Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
File:                     2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft (raw, json)
Hash identifier:          7hYZQB6izsLFS5uGFWbHFk8p4g0SKtCG7c0RNhtse0U=
Subject key identifier:   1C:3B:61:D8:4D:1A:8F:37:82:C0:08:FD:42:47:7C:80:85:D9:F3:58
Authority key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C
Certificate issuer:       /CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
Certificate serial:       087ADA75FFDB80064F975BABFDC86D7B581F88B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
Manifest number:          0206
Signing time:             Sat 26 Apr 2025 18:40:00 +0000
Manifest this update:     Sat 26 Apr 2025 18:35:00 +0000
Manifest next update:     Sun 27 Apr 2025 18:54:00 +0000
Files and hashes:         1: 3133382e35392e3230302e302f32332d3233203d3e20323634313236.roa (hash: Y7ZBcvqoFAWwxe+SXHw9z0vDSZ2z/duDgO6FbCBXRr8=)
                          2: 3133382e35392e3230302e302f32342d3234203d3e20323634313236.roa (hash: yrxgY//M5+mWvfVFpBjhbx1sSOwmgxonkXJBCznBSsg=)
                          3: 3133382e35392e3230322e302f32332d3233203d3e20323634313236.roa (hash: 5eXFDYcJ3nmPVI0tJflPeefx8uftXoBchJSt7T9eQNM=)
                          4: 3133382e35392e3230312e302f32342d3234203d3e20323634313236.roa (hash: L7mXU16WalNRvU/g3UN6EAKWiAxCDetlCh8cL1au8k0=)
                          5: 3133382e35392e3230332e302f32342d3234203d3e20323634313236.roa (hash: hLGz/D5soY3387SUgGsJs5xD6GDZUbWJ37e7fq9gkCg=)
                          6: 3133382e35392e3230322e302f32342d3234203d3e20323634313236.roa (hash: cBphwTvrx3SCRnGJ4r7vVDC8gytBQc7VAhDDexBiS9Y=)
                          7: 323830343a323264383a383130303a3a2f34302d3430203d3e20323634313236.roa (hash: QzY77npnmYGWyIzQ3+0FGFQKMhe3QAwpJTvLcFhREWU=)
                          8: 323830343a323264383a3a2f33322d3332203d3e20323634313236.roa (hash: F71ivpk+1NqQHvneGVzXJLNf3heVeNAS9Mm/s1aK1xc=)
                          9: 2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl (hash: 0Nb3p5FXiWDzAbVGSGNzoZu7Q/BtKvEoYtvn0NzQL20=)
                          10: 323830343a323264383a383030303a3a2f33342d3334203d3e20323634313236.roa (hash: GjZYzmx5TCUVGrdtTOThdIs6uYKAGgPT+rqpsOg9iSE=)
                          11: 323830343a323264383a633030303a3a2f33342d3334203d3e20323634313236.roa (hash: NJXPg3F1laW5ItIIp22QI+IxMXIBDhivnZwY6ZphBEk=)
                          12: 323830343a323264383a376630303a3a2f34302d3430203d3e20323634313236.roa (hash: CQP3HUS35Qz5oIEtwNHruBuoq7MQ+rM1a+MsTLoK+Cc=)
                          13: 3133382e35392e3230302e302f32322d3232203d3e20323634313236.roa (hash: FrsRVS8utbon7oWH2AXVtR/Ng1ve2fGBZ7E7JLuIdI4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl
                          rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 18:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:7a:da:75:ff:db:80:06:4f:97:5b:ab:fd:c8:6d:7b:58:1f:88:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
        Validity
            Not Before: Apr 26 18:35:00 2025 GMT
            Not After : Apr 27 18:54:00 2025 GMT
        Subject: CN=1C3B61D84D1A8F3782C008FD42477C8085D9F358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e3:1e:9a:92:a8:36:2b:99:34:42:dc:6d:90:
                    b7:d5:a9:46:67:01:ef:13:92:61:5f:35:28:79:ae:
                    fc:73:79:02:b4:ae:b1:aa:e0:67:ed:90:ac:d6:4f:
                    7c:bc:c7:07:1c:95:ee:2d:52:9b:a2:25:dc:f3:3f:
                    18:e7:fa:3c:dc:fe:ea:47:4d:c2:b7:96:4b:15:d4:
                    2d:31:b6:5d:45:ab:eb:82:e9:32:fc:a1:f1:c1:86:
                    d1:d1:fa:07:4d:52:71:32:ac:6a:1b:59:d0:85:27:
                    54:18:20:62:b2:9d:0e:6b:db:09:24:bb:53:2e:14:
                    f8:67:c2:c2:60:32:3c:04:2f:a0:08:e8:fa:64:65:
                    70:7a:23:4c:0e:4b:33:ac:81:cc:8b:c1:24:5b:f3:
                    a7:7f:8d:9d:05:a2:78:ac:bd:a2:60:ce:f6:5c:05:
                    f6:ac:9f:15:fd:2f:a3:a2:b1:c6:e0:0f:db:e4:cb:
                    bd:96:8b:2f:42:a6:db:cf:7e:7f:b8:6e:95:e5:0a:
                    13:9d:ef:d1:7d:64:fb:0d:0a:34:74:79:71:60:be:
                    69:1a:40:67:29:af:fb:fa:da:db:38:7c:e0:d7:3d:
                    07:3d:b2:83:0a:23:37:36:2c:43:8e:cf:60:e0:73:
                    65:fb:f2:10:a7:a1:e1:f8:aa:bc:f0:91:fa:4c:49:
                    ab:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3B:61:D8:4D:1A:8F:37:82:C0:08:FD:42:47:7C:80:85:D9:F3:58
            X509v3 Authority Key Identifier:
                keyid:2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:6c:4b:91:d1:44:eb:bc:e1:06:53:8a:d1:bb:b4:54:1b:a7:
         c0:8d:c6:b6:7e:c2:72:36:31:ca:bf:4a:16:3a:bb:0d:26:3b:
         1b:a4:78:21:b2:48:94:38:c2:f1:34:b4:10:aa:7e:0f:8c:25:
         4b:cf:d6:91:9b:24:00:b9:33:83:ce:46:80:83:20:d8:21:f4:
         34:e6:fe:6c:57:59:a0:3e:3f:45:b8:36:d4:b7:1f:a5:4b:a1:
         b7:af:53:72:c4:8a:7b:8a:4b:f1:f9:2a:c6:49:28:6c:b7:ba:
         1f:cd:53:d1:7b:fb:7d:f4:c4:f4:e2:aa:73:27:2c:17:5d:3d:
         c2:9f:55:b1:f7:20:a3:bf:2c:c6:45:e9:e4:84:dc:c7:6e:c5:
         e6:85:fd:d7:a6:71:08:13:2a:94:37:e2:17:89:1a:c5:80:b9:
         95:c9:86:7b:bd:80:22:1e:47:25:db:c4:3f:65:f0:6a:6d:fb:
         7e:29:44:88:73:a1:16:ac:f4:ce:99:96:58:58:a8:d4:32:3b:
         7e:27:93:22:73:ba:83:78:56:a5:5c:81:14:92:d7:e6:e7:a3:
         2c:04:df:1d:ab:22:2e:69:3f:a0:ad:d8:1d:85:a0:3a:62:b6:
         a7:20:8c:bc:89:4b:34:3a:af:d9:f4:a9:2f:43:0d:2d:d9:b3:
         b8:6a:5b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:05 2025 by rpki-client on console.sobornost.net