Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft
File:                     8204A8F62764E655E183BB09417B0875F11B3A7D.mft (raw, json)
Hash identifier:          mN8Qfqaoi2x3KtYHqsNIULQWLyuIwy4u/yDwY8nFwOQ=
Subject key identifier:   83:50:B7:84:A9:19:5C:05:50:A0:31:00:B7:41:6D:84:D1:BC:54:D0
Authority key identifier: 82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D
Certificate issuer:       /CN=8204A8F62764E655E183BB09417B0875F11B3A7D
Certificate serial:       40B8608703234CBEFC77057E0317464F5A509A6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft
Manifest number:          0211
Signing time:             Fri 25 Apr 2025 04:07:31 +0000
Manifest this update:     Fri 25 Apr 2025 04:02:31 +0000
Manifest next update:     Sat 26 Apr 2025 06:59:31 +0000
Files and hashes:         1: 8204A8F62764E655E183BB09417B0875F11B3A7D.crl (hash: 2vX02zkHSF1qH0/3RvpYlevm8CjjM7JkiArPXEL/j4g=)
                          2: 323830343a313038383a3a2f33322d3438203d3e203532393133.roa (hash: GwPm2g2MNZjdOqx6Lcw+CEjGDtw0uvGi9kDqotISbMA=)
                          3: 3137302e3135302e37362e302f32322d3234203d3e203532393133.roa (hash: 0arN7mTxC+femsr+qJoXzx7w67KLc6hvBkwe3aPa7es=)
                          4: 3137372e32332e3136382e302f32312d3234203d3e203532393133.roa (hash: T/SpWSzWq/EKwVb72W4louC31Dw+ByGimjZONGUb+w4=)
                          5: 3136372e3234392e342e302f32322d3234203d3e203532393133.roa (hash: zP9yhC3Qt7EQWFv+OYnhs4gTVLpF8pr3SnXMGPpjQZ8=)
                          6: 3137302e3234362e3136342e302f32322d3234203d3e203532393133.roa (hash: R0L4zMoCzJms1YK3JxIET0vc/j1jFMjQqVfs6zcYcmk=)
                          7: 3139302e3130392e38302e302f32322d3234203d3e203532393133.roa (hash: cnXFFjteLwxFJzW5tJDRUpxoZcspHKMllIxuDdVkNFI=)
                          8: 3137392e3132372e34302e302f32312d3234203d3e203532393133.roa (hash: vmcXxKuONvDttff4UVitpw8WaYSJUZMmP7VKmelSv2A=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl
                          rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b8:60:87:03:23:4c:be:fc:77:05:7e:03:17:46:4f:5a:50:9a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8204A8F62764E655E183BB09417B0875F11B3A7D
        Validity
            Not Before: Apr 25 04:02:31 2025 GMT
            Not After : Apr 26 06:59:31 2025 GMT
        Subject: CN=8350B784A9195C0550A03100B7416D84D1BC54D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:21:02:e0:26:ed:ab:74:41:f7:f2:67:9a:1c:
                    14:1b:4a:db:05:ab:54:4b:ab:95:70:bf:f1:c8:f0:
                    b6:7b:c4:db:62:ab:f7:28:46:52:ff:31:1c:46:e7:
                    42:db:94:f2:f0:b4:58:6b:40:db:0d:3e:fc:27:43:
                    df:15:1c:d5:6e:05:70:0d:53:9b:ac:8c:bb:cd:92:
                    4d:e7:1f:28:20:a1:f8:ec:02:7f:fa:30:48:0c:38:
                    49:f9:92:f5:96:a3:6a:51:0c:6b:16:09:8d:95:58:
                    ec:4b:68:12:ab:b6:42:7a:79:b1:84:1d:d8:5c:42:
                    df:e2:03:03:a0:11:9f:ed:b7:c7:22:f9:3b:19:f2:
                    b4:71:aa:0a:21:08:1a:c0:77:cc:a7:fc:a2:5e:cd:
                    77:75:fa:0f:32:13:38:33:bf:b5:76:e4:e0:ff:43:
                    e6:c2:44:4d:d7:ad:07:d6:16:2d:94:af:f3:b0:c1:
                    a4:55:f6:95:be:b8:77:22:3a:92:18:0d:ea:9a:2f:
                    95:b8:a7:f0:13:0c:f3:bc:fd:df:10:79:6b:e6:0d:
                    3b:0c:fc:db:64:8d:2d:69:54:69:fe:4e:1b:ac:b2:
                    77:f2:6a:68:ba:7b:07:ed:59:c4:93:12:73:82:6b:
                    76:b9:62:20:d1:f6:0e:35:86:7b:f1:ca:65:29:0e:
                    8c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:50:B7:84:A9:19:5C:05:50:A0:31:00:B7:41:6D:84:D1:BC:54:D0
            X509v3 Authority Key Identifier:
                keyid:82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b3:9f:75:6b:f2:b3:f9:14:74:3e:ee:2f:a6:af:7a:cb:28:
         20:61:67:fa:6f:3d:fa:cd:57:27:6d:4c:27:b3:84:46:ff:fe:
         84:62:07:a2:9f:ad:e4:a9:36:40:b8:e4:a0:d6:36:40:c3:d0:
         d3:b8:5c:a3:94:11:7d:23:3e:54:37:d4:de:15:a4:23:1c:b9:
         e4:65:35:c5:a2:f2:a5:a0:ed:f1:e7:b4:df:4d:aa:7a:5d:12:
         62:b6:b2:a0:29:c9:df:29:fc:51:7d:5f:a1:ed:58:f4:5a:5a:
         6b:9e:60:50:a6:49:bf:20:14:e2:48:e6:ba:d2:b8:02:7a:38:
         7e:3f:88:a2:19:f1:aa:52:46:0e:f0:44:84:b6:9e:71:64:58:
         78:cb:ca:bc:8a:12:ff:ae:a0:24:ed:4b:04:ac:3f:14:8b:68:
         68:a9:d5:e6:ae:a5:4c:86:75:a6:e0:4c:81:07:d2:82:af:26:
         3b:60:76:3a:30:31:82:85:7c:c9:b7:59:a8:72:a7:48:7f:23:
         b6:b3:f9:42:a6:cb:99:c2:9e:fc:d3:90:f7:22:62:54:f8:0e:
         be:1e:9d:e5:39:e8:47:17:17:09:86:ba:7a:44:ba:a3:58:bb:
         d4:ec:61:21:26:43:3e:a2:5c:b8:9c:ee:79:e7:52:be:93:9b:
         d4:a3:ac:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:27 2025 by rpki-client on console.sobornost.net