Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft
File:                     2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft (raw, json)
Hash identifier:          TZWGhd04FBd0uRTWcUoEG0DH/eECw6e1XAvAj94CGlc=
Subject key identifier:   A7:B7:1A:81:A7:3A:80:A2:18:76:3E:D6:DF:3C:44:3F:58:6E:9F:37
Authority key identifier: 2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB
Certificate issuer:       /CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB
Certificate serial:       5DF6D779980786F07AC17298A7207996FF912B74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft
Manifest number:          0201
Signing time:             Thu 24 Apr 2025 17:18:58 +0000
Manifest this update:     Thu 24 Apr 2025 17:13:58 +0000
Manifest next update:     Fri 25 Apr 2025 21:02:58 +0000
Files and hashes:         1: 2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl (hash: kxelKIi0wJtQUKuaIXoVxEVyEdi+SpxxAvqYNcJQI8c=)
                          2: 323830343a356265303a3a2f33322d3332203d3e20323638383734.roa (hash: tCfqS8UfvI979KF3Vff43TGrFJXiZp8XAjbb1Wo4ZPs=)
                          3: 34352e3137352e31322e302f32322d3234203d3e20323638383734.roa (hash: 3sxZs3Y6zVNNgLScctDhTTFNDQdOZLcuEzMOUREzMRw=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl
                          rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f6:d7:79:98:07:86:f0:7a:c1:72:98:a7:20:79:96:ff:91:2b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB
        Validity
            Not Before: Apr 24 17:13:58 2025 GMT
            Not After : Apr 25 21:02:58 2025 GMT
        Subject: CN=A7B71A81A73A80A218763ED6DF3C443F586E9F37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c5:e7:68:8a:cb:39:db:92:d5:50:41:56:79:
                    3c:42:64:25:a6:e7:1a:07:bb:60:6e:51:fc:a8:f6:
                    84:9e:d9:79:bd:82:75:73:88:7b:8b:c4:21:65:be:
                    8e:68:2d:5b:86:59:ca:35:50:03:bc:d0:49:03:66:
                    02:c0:c9:ca:7c:2d:a3:ce:00:65:e4:e6:00:10:fe:
                    43:70:a3:0d:b7:e9:20:e6:cd:0b:d5:19:7e:3e:24:
                    1e:84:1f:c8:be:ec:d3:44:cf:ae:bc:5a:17:bf:ca:
                    aa:5e:b5:41:c4:aa:a6:09:14:dd:0c:51:1f:5a:f2:
                    07:d5:aa:ad:45:c8:5f:6e:6e:32:08:d6:2f:40:86:
                    ba:74:be:5a:39:93:21:bd:9a:7c:04:15:6e:f2:7e:
                    f3:9e:46:29:e4:b4:7b:0b:c1:e5:fb:0a:2c:db:6e:
                    d4:5b:ef:e6:e3:0c:3c:c6:d7:b4:4e:f2:a9:7f:bb:
                    6c:25:9a:8b:81:55:52:90:06:b4:06:1a:71:ad:90:
                    c7:4d:94:8f:ec:8f:6a:63:05:4c:24:2c:8a:bc:f0:
                    ba:11:44:11:d1:e4:34:35:a0:b3:24:83:9d:02:f7:
                    4c:3b:b8:56:6b:ab:b9:0c:b9:e0:77:e9:76:46:f8:
                    60:53:50:36:4c:7c:62:d7:90:a1:b0:7c:7c:ce:3e:
                    01:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B7:1A:81:A7:3A:80:A2:18:76:3E:D6:DF:3C:44:3F:58:6E:9F:37
            X509v3 Authority Key Identifier:
                keyid:2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:66:4d:8f:8a:52:28:00:25:3b:82:71:33:78:48:56:d5:60:
         ba:f3:f8:89:cd:1d:83:f4:c8:fa:99:25:33:be:26:e4:67:16:
         6e:d6:7c:e5:40:fd:f6:9a:15:96:62:90:fc:04:2f:8a:26:6f:
         68:29:01:22:55:6e:ef:de:18:e6:15:72:5b:34:61:fe:73:d0:
         00:d7:cc:5b:13:a3:83:a2:89:9d:e2:90:84:cb:29:61:68:e8:
         38:ef:db:66:77:f9:77:e2:0c:8c:47:98:9e:9f:89:97:71:7c:
         88:c2:51:46:f5:34:c4:f5:35:9c:59:c0:6e:eb:1c:b0:5a:a0:
         d6:ab:04:dd:fa:5b:bd:7b:05:f4:5e:46:93:da:81:07:26:af:
         e7:d3:6e:d1:af:f0:6a:87:a9:40:e0:9f:d2:1b:20:85:6b:52:
         eb:df:1e:58:17:ac:fa:a8:26:19:7b:69:e1:4d:73:84:01:9d:
         8c:42:fe:6f:d6:41:9d:87:1d:1b:5a:f5:72:41:02:5d:af:ec:
         b8:93:af:1c:45:45:57:62:08:89:91:74:bd:08:7f:53:aa:8b:
         78:e0:19:1f:24:2d:47:e7:93:4d:57:ca:5e:87:7f:79:ad:7b:
         c0:10:38:02:34:7f:a1:5c:0e:3c:5c:a6:94:d8:71:06:32:6c:
         c9:e6:a1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:29 2025 by rpki-client on console.sobornost.net