifier:
                keyid:30:CB:0F:58:B1:D7:9A:75:9D:91:4A:F9:7B:A1:28:7C:39:FE:9D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:39:b6:6c:d1:19:2f:d7:8f:65:ae:52:a8:6c:2f:ec:55:50:
         d9:88:ed:96:73:6b:3a:14:63:cc:e2:a0:0a:fb:a5:1a:07:2b:
         db:21:fb:23:2c:0c:7b:bd:56:22:09:fe:45:e1:46:e5:ff:97:
         87:06:78:d1:0e:9b:22:d5:ea:77:61:51:cd:41:5e:da:9a:a4:
         f9:7b:67:71:b9:82:39:aa:3e:9d:76:90:30:21:be:24:ee:af:
         87:4b:ec:32:39:8c:83:a1:ac:7a:8f:d2:de:c7:ff:0e:ca:b8:
         c0:f6:f8:50:dc:37:ce:8d:d9:43:ab:8a:97:b8:86:fa:fb:1b:
         f5:f3:f0:d2:c0:17:f9:37:e0:0b:11:19:73:9b:e5:fc:77:18:
         78:72:93:ad:f8:23:5d:36:4f:d2:10:c6:b4:a4:aa:b3:68:90:
         92:e1:67:28:3c:f7:06:37:33:05:22:62:d3:0a:30:ff:ff:ce:
         68:63:26:3f:00:81:c2:9d:9a:f8:9f:bd:55:e7:7f:27:05:d8:
         d2:3e:32:01:29:87:c2:f5:e0:9e:c9:10:5a:55:0c:44:6e:73:
         92:be:c2:d2:39:43:c9:f5:34:14:bc:b7:5f:74:c6:06:b0:91:
         55:b1:5c:74:16:3d:6f:44:d4:1b:72:3e:2c:ab:ec:5b:9d:eb:
         e8:89:c3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:52 2025 by rpki-client on console.sobornost.net