Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft
File:                     296C1957CA1EAD9BA9385FA528C36D900C425F48.mft (raw, json)
Hash identifier:          s9vXbNRyHVkuKKvzx/fIFLw8faw3dtPimwtIqBoRIkU=
Subject key identifier:   42:B3:FA:99:9B:1F:B9:87:A5:F5:11:D1:5F:0B:1E:70:4B:A0:0B:44
Authority key identifier: 29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48
Certificate issuer:       /CN=296C1957CA1EAD9BA9385FA528C36D900C425F48
Certificate serial:       3C3FB4D9201C2BF94AD484E4685794B62E52A35E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft
Manifest number:          13
Signing time:             Sun 27 Apr 2025 11:44:13 +0000
Manifest this update:     Sun 27 Apr 2025 11:39:13 +0000
Manifest next update:     Mon 28 Apr 2025 14:24:13 +0000
Files and hashes:         1: 3138312e3232342e32352e302f32342d3234203d3e20323730353634.roa (hash: VrPL3TxiedADmI5FEdoZcrKGF4HcT0E4E0g6y1Z2Iok=)
                          2: 3138312e3232342e32362e302f32342d3234203d3e20323730353634.roa (hash: xVEk1L81qX01xxW4IyS4YM+0De8Mti9s0l9YDGy2nP8=)
                          3: 32342e3135322e33362e302f32342d3234203d3e20323730353634.roa (hash: yBiClJzV9mXZsvr8LUQMXVSkBMy5QRoAd2I6awIU8iU=)
                          4: 32342e3135322e33382e302f32342d3234203d3e20323730353634.roa (hash: /vDLq0zmn0A8Fu43Fs1L85absc3v5lAacCAsUIfqGgU=)
                          5: 323830343a366465633a31303a3a2f34342d3434203d3e203430363736.roa (hash: 5NigUzx/I6sMjEJnsNecKw16Xyfbit5USCbCcSdmdzs=)
                          6: 3138312e3232342e32342e302f32342d3234203d3e20323730353634.roa (hash: gi2TJpuh+msqZ1T3Ji3xFnrT9Cu+4du04Mo60K4LNqM=)
                          7: 296C1957CA1EAD9BA9385FA528C36D900C425F48.crl (hash: HsmzK+w0Pk0hzWJCPUHH/fGv+07d1pjHuqUC5JnRkWw=)
                          8: 32342e3135322e33372e302f32342d3234203d3e20323730353634.roa (hash: j1m1dEZ5q1dJyi4OWRJR5pm8KOyuDxV2ubfApptV/NU=)
                          9: 32342e3135322e33392e302f32342d3234203d3e20323730353634.roa (hash: s0+LY9NPez3OzzMtpOH0ZD9Jf83IGdXVOwgSYdJ/8Sw=)
                          10: 3138312e3232342e32372e302f32342d3234203d3e20323730353634.roa (hash: K6v+BNgmcrA2NGGI4YpvsgF2J/sl4soIFWLeroEeeBQ=)
                          11: 323830343a366465633a3a2f34342d3434203d3e20323730353634.roa (hash: JrjXmpuAR4nLSLkW7VGjjln8ADGB1CbFOR1f12E6R6k=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.crl
                          rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3f:b4:d9:20:1c:2b:f9:4a:d4:84:e4:68:57:94:b6:2e:52:a3:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296C1957CA1EAD9BA9385FA528C36D900C425F48
        Validity
            Not Before: Apr 27 11:39:13 2025 GMT
            Not After : Apr 28 14:24:13 2025 GMT
        Subject: CN=42B3FA999B1FB987A5F511D15F0B1E704BA00B44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a2:cd:d8:e6:d0:d1:a5:c1:0d:2a:e8:96:a1:
                    78:e1:cc:b2:f5:a8:bc:7c:9f:df:f2:5a:45:b9:6f:
                    ca:57:86:35:52:06:fb:04:5f:2d:ee:88:8c:a4:22:
                    95:71:d3:2b:c9:d1:c1:48:11:ad:dd:fb:2e:ca:2c:
                    ad:b0:05:7f:84:1a:59:0e:8e:18:b3:1b:36:09:09:
                    ab:c6:58:ad:70:e5:04:bc:ba:7e:70:14:79:34:c1:
                    2b:e5:89:1b:57:f0:e4:64:44:22:af:1d:de:97:38:
                    a1:ba:69:e1:ce:89:fd:ab:37:f5:d6:a4:1d:be:ff:
                    71:5e:a3:70:55:5a:04:fd:89:31:dd:e3:c7:ec:8b:
                    ba:d0:d5:0b:f7:15:c7:7b:f5:88:f9:da:60:c4:a1:
                    2c:51:cf:af:6b:cc:9b:21:ae:f2:23:ed:cd:d1:0b:
                    e4:b7:d2:6b:1b:2e:c6:90:56:75:38:ef:d3:fd:03:
                    7c:3a:8e:1f:53:e3:21:c8:b7:7d:cd:8a:07:5b:78:
                    77:ce:09:09:53:e3:12:d3:45:a5:d6:bc:d3:78:f2:
                    e6:2b:1b:40:db:b2:ba:be:c6:50:60:ab:90:6e:25:
                    ec:55:48:7c:a7:74:63:eb:37:4d:f6:38:b0:a5:60:
                    2f:59:dc:cf:2f:5f:8b:15:60:d0:f2:39:9d:8a:d4:
                    cf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B3:FA:99:9B:1F:B9:87:A5:F5:11:D1:5F:0B:1E:70:4B:A0:0B:44
            X509v3 Authority Key Identifier:
                keyid:29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:01:4e:50:33:ee:2a:e7:eb:9c:30:0f:d4:9f:16:ef:f5:1a:
         96:1c:3f:86:1f:51:90:14:9a:90:47:c6:82:47:4f:60:b3:03:
         a8:76:0e:0f:3b:71:d3:f3:92:79:95:4e:f7:51:65:db:3e:e3:
         33:d3:63:1d:ad:31:24:68:d8:c3:f5:c7:da:cc:c9:89:4f:cc:
         0d:c1:6f:5f:1e:54:88:81:ff:f1:b4:c7:e8:06:00:db:a5:8e:
         39:24:b4:32:57:37:63:40:aa:ac:c7:6d:0e:7d:9a:3f:9d:26:
         60:99:ce:b1:6c:eb:83:a9:9a:97:31:33:4e:f6:2e:91:90:4d:
         fd:21:0c:80:d0:7b:9d:2e:c9:64:5e:eb:a8:f3:15:af:a0:88:
         24:e4:f2:cd:57:1b:64:ac:eb:69:5b:d5:7f:8a:c8:73:82:4e:
         97:5f:ed:0a:33:83:f2:2c:bc:1e:0d:ac:e9:f3:11:66:db:d1:
         b9:66:c7:d3:11:1c:c5:21:55:08:63:c0:8a:f4:d5:ef:30:86:
         e2:2b:2d:59:c8:d8:5e:3d:4a:c3:c3:dc:6e:1b:d9:f1:49:15:
         5b:f3:c9:95:7b:7a:be:4c:58:3b:d0:e9:2e:65:c8:7f:ae:31:
         86:34:7d:93:38:d2:4c:c3:62:63:28:fd:85:6f:76:53:bf:0c:
         45:2d:de:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:40 2025 by rpki-client on console.sobornost.net