Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
File:                     8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft (raw, json)
Hash identifier:          qHRTTfHCWc3Sewnvw41+UKLv/6Bi2jTVEuSv00uyTdI=
Subject key identifier:   AD:A5:3E:B3:D0:B0:D2:30:0F:13:E1:3B:51:7E:88:E0:99:CF:FD:36
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Certificate issuer:       /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial:       2C46DD6F232070E91A438C69C46B5C51478DF511
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
Manifest number:          016A
Signing time:             Sun 27 Apr 2025 16:24:03 +0000
Manifest this update:     Sun 27 Apr 2025 16:19:03 +0000
Manifest next update:     Mon 28 Apr 2025 18:33:03 +0000
Files and hashes:         1: 8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl (hash: k0MhAFNaBe+bWiXo23JSFbWgfA5uuHkFMCI6iZ7qrMI=)
                          2: 323830343a316364343a3a2f33322d313238203d3e203631363738.roa (hash: ZAFNIJgwCnwyt7SK/Ssd+849ytnqcqzaf8HYlhtxbkM=)
                          3: 3136382e39302e302e302f32322d3332203d3e203631363738.roa (hash: V41xaScAGBtx86DO+b01mCts3BvnSF090MGF8ATKJ90=)
                          4: 3137302e3234362e3233362e302f32322d3332203d3e203631363738.roa (hash: dZkR7OkwOdS1tzWkqugp2XWNw/VURw0l47xCQklPHRg=)
                          5: 3133312e3130382e3136342e302f32322d3332203d3e203631363738.roa (hash: iyxltKN78mePz4Y5Z3Y6H/UwibveqSISPy8V5PUc2EY=)
                          6: 3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa (hash: ASiz0ZcbAT9VDKQt49gxDLD444Lbu3KuDz6l5NFIFoI=)
                          7: 3138312e3139312e3230302e302f32322d3332203d3e203631363738.roa (hash: 3kdSaSAmdl/G7ppO5+ZSY5gb3WZSUNqO0u7us0ffcaM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
                          rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 18:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:46:dd:6f:23:20:70:e9:1a:43:8c:69:c4:6b:5c:51:47:8d:f5:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
        Validity
            Not Before: Apr 27 16:19:03 2025 GMT
            Not After : Apr 28 18:33:03 2025 GMT
        Subject: CN=ADA53EB3D0B0D2300F13E13B517E88E099CFFD36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8b:93:d9:e1:e9:c4:df:a4:c8:0d:dc:e8:bd:
                    f0:40:57:75:a3:b2:5c:eb:31:54:19:02:ab:94:96:
                    7f:82:04:14:65:32:57:98:4a:fe:9d:8f:83:f9:c3:
                    e9:3d:8c:64:eb:97:89:f7:8d:82:d0:72:5a:1e:d8:
                    27:4c:cf:60:41:1b:44:70:00:e6:a0:17:b5:4d:d3:
                    55:ed:90:9c:65:9a:4a:22:26:f6:40:88:70:f8:6c:
                    af:45:bb:38:b5:7d:ec:dd:30:c7:0c:62:d7:15:1c:
                    ca:89:a1:cb:2e:84:4a:aa:9d:61:8e:98:1d:e4:93:
                    bb:6a:0c:7e:5a:f9:78:13:cf:c3:3e:ff:c2:1e:cb:
                    e5:9f:f8:b9:e6:69:f7:50:10:50:93:f1:64:66:f6:
                    27:55:2e:91:22:24:cc:a9:17:d0:5a:11:dc:8a:44:
                    4c:8c:60:3d:ad:bc:ef:2b:6b:2f:ad:f2:fa:3e:d0:
                    4e:0f:80:ca:0c:a9:98:d3:75:f5:5e:51:cd:aa:84:
                    1f:e2:b2:bf:a1:4b:f2:bd:20:61:72:c8:8e:f4:bc:
                    31:ec:00:87:0a:d9:40:6d:b7:82:42:98:05:00:d1:
                    ed:c8:2f:42:ea:94:cb:06:44:d4:ec:90:f0:1b:36:
                    06:cd:8b:c7:94:51:57:6a:a8:17:c9:d7:36:ee:6d:
                    ab:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A5:3E:B3:D0:B0:D2:30:0F:13:E1:3B:51:7E:88:E0:99:CF:FD:36
            X509v3 Authority Key Identifier:
                keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:eb:31:d7:c2:b4:c1:6d:2c:71:b8:01:6b:4d:63:36:0b:11:
         6a:68:7c:97:e8:64:3a:d7:75:3d:49:52:f7:ec:36:f7:71:84:
         4c:25:5f:31:43:59:94:f5:99:38:cb:f6:f5:7b:f0:49:5c:e0:
         c6:16:87:2a:8a:ba:db:74:44:ca:c5:4c:80:ad:ee:c1:da:b4:
         ad:c7:04:c3:e7:12:37:e7:4c:9e:4f:03:42:39:ba:f6:71:9c:
         76:4f:e0:11:3c:ec:2c:5f:4c:12:3b:9d:1b:59:a3:e0:09:fc:
         40:5c:41:aa:e5:95:66:a0:28:7b:14:cb:17:d3:f4:e2:60:70:
         96:b7:ec:cd:2f:b0:38:30:4d:bb:3e:9e:32:18:16:db:f7:2c:
         90:60:39:aa:9f:9b:09:3d:b1:1e:6a:8c:a4:35:c4:54:7f:a3:
         1d:97:7d:bb:10:a3:e9:bb:ef:b6:99:0d:2f:71:b1:0e:12:28:
         dd:22:aa:cd:e6:ec:26:c7:42:b3:50:0c:a8:f5:05:ef:5a:fe:
         f5:7b:ac:b5:40:9c:93:e0:ad:89:40:2b:8d:f3:05:fb:b7:e3:
         c6:84:74:db:f8:89:9a:ce:f8:46:dc:c1:57:4a:9d:37:ba:e5:
         20:80:7f:92:3d:25:ca:67:31:1a:a3:2c:d0:2c:7b:c2:d7:25:
         19:81:4a:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULEbdbyMgcOkaQ4xpxGtcUUeN9REwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU1MkM2QTlCRUFENzlEQzk1MEY5REE1NjBDNTMwRjI4
QkM2RkNEQzAeFw0yNTA0MjcxNjE5MDNaFw0yNTA0MjgxODMzMDNaMDMxMTAvBgNV
BAMTKEFEQTUzRUIzRDBCMEQyMzAwRjEzRTEzQjUxN0U4OEUwOTlDRkZEMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwi5PZ4enE36TIDdzovfBAV3Wj
slzrMVQZAquUln+CBBRlMleYSv6dj4P5w+k9jGTrl4n3jYLQcloe2CdMz2BBG0Rw
AOagF7VN01XtkJxlmkoiJvZAiHD4bK9Fuzi1fezdMMcMYtcVHMqJocsuhEqqnWGO
mB3kk7tqDH5a+XgTz8M+/8Iey+Wf+LnmafdQEFCT8WRm9idVLpEiJMypF9BaEdyK
REyMYD2tvO8ray+t8vo+0E4PgMoMqZjTdfVeUc2qhB/isr+hS/K9IGFyyI70vDHs
AIcK2UBtt4JCmAUA0e3IL0LqlMsGRNTskPAbNgbNi8eUUVdqqBfJ1zbubashAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUraU+s9Cw0jAPE+E7UX6I4JnP/TYwHwYDVR0j
BBgwFoAUjlLGqb6tedyVD52lYMUw8ovG/NwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFRoeGNNVkJuekZRSml3cFdCMW1LZ01EU3p4VlI2aDYxTDkzeW1iS3Yy
azkvMC84RTUyQzZBOUJFQUQ3OURDOTUwRjlEQTU2MEM1MzBGMjhCQzZGQ0RDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFNTJDNkE5QkVBRDc5REM5
NTBGOURBNTYwQzUzMEYyOEJDNkZDREMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NFRoeGNNVkJuekZRSml3cFdCMW1LZ01EU3p4VlI2aDYxTDkzeW1iS3YyazkvMC84
RTUyQzZBOUJFQUQ3OURDOTUwRjlEQTU2MEM1MzBGMjhCQzZGQ0RDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUusx18K0wW0scbgBa01jNgsRamh8l+hkOtd1PUlS9+w293GETCVfMUNZlPWZ
OMv29XvwSVzgxhaHKoq623REysVMgK3uwdq0rccEw+cSN+dMnk8DQjm69nGcdk/g
ETzsLF9MEjudG1mj4An8QFxBquWVZqAoexTLF9P04mBwlrfszS+wODBNuz6eMhgW
2/cskGA5qp+bCT2xHmqMpDXEVH+jHZd9uxCj6bvvtpkNL3GxDhIo3SKqzebsJsdC
s1AMqPUF71r+9XustUCck+CtiUArjfMF+7fjxoR02/iJms74RtzBV0qdN7rlIIB/
kj0lymcxGqMs0Cx7wtclGYFKjA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:06 2025 by rpki-client on console.sobornost.net