Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft
File:                     BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft (raw, json)
Hash identifier:          gQODI50a1fFaw8jwFBTBG3GzC+OcVqvoj//HS6VFUm0=
Subject key identifier:   FD:42:30:D2:3C:E6:34:1B:96:D4:78:E7:43:4D:85:F5:9A:76:F7:04
Authority key identifier: BE:A5:95:98:3F:C6:8C:8E:F9:A5:46:D7:E9:A4:A4:8D:FE:2A:88:D1
Certificate issuer:       /CN=BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1
Certificate serial:       02B9584DC837D2AD9BEE7D283E3461AA3AAC3046
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft
Manifest number:          0203
Signing time:             Fri 25 Apr 2025 12:34:44 +0000
Manifest this update:     Fri 25 Apr 2025 12:29:44 +0000
Manifest next update:     Sat 26 Apr 2025 13:44:44 +0000
Files and hashes:         1: BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.crl (hash: 1pD7NY6kqTAZRJY+HVYuPy2jf4oYNMcep7FivbEJfHw=)
                          2: 34352e3137332e38382e302f32322d3234203d3e20323638383139.roa (hash: f61UtWClOyp6Kh10ULsTV0tVHLCtuW2TgahnSxPC6co=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.crl
                          rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:44:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b9:58:4d:c8:37:d2:ad:9b:ee:7d:28:3e:34:61:aa:3a:ac:30:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1
        Validity
            Not Before: Apr 25 12:29:44 2025 GMT
            Not After : Apr 26 13:44:44 2025 GMT
        Subject: CN=FD4230D23CE6341B96D478E7434D85F59A76F704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2f:83:3b:08:ba:95:21:4f:88:ea:58:ab:b0:
                    a7:8a:70:84:63:c4:2a:5f:de:ff:4a:13:e3:53:50:
                    45:ed:5d:da:17:71:cb:d1:e3:6b:08:2c:3b:5a:be:
                    18:4d:14:7e:d0:0b:50:7e:8b:39:82:be:6b:45:09:
                    30:e1:b7:78:fa:5a:04:b7:4f:3b:b0:64:42:21:48:
                    4d:a2:2d:d0:66:f0:e0:56:4b:52:df:8c:c4:81:47:
                    47:25:79:6c:3c:34:85:15:06:4b:79:1c:3f:9d:8e:
                    08:6e:53:c6:9d:c9:d0:c8:08:d3:2d:72:94:c0:37:
                    e2:d1:28:75:b9:8c:32:69:e1:2c:d6:8e:05:15:9a:
                    0b:a0:8a:23:3c:dd:f0:0f:e2:c4:48:ce:17:33:fe:
                    4c:e0:b5:0f:80:f0:d2:8b:8d:91:17:e6:34:e5:89:
                    f2:d6:2d:60:34:14:83:14:49:57:2f:47:6b:15:6f:
                    b7:bd:f5:0b:c6:b8:ca:8a:b5:64:d8:16:9b:28:21:
                    23:3e:a0:33:36:5e:27:9c:92:45:e7:19:a0:63:9c:
                    3f:4c:36:fe:b7:48:ee:0c:28:8c:d6:44:ea:d6:ba:
                    c2:0d:ef:1e:10:06:a7:28:b7:e4:b7:e1:b5:f9:f2:
                    1b:53:62:44:52:f0:03:d5:90:73:40:94:66:71:75:
                    58:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:42:30:D2:3C:E6:34:1B:96:D4:78:E7:43:4D:85:F5:9A:76:F7:04
            X509v3 Authority Key Identifier:
                keyid:BE:A5:95:98:3F:C6:8C:8E:F9:A5:46:D7:E9:A4:A4:8D:FE:2A:88:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:7d:24:cd:de:0e:08:50:c6:a7:25:6c:42:ca:ab:37:96:6b:
         3c:5a:b5:c6:7c:fc:f0:9c:f8:3e:0b:30:6c:19:17:d4:01:30:
         ff:54:d9:ec:07:ef:67:95:6b:ec:9b:72:85:63:9c:af:5f:71:
         8f:63:84:ce:ca:17:ad:2b:2e:96:62:6a:cf:39:da:74:61:c1:
         f5:cb:fc:75:11:f2:35:24:82:44:80:c3:a0:c9:43:3a:60:d4:
         45:f4:08:e6:55:c3:e4:de:93:93:a7:5e:91:a2:2b:7e:c0:98:
         13:0a:c3:55:92:50:90:03:b7:d1:56:0c:68:58:56:b1:20:40:
         b2:79:46:1d:f5:e8:e6:92:94:18:88:3c:38:50:29:00:7f:70:
         cd:dc:f6:15:f3:4d:85:23:62:68:7c:d0:42:86:ae:13:8d:73:
         49:d1:37:cb:08:23:ba:e6:af:5d:7a:c9:b1:f2:f8:db:b9:55:
         0d:eb:af:14:15:ad:2c:bb:97:62:33:f3:77:f2:c7:33:fd:9d:
         83:6f:50:ee:b6:67:f2:97:49:84:80:28:fa:7c:45:3f:b2:25:
         ea:65:bc:10:52:20:c7:fd:af:41:09:6b:19:3e:fc:41:02:46:
         59:41:a7:30:c9:5e:bf:df:0c:49:a9:a0:1e:b1:8f:9d:0a:af:
         ec:c0:d1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:08 2025 by rpki-client on console.sobornost.net