Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
File:                     3D4867F11A1D652682FA95ED911B20D81139853D.mft (raw, json)
Hash identifier:          CxbAoGdsu8s31nxKNFwEAB5h6bLrCRUUGl1MY+TgzwU=
Subject key identifier:   70:10:81:D1:B6:27:4F:CB:D9:1C:46:39:42:39:4B:37:94:1A:06:EA
Authority key identifier: 3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
Certificate issuer:       /CN=3D4867F11A1D652682FA95ED911B20D81139853D
Certificate serial:       7CEE0A9B844CBEF2FCE8E90FD1851DAD185D9651
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
Manifest number:          0146
Signing time:             Mon 28 Apr 2025 17:07:16 +0000
Manifest this update:     Mon 28 Apr 2025 17:02:16 +0000
Manifest next update:     Tue 29 Apr 2025 17:26:16 +0000
Files and hashes:         1: 34352e3138322e35322e302f32322d3232203d3e20323639323835.roa (hash: jCASJLtwmLLKSPVjnJWx0y6Nop2/miPxAX+p8ne3kVU=)
                          2: 34352e3138322e35322e302f32342d3234203d3e20323639323835.roa (hash: Q70kyTfj+QxKruCCBrn3WSIrMJSsLPyhkAU/ItLP5bw=)
                          3: 323830343a363233633a3a2f33322d313238203d3e20323639323835.roa (hash: P/aI2fOCjmqHtLTryd38yNfUhNiOBbbGFBS63z6FtWU=)
                          4: 34352e3138322e35332e302f32342d3234203d3e20323639323835.roa (hash: Sd3Ar7cDAQJDd6Hd1vmlThIrr+zDSVpTdG2tNxMrHeU=)
                          5: 34352e3138322e35352e302f32342d3234203d3e20323639323835.roa (hash: iOl1Jhws0osNJtC4QhQxd1miHQOtEQjp0Segq2G7SBk=)
                          6: 3D4867F11A1D652682FA95ED911B20D81139853D.crl (hash: 3EpFZ4Yi6xFsdv8laBqFahjqZShswyss+f4Iso3WvXs=)
                          7: 34352e3138322e35322e302f32332d3233203d3e20323639323835.roa (hash: yZuoUZXrLN5QOpQkonHmaQwv1Bwvs5LAhAb58cNmqEQ=)
                          8: 34352e3138322e35342e302f32342d3234203d3e20323639323835.roa (hash: EBgFFTNZxxqeFDpmbKEhzeoySxDpiX2ACODx+CMlS8o=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl
                          rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 17:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ee:0a:9b:84:4c:be:f2:fc:e8:e9:0f:d1:85:1d:ad:18:5d:96:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4867F11A1D652682FA95ED911B20D81139853D
        Validity
            Not Before: Apr 28 17:02:16 2025 GMT
            Not After : Apr 29 17:26:16 2025 GMT
        Subject: CN=701081D1B6274FCBD91C463942394B37941A06EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:68:0b:18:46:9a:41:7d:f3:ff:bb:4e:3f:35:
                    74:37:6c:93:5a:6b:33:e8:d6:19:8e:07:a2:b4:4a:
                    57:c5:20:2f:b0:bf:e3:c5:61:db:d8:ec:55:be:5e:
                    27:75:84:19:3c:63:55:b7:c3:8f:e0:a7:92:a2:7f:
                    07:bd:2b:5a:81:64:5f:18:3a:8d:9a:26:66:ea:e8:
                    2f:49:77:71:9e:7b:37:d2:38:64:46:ab:c0:f1:91:
                    85:6d:d5:8d:f0:7c:66:18:3d:5f:87:20:93:aa:06:
                    ca:34:4d:f2:05:fe:08:f0:08:aa:7a:d4:ae:77:a1:
                    75:cc:dc:92:b6:ac:4d:bf:74:c1:ce:78:cb:a1:68:
                    7b:84:56:c4:d6:25:f9:fe:68:15:47:6c:36:3c:f6:
                    7e:e6:ae:d7:88:7d:f0:08:f6:3e:15:66:35:9f:41:
                    18:18:d8:f9:98:bc:26:e2:65:05:68:d3:71:7d:f3:
                    94:1b:ef:84:da:a1:09:b1:f8:55:0f:8c:84:da:35:
                    65:01:f8:60:34:78:96:c1:4d:de:bf:48:1f:ff:43:
                    75:75:2f:d9:00:2b:59:c7:3b:ed:e7:fe:54:cc:3a:
                    30:ce:ff:04:e0:bb:3c:3c:b3:e6:f7:e5:42:ff:7b:
                    13:08:52:4c:16:ae:4e:c4:8a:6b:11:2b:5f:50:32:
                    ca:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:10:81:D1:B6:27:4F:CB:D9:1C:46:39:42:39:4B:37:94:1A:06:EA
            X509v3 Authority Key Identifier:
                keyid:3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:f7:54:1e:4d:e9:76:8d:c3:d1:1e:f4:b5:53:4c:86:16:88:
         29:f6:04:14:ea:76:36:4d:30:e5:a0:b5:22:94:cc:11:32:05:
         3d:5b:a3:75:ec:5a:62:36:c4:36:2b:9e:a5:db:ff:f8:f4:69:
         17:4e:00:2b:57:ec:e0:8c:d2:c9:fa:30:5d:3c:9d:1b:19:56:
         b2:93:73:7b:ec:29:fc:cb:2e:61:7f:59:37:92:0c:b3:ee:30:
         2b:d2:5b:ea:0e:68:87:88:3a:4a:92:0c:73:c7:db:33:32:08:
         bf:82:0a:e8:14:25:94:a4:10:bd:45:5b:e0:bf:96:26:0a:87:
         d0:68:b7:43:f5:cd:ef:e1:53:25:59:31:b4:19:55:91:79:96:
         69:dc:12:fa:8a:14:be:b8:ee:06:3f:d7:b7:c9:fd:de:73:3f:
         c4:38:88:df:1b:3c:f6:c5:78:72:98:20:4d:aa:79:02:a0:20:
         a1:bc:a7:d0:c3:ed:19:b9:86:f0:80:30:f5:09:4f:e5:09:dc:
         37:8c:93:b7:24:7b:05:0d:d9:af:49:ef:60:bf:e3:a8:61:76:
         4c:91:0f:0c:45:8a:48:3b:f7:17:44:8a:4d:bc:10:a5:57:02:
         05:27:aa:33:c7:4d:32:0b:4c:4d:29:94:e6:2e:4c:1c:08:55:
         70:7a:1c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:38 2025 by rpki-client on console.sobornost.net