Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.mft
File:                     D4206C10F587084E3266C97EDA0F65643299E1B8.mft (raw, json)
Hash identifier:          3SZRHjqQc5Q64pLj5vlz3GIhQSLT4vEBcD7IHFZAJJE=
Subject key identifier:   50:EC:4A:77:B5:D1:C7:D4:F6:A1:BE:81:E7:55:B6:18:32:19:60:A1
Authority key identifier: D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8
Certificate issuer:       /CN=D4206C10F587084E3266C97EDA0F65643299E1B8
Certificate serial:       766F0BD62644052F40470835C0B401968B897A0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.mft
Manifest number:          CE
Signing time:             Sun 27 Apr 2025 16:55:40 +0000
Manifest this update:     Sun 27 Apr 2025 16:50:40 +0000
Manifest next update:     Mon 28 Apr 2025 18:43:40 +0000
Files and hashes:         1: AS53191.roa (hash: YRj5jFdYku7hBACKoPIF6cTj6CYqCKeoK+TmUR6pUAY=)
                          2: AS53085.roa (hash: j2IKVr02f5IcRD4VIfva+feAVvAso98m1m6mxrBjrQ8=)
                          3: AS263297.roa (hash: ln1e7ehtaBpKX/X5uzYwDbJupTpQZAGuJCzbg7EK+yg=)
                          4: AS263645.roa (hash: p5GgvaLj0zmkXzV5AJyY44lMxFFzVbvUYUQ/diWLcgI=)
                          5: AS266949.roa (hash: egaTZzreVW6x1uo0PRWd9DF4rP2JG2YajPARjW/mKQc=)
                          6: D4206C10F587084E3266C97EDA0F65643299E1B8.crl (hash: 0alDLVhHaLWMZI82hLcGwwW7tRZWzkq/qD5WgWtFRr4=)
                          7: AS266201.roa (hash: lgSAm6asPzLSY+CH2qXZsBgaz133ZeZ3Ss9Fgy+i3Uo=)
                          8: AS262673.roa (hash: fT5qaeZBSzgd135I2Appjxpx0/dIBMlOYrmUUADcQxg=)
                          9: AS262700.roa (hash: x/DyK4hdzbGUG34Soo41dlscvljBXwmDu3HY4u/85hM=)
                          10: AS263072.roa (hash: GYAK+er0rtqbIu/jE81n4mHkt2QU6JiittxT2OyIi2E=)
                          11: AS263864.roa (hash: TfabEZTuInf5u1tM/1kWTEEVb5l34tA2K8AF02xtGRI=)
                          12: AS53190.roa (hash: rC42xoWKEPTtCrrL78hU3jR6SgdCLYcK4eAt/vScWTE=)
                          13: AS28258.roa (hash: i09LmHA7ACt80rgzHNZLDwRB+fNivgDFYYQEeTNB9gw=)
                          14: AS267085.roa (hash: 9/zatEcjIfEO/h+0BaUJSbsC1zigcQXoJhHsf8cxaaA=)
                          15: AS262794.roa (hash: i+v7lTyGLjfWU1kV/+Rb0JDm6OT0zpvMBUzQ4+kORtU=)
                          16: AS28211.roa (hash: dnB/NoKw2cP6tlQBXlUFT2J60TY8vx4oI0nuVaEWyF4=)
                          17: AS53184.roa (hash: 3ndF/OYmdxRxaH+cg7Ag0NYnKLtMOy4X1TMQOa2fmIE=)
                          18: AS268613.roa (hash: 5m5eWeFA/Qc1LYY6WfHheq9zxj+sosoOZkqSxW1FOb0=)
                          19: AS263405.roa (hash: 3DStYwK3QmjyH7+pf3S5+yU8m24Z5bu0nc1yXCvPl/s=)
                          20: AS262671.roa (hash: 8WLI1Lsxq0LSRwyQy7PPmkRJN6rGW6gNOEO2lIzP9vU=)
                          21: AS28241.roa (hash: XijaTcK8J0r4lGsbvN4F/hsPte/WKuAfLqJzPC5RkY4=)
                          22: AS267404.roa (hash: P6IZ5U4g7IN2FkKVppnQ3PQ+1oFLMtJTdZAkRZvPrK4=)
                          23: AS262481.roa (hash: zjD+qXaqpjLjXm76FSh8/0nVYzjkenvNmfktA+1Y6js=)
                          24: AS263032.roa (hash: bWdR9Dc1ebR0Ac+A/FaB5xQt/jAY5oq6fEquIOEyJEY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 18:43:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:6f:0b:d6:26:44:05:2f:40:47:08:35:c0:b4:01:96:8b:89:7a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4206C10F587084E3266C97EDA0F65643299E1B8
        Validity
            Not Before: Apr 27 16:50:40 2025 GMT
            Not After : Apr 28 18:43:40 2025 GMT
        Subject: CN=50EC4A77B5D1C7D4F6A1BE81E755B618321960A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:0b:79:08:3c:8a:74:c6:09:fe:20:e3:87:a9:
                    ef:10:1b:f9:a7:d1:8b:ad:8b:8f:32:38:ac:ba:65:
                    a7:80:0f:47:03:a7:84:bc:88:d0:a4:a0:97:10:a4:
                    8e:4c:06:59:a8:0a:71:30:d0:4f:a6:38:90:34:50:
                    18:7a:49:ab:dd:e0:9a:6c:89:4c:5e:32:a9:01:35:
                    73:63:61:5a:b5:2d:67:25:72:55:d6:c4:be:57:88:
                    d7:99:66:07:1d:cf:c1:69:4a:9c:33:04:37:db:ce:
                    59:ef:65:fe:42:15:2e:41:67:e1:dd:2b:da:bd:2d:
                    a1:96:9c:6b:4a:46:98:e6:04:b1:31:40:64:76:f7:
                    0a:61:98:c1:eb:cd:aa:7d:2e:86:58:6c:fd:13:7c:
                    15:01:ca:1a:bd:1e:23:a4:0d:49:12:66:6a:db:04:
                    25:bf:2e:7f:2a:44:fc:a5:44:ae:49:94:25:ba:5a:
                    b9:55:9e:2d:b2:b9:00:1b:80:6f:dd:7c:e3:df:b4:
                    b0:9d:b5:69:cc:28:51:a8:c9:2b:9b:43:55:05:3e:
                    b4:a5:c7:26:4f:c1:fd:4c:fd:86:b9:71:ce:62:49:
                    a3:fd:b5:2d:33:c4:59:28:65:b7:16:9b:07:65:ba:
                    ae:41:8d:83:8f:18:c0:ee:54:45:aa:7c:88:79:53:
                    f1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EC:4A:77:B5:D1:C7:D4:F6:A1:BE:81:E7:55:B6:18:32:19:60:A1
            X509v3 Authority Key Identifier:
                keyid:D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:55:0b:69:c0:52:18:52:24:22:85:e1:44:a3:84:9d:b3:72:
         24:71:6f:b7:d6:15:01:22:76:d9:5a:15:93:b5:08:f9:c1:91:
         5b:18:0d:c0:c1:45:0a:17:d8:86:8e:cc:f1:9b:ca:87:9b:31:
         46:1f:cb:90:73:a0:c5:5e:73:f9:0d:ac:34:9c:43:6c:72:64:
         c8:ac:6f:9d:2c:c0:9a:ca:cc:21:36:0b:d3:eb:f2:20:a9:59:
         1c:6c:da:3e:f9:6b:8c:16:b9:e4:21:ea:ec:de:84:6b:c6:d4:
         18:d4:30:b1:7e:2c:05:43:5c:6c:a1:d0:c8:f2:77:a8:ea:76:
         8f:7e:44:d3:7c:25:00:67:0d:04:a4:bc:97:61:66:8c:d1:99:
         06:be:eb:a9:84:b0:28:50:11:ea:d3:5b:1c:c4:6b:a4:98:8f:
         99:79:8d:a5:db:58:18:3b:e7:4f:8a:e8:c1:1c:c0:b9:9b:3c:
         63:19:58:50:0b:f4:db:4c:03:75:dd:09:de:b1:e4:67:a7:db:
         ab:9e:c9:ec:53:5a:07:47:e6:d4:1d:b9:fa:82:64:53:07:a3:
         ed:51:e2:3c:e8:15:e8:1c:57:f7:bd:bf:dd:f7:65:6c:1f:2f:
         21:66:92:85:80:6a:87:7b:82:2c:54:a1:07:60:ed:23:0e:c9:
         08:45:bb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:06 2025 by rpki-client on console.sobornost.net