Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
File:                     FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft (raw, json)
Hash identifier:          xL6MJCGCeH6jb7ToEcAfB45Wj0gftZdmCT5VlCeBUt4=
Subject key identifier:   F7:05:D5:10:AF:64:73:AE:D2:5F:A0:20:9C:B6:0A:B5:26:86:A4:81
Authority key identifier: FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D
Certificate issuer:       /CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
Certificate serial:       605DDB45B2BCD3394C86CD80B9B7A19D2042C8B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
Manifest number:          AA
Signing time:             Thu 24 Apr 2025 20:47:28 +0000
Manifest this update:     Thu 24 Apr 2025 20:42:28 +0000
Manifest next update:     Fri 25 Apr 2025 21:43:28 +0000
Files and hashes:         1: 3137302e38322e3139322e302f32322d3232203d3e20323636343436.roa (hash: 4lHsUeGIHF9o7B2qxWtWznQHrYWNguoIdRX1EKI3brE=)
                          2: 323830343a333766343a3a2f33332d3333203d3e20323636343436.roa (hash: 4QHp+lUdRMNPBoaGQT+18uVhEV9Be4V4HDnXA/DipBs=)
                          3: 323830343a333766343a3a2f33322d3332203d3e20323636343436.roa (hash: eqxpPB5XAwja6jV+iVtvQUQ7DvtnMA9xHg8xBxaaJdw=)
                          4: FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl (hash: bxwQma+NF1Bylqqgdj6Tki/dXgCcILAUKUnjCfPmZEA=)
                          5: 3137302e38322e3139342e302f32332d3233203d3e20323636343436.roa (hash: pIDTOZx/tJ1WdD/eCBD4yUnkQ6vG9xe6nYcj0NzfI3M=)
                          6: 3137302e38322e3139322e302f32342d3234203d3e20323636343436.roa (hash: EOlboj3wT6mMDAXmwbGfzwxGWbjkRQ7C2jjpeWmWvl0=)
                          7: 3230302e38302e3131312e302f32342d3234203d3e20323636343436.roa (hash: N1pJ8ZcS9Nl6TbrNXvFkugMPx7xFs2V9bRUg8jfm0g4=)
                          8: 3137302e38322e3139322e302f32332d3233203d3e20323636343436.roa (hash: jKml+vsCmyH3VYhSt6DUlObhppzrFV5AHtWdFgHc6Y8=)
                          9: 3137302e38322e3139342e302f32342d3234203d3e20323636343436.roa (hash: xQ43aWNNIZH99ujqoAg+zbfknfirc7BIELUncdPk2JY=)
                          10: 3137302e38322e3139352e302f32342d3234203d3e20323636343436.roa (hash: +KVVMcJd40fZQtXLvQJ8sBLKn1TiCqb0kXQ7+miqAxU=)
                          11: 3137302e38322e3139332e302f32342d3234203d3e20323636343436.roa (hash: SmxaKkfKqHOd8Yloavtod6j9w1RbBKjAZPKbRAXuIyE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl
                          rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:5d:db:45:b2:bc:d3:39:4c:86:cd:80:b9:b7:a1:9d:20:42:c8:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
        Validity
            Not Before: Apr 24 20:42:28 2025 GMT
            Not After : Apr 25 21:43:28 2025 GMT
        Subject: CN=F705D510AF6473AED25FA0209CB60AB52686A481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3c:ae:9a:7e:70:d8:1f:db:8d:ac:eb:e5:55:
                    0b:89:a5:c2:14:76:b9:35:57:f5:19:54:9b:d9:ec:
                    81:6e:6f:b1:c9:80:0c:b5:cf:4b:15:e0:07:c2:22:
                    1e:0a:dd:d1:2b:73:f8:37:f2:14:3a:f9:f0:56:63:
                    2c:34:45:2a:05:05:ec:9d:d5:e5:aa:b1:a6:a6:b1:
                    76:18:3f:0f:ad:e5:6e:fd:92:d5:75:1f:76:8c:ca:
                    c8:98:14:eb:ca:57:f1:14:87:e9:23:77:8f:80:c4:
                    c6:3a:06:4d:19:82:13:21:b8:42:14:b3:90:3d:e4:
                    ae:3c:de:26:f1:9e:47:22:ea:06:a6:e5:a5:e0:2f:
                    bd:0c:b2:89:fc:3a:d5:35:33:4a:74:96:b0:e8:2c:
                    ea:39:cc:53:5e:a6:c3:60:5c:07:c1:ef:3d:61:d2:
                    cb:38:55:20:bb:32:e0:24:46:5b:c2:e5:51:c2:8a:
                    ad:15:75:f6:45:da:94:88:b2:5e:62:bc:a5:45:8a:
                    3a:6c:f1:93:2a:c4:0a:0c:52:93:8f:d3:94:e3:76:
                    64:da:21:ba:ea:e6:14:d5:d1:6c:94:21:52:11:3b:
                    c6:fe:f1:cc:c2:36:3d:59:e9:6d:b3:8a:c9:01:47:
                    f7:35:d1:02:96:5f:1a:81:09:42:eb:40:20:c9:ca:
                    5a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:05:D5:10:AF:64:73:AE:D2:5F:A0:20:9C:B6:0A:B5:26:86:A4:81
            X509v3 Authority Key Identifier:
                keyid:FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:c9:d1:e1:db:69:5b:c8:54:68:d3:5d:0d:19:e6:02:40:28:
         28:e5:8c:77:e9:b6:52:39:cb:3e:24:1a:70:02:cd:2b:4d:4a:
         a3:be:97:36:ea:af:38:c7:12:ed:89:a0:f1:79:dd:b7:89:dd:
         6c:50:96:78:5f:65:e8:92:11:8d:ab:9c:50:b3:9e:fa:b9:9e:
         e1:7c:a7:97:f7:00:43:c5:e4:09:1d:98:3c:f8:b3:ae:19:fa:
         c7:22:9d:9e:d5:00:50:15:9a:f3:f6:c3:0e:88:81:b4:e4:84:
         e6:cb:a5:11:89:8b:b2:3e:a1:a6:66:ee:07:f5:ca:e9:12:39:
         93:f6:8b:09:1a:da:79:ca:09:0b:d2:dc:5e:25:6c:2a:3a:13:
         29:96:55:b0:ad:06:2a:a1:37:94:b1:a1:8b:57:d2:9b:22:7e:
         07:95:13:5a:25:9f:6b:18:22:ac:2f:15:50:90:5d:99:d3:83:
         b1:41:a9:1f:4b:77:36:d0:22:dc:60:4d:9a:e0:11:38:e4:eb:
         6b:dd:bb:bc:fa:2c:a3:93:f9:5a:2d:d2:17:85:a7:91:1e:65:
         a2:79:57:a2:95:27:c7:f1:1b:3d:b6:90:f0:f6:35:56:38:43:
         2b:57:34:bc:95:9b:b1:e2:f7:c5:98:63:3c:ab:d5:49:a6:ea:
         96:33:3f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:40 2025 by rpki-client on console.sobornost.net