Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
File:                     436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft (raw, json)
Hash identifier:          b6uzJ4bE+l725U/W0wvZZXDIV0csxKoMiDDB2RQ/NRQ=
Subject key identifier:   1A:45:C9:3E:53:2A:95:5E:93:C6:21:76:BC:DA:43:14:49:6C:90:EE
Authority key identifier: 43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01
Certificate issuer:       /CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
Certificate serial:       3B113452E91C05BFC5C4FF397400EFBE62E8F140
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
Manifest number:          A8
Signing time:             Mon 28 Apr 2025 05:36:02 +0000
Manifest this update:     Mon 28 Apr 2025 05:31:02 +0000
Manifest next update:     Tue 29 Apr 2025 08:15:02 +0000
Files and hashes:         1: 323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (hash: uIh+Oz5wiODIMg7enOUna4NRPwYVYruwibBcWxdlN6k=)
                          2: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl (hash: 69U1Bi8styUA37Ke85hNRBt4WrNZJJ408cfGIO4KLGs=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl
                          rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:11:34:52:e9:1c:05:bf:c5:c4:ff:39:74:00:ef:be:62:e8:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
        Validity
            Not Before: Apr 28 05:31:02 2025 GMT
            Not After : Apr 29 08:15:02 2025 GMT
        Subject: CN=1A45C93E532A955E93C62176BCDA4314496C90EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:06:b8:15:7a:0f:cc:b2:9e:ed:df:5a:f5:cc:
                    1a:c2:e9:89:74:ca:82:6a:55:87:7c:42:b1:c7:dd:
                    cb:08:34:6a:73:71:21:69:07:61:24:47:3d:0c:c2:
                    ae:8b:95:23:41:31:13:ed:78:c7:16:22:a5:e8:5d:
                    91:7a:66:91:f8:19:7d:b2:2c:a8:d9:71:55:49:b4:
                    b7:8f:5d:69:7b:2e:9d:1e:ab:fa:f5:ee:cb:8e:60:
                    ce:ad:6c:b3:69:8a:21:a7:58:4d:99:b1:bc:ed:78:
                    6b:24:fa:11:53:ba:39:24:6d:60:90:f2:6b:75:f4:
                    5e:69:2d:e7:d9:c8:41:9a:66:34:cd:a7:9c:53:1b:
                    f0:03:0e:84:db:85:35:a7:fd:c4:4e:fd:fb:ae:81:
                    77:87:16:cd:47:0b:93:30:f6:39:b5:cf:af:29:9f:
                    74:16:05:2f:c7:5a:2c:20:23:62:66:42:04:3e:12:
                    fa:9e:cc:b2:15:48:ec:03:9c:61:6e:d3:ae:66:da:
                    84:54:7b:bc:9f:1b:fb:99:a5:02:98:f2:1a:5d:68:
                    fc:3e:93:bd:c4:42:f9:cf:1d:31:fe:56:23:52:f2:
                    9c:08:c2:6d:6c:9f:40:4b:ae:1a:33:6f:c3:c5:6f:
                    cf:51:89:e0:fe:cf:a7:98:ce:1a:da:19:10:17:14:
                    6d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:45:C9:3E:53:2A:95:5E:93:C6:21:76:BC:DA:43:14:49:6C:90:EE
            X509v3 Authority Key Identifier:
                keyid:43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:0e:10:b9:36:48:a9:3f:fc:64:d9:c9:7f:02:e7:7c:70:95:
         9b:b9:77:bb:42:22:6a:cd:b9:fa:a4:0b:d2:aa:2e:42:b9:85:
         41:7b:00:fa:f9:f5:70:f8:a5:16:95:4f:25:90:e2:06:e5:29:
         fe:3a:7d:d6:f4:5a:bf:7d:22:e4:0e:e1:94:bf:d0:df:c6:56:
         1c:50:13:8f:7c:26:dc:26:bb:e2:7c:9d:db:b6:88:41:da:43:
         4c:65:dc:89:58:5b:d8:b9:99:68:34:55:c5:c8:48:2c:6e:ba:
         7b:85:63:0a:fb:7c:5f:d6:85:12:ca:97:66:d1:9d:c7:dc:2e:
         5d:b9:b3:66:e8:e0:ff:18:5a:7c:d8:30:51:6b:2e:9d:b0:c7:
         52:44:b0:43:9c:47:db:ed:39:88:8e:69:80:41:19:fa:f7:f7:
         88:8a:22:71:71:c7:6c:14:4d:b0:9b:21:b6:fc:7c:50:c5:67:
         a6:55:10:36:07:b7:26:ed:8e:74:3a:57:b8:31:1f:50:3a:8b:
         28:70:20:3a:c9:41:7d:1e:27:45:bb:06:59:f4:19:35:b5:2c:
         53:71:2b:7e:42:3f:bc:ad:48:2e:f4:fa:7d:ea:7d:b3:47:87:
         e9:10:65:d3:d7:ef:ac:9f:da:5e:2f:f6:45:8e:0b:79:98:3a:
         7e:c6:ec:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:25 2025 by rpki-client on console.sobornost.net