Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft
File:                     4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft (raw, json)
Hash identifier:          mVmsFEJxXCDwfEeEHxdtxyyqJ8i1B1R/TwgedNo1c+o=
Subject key identifier:   6F:05:03:64:A1:AC:2E:DD:C6:ED:A6:04:C3:66:36:68:DD:AE:36:C7
Authority key identifier: 4C:4D:6A:A5:7B:D3:A2:4F:77:06:C7:B6:5C:7C:8C:D5:9E:F5:CB:65
Certificate issuer:       /CN=4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65
Certificate serial:       38FDA95AC1192F080D1102322DDBDAF4815AD491
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft
Manifest number:          01E3
Signing time:             Mon 28 Apr 2025 19:09:04 +0000
Manifest this update:     Mon 28 Apr 2025 19:04:04 +0000
Manifest next update:     Tue 29 Apr 2025 22:41:04 +0000
Files and hashes:         1: 34352e3137302e3135322e302f32322d3332203d3e20323638313535.roa (hash: +dlelXLTSXqNQoNW4JGA1Yjrci2+66mbhcxy+r/G87I=)
                          2: 4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.crl (hash: r7UkTb2elxHYX4kWLFKS2GZTDMeXUZ24A32L2xI3nCw=)
                          3: 323830343a353865303a3a2f33322d313238203d3e20323638313535.roa (hash: 3rn+DqXg6/wb20jVwMYcaH/vDfegviUIMLGDPuYvWsk=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.crl
                          rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fd:a9:5a:c1:19:2f:08:0d:11:02:32:2d:db:da:f4:81:5a:d4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65
        Validity
            Not Before: Apr 28 19:04:04 2025 GMT
            Not After : Apr 29 22:41:04 2025 GMT
        Subject: CN=6F050364A1AC2EDDC6EDA604C3663668DDAE36C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:c3:2b:c6:b1:6e:28:60:48:25:2f:6f:18:
                    c5:ff:73:eb:a0:0e:9d:7c:2a:44:ba:cf:e4:5c:3c:
                    0b:e6:51:c0:63:53:9c:cf:ca:a6:72:37:6d:4e:31:
                    b5:f5:a8:46:25:e1:ac:d4:99:b9:59:7f:fd:4e:2a:
                    8b:0b:18:c6:c3:f2:46:74:13:f5:e3:e6:44:15:bc:
                    c1:c4:15:ae:ce:7a:e4:ed:f8:db:12:6a:36:59:35:
                    95:f5:0c:68:45:70:6e:53:d6:46:6a:ab:bb:4e:71:
                    85:24:85:96:99:0b:d4:58:93:b8:1c:a2:ad:1e:9a:
                    85:0d:19:39:1b:1f:b0:8b:22:2b:d8:51:43:12:48:
                    78:61:6f:13:e1:29:b0:d4:14:9f:af:ab:41:27:d1:
                    e0:39:1b:5b:8a:93:df:d7:ca:ce:48:09:b4:7e:7b:
                    36:70:15:3c:28:dc:c8:f8:d2:bd:e3:e7:b2:da:3a:
                    02:d2:c5:62:65:b5:2a:5c:9f:38:b8:e7:39:61:41:
                    63:cc:77:71:79:ec:aa:61:d0:e7:17:92:cf:b7:3e:
                    b8:81:e8:15:fc:82:19:ce:6c:25:3e:7c:ea:5a:81:
                    31:e0:8d:44:13:9a:80:1e:d3:31:1b:66:ac:85:64:
                    1e:2f:80:06:25:7f:0d:a8:b9:f2:86:bc:8b:c6:73:
                    b7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:05:03:64:A1:AC:2E:DD:C6:ED:A6:04:C3:66:36:68:DD:AE:36:C7
            X509v3 Authority Key Identifier:
                keyid:4C:4D:6A:A5:7B:D3:A2:4F:77:06:C7:B6:5C:7C:8C:D5:9E:F5:CB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:2e:e5:ee:b4:d9:95:c9:5d:50:5c:4c:94:3d:b3:6b:bb:ba:
         39:c0:ce:ba:0d:0a:73:3d:37:b6:3a:36:c7:09:af:3d:6f:49:
         73:d6:21:6a:e3:16:0a:50:59:3f:ae:24:b3:65:f8:0a:5f:33:
         69:ef:a5:20:8b:82:a2:ce:1c:a8:c9:48:1a:05:5f:f3:a6:8a:
         5a:ba:bf:16:e1:15:ba:a5:41:e0:e8:6b:b4:76:c1:03:82:b9:
         c4:9b:c6:3f:d6:e5:87:15:7e:fa:8c:85:63:e0:0f:3e:5d:93:
         4c:8b:fa:62:35:22:96:b4:cf:11:61:a4:c7:37:39:61:25:6e:
         ef:e7:ed:a8:db:d2:36:09:b9:27:bd:4c:20:f6:60:fb:db:24:
         71:39:c4:e1:da:f5:d9:b1:03:9a:b4:da:f8:79:ff:75:c6:6e:
         a3:89:da:b8:f1:c7:10:e4:33:21:45:93:28:c0:58:25:76:48:
         c7:d7:bf:57:24:4c:6e:ff:47:cf:f3:bf:67:87:c5:9a:8c:a9:
         1a:9a:bd:c7:66:1e:29:fc:c4:67:2e:2b:6c:89:d0:82:db:93:
         b1:3c:30:fa:57:93:b0:a4:6d:b8:1f:29:6e:cc:40:c3:7c:d0:
         87:82:f3:f8:8e:0b:b2:bc:0e:bd:6d:b1:fa:f5:fc:73:53:15:
         1b:e2:5b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:46 2025 by rpki-client on console.sobornost.net