Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/0/FF748D018F29A13A92FABAAC30F3690B3B43CCA1.mft
File:                     FF748D018F29A13A92FABAAC30F3690B3B43CCA1.mft (raw, json)
Hash identifier:          JwSdw5lfIGCuoOYxIIqsqsdvK7p7Ly/3bHyYKsf/qSY=
Subject key identifier:   D1:F8:F7:70:E5:AA:CA:23:74:06:F7:B9:0A:1E:0F:DE:45:E1:B6:6A
Authority key identifier: FF:74:8D:01:8F:29:A1:3A:92:FA:BA:AC:30:F3:69:0B:3B:43:CC:A1
Certificate issuer:       /CN=FF748D018F29A13A92FABAAC30F3690B3B43CCA1
Certificate serial:       6DB710B024193A2E57C7FF6842166FB6E645BFF5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF748D018F29A13A92FABAAC30F3690B3B43CCA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/0/FF748D018F29A13A92FABAAC30F3690B3B43CCA1.mft
Manifest number:          0128
Signing time:             Mon 28 Apr 2025 02:20:23 +0000
Manifest this update:     Mon 28 Apr 2025 02:15:23 +0000
Manifest next update:     Tue 29 Apr 2025 04:46:23 +0000
Files and hashes:         1: 323830343a353339383a3a2f33322d313238203d3e20323638353934.roa (hash: hUJMTFcmqYA78H3gYXeUNzpPVsF86mJvusdwGEDMIOw=)
                          2: FF748D018F29A13A92FABAAC30F3690B3B43CCA1.crl (hash: yGo5QYoXXMzQONihABsQR4EetGHzqI0Nb/A/yVTO9p8=)
                          3: 34352e3136332e33322e302f32322d3332203d3e20323638353934.roa (hash: QuAY0AjOJSNdJkQA/cyddad4J9OkhnFYHzyYN0i/0AU=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/0/FF748D018F29A13A92FABAAC30F3690B3B43CCA1.crl
                          rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/0/FF748D018F29A13A92FABAAC30F3690B3B43CCA1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF748D018F29A13A92FABAAC30F3690B3B43CCA1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b7:10:b0:24:19:3a:2e:57:c7:ff:68:42:16:6f:b6:e6:45:bf:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF748D018F29A13A92FABAAC30F3690B3B43CCA1
        Validity
            Not Before: Apr 28 02:15:23 2025 GMT
            Not After : Apr 29 04:46:23 2025 GMT
        Subject: CN=D1F8F770E5AACA237406F7B90A1E0FDE45E1B66A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:69:30:0a:43:f0:d2:aa:3a:d1:90:05:2f:2e:
                    aa:13:35:ef:2a:0d:8c:26:03:81:ba:fa:84:56:c6:
                    de:6a:71:be:bb:d9:41:8d:0a:bb:f4:9f:e1:c9:04:
                    56:4f:21:3b:00:f9:37:ac:cf:d5:62:ca:20:53:cf:
                    c3:b7:05:bd:22:4f:17:b4:16:8c:74:ca:e9:87:3a:
                    0a:cf:e9:b1:b6:3a:e1:ba:a5:67:06:61:0b:1f:6d:
                    eb:d1:b3:66:c8:a7:70:05:de:1b:52:8b:4b:8d:ea:
                    f2:ae:73:6e:16:55:48:6a:11:05:69:cd:18:bf:e7:
                    44:45:75:d5:8d:e8:1c:b3:5d:d6:c7:aa:60:e4:e0:
                    b2:1f:dc:ea:65:9d:2e:00:69:a8:56:53:1e:f9:63:
                    98:b8:e6:7d:38:e5:cf:d6:ac:3a:52:fd:16:cd:c0:
                    e2:12:b7:32:0e:e9:9e:01:be:16:60:24:97:94:fe:
                    b5:7c:c1:54:3e:23:f0:4d:3c:b5:8f:77:6f:43:bb:
                    17:63:e8:a7:9d:c3:c0:fb:46:fc:20:85:9d:13:55:
                    45:a0:62:a1:ea:db:2e:23:cd:56:db:f3:3c:85:4f:
                    ec:59:7b:5d:87:25:62:e5:0a:e8:23:08:a7:f5:54:
                    5b:17:19:7a:2f:90:b8:70:c2:2b:4c:25:e5:21:d6:
                    af:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F8:F7:70:E5:AA:CA:23:74:06:F7:B9:0A:1E:0F:DE:45:E1:B6:6A
            X509v3 Authority Key Identifier:
                keyid:FF:74:8D:01:8F:29:A1:3A:92:FA:BA:AC:30:F3:69:0B:3B:43:CC:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/0/FF748D018F29A13A92FABAAC30F3690B3B43CCA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF748D018F29A13A92FABAAC30F3690B3B43CCA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/0/FF748D018F29A13A92FABAAC30F3690B3B43CCA1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:07:e5:51:f3:dc:e4:05:2a:81:25:76:58:73:9f:b6:96:c0:
         0c:d3:aa:b0:a9:9a:2f:c8:6a:57:bf:b5:44:ae:70:4a:57:b5:
         6b:0b:11:b1:a8:bd:96:46:36:ee:00:35:83:83:3f:6d:17:34:
         df:8d:cd:6b:93:36:aa:a2:9f:d1:83:12:03:a6:e1:cf:af:2f:
         83:da:55:3c:8d:2a:2f:2c:43:50:12:c2:db:46:7a:44:f5:2b:
         18:22:10:cc:11:59:64:bb:12:e8:e6:3e:20:b4:48:4b:ce:01:
         2f:f1:25:37:38:c6:ac:7f:5e:8a:f5:5f:55:b1:49:d0:47:c9:
         8e:06:c1:2a:67:da:39:0e:a1:8c:58:01:6b:56:7d:a4:d3:d4:
         fa:de:54:d5:31:96:d8:a3:a2:4a:c9:95:dc:1c:9a:52:eb:24:
         b4:17:68:4c:e8:6f:5b:c4:a0:ef:6a:02:00:ab:36:57:31:7b:
         8e:5f:11:4a:c2:58:ef:6b:fd:b7:60:b1:39:41:fa:80:1c:49:
         05:ce:97:94:a8:c4:07:09:52:16:66:57:3c:f9:8b:c7:19:1b:
         da:e7:24:66:ce:f7:36:3a:59:03:30:9d:b2:38:7e:6e:27:36:
         d4:a3:d9:55:74:42:da:d6:6e:e0:39:12:8a:e5:de:d3:e6:84:
         07:88:7f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:57 2025 by rpki-client on console.sobornost.net