Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.mft
File:                     11A2F7135D8EA026B9E72BE70E3EA679F14263F4.mft (raw, json)
Hash identifier:          nhUIcU06F6naLq4XjNis7qj8qKYqpesw+nWfMEtD3DI=
Subject key identifier:   8C:6B:C9:70:FC:23:48:0A:A3:10:91:93:87:00:D2:01:C7:A4:B5:A1
Authority key identifier: 11:A2:F7:13:5D:8E:A0:26:B9:E7:2B:E7:0E:3E:A6:79:F1:42:63:F4
Certificate issuer:       /CN=11A2F7135D8EA026B9E72BE70E3EA679F14263F4
Certificate serial:       796EC19061FB78E3C0DE05C1CD60EE7F3607C4F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.mft
Manifest number:          0124
Signing time:             Mon 28 Apr 2025 06:18:36 +0000
Manifest this update:     Mon 28 Apr 2025 06:13:36 +0000
Manifest next update:     Tue 29 Apr 2025 07:48:36 +0000
Files and hashes:         1: 11A2F7135D8EA026B9E72BE70E3EA679F14263F4.crl (hash: 9QMqzNkWWIBIeqHHCY9RHOBmucDdOaU66ePUb8U9tZY=)
                          2: 3138362e3230392e38382e302f32322d3234203d3e203238363130.roa (hash: CJxxymL10yKbb15VA7MCdbxZJdDCGbVdMizJrRSfO9I=)
                          3: 323830343a6463303a3a2f33322d3438203d3e203238363130.roa (hash: iqBKFLs2miSCmTcR0D1ftTqtnPiPgpByjxAX0wqBDwg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.crl
                          rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6e:c1:90:61:fb:78:e3:c0:de:05:c1:cd:60:ee:7f:36:07:c4:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A2F7135D8EA026B9E72BE70E3EA679F14263F4
        Validity
            Not Before: Apr 28 06:13:36 2025 GMT
            Not After : Apr 29 07:48:36 2025 GMT
        Subject: CN=8C6BC970FC23480AA31091938700D201C7A4B5A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7f:27:0e:08:98:92:f0:1e:73:a7:5c:05:f9:
                    37:ec:c9:bc:cc:b9:ef:d0:aa:69:94:81:62:d0:9f:
                    3a:ae:af:45:6f:fb:fe:e7:e5:a4:27:72:fc:a2:54:
                    cb:87:e6:66:84:a2:a3:26:2f:0b:91:81:89:e6:9d:
                    62:23:57:6f:21:94:46:f0:94:b0:5c:db:49:07:25:
                    07:df:4d:43:8b:b1:04:36:1a:1b:d5:7d:15:3a:41:
                    8b:86:a0:45:99:01:23:3f:82:b4:3f:74:52:d3:54:
                    4d:d6:82:6d:72:9d:b8:09:92:9f:b6:30:90:37:f3:
                    16:5b:27:93:eb:92:2c:8a:c7:fc:c6:59:83:2a:20:
                    f0:bf:1c:26:98:b5:c9:d6:b1:22:3e:d6:91:92:20:
                    98:d9:18:ea:2b:fe:31:66:a6:2b:3c:e7:7a:75:c6:
                    dc:b6:35:a6:02:9d:7a:bf:58:92:f1:ba:47:4b:35:
                    10:14:d4:a3:02:33:d6:68:0e:b6:db:af:1a:93:5f:
                    af:7b:ce:5d:a6:eb:9b:39:bb:84:24:c3:99:26:80:
                    9b:75:a0:f4:85:60:67:2d:e4:09:0d:00:ad:e1:39:
                    24:90:d3:c3:2e:a9:48:98:f1:3c:0b:c3:ff:fa:19:
                    84:c2:e6:ce:11:94:b4:cb:b5:96:5c:51:48:10:db:
                    b2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6B:C9:70:FC:23:48:0A:A3:10:91:93:87:00:D2:01:C7:A4:B5:A1
            X509v3 Authority Key Identifier:
                keyid:11:A2:F7:13:5D:8E:A0:26:B9:E7:2B:E7:0E:3E:A6:79:F1:42:63:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:8f:f5:16:37:dc:aa:3e:7b:f9:ca:a1:ef:3e:ab:37:59:3c:
         62:d4:6c:1e:2c:c8:78:4a:96:14:3e:fc:a8:09:99:4e:41:c6:
         1e:cd:b5:f2:bd:cd:2c:90:c2:85:cd:3c:b2:96:11:c3:96:a3:
         b9:70:a0:ca:b5:cd:e4:3f:10:83:e7:5d:7c:fa:b8:15:ae:d0:
         08:1e:99:f8:c4:6b:64:3d:45:3b:35:cb:5a:eb:fa:ea:70:cb:
         a0:f1:e8:ec:af:62:81:b0:95:8e:da:89:ca:c4:1c:b8:b2:bc:
         ee:2f:ba:a8:d5:6f:56:70:8f:d0:7e:7f:9f:75:ba:2d:7f:9e:
         6b:c3:13:6e:5c:2f:de:0e:94:bf:83:6a:af:a1:87:38:44:0b:
         2a:c6:75:98:4c:48:03:ee:82:fe:37:e0:3c:2c:d5:5c:f0:14:
         87:53:4b:28:0e:87:c2:72:d8:8e:67:02:09:8c:08:e7:98:b9:
         bf:54:7c:ac:53:35:bd:ea:b0:ab:ab:0e:b5:b0:0a:d4:eb:ae:
         9c:57:c8:db:63:94:99:1a:bc:ff:f2:7a:da:78:28:86:4f:34:
         fb:e1:a1:2b:7f:c0:42:f0:06:02:aa:b5:4e:09:cb:85:89:8c:
         d5:2e:33:ed:0f:56:4f:c4:8d:fb:a0:5b:47:7a:3d:72:f9:4e:
         d2:40:8c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:24 2025 by rpki-client on console.sobornost.net