Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
File:                     3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft (raw, json)
Hash identifier:          eH1LIFCXFxxe3pDpTISSG9qd/2/QKZ2GFQEBLcfucTg=
Subject key identifier:   D0:B2:A4:E3:30:B1:D6:B0:12:A6:EE:EF:12:57:9F:93:38:A0:F9:DE
Authority key identifier: 3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E
Certificate issuer:       /CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
Certificate serial:       4D20C3FF5863249037AF98C1F3A11C508A75796C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
Manifest number:          7A
Signing time:             Fri 25 Apr 2025 23:47:41 +0000
Manifest this update:     Fri 25 Apr 2025 23:42:41 +0000
Manifest next update:     Sun 27 Apr 2025 03:27:41 +0000
Files and hashes:         1: 3138392e35302e3232312e302f32342d3234203d3e20323730353531.roa (hash: a5PrF0/f461Ynit6WvECovL5BWmEJeQoBlDUQq7HxQo=)
                          2: 3138392e35302e3232302e302f32322d3232203d3e20323730353531.roa (hash: AX9jQRnpyOWBuTJjKmVSaEOA2ZYYCjSkvfBgQQ9WXbA=)
                          3: 3138392e35302e3232332e302f32342d3234203d3e20323730353531.roa (hash: tg53L27JqwL4FND+rLzsbtuLYRRo/BSqrNhOQnodd2w=)
                          4: 3138392e35302e3232302e302f32342d3234203d3e20323730353531.roa (hash: XIK3trgOduFvYXpauvrEY/zSl++zplK4JsYkuaGD2gw=)
                          5: 3138392e35302e3232322e302f32342d3234203d3e20323730353531.roa (hash: UsQOMyZHtsc6TaHqA0joIAL0Xfjc2PpvhLLL00pQDVA=)
                          6: 3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl (hash: xp8XtxvHGpF7hOTwI05qF4e2cZBro925EwZh4cJyZUI=)
                          7: 323830343a366462383a3a2f33322d3332203d3e20323730353531.roa (hash: FV+S+TZX84Q03vR1jKTgDhNyXgTv5smpg9WGAeALcHM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl
                          rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 03:27:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:20:c3:ff:58:63:24:90:37:af:98:c1:f3:a1:1c:50:8a:75:79:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
        Validity
            Not Before: Apr 25 23:42:41 2025 GMT
            Not After : Apr 27 03:27:41 2025 GMT
        Subject: CN=D0B2A4E330B1D6B012A6EEEF12579F9338A0F9DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:14:55:de:b0:5b:a3:0d:2a:8f:a3:7d:b6:90:
                    5d:df:84:86:44:24:15:dc:6b:4f:8c:60:23:81:3b:
                    b1:fe:16:49:77:de:20:b2:a0:59:d5:65:66:f6:98:
                    88:e4:f8:ff:73:cc:ce:d3:be:10:0c:a6:d0:19:88:
                    4c:32:9f:66:6d:4a:9d:77:93:61:8a:82:2e:f6:c6:
                    04:36:4b:c5:84:2b:48:6e:8b:b5:4c:e5:f0:e6:0a:
                    e7:05:ef:21:3a:8d:7e:30:13:22:df:95:47:1e:df:
                    eb:af:0f:4a:61:f6:8f:b2:75:58:ea:38:f4:dd:2b:
                    6b:86:46:ab:43:b2:1c:5b:8a:a1:9e:63:b0:ef:50:
                    fb:51:46:18:3d:de:cd:5a:1e:e9:b2:d4:31:19:94:
                    8a:6d:30:28:d2:53:e7:a7:aa:fa:ef:f7:ef:6d:54:
                    7d:e8:41:d8:0f:23:52:d7:ad:54:38:8e:86:b9:31:
                    cf:8d:e2:22:d6:51:29:87:63:bc:31:3c:5e:c7:54:
                    5c:d3:1a:8e:b1:63:e6:54:00:b3:de:37:64:95:51:
                    71:d8:fa:af:ee:f1:31:d6:c3:44:1a:ec:6d:94:8b:
                    e6:39:d9:9a:79:aa:85:bd:02:e3:eb:4d:82:f6:b2:
                    73:ec:22:1b:e0:fc:1c:45:94:5b:96:5a:25:95:f3:
                    bd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B2:A4:E3:30:B1:D6:B0:12:A6:EE:EF:12:57:9F:93:38:A0:F9:DE
            X509v3 Authority Key Identifier:
                keyid:3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:5a:65:53:d8:45:ff:96:59:d0:f8:18:a6:3e:63:a0:a3:5d:
         c7:2c:dc:8d:fa:99:29:a3:24:af:e2:cd:7e:82:ea:4c:14:ad:
         73:09:5a:5c:f4:c6:54:c8:81:99:3b:07:f8:e8:ce:fc:be:c9:
         b7:a9:a6:6a:03:16:6e:2c:bf:68:9d:f0:90:6a:b6:9f:ed:e1:
         e7:87:c5:f9:45:07:dc:ba:98:85:67:9e:b0:c8:e3:f1:22:ff:
         96:ce:27:aa:da:13:52:a2:48:07:1e:50:48:4a:cf:bd:05:d5:
         67:9d:e3:b9:d7:29:9d:80:8e:a2:a0:2d:e8:98:a1:4f:4c:70:
         9a:25:44:06:44:84:f0:dc:2e:4c:af:a3:38:74:09:30:ac:88:
         59:c5:33:09:e6:7a:a3:4f:ac:53:e4:af:4f:9c:72:a5:1b:69:
         60:99:f6:e8:3d:81:b9:97:a9:86:b6:dc:d6:dc:32:69:7c:f7:
         3e:da:01:a4:65:0e:a2:d0:9c:be:ea:28:f4:41:2e:ef:77:56:
         7f:22:4b:f2:17:fa:e9:e3:05:69:f9:e6:40:ea:af:94:6f:6f:
         f7:3b:61:0e:20:24:19:a6:e6:8d:22:25:ff:77:8c:8c:1d:97:
         d5:33:da:c1:66:be:50:d6:19:d4:de:4a:ed:d9:b9:d1:8a:3e:
         28:10:64:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTSDD/1hjJJA3r5jB86EcUIp1eWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0QyQTFBMDk0MjQ1RDQwNzQ3NEY5MzE4NkNFM0YyNUZG
QkJFRTU5RTAeFw0yNTA0MjUyMzQyNDFaFw0yNTA0MjcwMzI3NDFaMDMxMTAvBgNV
BAMTKEQwQjJBNEUzMzBCMUQ2QjAxMkE2RUVFRjEyNTc5RjkzMzhBMEY5REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeFFXesFujDSqPo322kF3fhIZE
JBXca0+MYCOBO7H+Fkl33iCyoFnVZWb2mIjk+P9zzM7TvhAMptAZiEwyn2ZtSp13
k2GKgi72xgQ2S8WEK0hui7VM5fDmCucF7yE6jX4wEyLflUce3+uvD0ph9o+ydVjq
OPTdK2uGRqtDshxbiqGeY7DvUPtRRhg93s1aHumy1DEZlIptMCjSU+enqvrv9+9t
VH3oQdgPI1LXrVQ4joa5Mc+N4iLWUSmHY7wxPF7HVFzTGo6xY+ZUALPeN2SVUXHY
+q/u8THWw0Qa7G2Ui+Y52Zp5qoW9AuPrTYL2snPsIhvg/BxFlFuWWiWV873zAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0LKk4zCx1rASpu7vElefkzig+d4wHwYDVR0j
BBgwFoAUPSoaCUJF1AdHT5MYbOPyX/u+5Z4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEM1dDNWbXI5ajdheDFBWEdLMXVzd1FHeHREcXlaVGtMRk1MZ1puVGNu
UmcvMC8zRDJBMUEwOTQyNDVENDA3NDc0RjkzMTg2Q0UzRjI1RkZCQkVFNTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEMkExQTA5NDI0NUQ0MDc0
NzRGOTMxODZDRTNGMjVGRkJCRUU1OUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEM1dDNWbXI5ajdheDFBWEdLMXVzd1FHeHREcXlaVGtMRk1MZ1puVGNuUmcvMC8z
RDJBMUEwOTQyNDVENDA3NDc0RjkzMTg2Q0UzRjI1RkZCQkVFNTlFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKFplU9hF/5ZZ0PgYpj5joKNdxyzcjfqZKaMkr+LNfoLqTBStcwlaXPTGVMiB
mTsH+OjO/L7Jt6mmagMWbiy/aJ3wkGq2n+3h54fF+UUH3LqYhWeesMjj8SL/ls4n
qtoTUqJIBx5QSErPvQXVZ53judcpnYCOoqAt6JihT0xwmiVEBkSE8NwuTK+jOHQJ
MKyIWcUzCeZ6o0+sU+SvT5xypRtpYJn26D2BuZephrbc1twyaXz3PtoBpGUOotCc
vuoo9EEu73dWfyJL8hf66eMFafnmQOqvlG9v9zthDiAkGabmjSIl/3eMjB2X1TPa
wWa+UNYZ1N5K7dm50Yo+KBBkWw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:40 2025 by rpki-client on console.sobornost.net