Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.mft
File:                     481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.mft (raw, json)
Hash identifier:          okiGFJYglZuJ7YX1HC4RoEO7lbHCe7DcXLGTC8tMuRE=
Subject key identifier:   23:8C:59:7B:C7:DF:BB:3F:B3:0B:B9:C0:EE:01:51:A1:A6:22:FB:76
Authority key identifier: 48:1B:24:AC:65:23:E8:C3:FC:CE:DE:9F:C8:B8:A7:4C:C2:C4:E5:F9
Certificate issuer:       /CN=481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9
Certificate serial:       11FC3E9E5B58C70454E1C37C16599D042B856F7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.mft
Manifest number:          0209
Signing time:             Mon 28 Apr 2025 19:20:00 +0000
Manifest this update:     Mon 28 Apr 2025 19:15:00 +0000
Manifest next update:     Tue 29 Apr 2025 20:47:00 +0000
Files and hashes:         1: 481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.crl (hash: IKLvKOsdSSxGHh6L06QYt5AUH87SQydlEYiEIGUgekg=)
                          2: 323830343a346138633a3130303a3a2f34302d3430203d3e20323637323438.roa (hash: V3fffgqCN3ORQOxU//QC0eXQOytJiGD37tPjec0DJ9k=)
                          3: 323830343a346138633a3a2f33322d3334203d3e20323637323438.roa (hash: HXBPNNM9JK77Qjs6rWwR8L8yvx4LZpjy3+ee8Pytg0E=)
                          4: 34352e3233322e32302e302f32322d3234203d3e20323637323438.roa (hash: OoMklKgWnbZZyD9EXa9zX8avqQ0zyo27I7zEQ1Kbu70=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.crl
                          rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:fc:3e:9e:5b:58:c7:04:54:e1:c3:7c:16:59:9d:04:2b:85:6f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9
        Validity
            Not Before: Apr 28 19:15:00 2025 GMT
            Not After : Apr 29 20:47:00 2025 GMT
        Subject: CN=238C597BC7DFBB3FB30BB9C0EE0151A1A622FB76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:73:a8:a9:d4:f4:f7:7e:e8:70:f7:bc:c9:72:
                    b0:95:83:72:36:4c:35:2a:a6:1c:cf:b7:77:16:ad:
                    64:c3:17:96:3c:b9:5a:2a:cb:d5:c4:0a:7b:86:a0:
                    ef:85:b4:18:5e:0a:ac:a7:97:bf:02:03:14:a7:71:
                    62:53:d8:d1:e2:1d:4e:4f:32:9d:f9:20:e6:8e:f7:
                    f9:d9:07:96:34:31:d4:5e:6c:9c:d6:c3:8f:cb:93:
                    ef:18:d4:df:4f:49:75:32:ee:97:32:44:fb:c1:25:
                    f9:2d:c7:e5:06:a8:13:db:10:b4:ef:c1:16:83:e3:
                    b0:28:5b:81:81:3c:84:6a:c7:a8:3b:01:0b:45:84:
                    15:3e:ca:13:c1:20:33:a7:7b:95:10:ee:68:93:99:
                    b5:78:23:9d:dd:23:57:3d:61:01:b6:97:f7:16:d9:
                    a8:6e:0a:72:6f:5a:a1:02:af:3e:84:56:97:6c:1e:
                    3e:c8:e7:37:00:70:4b:0c:52:56:6d:aa:c0:e9:61:
                    38:30:dc:d0:d3:7c:fc:e8:16:39:15:c3:be:15:cc:
                    ce:93:de:67:61:78:62:0a:6e:ca:85:67:3c:f0:3f:
                    d4:79:c3:0b:47:de:6b:57:f4:d3:21:70:c0:09:6f:
                    b0:59:66:9d:4b:4e:f1:bc:91:08:bd:60:44:12:1c:
                    43:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8C:59:7B:C7:DF:BB:3F:B3:0B:B9:C0:EE:01:51:A1:A6:22:FB:76
            X509v3 Authority Key Identifier:
                keyid:48:1B:24:AC:65:23:E8:C3:FC:CE:DE:9F:C8:B8:A7:4C:C2:C4:E5:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:5e:c9:0c:01:41:ae:fc:9f:da:0a:33:64:7c:69:7a:6b:19:
         66:59:ca:18:f0:75:bc:db:b3:6c:11:f3:56:32:ef:7d:9b:52:
         1a:a8:01:99:ee:cb:b6:ce:8f:43:ac:af:be:b9:f7:7e:d5:1d:
         15:f4:da:32:f0:d7:23:f5:8e:d2:9b:02:c9:e8:60:c4:33:05:
         1a:c2:6d:fa:ff:d5:11:e4:44:e0:c2:57:5c:f2:14:14:fc:89:
         a7:78:50:e5:39:d4:61:a9:85:80:e2:d2:75:2a:3e:a1:eb:b9:
         6a:49:f4:10:47:9d:c3:cc:76:43:42:ae:9c:ae:d0:81:a8:d8:
         95:3e:65:f2:20:bd:f7:11:d5:6a:e6:08:ce:7c:0a:e1:96:35:
         0a:0a:82:e0:5b:f5:1e:36:05:ef:61:52:16:7b:74:6b:5a:62:
         f2:1c:e1:b3:ee:9e:03:20:b6:14:e6:f4:73:a3:ea:77:32:de:
         7f:3b:11:5c:45:51:2b:7e:d5:9c:5e:44:2c:ab:10:db:d2:cf:
         7e:60:a8:d3:5e:5e:ad:df:ce:0f:ca:f8:1c:ca:c1:21:4c:76:
         01:26:7f:49:fc:d9:d0:a0:74:7e:ec:87:62:b0:90:0b:95:c4:
         e4:33:be:12:e2:24:e3:1e:2d:be:e7:1a:25:30:9a:bc:30:0b:
         e8:ce:f3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:45 2025 by rpki-client on console.sobornost.net