Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft
File:                     2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft (raw, json)
Hash identifier:          zgrFgJ0B8gn0wUwdTt0itK6tfIF8F1vA+crO+LJT6o8=
Subject key identifier:   44:E2:85:01:A9:A8:AB:7D:82:C3:84:FC:79:E2:89:A1:74:81:91:AC
Authority key identifier: 2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3
Certificate issuer:       /CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
Certificate serial:       756D6B99821FDA4438C93EEB148494AA177BFCB2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft
Manifest number:          01FA
Signing time:             Sat 26 Apr 2025 22:14:22 +0000
Manifest this update:     Sat 26 Apr 2025 22:09:22 +0000
Manifest next update:     Mon 28 Apr 2025 00:16:22 +0000
Files and hashes:         1: 2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl (hash: EUQIRPs/HXBKI+qTtoSxL5jfcRwyEUxSlDjojZUCij8=)
                          2: 3137372e32312e34382e302f32302d3234203d3e20323633303834.roa (hash: JQcsGp0S+uSmKUn8yNQzRlGRwzLOPhrgGLuK3QXC1/I=)
                          3: 323830343a6134383a3a2f33322d3438203d3e20323633303834.roa (hash: V2jbRzUxI/3H8jGaiOrKR09xP7CgQkFzmyoZeK8lCUk=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl
                          rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 00:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6d:6b:99:82:1f:da:44:38:c9:3e:eb:14:84:94:aa:17:7b:fc:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
        Validity
            Not Before: Apr 26 22:09:22 2025 GMT
            Not After : Apr 28 00:16:22 2025 GMT
        Subject: CN=44E28501A9A8AB7D82C384FC79E289A1748191AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e8:07:9f:fe:5f:ec:90:01:81:57:45:3e:f4:
                    60:f6:39:43:f5:91:fe:04:a8:b5:d4:1b:7d:c0:01:
                    99:2d:2e:b3:66:45:82:42:e6:54:f0:ca:58:a4:b6:
                    55:50:75:18:82:ca:05:15:a5:14:8f:fb:c0:b9:21:
                    0d:fd:69:47:fd:c9:ba:b0:60:57:ee:2e:6e:51:fd:
                    ca:36:1f:ad:2a:18:51:71:cd:ec:d9:36:fa:fe:04:
                    f1:31:f2:f4:a3:e4:88:d4:6a:61:84:2b:39:68:69:
                    1d:e4:bc:6c:51:0d:84:72:59:9f:ac:b0:03:8f:d3:
                    ab:da:50:24:9f:a3:4e:68:c5:19:39:5a:85:ad:06:
                    45:b1:54:8b:9e:a0:da:78:f8:49:34:e7:d1:7a:f5:
                    18:0e:d2:46:86:08:37:30:c3:09:34:42:e5:0d:04:
                    94:88:d5:e8:33:dc:49:68:b0:25:ba:10:9f:b0:c7:
                    77:18:dd:08:84:3e:ec:80:4d:9a:40:26:7d:ea:8b:
                    2c:4c:40:49:75:c7:88:a2:bc:5d:bb:f5:1a:be:c9:
                    a9:f1:bd:2d:66:66:54:bb:20:d9:fb:ef:b3:e2:4b:
                    ff:94:1f:d1:0d:e8:f3:f2:68:1b:e7:95:e7:d7:e2:
                    56:47:6f:a3:11:27:17:a4:16:01:38:5a:a4:df:22:
                    3d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E2:85:01:A9:A8:AB:7D:82:C3:84:FC:79:E2:89:A1:74:81:91:AC
            X509v3 Authority Key Identifier:
                keyid:2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:d2:2a:5a:8f:cf:48:0a:18:c3:16:35:9e:a2:86:b4:af:31:
         68:d1:4c:c5:b4:36:fc:be:1f:92:05:b5:12:89:4c:3c:76:0f:
         65:ea:ab:10:4f:ea:c4:81:9c:5b:5a:6d:19:45:1c:08:d0:59:
         30:30:d1:c3:c9:a2:66:9a:de:e5:65:31:a5:2b:92:44:7d:15:
         a9:75:d2:5d:28:1d:0e:db:33:ec:68:47:61:fb:04:33:63:db:
         27:fe:e2:90:32:4f:a3:a7:f0:9e:c6:e1:e8:e7:11:ef:5b:d6:
         85:48:a9:4e:bb:d2:c6:0e:6d:dc:ea:68:1f:95:e0:3e:50:da:
         f7:74:cd:aa:1f:0c:3b:32:3a:72:c1:11:13:e9:64:04:4a:dd:
         65:0f:66:86:c9:4c:39:d3:fb:42:06:d1:bc:98:a8:b7:32:1d:
         ea:dd:9a:87:3a:f9:3f:bd:63:f7:eb:d4:5a:87:af:e7:c5:67:
         08:83:9a:2d:96:54:43:5e:de:ba:b0:e1:c4:b0:71:64:52:8a:
         06:88:e8:49:df:b2:2d:11:e0:5d:8c:23:17:64:42:83:84:2e:
         2b:db:68:76:d6:26:a7:97:f2:bf:bc:3b:33:c4:e7:a6:ef:e2:
         4f:7d:25:4e:30:29:8f:91:1c:75:02:30:d9:a4:de:b7:4d:e1:
         33:39:c2:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdW1rmYIf2kQ4yT7rFISUqhd7/LIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI3NTY4Q0E0QzMzNDMwRUI3MkREQkM4MjJENDBFNjVG
NjMwNDJBMzAeFw0yNTA0MjYyMjA5MjJaFw0yNTA0MjgwMDE2MjJaMDMxMTAvBgNV
BAMTKDQ0RTI4NTAxQTlBOEFCN0Q4MkMzODRGQzc5RTI4OUExNzQ4MTkxQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT6Aef/l/skAGBV0U+9GD2OUP1
kf4EqLXUG33AAZktLrNmRYJC5lTwyliktlVQdRiCygUVpRSP+8C5IQ39aUf9ybqw
YFfuLm5R/co2H60qGFFxzezZNvr+BPEx8vSj5IjUamGEKzloaR3kvGxRDYRyWZ+s
sAOP06vaUCSfo05oxRk5WoWtBkWxVIueoNp4+Ek059F69RgO0kaGCDcwwwk0QuUN
BJSI1egz3ElosCW6EJ+wx3cY3QiEPuyATZpAJn3qiyxMQEl1x4iivF279Rq+yanx
vS1mZlS7INn777PiS/+UH9EN6PPyaBvnlefX4lZHb6MRJxekFgE4WqTfIj2RAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUROKFAamoq32Cw4T8eeKJoXSBkawwHwYDVR0j
BBgwFoAUK3VoykwzQw63LdvIItQOZfYwQqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1JCa3hZZERIRFhIMlNhWHdlYUZRMWpBbnNYbVpxRXNwc2pmdEFHUkVk
N1kvMC8yQjc1NjhDQTRDMzM0MzBFQjcyRERCQzgyMkQ0MEU2NUY2MzA0MkEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNzU2OENBNEMzMzQzMEVC
NzJEREJDODIyRDQwRTY1RjYzMDQyQTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M1JCa3hZZERIRFhIMlNhWHdlYUZRMWpBbnNYbVpxRXNwc2pmdEFHUkVkN1kvMC8y
Qjc1NjhDQTRDMzM0MzBFQjcyRERCQzgyMkQ0MEU2NUY2MzA0MkEzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAudIqWo/PSAoYwxY1nqKGtK8xaNFMxbQ2/L4fkgW1EolMPHYPZeqrEE/qxIGc
W1ptGUUcCNBZMDDRw8miZpre5WUxpSuSRH0VqXXSXSgdDtsz7GhHYfsEM2PbJ/7i
kDJPo6fwnsbh6OcR71vWhUipTrvSxg5t3OpoH5XgPlDa93TNqh8MOzI6csERE+lk
BErdZQ9mhslMOdP7QgbRvJiotzId6t2ahzr5P71j9+vUWoev58VnCIOaLZZUQ17e
urDhxLBxZFKKBojoSd+yLRHgXYwjF2RCg4QuK9todtYmp5fyv7w7M8Tnpu/iT30l
TjApj5EcdQIw2aTet03hMznC/g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:39 2025 by rpki-client on console.sobornost.net