Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.mft
File:                     18B10F2F5D78AD441A46176F9DF278F0DE73D40E.mft (raw, json)
Hash identifier:          DHupptNswq4jmiZNsSBLYpp6jIIMvgjYzcIdTT0vPlw=
Subject key identifier:   98:BC:AE:9F:BD:C8:EC:90:93:DE:4D:88:96:BA:CB:E6:8D:EC:D2:F3
Authority key identifier: 18:B1:0F:2F:5D:78:AD:44:1A:46:17:6F:9D:F2:78:F0:DE:73:D4:0E
Certificate issuer:       /CN=18B10F2F5D78AD441A46176F9DF278F0DE73D40E
Certificate serial:       7B4B888C9735B04E4A5D15533A91577CD83E3B0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.mft
Manifest number:          41
Signing time:             Mon 28 Apr 2025 14:14:22 +0000
Manifest this update:     Mon 28 Apr 2025 14:09:22 +0000
Manifest next update:     Tue 29 Apr 2025 17:09:22 +0000
Files and hashes:         1: 34352e3136322e32322e302f32342d3234203d3e20323638353038.roa (hash: 6nTdmS6Wv5/E6CUlq2CKJQ+3ZcgPzPAKOavzmv3k0ZQ=)
                          2: 34352e3136322e32332e302f32342d3234203d3e20323638353038.roa (hash: LRC8p9meT8uN3Ny2zsQWRjI9wz8FYRj35b4IeeZGOdM=)
                          3: 323830343a353234383a383030303a3a2f33362d3336203d3e20323638353038.roa (hash: 7LcG7YveUHXfTMZvGb8b5P4T8pjuqeMoeefnjtVf9yY=)
                          4: 34352e3136322e32322e302f32332d3233203d3e20323638353038.roa (hash: 2I/7569trn1jNupNRtPFTkSz6Kt58OHkbvbfXBzXEEc=)
                          5: 323830343a353234383a3a2f33362d3336203d3e20323638353038.roa (hash: Q2ga1fh8zdnAx248rFjzCCrVwQVWJmop5W+Ur+9+uAo=)
                          6: 18B10F2F5D78AD441A46176F9DF278F0DE73D40E.crl (hash: 62X+6M2PqZxMvr4Q3m2mmagP0JpLZTXUq31eJf7LvSo=)
                          7: 323830343a353234383a3a2f33322d3332203d3e20323638353038.roa (hash: hJy0mx1WgYK7YsXQEGj6cKQytRbpqodr5dHb85nh+Ow=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.crl
                          rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4b:88:8c:97:35:b0:4e:4a:5d:15:53:3a:91:57:7c:d8:3e:3b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18B10F2F5D78AD441A46176F9DF278F0DE73D40E
        Validity
            Not Before: Apr 28 14:09:22 2025 GMT
            Not After : Apr 29 17:09:22 2025 GMT
        Subject: CN=98BCAE9FBDC8EC9093DE4D8896BACBE68DECD2F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9a:f8:42:98:35:f8:88:e9:14:51:41:cd:10:
                    5b:5e:e6:b5:89:70:d9:87:35:6a:37:1f:21:36:3c:
                    63:9a:f1:fe:5c:02:79:e8:11:e9:de:c8:1e:56:fa:
                    e6:f7:4f:d3:35:85:d2:f7:63:9f:04:cf:67:80:3a:
                    57:71:92:72:38:38:4a:79:90:1c:a4:0e:bf:f6:65:
                    50:6e:91:ef:a7:bf:5b:4f:75:cd:c5:24:4b:f4:3b:
                    f7:e4:f7:2d:11:e0:6a:7d:8c:6e:58:2d:59:6e:f9:
                    cd:9f:cc:eb:d4:b6:5e:24:62:36:5c:72:3c:0e:f7:
                    cf:22:d2:c7:e6:6c:1c:6c:57:be:3d:5c:a7:ba:84:
                    06:26:c6:5a:63:f8:39:4f:af:aa:03:c4:b3:29:a2:
                    3f:27:ca:ba:8f:bc:d8:10:da:fa:aa:eb:9c:3f:01:
                    aa:4b:d0:88:55:3d:e5:e4:96:e4:27:e8:5b:1c:fe:
                    2a:28:86:01:dc:b6:9c:1c:1e:c6:6f:e8:02:5f:f1:
                    14:e4:7b:b5:5a:19:5f:ea:f2:61:93:50:43:a1:4a:
                    c2:d8:6a:03:b6:98:d9:74:1a:9e:12:76:89:9d:46:
                    7d:a6:b1:08:3b:c1:8f:5c:39:c1:a9:1d:7e:80:47:
                    d5:ba:e0:22:72:ca:e2:82:b8:e3:5e:87:2d:9f:01:
                    73:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BC:AE:9F:BD:C8:EC:90:93:DE:4D:88:96:BA:CB:E6:8D:EC:D2:F3
            X509v3 Authority Key Identifier:
                keyid:18:B1:0F:2F:5D:78:AD:44:1A:46:17:6F:9D:F2:78:F0:DE:73:D4:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:95:ec:86:69:03:51:42:01:81:2c:f1:26:7a:c6:e5:5c:9d:
         0a:ca:34:db:6f:6b:d8:3e:2c:79:85:4d:68:0a:0e:61:38:ea:
         c3:a0:1a:8c:f1:e3:d7:8b:95:a8:3c:b5:66:64:2a:a4:a1:5e:
         4e:b2:d3:82:27:60:23:cb:c2:23:ce:3a:54:05:3d:b1:05:ac:
         87:69:da:ed:28:03:20:31:48:8a:4f:f3:94:ca:f5:97:c8:83:
         84:df:65:d3:af:b9:c4:a1:2c:db:a2:52:f6:8c:16:10:f7:6f:
         e8:09:5c:cd:9d:a3:dc:c6:69:d3:dd:73:de:6e:51:ab:5c:5b:
         fa:d2:74:82:ba:1b:a8:f0:d6:bb:3b:62:55:e5:86:9d:23:da:
         d4:f2:d3:a3:65:52:a4:bf:34:f5:1f:47:16:1e:c0:93:e0:3c:
         55:6c:a2:0c:70:fc:33:62:ce:d8:43:dd:2d:53:0b:53:08:ff:
         42:6c:6b:36:a2:1a:54:3c:84:0f:0f:b3:19:dd:c6:da:44:28:
         f7:fb:1b:3b:66:9a:42:93:e9:b3:73:a3:a1:ba:b0:b0:0d:ef:
         16:d6:46:50:b0:21:24:8c:85:d3:d0:c3:2b:93:16:11:da:fe:
         eb:9f:75:5e:21:b7:41:e8:a0:9c:7f:10:a3:00:67:dc:9d:3f:
         53:dc:9c:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUe0uIjJc1sE5KXRVTOpFXfNg+OwowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThCMTBGMkY1RDc4QUQ0NDFBNDYxNzZGOURGMjc4RjBE
RTczRDQwRTAeFw0yNTA0MjgxNDA5MjJaFw0yNTA0MjkxNzA5MjJaMDMxMTAvBgNV
BAMTKDk4QkNBRTlGQkRDOEVDOTA5M0RFNEQ4ODk2QkFDQkU2OERFQ0QyRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3mvhCmDX4iOkUUUHNEFte5rWJ
cNmHNWo3HyE2PGOa8f5cAnnoEeneyB5W+ub3T9M1hdL3Y58Ez2eAOldxknI4OEp5
kBykDr/2ZVBuke+nv1tPdc3FJEv0O/fk9y0R4Gp9jG5YLVlu+c2fzOvUtl4kYjZc
cjwO988i0sfmbBxsV749XKe6hAYmxlpj+DlPr6oDxLMpoj8nyrqPvNgQ2vqq65w/
AapL0IhVPeXkluQn6Fsc/ioohgHctpwcHsZv6AJf8RTke7VaGV/q8mGTUEOhSsLY
agO2mNl0Gp4SdomdRn2msQg7wY9cOcGpHX6AR9W64CJyyuKCuONehy2fAXOTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUmLyun73I7JCT3k2IlrrL5o3s0vMwHwYDVR0j
BBgwFoAUGLEPL114rUQaRhdvnfJ48N5z1A4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNENoc2NhRFNGNWlvYVRyUzlzUTV0eHVWdHNiMlpjVlFhcEZ5akgydGtl
MVYvMC8xOEIxMEYyRjVENzhBRDQ0MUE0NjE3NkY5REYyNzhGMERFNzNENDBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4QjEwRjJGNUQ3OEFENDQx
QTQ2MTc2RjlERjI3OEYwREU3M0Q0MEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NENoc2NhRFNGNWlvYVRyUzlzUTV0eHVWdHNiMlpjVlFhcEZ5akgydGtlMVYvMC8x
OEIxMEYyRjVENzhBRDQ0MUE0NjE3NkY5REYyNzhGMERFNzNENDBFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkJXshmkDUUIBgSzxJnrG5VydCso0229r2D4seYVNaAoOYTjqw6AajPHj14uV
qDy1ZmQqpKFeTrLTgidgI8vCI846VAU9sQWsh2na7SgDIDFIik/zlMr1l8iDhN9l
06+5xKEs26JS9owWEPdv6AlczZ2j3MZp091z3m5Rq1xb+tJ0grobqPDWuztiVeWG
nSPa1PLTo2VSpL809R9HFh7Ak+A8VWyiDHD8M2LO2EPdLVMLUwj/QmxrNqIaVDyE
Dw+zGd3G2kQo9/sbO2aaQpPps3OjobqwsA3vFtZGULAhJIyF09DDK5MWEdr+6591
XiG3QeignH8QowBn3J0/U9yciA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:54 2025 by rpki-client on console.sobornost.net