Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.mft
File:                     C947EC19DD5216E11734983E3D954D61BC79E7C6.mft (raw, json)
Hash identifier:          EoaCDm8xCgOTEF18t0qGFs5rZTCAgZNgcIqcRxgHJW0=
Subject key identifier:   04:CE:AA:47:E8:0D:A4:27:DE:C3:CA:F7:84:F7:A6:EB:99:C1:FA:8F
Authority key identifier: C9:47:EC:19:DD:52:16:E1:17:34:98:3E:3D:95:4D:61:BC:79:E7:C6
Certificate issuer:       /CN=C947EC19DD5216E11734983E3D954D61BC79E7C6
Certificate serial:       2FFC83220CCB56A8C155B8AF8AC4E4F6D24FC4AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C947EC19DD5216E11734983E3D954D61BC79E7C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.mft
Manifest number:          019D
Signing time:             Sun 27 Apr 2025 14:07:50 +0000
Manifest this update:     Sun 27 Apr 2025 14:02:50 +0000
Manifest next update:     Mon 28 Apr 2025 17:27:50 +0000
Files and hashes:         1: 323830343a313331383a3a2f33322d3333203d3e20323633353135.roa (hash: e+oXJBqOvzmMX9sr9AlYViwAqanW4OG8g9sSbTZAfDA=)
                          2: C947EC19DD5216E11734983E3D954D61BC79E7C6.crl (hash: 0IILhUGurAhKDA3WJtiDztcy/sGq6CCFkCKEjtgat38=)
                          3: 3139312e3234332e3232302e302f32322d3232203d3e20323633353135.roa (hash: uomxGEy9XdesoKUQ55H6BbtHDtT01Va0Tr8V+lGeGXU=)
                          4: 3139312e3234332e3231362e302f32322d3232203d3e20323633353135.roa (hash: zT+e2DAMZZ6235zyMWJfM8Mh0e6AoSm+pVQZo+EcgHc=)
                          5: 3139312e3234332e3231362e302f32312d3231203d3e20323633353135.roa (hash: vZGBQlqLGgKZSpier2taKaZwqllhse7GRGN7XT2pQzs=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.crl
                          rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C947EC19DD5216E11734983E3D954D61BC79E7C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:fc:83:22:0c:cb:56:a8:c1:55:b8:af:8a:c4:e4:f6:d2:4f:c4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C947EC19DD5216E11734983E3D954D61BC79E7C6
        Validity
            Not Before: Apr 27 14:02:50 2025 GMT
            Not After : Apr 28 17:27:50 2025 GMT
        Subject: CN=04CEAA47E80DA427DEC3CAF784F7A6EB99C1FA8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:46:b1:67:a3:00:22:0d:b1:3e:8e:15:5a:d7:
                    03:59:e4:ae:3e:bb:af:13:a2:33:a8:61:da:53:fe:
                    c9:4e:2c:a1:bc:56:f5:c8:f7:11:4c:20:e4:6f:4d:
                    d2:ae:b2:41:21:2d:9f:06:66:fd:49:a6:ae:41:cb:
                    5c:e5:44:65:c1:c3:d0:78:24:9c:0b:e1:00:6c:a1:
                    9a:66:d3:a4:66:f3:bc:4d:3e:9f:f9:74:65:cc:17:
                    3b:d0:92:07:73:50:0e:51:dd:7a:86:d5:17:33:e6:
                    5d:5e:04:24:0c:ac:af:71:39:99:a7:2b:90:52:ad:
                    49:6a:c4:ec:53:03:d3:05:bf:1e:a4:b7:03:44:bd:
                    bc:46:4e:da:b0:5a:11:93:f0:56:3e:e0:3e:5b:29:
                    f9:bc:ad:64:0a:95:1d:68:5a:71:a0:cc:60:e5:ad:
                    e4:8c:a1:0d:c5:88:a0:41:d3:85:21:6b:c3:8e:9a:
                    98:39:2e:e4:cc:c7:41:9d:fa:6f:64:6d:70:89:84:
                    08:ce:8b:85:7f:db:8d:5c:2d:6e:c9:74:8b:80:9c:
                    b5:41:90:ea:f6:cb:1a:b0:9b:3f:94:57:34:10:c0:
                    b5:aa:7f:51:79:83:6a:ca:59:37:13:5d:90:6b:58:
                    2d:ff:aa:93:22:da:e1:43:29:9a:fb:a6:ea:2b:d9:
                    9c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CE:AA:47:E8:0D:A4:27:DE:C3:CA:F7:84:F7:A6:EB:99:C1:FA:8F
            X509v3 Authority Key Identifier:
                keyid:C9:47:EC:19:DD:52:16:E1:17:34:98:3E:3D:95:4D:61:BC:79:E7:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C947EC19DD5216E11734983E3D954D61BC79E7C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ae:41:94:61:47:75:b8:09:2f:bb:6c:bb:78:ba:9f:93:8b:
         52:40:09:09:a5:fd:70:58:02:70:31:6d:75:0a:f8:5d:98:43:
         ba:32:fd:ae:51:4d:f4:1c:1e:ff:9b:10:db:c0:f5:66:50:94:
         24:f8:44:5d:93:27:bb:6b:4a:82:5e:71:8d:da:f9:46:4f:29:
         95:dd:ef:58:31:4c:57:ed:5a:49:43:f2:90:b8:ee:25:d2:3f:
         51:d4:b3:86:fd:43:6d:27:89:17:41:42:dd:6b:a2:9d:2d:dc:
         da:9a:cf:23:4e:0e:ec:46:b7:44:a7:44:36:1d:d5:07:43:ff:
         b7:24:9e:b1:f1:0a:6a:56:25:88:52:f5:be:67:1b:a7:05:6e:
         cc:5a:ff:70:f3:b5:b1:22:96:3c:b4:5b:92:be:0d:ff:7f:97:
         ef:97:4c:63:f3:32:d0:84:a2:6a:35:1f:4b:7d:11:a7:a2:5d:
         68:86:e5:07:31:bf:9a:2e:31:53:e1:23:4c:21:f2:38:b8:b7:
         a6:ec:18:69:c8:39:74:5b:65:03:6a:5a:25:22:bb:16:15:0a:
         3b:fb:be:10:85:55:46:7f:be:fa:df:ab:91:fc:3a:aa:4c:99:
         1a:22:d8:65:4b:15:1f:8e:39:0a:b1:9a:cf:0e:03:66:f6:c1:
         d3:3b:73:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUL/yDIgzLVqjBVbivisTk9tJPxK4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk0N0VDMTlERDUyMTZFMTE3MzQ5ODNFM0Q5NTRENjFC
Qzc5RTdDNjAeFw0yNTA0MjcxNDAyNTBaFw0yNTA0MjgxNzI3NTBaMDMxMTAvBgNV
BAMTKDA0Q0VBQTQ3RTgwREE0MjdERUMzQ0FGNzg0RjdBNkVCOTlDMUZBOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMRrFnowAiDbE+jhVa1wNZ5K4+
u68TojOoYdpT/slOLKG8VvXI9xFMIORvTdKuskEhLZ8GZv1Jpq5By1zlRGXBw9B4
JJwL4QBsoZpm06Rm87xNPp/5dGXMFzvQkgdzUA5R3XqG1Rcz5l1eBCQMrK9xOZmn
K5BSrUlqxOxTA9MFvx6ktwNEvbxGTtqwWhGT8FY+4D5bKfm8rWQKlR1oWnGgzGDl
reSMoQ3FiKBB04Uha8OOmpg5LuTMx0Gd+m9kbXCJhAjOi4V/241cLW7JdIuAnLVB
kOr2yxqwmz+UVzQQwLWqf1F5g2rKWTcTXZBrWC3/qpMi2uFDKZr7puor2ZxxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUBM6qR+gNpCfew8r3hPem65nB+o8wHwYDVR0j
BBgwFoAUyUfsGd1SFuEXNJg+PZVNYbx558YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1c5ZkUydER2TXJDRHlXN1F4WHNFUHFmeUtjclpWWWZ6S1FZY2ZnYTlO
U2cvMC9DOTQ3RUMxOURENTIxNkUxMTczNDk4M0UzRDk1NEQ2MUJDNzlFN0M2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5NDdFQzE5REQ1MjE2RTEx
NzM0OTgzRTNEOTU0RDYxQkM3OUU3QzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M1c5ZkUydER2TXJDRHlXN1F4WHNFUHFmeUtjclpWWWZ6S1FZY2ZnYTlOU2cvMC9D
OTQ3RUMxOURENTIxNkUxMTczNDk4M0UzRDk1NEQ2MUJDNzlFN0M2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ65BlGFHdbgJL7tsu3i6n5OLUkAJCaX9cFgCcDFtdQr4XZhDujL9rlFN9Bwe
/5sQ28D1ZlCUJPhEXZMnu2tKgl5xjdr5Rk8pld3vWDFMV+1aSUPykLjuJdI/UdSz
hv1DbSeJF0FC3WuinS3c2prPI04O7Ea3RKdENh3VB0P/tySesfEKalYliFL1vmcb
pwVuzFr/cPO1sSKWPLRbkr4N/3+X75dMY/My0ISiajUfS30Rp6JdaIblBzG/mi4x
U+EjTCHyOLi3puwYacg5dFtlA2paJSK7FhUKO/u+EIVVRn+++t+rkfw6qkyZGiLY
ZUsVH445CrGazw4DZvbB0ztz6Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:01 2025 by rpki-client on console.sobornost.net