Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft
File:                     2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft (raw, json)
Hash identifier:          891UGTgT4wAI5u/bgGbvARpSEGwznkAmkgeqyDrTxZ8=
Subject key identifier:   72:EA:FC:84:C3:BD:52:BF:46:41:D4:98:D1:AF:4D:D1:6A:0C:C1:91
Authority key identifier: 2A:9F:90:A6:C0:E7:A9:D2:C5:E1:C1:68:81:55:36:53:46:26:06:85
Certificate issuer:       /CN=2A9F90A6C0E7A9D2C5E1C1688155365346260685
Certificate serial:       0DDF2FA49E9ED354DF2F51352EB4CF6523A6E49E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft
Manifest number:          0208
Signing time:             Mon 28 Apr 2025 20:39:13 +0000
Manifest this update:     Mon 28 Apr 2025 20:34:13 +0000
Manifest next update:     Tue 29 Apr 2025 21:25:13 +0000
Files and hashes:         1: 3133382e3132312e34302e302f32322d3332203d3e20323730383931.roa (hash: 0TP0X4N5B/kB0sXJtzuafX2ea3uKpmvm4dgyq0U0O6A=)
                          2: 2A9F90A6C0E7A9D2C5E1C1688155365346260685.crl (hash: oHwtzAPMHEpUxhtmS3fFYTiAIJX+mikN5RuzpCEKXEs=)
                          3: 323830343a373330383a3a2f33322d313238203d3e20323730383931.roa (hash: TFXsRnDBKiVgFfiHrP4nBxeZLl85ER7J0/zeEqj5uFw=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.crl
                          rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:df:2f:a4:9e:9e:d3:54:df:2f:51:35:2e:b4:cf:65:23:a6:e4:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A9F90A6C0E7A9D2C5E1C1688155365346260685
        Validity
            Not Before: Apr 28 20:34:13 2025 GMT
            Not After : Apr 29 21:25:13 2025 GMT
        Subject: CN=72EAFC84C3BD52BF4641D498D1AF4DD16A0CC191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:71:84:b1:1f:3f:0b:a9:95:01:54:f2:93:58:
                    01:00:8f:3b:79:26:bd:97:b5:b8:4c:a2:52:fd:f0:
                    e1:0b:37:fb:8f:9a:94:53:4b:31:a6:33:c4:a3:19:
                    69:48:01:8e:cd:27:7d:97:5a:19:d9:d8:57:5d:43:
                    3b:3e:52:94:9b:59:e0:19:f3:4f:b7:61:9f:fc:16:
                    88:be:c4:07:be:e9:af:f0:49:6e:f2:b2:3f:d1:67:
                    4d:71:64:c6:b6:d1:a6:7a:7c:4e:59:a1:14:bd:a9:
                    bd:a4:d3:13:d2:80:3f:6c:44:a6:62:a7:8e:80:6f:
                    e7:25:fe:d4:20:aa:30:66:b3:e1:2c:2d:a9:bf:3e:
                    7a:42:44:be:33:0f:21:c7:e0:a2:93:c3:9f:7e:d4:
                    bf:dc:02:13:35:0b:04:e8:2f:d8:cb:11:a9:e0:79:
                    c3:12:cd:ac:af:3e:96:1a:c9:2a:6f:bb:3b:ed:98:
                    50:1e:8f:3a:85:21:48:00:50:f2:0e:08:3d:8d:f5:
                    7b:d6:40:32:22:1b:79:82:4d:7c:3a:b2:ae:31:78:
                    ed:d7:40:87:e2:c0:04:e3:4d:76:11:22:4a:4a:66:
                    4c:26:8e:f8:80:62:17:34:07:6f:d4:cc:cf:ee:65:
                    62:0f:6b:41:a6:8a:e5:0a:d3:a9:b1:a9:f6:17:21:
                    e4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EA:FC:84:C3:BD:52:BF:46:41:D4:98:D1:AF:4D:D1:6A:0C:C1:91
            X509v3 Authority Key Identifier:
                keyid:2A:9F:90:A6:C0:E7:A9:D2:C5:E1:C1:68:81:55:36:53:46:26:06:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:28:0e:1d:1e:64:24:1a:02:48:e1:5c:7e:c4:5d:5a:97:57:
         c3:00:14:f5:17:14:c5:41:ed:c5:46:84:0c:ce:b7:61:18:7b:
         dc:b2:8d:5b:07:18:ef:a8:b6:57:e9:a0:e4:4c:a6:45:32:a1:
         43:4a:c2:35:09:1e:b5:81:74:6a:8c:46:e4:38:1f:51:ea:77:
         86:f1:42:cf:22:63:d2:65:06:47:96:2c:90:a2:ed:48:c8:6c:
         ab:fc:00:6a:fb:08:bb:24:22:45:4b:d9:23:99:dd:b8:17:d0:
         30:cc:1c:3d:7f:fe:7c:f9:64:4b:4b:6b:85:43:58:dc:b9:44:
         d5:ef:a0:6c:51:bb:f0:6d:4b:5d:02:b6:e9:e8:64:1b:1e:7a:
         d0:66:48:3c:ef:6c:64:c0:c9:6a:3d:fc:8a:74:55:fc:35:8f:
         a8:54:3e:fc:b8:76:b1:97:8f:b4:e1:ab:c6:9e:ab:cc:43:aa:
         d3:7b:4a:9b:d3:1f:04:b9:4f:27:54:c6:d5:5f:96:bd:08:7b:
         3b:05:25:48:a8:ab:12:70:75:3c:26:56:90:8b:05:66:5e:86:
         67:c0:a8:c5:97:67:5f:41:55:e5:4d:0a:40:dc:5b:50:a2:72:
         4b:a2:cb:3a:23:9e:44:86:da:1d:02:54:c2:a3:97:f0:e2:70:
         a2:15:5f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:45 2025 by rpki-client on console.sobornost.net