Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.mft
File:                     6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.mft (raw, json)
Hash identifier:          UHNNX4VUXbfrodGRGZvGQDnWXcXP73m8n5L586G2XLc=
Subject key identifier:   62:EA:A7:8B:75:2C:D9:52:7C:77:97:D8:10:F4:2E:1B:17:76:CF:80
Authority key identifier: 6C:A8:F2:E3:76:D5:1B:5B:94:37:1C:8C:F8:53:DE:69:86:BA:4A:F5
Certificate issuer:       /CN=6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5
Certificate serial:       5715F60FD467306718B14D74BA6DAD2AD234B955
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.mft
Manifest number:          BA
Signing time:             Thu 24 Apr 2025 13:47:03 +0000
Manifest this update:     Thu 24 Apr 2025 13:42:03 +0000
Manifest next update:     Fri 25 Apr 2025 16:22:03 +0000
Files and hashes:         1: 3138362e3139352e3136372e302f32342d3234203d3e20323734363736.roa (hash: iPY8xo1qgutjW1dWtbApFlLt/QEGoVSJGazLGzyHsmg=)
                          2: 323830313a38313a61303a3a2f34382d3438203d3e20323734363736.roa (hash: VWKRp5iosaknzhh7g4MZu6pLZzNWNSkoELcA8XS5qg8=)
                          3: 6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.crl (hash: vU1Sy7jDsGtX5a4Qf2jxE14oxFL3Adxb2THcGtWU9+c=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.crl
                          rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 16:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:15:f6:0f:d4:67:30:67:18:b1:4d:74:ba:6d:ad:2a:d2:34:b9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5
        Validity
            Not Before: Apr 24 13:42:03 2025 GMT
            Not After : Apr 25 16:22:03 2025 GMT
        Subject: CN=62EAA78B752CD9527C7797D810F42E1B1776CF80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c8:80:e8:57:82:c4:6b:68:ae:d7:7f:e4:5c:
                    b5:1b:a4:54:74:84:22:ef:d2:34:4d:c2:47:a0:1d:
                    c4:8d:fb:45:37:6d:8e:6e:8a:37:05:bb:f5:cc:1a:
                    c3:84:4c:f3:d7:94:1a:09:a6:3b:88:9e:5e:63:5f:
                    0f:27:c1:8a:f7:45:d7:ca:38:2c:bc:da:a1:32:11:
                    cf:f7:d0:45:24:51:d4:58:13:b9:00:f1:4e:db:55:
                    34:4f:ca:34:46:2a:86:48:93:5b:1d:d0:b5:06:a3:
                    46:47:56:41:25:95:03:3b:bd:72:10:da:fe:db:b0:
                    bb:33:cd:53:b4:55:94:fd:96:d4:74:a6:71:9b:9c:
                    af:b9:ae:53:35:e3:bb:43:ec:67:c4:2a:a4:ce:bd:
                    48:16:56:cc:de:a5:d7:85:87:a8:4d:21:15:75:04:
                    b9:1f:52:0c:8e:d0:02:5d:ea:f4:f7:04:12:1d:be:
                    10:d3:dd:1f:47:d4:79:3b:00:e8:55:12:a1:4e:9b:
                    af:7e:e8:dd:8d:73:28:e6:a2:65:cc:f7:1a:36:fc:
                    7b:5d:34:ad:72:38:a5:d6:a2:80:63:c5:60:bc:ce:
                    da:8b:32:5f:6a:6a:b7:12:c3:74:f2:e1:32:db:32:
                    ff:c7:56:1c:fa:5f:7b:1e:33:cb:3e:13:7d:0c:54:
                    58:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EA:A7:8B:75:2C:D9:52:7C:77:97:D8:10:F4:2E:1B:17:76:CF:80
            X509v3 Authority Key Identifier:
                keyid:6C:A8:F2:E3:76:D5:1B:5B:94:37:1C:8C:F8:53:DE:69:86:BA:4A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:83:bb:38:a8:f7:17:32:a4:83:7f:69:10:c0:ec:04:73:f8:
         ac:c1:13:bf:82:de:10:0f:38:f1:5a:85:ef:2f:21:92:03:f0:
         77:62:7a:27:f3:2f:b0:04:d1:dc:f9:3a:19:e5:8f:fd:17:23:
         6b:cb:f4:a9:62:c3:e8:86:b5:2f:84:34:84:ec:b8:f7:32:b3:
         e9:a3:6b:70:1c:08:a3:41:06:b0:7e:8e:55:e9:ab:bc:80:a1:
         28:39:8b:8e:5f:19:8d:64:1b:d0:8a:e7:c9:bc:a6:a9:59:ca:
         4e:e7:3e:24:31:25:b4:a4:90:6e:3d:d8:f8:f9:9b:99:7e:7f:
         cf:df:ba:4c:54:65:2e:e2:73:2b:37:4e:3a:f2:06:eb:7e:7f:
         5e:16:6a:53:e8:bf:8a:6c:ed:12:b9:85:e4:0c:4d:37:49:e5:
         a0:20:7f:de:fb:71:51:01:58:33:30:c2:36:6b:81:fb:c9:88:
         6f:05:23:14:47:7a:ed:1f:99:05:5f:8a:e2:29:68:66:77:6a:
         63:55:42:f2:55:71:b3:32:ff:3d:c5:94:46:97:55:42:28:bf:
         d4:05:cc:83:6c:42:aa:d8:94:8c:e5:aa:14:f0:a1:ed:87:a6:
         fa:0f:b1:5e:56:af:dc:aa:1c:ea:3c:6d:66:85:8f:49:d0:8d:
         48:65:58:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 15:50:42 2025 by rpki-client on console.sobornost.net