Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft
File:                     3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft (raw, json)
Hash identifier:          baTxAPVBcSlgOPrp1Qi0qfHxH550tvyijfjQS99KhAM=
Subject key identifier:   07:54:A2:3D:45:06:9F:98:D1:60:99:C2:F5:2A:42:9A:14:14:28:11
Authority key identifier: 3A:3B:9A:F6:03:B3:E2:66:EC:51:78:C1:58:92:CB:B3:7D:8C:CD:41
Certificate issuer:       /CN=3A3B9AF603B3E266EC5178C15892CBB37D8CCD41
Certificate serial:       51C8795834627AF8463F3256397F0397219FB96C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft
Manifest number:          21
Signing time:             Fri 25 Apr 2025 20:05:32 +0000
Manifest this update:     Fri 25 Apr 2025 20:00:32 +0000
Manifest next update:     Sat 26 Apr 2025 20:50:32 +0000
Files and hashes:         1: 3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl (hash: K+qEw+P9M1x5nZTRU4sTUiSR/TIrjEceXFxwzgYMqCY=)
                          2: 323830343a383136633a3a2f33322d3333203d3e20323732343533.roa (hash: km/ah8tdGnSbAEE8eMAVgMkElj1zG/cbsgnk+5b2q5E=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl
                          rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 20:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c8:79:58:34:62:7a:f8:46:3f:32:56:39:7f:03:97:21:9f:b9:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A3B9AF603B3E266EC5178C15892CBB37D8CCD41
        Validity
            Not Before: Apr 25 20:00:32 2025 GMT
            Not After : Apr 26 20:50:32 2025 GMT
        Subject: CN=0754A23D45069F98D16099C2F52A429A14142811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:18:c3:b9:cf:df:33:1d:ec:b0:f9:85:bc:ad:
                    ae:f7:c1:8b:ff:32:98:bd:75:1b:07:78:58:cf:12:
                    ae:c5:62:20:ba:ef:1d:cb:1b:4f:f2:f1:58:e4:3b:
                    d6:cb:0d:3b:92:29:53:ea:45:d8:7f:52:48:35:b5:
                    46:e9:17:2a:59:89:b2:60:9f:c1:21:a5:73:9f:99:
                    a5:22:76:be:58:41:66:ac:6f:e8:71:79:75:95:6f:
                    28:cc:a4:f9:bd:cd:62:b1:7d:97:17:47:c6:56:d3:
                    bd:c2:94:2a:33:03:fe:29:5b:a0:f8:ee:bb:29:62:
                    62:bb:87:71:7e:0c:7c:1a:e6:da:85:8e:b9:5b:79:
                    9e:e5:45:82:0a:a6:c9:36:56:e4:9e:be:20:25:33:
                    66:b1:24:39:9a:e6:a1:c2:cc:25:95:02:ad:e3:2d:
                    06:ef:38:a2:b7:79:95:a8:1b:bc:fa:f6:d0:52:07:
                    82:f4:4b:8e:e2:73:e6:d2:de:14:52:e8:69:28:70:
                    95:38:94:57:ef:57:5a:3e:fe:94:74:32:fb:0a:9c:
                    7a:29:34:ce:14:3b:d6:f5:f9:70:a2:82:28:8d:55:
                    7b:2a:df:c0:76:6d:bd:ba:30:a6:a0:ed:f4:a1:b9:
                    d7:14:3f:3c:55:9d:af:72:e8:76:a0:51:26:54:e0:
                    ae:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:54:A2:3D:45:06:9F:98:D1:60:99:C2:F5:2A:42:9A:14:14:28:11
            X509v3 Authority Key Identifier:
                keyid:3A:3B:9A:F6:03:B3:E2:66:EC:51:78:C1:58:92:CB:B3:7D:8C:CD:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:d6:55:76:97:53:49:aa:bb:f6:e0:09:85:c1:23:26:4f:97:
         23:a4:6a:17:cb:07:06:f1:82:f8:7f:3b:e4:8f:fd:48:90:57:
         f2:64:7e:d5:b5:aa:d2:2f:35:13:47:a5:7d:32:e4:55:e1:b6:
         04:78:11:f9:f0:a5:fd:20:73:39:83:10:24:08:77:16:55:8c:
         a7:b0:39:79:d2:c1:92:aa:95:e6:f6:0f:7b:8e:40:a2:3c:cf:
         b5:ad:1c:31:70:52:ae:fb:d3:c0:fb:a4:75:cc:ff:c3:cc:a9:
         aa:c2:12:27:72:7a:88:b5:e9:ce:48:f5:00:ea:b1:ef:11:4a:
         39:d6:60:00:1e:ea:ac:10:6a:df:c1:89:0f:b8:65:31:e3:6e:
         40:d0:11:69:48:d1:5c:3b:c8:cd:77:40:e3:ef:c5:59:23:b9:
         84:86:fa:e0:cf:a7:d7:99:4d:37:55:d0:d6:d3:b1:03:19:a1:
         e6:99:11:f2:c5:bc:cd:91:ee:ea:a4:0e:bf:9b:ae:6b:e4:34:
         af:6a:a3:cb:1d:8b:0a:e0:16:ac:a7:8a:ad:2b:91:aa:48:59:
         af:bb:c8:f2:2c:ec:1d:25:c9:a8:b2:d9:50:db:ba:8b:20:87:
         66:17:43:8c:7a:d0:57:2a:35:c6:61:a2:7a:f8:2c:66:13:78:
         48:34:71:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:32 2025 by rpki-client on console.sobornost.net