Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
File:                     00A0649BEB784D778983813CFFD9D01F42F24C95.mft (raw, json)
Hash identifier:          qomGqWkZcihwaY0JYbLCO7UxmPTLx71Oxky9jI4MT8M=
Subject key identifier:   2F:0A:1E:F6:AF:E8:78:94:2D:2D:15:CF:BF:7A:42:4A:FD:92:46:EF
Authority key identifier: 00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95
Certificate issuer:       /CN=00A0649BEB784D778983813CFFD9D01F42F24C95
Certificate serial:       742107E1BE8CDABD57715029F2AF9F06C5CEBF25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
Manifest number:          020B
Signing time:             Sun 27 Apr 2025 13:03:02 +0000
Manifest this update:     Sun 27 Apr 2025 12:58:02 +0000
Manifest next update:     Mon 28 Apr 2025 13:43:02 +0000
Files and hashes:         1: 00A0649BEB784D778983813CFFD9D01F42F24C95.crl (hash: UqZ4oVp+2qI8NCLHefpL+Oe+OE5mR/9Py6zsvhub+lo=)
                          2: 3136382e3232382e3135342e302f32342d3234203d3e20323634393339.roa (hash: f4Qa2FNEfhkFAwUVdSuYgjlLS4ftW2/rWnrs8JYLslw=)
                          3: 3136382e3232382e3135322e302f32322d3234203d3e20323634393339.roa (hash: FlAEqMw67AZdKPT5Y7DKrrWuPyHE8c9wbOE9YjAU/ws=)
                          4: 3136382e3232382e3135332e302f32342d3234203d3e20323634393339.roa (hash: 9iwzjQCjV+FV7bNXwtjbyRYasZB4IxBhIx8fl0LDIQc=)
                          5: 3136382e3232382e3135352e302f32342d3234203d3e20323634393339.roa (hash: tf9RcDWy+bjBTghyqkDsVVFKF4rglFNBOOVRHIp9Cv8=)
                          6: 323830343a333034303a3a2f33322d3438203d3e20323634393339.roa (hash: umNi7oa3WlS7fOEc0baZZquSvpV1mYEy7X6g61Do4Nw=)
                          7: 3136382e3232382e3135322e302f32342d3234203d3e20323634393339.roa (hash: My6aFJY2U5nmSSRx8QPY9d83jRB9vex2vHwdp+V2wsw=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl
                          rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:21:07:e1:be:8c:da:bd:57:71:50:29:f2:af:9f:06:c5:ce:bf:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00A0649BEB784D778983813CFFD9D01F42F24C95
        Validity
            Not Before: Apr 27 12:58:02 2025 GMT
            Not After : Apr 28 13:43:02 2025 GMT
        Subject: CN=2F0A1EF6AFE878942D2D15CFBF7A424AFD9246EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:62:9c:46:21:6e:93:2f:ba:bc:28:51:6b:50:
                    59:5e:87:fa:ce:7e:57:cc:fc:ed:d2:63:07:f3:0a:
                    7d:22:40:af:97:ab:60:8d:a2:a6:c4:8a:05:cb:f4:
                    19:73:9f:51:40:b4:57:d8:78:d2:f6:40:4b:ee:f9:
                    96:95:7f:a7:d2:23:c2:41:d6:55:db:af:be:cf:50:
                    59:cf:cc:42:3d:d0:26:cd:49:7f:b9:58:74:27:12:
                    40:36:b4:92:5c:db:24:94:7a:02:ba:6f:a8:88:bc:
                    d0:8a:0b:c8:b5:a1:c7:9d:5c:0a:12:56:a2:8f:08:
                    20:dd:b3:a6:db:2c:20:8d:c3:ed:27:1e:c5:a7:0c:
                    57:8f:cf:35:ff:94:a3:2f:b4:bf:a1:b0:84:50:d7:
                    e1:37:a1:08:ed:e7:0b:f6:a3:14:de:ba:50:91:5b:
                    93:61:38:f3:1f:69:de:dc:2c:41:1e:90:45:42:dc:
                    df:81:fe:82:c8:eb:9d:bb:85:1d:9f:45:6e:7b:15:
                    1b:24:40:1b:59:46:83:df:6e:c4:d4:02:e0:fb:85:
                    25:b3:a6:5c:e3:59:37:9a:d2:ca:c5:cc:1e:0c:a5:
                    5c:ab:de:dc:1f:95:db:55:78:f6:54:11:6d:ed:aa:
                    35:6b:24:4c:8d:73:85:dd:9f:a5:a2:b7:cf:4d:94:
                    80:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0A:1E:F6:AF:E8:78:94:2D:2D:15:CF:BF:7A:42:4A:FD:92:46:EF
            X509v3 Authority Key Identifier:
                keyid:00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:39:83:3e:fb:61:be:d1:2d:05:43:9c:0c:47:95:df:51:28:
         6d:ef:ba:55:80:82:b9:c5:44:11:42:bf:68:f3:1d:ff:56:82:
         4d:43:f7:7d:e1:db:29:5e:f5:e8:ca:82:34:47:17:e5:ae:af:
         14:d0:2d:68:e2:7e:73:b1:6e:e2:16:0c:e4:18:26:33:c2:0b:
         9e:3f:8b:2a:8b:28:fd:22:dd:1d:98:0b:1c:75:86:32:df:78:
         0a:b0:e0:42:4c:f0:a2:07:31:e1:61:f4:91:94:6e:63:45:77:
         95:26:b8:91:3b:7f:72:5f:88:84:e2:e2:4d:c8:2f:d3:c1:49:
         b0:3d:86:8f:b3:85:01:12:8e:3d:8d:a7:d4:1b:b0:86:04:84:
         77:22:a9:b0:27:97:b1:45:00:2a:78:66:90:3c:49:a8:d3:f3:
         d7:a0:cf:31:c3:eb:13:8d:2b:8f:88:21:0a:26:45:62:a1:b5:
         0c:ce:c1:b3:f3:06:d3:31:e3:d6:07:c8:e4:ce:fa:b2:bd:8c:
         56:55:26:ab:29:4e:29:11:c6:93:8d:aa:0e:aa:60:02:5e:ae:
         81:80:e8:25:5a:ee:58:94:b0:e6:4a:2d:43:e8:1f:23:dc:52:
         2a:d2:49:0e:7d:e5:f8:63:0f:ef:04:a5:45:1c:cd:12:ef:fe:
         06:cf:f4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:40 2025 by rpki-client on console.sobornost.net