Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
File:                     2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft (raw, json)
Hash identifier:          zVMWG2B9bGwLJf+bs3Fl2KDtSrQysldd6wJ2E5YOwoM=
Subject key identifier:   E8:18:C0:01:CE:F7:A7:12:86:32:E0:29:BB:BD:17:88:C1:96:06:49
Authority key identifier: 28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17
Certificate issuer:       /CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
Certificate serial:       469172108E8EF7AEED781BD32C888B061A82A6EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
Manifest number:          020C
Signing time:             Sun 27 Apr 2025 03:17:09 +0000
Manifest this update:     Sun 27 Apr 2025 03:12:09 +0000
Manifest next update:     Mon 28 Apr 2025 05:00:09 +0000
Files and hashes:         1: 3137392e3132352e35362e302f32322d3234203d3e20323633303433.roa (hash: onXRDoXh2p9baTThbUNhz9bbCLW3hh2NresCt/EzEg4=)
                          2: 2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl (hash: XILPucqH6duPpWyugDj1Qp4yuOQL1Klb+rH8qukD/3w=)
                          3: 323830343a3866633a3a2f33322d3438203d3e20323633303433.roa (hash: TigbxK0cUv4RSQLgefNDxvnIkqyLfVMe13bYz6eIhIY=)
                          4: 3137372e3132392e3139322e302f32322d3234203d3e20323633303433.roa (hash: TM8EFrdqP8xJWUHtOwxrWKv1VfOWeTZaGy5GBdWevQ4=)
                          5: 3133382e3132312e3138342e302f32322d3234203d3e20323633303433.roa (hash: t31E7lvTR/lLlptpM+wkGzdViGt4jKXDtcm+wD6jrQU=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl
                          rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 05:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:91:72:10:8e:8e:f7:ae:ed:78:1b:d3:2c:88:8b:06:1a:82:a6:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
        Validity
            Not Before: Apr 27 03:12:09 2025 GMT
            Not After : Apr 28 05:00:09 2025 GMT
        Subject: CN=E818C001CEF7A7128632E029BBBD1788C1960649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:87:0a:e3:b1:fe:d0:5c:d6:1f:88:a1:2d:3f:
                    de:17:23:43:2e:e2:08:39:a4:90:78:f4:22:45:7d:
                    70:1c:95:fe:ac:d1:36:de:11:51:a0:4f:24:8c:54:
                    5a:30:18:22:bb:86:f7:1d:16:7d:63:b2:79:49:74:
                    20:38:46:2a:c2:26:5c:ad:8f:fd:fe:b7:f3:48:e5:
                    ff:f7:be:ee:ab:b3:93:cd:9e:78:e5:e8:33:3f:0e:
                    da:e0:11:46:59:e8:68:19:24:ca:b2:06:63:81:ca:
                    b4:e6:63:a3:ae:d9:a6:dd:88:01:90:29:be:01:02:
                    c3:c7:ea:8f:a6:6f:e4:07:67:0d:7d:f5:8c:f7:44:
                    20:47:fd:59:96:03:f0:4e:4b:25:83:aa:b5:15:29:
                    e3:94:fa:8a:8d:cf:7c:ab:83:0b:84:33:71:60:c9:
                    b9:3c:e7:ba:33:3a:7e:f8:d1:67:f8:a5:c7:2c:c2:
                    e9:ea:2e:92:43:14:c8:c9:2d:30:ad:bd:a1:1a:49:
                    9f:33:7e:94:59:41:e1:a6:56:ca:7f:43:e4:dd:8c:
                    76:3b:b2:7b:1d:ed:eb:5d:79:94:38:bb:98:6a:ba:
                    3b:a3:2c:8b:25:6b:8e:9e:df:d2:8d:0d:b5:01:60:
                    02:be:85:78:a5:63:6b:09:e4:9e:08:0c:8f:c5:e9:
                    b5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:18:C0:01:CE:F7:A7:12:86:32:E0:29:BB:BD:17:88:C1:96:06:49
            X509v3 Authority Key Identifier:
                keyid:28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d9:be:e8:52:d1:27:47:f0:1d:f2:a6:d9:ac:11:87:2a:62:
         b7:74:90:04:2a:df:be:11:17:13:9e:09:17:dd:83:7c:5f:4d:
         c2:f0:01:c1:92:86:9e:5d:9d:f1:05:8f:81:6e:8f:bf:d7:2a:
         b2:68:1d:b1:a2:85:3c:c6:a3:48:4c:85:35:54:98:9f:e1:3b:
         d4:aa:74:64:ca:06:f0:e8:93:c9:9c:64:5a:e5:eb:ff:38:c6:
         9f:f4:78:8d:26:c0:68:4a:11:81:76:d0:f4:ef:d4:a0:ab:8e:
         52:88:3e:2d:b1:44:44:c4:95:5c:3a:8d:ee:fd:d9:f5:d5:6c:
         68:19:f3:9f:cf:74:6c:65:b5:82:a0:fd:72:ff:89:b5:96:29:
         65:b9:12:4f:32:21:57:a3:a9:5d:d5:01:e9:36:67:8b:fc:91:
         8d:af:03:ce:34:e5:5e:8e:cd:49:2e:7e:c6:69:42:ee:c6:8f:
         ce:aa:6e:59:21:74:15:ce:cf:cf:af:2f:72:cb:8b:66:3e:24:
         f3:9c:f2:1e:52:09:60:a1:42:21:5e:20:6e:0d:01:de:39:7c:
         fb:f3:3e:c3:93:70:15:0b:77:da:e8:02:58:e2:66:51:33:d6:
         78:5b:22:25:c8:82:84:bf:8d:ac:12:3e:50:17:91:e5:68:52:
         e9:53:af:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:37 2025 by rpki-client on console.sobornost.net