Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.mft
File:                     717D62DB604520975DE382D0D3273E1BDB591D67.mft (raw, json)
Hash identifier:          s99pPhoFr4CrT4W1D4kex/ekeyGv3ztTl4yFQGZyoaA=
Subject key identifier:   2D:52:0F:3F:88:AE:84:14:EE:DC:47:B4:A6:67:1B:91:20:44:F8:C0
Authority key identifier: 71:7D:62:DB:60:45:20:97:5D:E3:82:D0:D3:27:3E:1B:DB:59:1D:67
Certificate issuer:       /CN=717D62DB604520975DE382D0D3273E1BDB591D67
Certificate serial:       5180106A584844587BED25AC2649E507807B4E3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.mft
Manifest number:          2F
Signing time:             Mon 28 Apr 2025 16:41:35 +0000
Manifest this update:     Mon 28 Apr 2025 16:36:35 +0000
Manifest next update:     Tue 29 Apr 2025 20:16:35 +0000
Files and hashes:         1: 3133382e39372e33342e302f32332d3234203d3e203631393030.roa (hash: Pr46Y4bW8Knc3u0QaekZlbi2ib9xBOrEicDtDGrw4wU=)
                          2: 323830343a313261303a3a2f33322d3333203d3e203631393030.roa (hash: UmezHfnX6JA3H0uDGb1j9bBI8evtK+rx6nBx3aRbsP0=)
                          3: 3137372e37342e3137322e302f32332d3234203d3e203631393030.roa (hash: UMB6BZBhxJ9b8JcBuWamUSMQwXVrCAkbfnROtZDkmBM=)
                          4: 323830343a313261303a3332303a3a2f34382d3438203d3e203631393030.roa (hash: k3nYr0UYK/VqYYH1q7Hr1OwgUwC+dI50mPL3nouxXiY=)
                          5: 717D62DB604520975DE382D0D3273E1BDB591D67.crl (hash: pZTzzFb3mywgrxgvmz5udlShdH9euO9oF+Q4sRnjMC4=)
                          6: 3139312e3234332e31302e302f32332d3234203d3e203631393030.roa (hash: 2AZYYvkn4pTxo7/KM55Jyz4+qQLx/byfcUECzhoNRSM=)
                          7: 3137372e37342e3137342e302f32332d3234203d3e203631393030.roa (hash: EU+BCN/bmo0j4cl9fuUmZtITlkzY3OYhbz7DFkIMoCw=)
                          8: 323830343a313261303a383061303a3a2f34382d3438203d3e203631393030.roa (hash: KXSX4UqpfCBweElx6if/xedb9UP1WRyzFvRR0DtW4og=)
                          9: 323830343a313261303a3331303a3a2f34382d3438203d3e203631393030.roa (hash: OrHYW7HTURfAMVdIGSWDgXvVaHMlrZ6CBh68zqWd5lc=)
                          10: 3137302e3234372e342e302f32332d3234203d3e203631393030.roa (hash: GjfjKSDhWp8DcM/jxUbw+Jz6HhXEzvwL2B2mG2kWv3g=)
                          11: 3137302e3234372e362e302f32332d3234203d3e203631393030.roa (hash: kNBkg5g7RBRrML7PROOKpLBtHM1njEM/1AqkBXuv6xE=)
                          12: 3139312e3234332e382e302f32332d3234203d3e203631393030.roa (hash: zXszSISN1OFnJ/PXnFxFjoOlUet5Mada6wzvEJjtOog=)
                          13: 3133382e39372e33322e302f32332d3234203d3e203631393030.roa (hash: Q5YfFJlaYjS2fP1RepaJU9etJnY8aTR6xv+qVr7UYl0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.crl
                          rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:80:10:6a:58:48:44:58:7b:ed:25:ac:26:49:e5:07:80:7b:4e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717D62DB604520975DE382D0D3273E1BDB591D67
        Validity
            Not Before: Apr 28 16:36:35 2025 GMT
            Not After : Apr 29 20:16:35 2025 GMT
        Subject: CN=2D520F3F88AE8414EEDC47B4A6671B912044F8C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:03:b4:84:f9:d3:49:66:3e:d9:26:70:2d:
                    56:a6:65:9b:8a:98:26:2a:5a:e8:0a:02:74:45:8e:
                    36:fa:57:5e:7b:cb:e3:d6:d2:48:5a:b6:00:a9:b6:
                    91:45:18:fb:07:6a:32:03:d1:a9:e8:46:e9:34:88:
                    07:3a:f5:26:09:1d:0d:b2:1c:a8:c4:5b:5d:7a:e6:
                    12:64:56:2f:bd:a8:c0:c2:a8:7e:68:5f:be:b7:f6:
                    19:22:ee:46:fb:27:74:cd:e3:76:da:34:7a:eb:e8:
                    b9:8b:f6:82:d3:fe:f0:a2:14:29:32:c3:f3:7b:b1:
                    4a:31:70:c9:12:52:cb:c0:27:6e:94:a7:66:ab:37:
                    50:94:0a:e2:57:19:0d:08:78:48:08:96:de:2c:b5:
                    20:c0:16:93:1d:0a:07:70:37:20:bc:c8:15:f1:31:
                    bf:ce:3c:73:17:1b:ce:22:38:6d:1f:7e:fb:1b:bf:
                    af:36:be:42:47:a7:40:97:26:92:e2:01:0b:97:87:
                    7b:41:9d:ba:c3:ae:3d:2b:14:cf:d7:ad:29:7b:67:
                    23:9b:15:17:4b:a7:0e:e3:92:6f:34:90:b5:50:b8:
                    bf:8f:cf:d7:06:36:77:4b:b8:6c:37:2c:a1:93:e3:
                    16:f8:3c:59:d3:0e:3f:d9:71:f3:d3:d5:59:1b:30:
                    cb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:52:0F:3F:88:AE:84:14:EE:DC:47:B4:A6:67:1B:91:20:44:F8:C0
            X509v3 Authority Key Identifier:
                keyid:71:7D:62:DB:60:45:20:97:5D:E3:82:D0:D3:27:3E:1B:DB:59:1D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ca:40:b7:0a:1f:6a:e5:3c:a4:69:50:44:a6:3a:ec:c1:e6:
         d1:a9:6b:23:5e:75:99:c0:7a:d3:e5:5a:b4:8a:20:df:50:21:
         5c:fa:30:b2:6e:b7:c3:04:f1:d4:60:3e:1c:b4:c4:59:5c:33:
         51:2c:e7:bf:e7:60:c5:35:8d:64:5f:59:90:2f:18:69:75:32:
         bd:a5:e6:ff:1e:40:a3:47:dc:7f:4e:46:9f:83:6a:fc:63:ea:
         82:d5:68:06:ee:80:03:ce:cc:6b:07:a5:0f:b7:51:f1:dd:a7:
         58:d3:c4:d7:46:6a:9d:ce:6d:71:c1:51:23:78:00:6a:19:41:
         64:cf:68:33:79:3f:f6:06:18:6b:a5:83:9f:23:e9:88:f8:7f:
         6c:1a:7f:dc:06:7f:7d:f9:85:b1:25:14:d4:94:e4:e7:d1:f5:
         e2:5f:96:5f:e2:aa:10:a7:13:e1:94:56:fd:40:3c:0f:41:fa:
         8d:9a:00:dd:78:66:18:e7:a4:9b:b3:3d:53:03:58:45:d8:04:
         00:dc:ae:6a:37:d7:17:57:07:5a:f1:a3:16:cc:45:56:31:b3:
         59:67:db:3c:cb:23:90:1a:19:b8:b4:2b:09:c8:63:7e:22:9d:
         82:64:dd:6a:73:78:e8:dd:ab:a1:9f:be:37:83:0f:a4:6b:8d:
         09:02:43:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:37 2025 by rpki-client on console.sobornost.net