Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
File:                     DDA4FC5B8E458E28765A866099AD929BAF665339.mft (raw, json)
Hash identifier:          TAS3C83FuCQ2CzIuehifkgmRjeKuwBxpbyaellSmXyg=
Subject key identifier:   A8:0A:CE:6C:44:FC:0F:9A:1C:B2:24:CE:DA:A2:48:F5:60:C2:A4:0D
Authority key identifier: DD:A4:FC:5B:8E:45:8E:28:76:5A:86:60:99:AD:92:9B:AF:66:53:39
Certificate issuer:       /CN=DDA4FC5B8E458E28765A866099AD929BAF665339
Certificate serial:       35D7E56A86009B5649123D3FEF6446A33AA4090E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
Manifest number:          0144
Signing time:             Sun 27 Apr 2025 09:26:08 +0000
Manifest this update:     Sun 27 Apr 2025 09:21:08 +0000
Manifest next update:     Mon 28 Apr 2025 11:09:08 +0000
Files and hashes:         1: DDA4FC5B8E458E28765A866099AD929BAF665339.crl (hash: tg8YjvvM240xWSVJ8XR31y0D2YX0RrqHaicelPNpobg=)
                          2: 3138372e37332e3138342e302f32322d3234203d3e20323730353137.roa (hash: +Za1gpavjV5vtfzltFUZmL2uEEs7qfjACtQw7FPc4gQ=)
                          3: 323830343a366432633a3a2f33322d313238203d3e20323730353137.roa (hash: YAu8/AiullZTiZxj798RaP2l0pSPngdimvBM66cjQRY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.crl
                          rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d7:e5:6a:86:00:9b:56:49:12:3d:3f:ef:64:46:a3:3a:a4:09:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDA4FC5B8E458E28765A866099AD929BAF665339
        Validity
            Not Before: Apr 27 09:21:08 2025 GMT
            Not After : Apr 28 11:09:08 2025 GMT
        Subject: CN=A80ACE6C44FC0F9A1CB224CEDAA248F560C2A40D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:70:1a:b2:be:fa:11:91:09:10:18:13:9a:1c:
                    c9:67:87:5f:a3:99:4a:e8:24:d5:c9:80:58:89:d4:
                    28:ed:13:ad:b1:10:93:ae:2e:c8:f0:c4:eb:2b:ba:
                    ac:c7:42:c0:e7:54:f9:b8:61:2e:e4:71:d8:ca:93:
                    13:8b:eb:dc:93:be:72:25:a9:43:ec:a1:fb:c8:a1:
                    6a:98:5b:9b:a7:38:6c:f3:0c:87:de:b3:97:49:91:
                    b7:a8:2c:a4:5a:09:74:2b:7b:e7:4b:5a:7a:cf:ca:
                    66:fa:c9:ca:8f:50:88:0f:11:61:c1:9f:5b:a9:27:
                    12:df:81:19:b5:ac:10:00:6a:e0:6e:26:bf:0c:47:
                    00:63:9f:84:5d:34:29:e2:44:db:cc:7e:34:91:5d:
                    ed:f9:81:82:67:11:7c:79:2c:e7:b8:8a:40:52:03:
                    80:91:4d:4d:01:34:49:8e:16:1a:81:a6:b6:54:2c:
                    fe:6f:87:b9:17:78:9e:01:16:83:8d:73:d1:3f:ea:
                    ee:94:17:1d:d6:b0:16:c2:20:85:66:a9:57:15:12:
                    5c:c4:33:e8:95:84:92:fe:da:8b:8b:e9:88:81:e6:
                    c6:d6:2b:07:e3:48:3d:2c:6b:a0:1e:d9:99:7c:a0:
                    51:17:cf:b7:4f:cd:c2:ca:6a:19:32:2e:5a:d8:f7:
                    31:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0A:CE:6C:44:FC:0F:9A:1C:B2:24:CE:DA:A2:48:F5:60:C2:A4:0D
            X509v3 Authority Key Identifier:
                keyid:DD:A4:FC:5B:8E:45:8E:28:76:5A:86:60:99:AD:92:9B:AF:66:53:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:82:cf:08:e1:e3:a1:be:41:17:86:c2:7e:fa:be:13:65:e5:
         5b:3d:4c:f9:1a:a5:35:6a:7b:89:7a:c7:dc:b6:e6:0a:fa:2c:
         89:bf:52:35:10:65:c6:fd:9b:9e:f1:f0:a6:44:f0:fa:d3:00:
         bb:de:60:c4:a3:e4:96:08:78:14:a5:51:0e:08:81:fa:53:34:
         73:36:a2:12:f1:14:55:86:fe:75:4b:83:f3:d4:bf:17:c5:86:
         a2:ae:4b:73:e2:65:83:0f:82:14:a7:cf:52:d9:6d:22:93:97:
         f6:ed:3c:2a:70:5b:8c:78:8a:f7:3d:9b:a9:db:00:fe:87:e8:
         fb:09:d9:2b:ab:33:af:9c:c0:17:cf:0f:fa:a3:41:f9:c3:1c:
         91:b4:45:0f:1e:1f:d7:26:09:45:d8:3b:13:50:d4:1d:d6:76:
         33:0b:21:33:8e:55:1f:8d:96:25:1b:f3:45:d4:5c:30:3c:fa:
         9a:23:78:1c:60:8e:4a:44:05:f6:c5:87:b6:bc:2c:b9:b8:b8:
         ea:cb:33:b9:bc:90:4d:92:26:28:14:91:39:af:e3:c2:e3:c5:
         fe:49:9a:b7:6d:4d:b0:4a:01:df:fc:dc:86:ec:6e:75:d2:a9:
         72:a4:b8:0d:8c:ba:72:8d:58:4f:1d:32:ee:df:45:a5:4e:cd:
         16:75:e7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:34 2025 by rpki-client on console.sobornost.net