Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.mft
File:                     7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.mft (raw, json)
Hash identifier:          jZwWKnHwNQZiY2tTNUN79rScS0bbG1ysiAfyOdHiT0I=
Subject key identifier:   17:FC:72:4C:0A:FF:D8:41:96:F6:8C:82:FC:69:6A:73:3F:F8:7D:64
Authority key identifier: 79:02:99:0B:6B:AE:3D:B7:24:9A:F5:2B:E3:F9:CA:51:F0:97:A6:A7
Certificate issuer:       /CN=7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7
Certificate serial:       067F28DCE93966955A621BB9E4ECDD50CC006638
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.mft
Manifest number:          01DA
Signing time:             Fri 25 Apr 2025 06:27:40 +0000
Manifest this update:     Fri 25 Apr 2025 06:22:40 +0000
Manifest next update:     Sat 26 Apr 2025 09:15:40 +0000
Files and hashes:         1: 323830343a363032303a3a2f33322d313238203d3e20323639313437.roa (hash: Mr6FTyStmGLnbo/XyVSMhH34I+SzgozIdOlEzZTGfh4=)
                          2: 34352e3138302e3139362e302f32322d3332203d3e20323639313437.roa (hash: lZTTB+4y41wKlLqjUPos5EITBpWBY1r6RzwY5Kavt7Q=)
                          3: 7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.crl (hash: zcpXdy6nJ+GESbgacAz/B3z64mm2LWZwnoPiWvSxWW8=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.crl
                          rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7f:28:dc:e9:39:66:95:5a:62:1b:b9:e4:ec:dd:50:cc:00:66:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7
        Validity
            Not Before: Apr 25 06:22:40 2025 GMT
            Not After : Apr 26 09:15:40 2025 GMT
        Subject: CN=17FC724C0AFFD84196F68C82FC696A733FF87D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:24:7d:18:ae:bf:5e:df:1a:7d:5e:1e:e1:a6:
                    f0:9d:41:da:b5:21:25:20:3a:fc:55:2f:fc:3f:53:
                    07:5f:1d:0b:31:4a:48:2f:2a:7f:5e:b1:97:bc:80:
                    c1:12:2e:4b:b1:fc:e5:41:27:38:67:ba:3f:ab:9f:
                    e0:0e:32:74:30:16:a1:f9:53:37:48:45:35:63:7c:
                    df:04:58:cb:72:35:e3:af:3a:24:4b:c1:f6:8b:dc:
                    d3:8c:c0:24:7c:4c:ed:9d:6b:61:63:5e:e9:7a:96:
                    d5:2e:04:73:cf:1c:8d:7b:79:1a:f0:e5:4f:16:fe:
                    d2:f7:ed:64:f1:ff:d5:50:96:76:c2:ca:bb:97:7d:
                    90:ca:b3:f0:77:f1:7f:47:3c:db:ad:b4:8d:61:48:
                    99:67:4a:af:1a:90:b7:83:97:e4:09:c8:44:d7:4f:
                    f8:90:5c:11:3f:19:62:bb:c2:1a:de:23:1f:b2:9b:
                    83:30:c1:5d:f2:5a:bb:00:20:2b:e7:f9:ae:f5:0f:
                    4b:48:67:0e:9c:64:9f:e0:e5:3d:3c:ee:04:cf:ff:
                    5c:c9:ed:8e:98:81:09:e8:9b:7b:f0:29:9e:b1:1b:
                    5d:4d:31:22:dc:09:a9:0a:7d:f7:fe:7b:56:ea:8a:
                    01:30:d4:40:ee:ba:fd:34:c6:3a:6c:03:dc:63:57:
                    1f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FC:72:4C:0A:FF:D8:41:96:F6:8C:82:FC:69:6A:73:3F:F8:7D:64
            X509v3 Authority Key Identifier:
                keyid:79:02:99:0B:6B:AE:3D:B7:24:9A:F5:2B:E3:F9:CA:51:F0:97:A6:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:2b:cc:1b:c1:52:23:b3:37:a6:50:df:6a:29:de:76:8c:13:
         fd:e8:cf:af:9d:e9:b1:4c:36:a1:e3:d0:86:5e:f5:92:2c:37:
         b2:c0:d6:df:ae:f7:ee:26:f5:11:57:0a:e7:79:25:ab:d3:36:
         c6:ba:47:bd:66:e9:48:ea:24:e5:27:f5:cc:ed:0c:01:70:e9:
         42:f2:29:ef:54:e5:a8:ae:bc:21:82:6e:08:b1:4c:a5:3f:3b:
         3a:21:4e:84:56:c2:c1:75:2d:6d:6c:02:65:5f:21:6d:5c:84:
         49:df:c4:4e:35:56:27:8f:49:cb:ba:06:d2:4e:be:f2:ed:e7:
         f1:0c:ad:4c:b3:82:74:60:0f:96:10:49:6d:a0:62:f4:c6:26:
         ec:fb:c7:be:63:7b:3c:19:8b:be:e7:c8:ae:f3:79:7e:4b:99:
         6c:ed:cf:45:c6:43:c3:3b:57:31:fb:6e:a4:bd:2f:fa:e3:5c:
         75:49:05:a2:4c:55:9d:d4:f4:e4:20:8c:d4:d3:a2:36:d1:66:
         88:86:c8:8f:b2:9c:e6:93:6f:dd:9a:49:dd:a1:3e:84:88:a6:
         ba:cc:5d:4f:28:c3:65:35:e8:6f:4d:6b:31:c2:c3:1c:86:6d:
         98:79:cc:ef:5a:87:ae:0c:8b:73:ff:07:a8:0e:c4:1d:d3:98:
         df:fb:93:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:57 2025 by rpki-client on console.sobornost.net