Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.mft
File:                     DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.mft (raw, json)
Hash identifier:          5dYrQzUJbfYi5xvPOZBNDTYwKnDz8P9pXZfD2uhT7wg=
Subject key identifier:   97:F5:4F:7A:89:E0:4F:1A:89:38:EE:34:87:F8:FA:72:65:EB:1D:94
Authority key identifier: DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D
Certificate issuer:       /CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
Certificate serial:       5C40F0D055696D25288E2643B144AB9AE5E86C8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.mft
Manifest number:          3F
Signing time:             Sun 27 Apr 2025 04:02:36 +0000
Manifest this update:     Sun 27 Apr 2025 03:57:36 +0000
Manifest next update:     Mon 28 Apr 2025 05:31:36 +0000
Files and hashes:         1: 3136382e3232382e3232302e302f32332d3233203d3e20323634393135.roa (hash: n+cJqzqWVFKkRVzRmLDPjpq0wcrOjXgEyRRcFM0W5B4=)
                          2: 323830343a326664383a3a2f33322d3332203d3e20323634393135.roa (hash: LI/5GsGhRrL1gdRynGAKm6JPwTAMtco0JAJ9JijY4TE=)
                          3: 323830343a326664383a343030303a3a2f33342d3334203d3e20323634393135.roa (hash: g/5pTcal3q/zEc58JRmYgnETMh0t4RuNK4CIuQnIz70=)
                          4: 3136382e3232382e3232322e302f32342d3234203d3e20323634393135.roa (hash: q+oBjiM/8RIKj57f5GDmCgxVe6BD2XFif5JhnPq5jyk=)
                          5: DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.crl (hash: YmHNfhf8VEXnnT4m4GtZ4JMIjhpOhWqFiQ4kAeffZ20=)
                          6: 3136382e3232382e3232312e302f32342d3234203d3e20323634393135.roa (hash: tgESvBp/KUEWpZwMiNdesFWAdFP81oBbf4Kzc7TWEx4=)
                          7: 3136382e3232382e3232332e302f32342d3234203d3e20323634393135.roa (hash: 3xta+vzlcZwj3D0WB42p4662qk8mfeIE+XrYW1vNJnc=)
                          8: 323830343a326664383a633030303a3a2f33342d3334203d3e20323634393135.roa (hash: tSQsu200/1C9V5A4gHATJvkmkVyC3MEKz7ihF8eNP+g=)
                          9: 3136382e3232382e3232302e302f32342d3234203d3e20323634393135.roa (hash: 6/yTNex6IntQYhUz6vi+cHEYw+gJitKV5gSRTj+KSn8=)
                          10: 3136382e3232382e3232322e302f32332d3233203d3e20323634393135.roa (hash: vNn4nSoRkoIK9Z50WY4YEpy2yvm2cdZ3Lc7BUDnRPgc=)
                          11: 323830343a326664383a383030303a3a2f33342d3334203d3e20323634393135.roa (hash: Plp+C1RjQ1+JsfdBFgUtdLppXb2qvAKt+MNhIUkHz80=)
                          12: 323830343a326664383a3a2f33342d3334203d3e20323634393135.roa (hash: UhRb+WtCkiO402i/r0HEKv+hsEGZNIZctAWJLtPdJIQ=)
                          13: 3136382e3232382e3232302e302f32322d3232203d3e20323634393135.roa (hash: SvHnLpXNwdJGGOe4us0NY3Aw+g+W4i85Reae68383Mo=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.crl
                          rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 05:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:40:f0:d0:55:69:6d:25:28:8e:26:43:b1:44:ab:9a:e5:e8:6c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
        Validity
            Not Before: Apr 27 03:57:36 2025 GMT
            Not After : Apr 28 05:31:36 2025 GMT
        Subject: CN=97F54F7A89E04F1A8938EE3487F8FA7265EB1D94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:6b:a0:be:35:89:b9:23:60:42:85:97:0b:
                    f0:a3:76:20:dc:2c:01:b1:de:58:e8:8e:9f:3a:d3:
                    53:e2:9b:15:23:49:95:16:61:1b:ef:2e:cf:86:6c:
                    aa:4e:8c:0c:8a:ac:f7:38:c5:e1:d5:1d:82:44:84:
                    74:dd:65:d1:32:c3:8b:df:3f:1d:ca:a7:68:a8:3f:
                    70:e7:58:16:e4:a2:ff:3f:ed:04:2c:f8:b3:7d:84:
                    88:6b:75:d9:9a:04:f6:14:9d:49:8d:2d:77:5b:15:
                    8a:6b:7b:98:52:8c:4f:a4:c2:4d:bb:34:ba:c5:86:
                    fc:5f:cf:43:af:ba:39:26:17:6e:0b:7c:2e:77:a0:
                    9e:65:89:79:c1:45:af:bc:de:91:77:96:28:75:4f:
                    83:cf:7e:72:6b:2a:d3:b3:f7:99:c8:53:a5:2f:ee:
                    39:3b:a5:df:c6:15:e8:2e:d2:cc:d4:7f:b8:11:da:
                    ab:7e:1f:93:cd:19:e7:61:a0:69:08:5b:58:45:55:
                    2c:74:05:ba:40:b9:8f:59:6e:1a:e9:27:fa:a9:f6:
                    e6:3e:d3:4d:e7:0b:e6:6d:35:fc:8b:89:1a:0d:96:
                    29:0e:0e:c1:5c:bc:de:3b:bb:02:83:b5:52:93:7b:
                    5e:e8:c1:a4:b2:94:50:e3:a0:27:9b:d8:98:a3:e6:
                    c6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F5:4F:7A:89:E0:4F:1A:89:38:EE:34:87:F8:FA:72:65:EB:1D:94
            X509v3 Authority Key Identifier:
                keyid:DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:16:ed:fc:c1:b6:75:71:67:4b:57:d3:e7:37:04:49:de:ae:
         a6:89:6b:5b:74:03:b1:c5:24:9f:70:4c:5a:c4:14:dd:5c:ec:
         f2:e2:62:ba:6c:4a:44:fb:fd:a7:a5:2e:c7:2a:9a:be:62:df:
         e9:8f:6c:fd:1e:83:94:04:34:60:73:02:2d:fd:d5:9b:b1:ec:
         0d:42:4a:15:18:e8:48:21:a5:a9:19:02:e2:a7:2d:3f:37:e1:
         f4:b0:0f:38:fa:e1:29:70:e7:94:0f:3a:42:bb:ce:2e:38:54:
         b4:25:33:dc:12:54:73:68:32:92:39:18:84:35:8d:88:68:42:
         5b:5b:fa:68:69:db:65:a8:86:ae:09:c3:bd:12:ef:82:01:73:
         ff:4a:3e:dd:f9:3c:f6:ba:1a:b2:38:a6:3a:da:3e:ae:b9:79:
         7f:fd:17:40:83:74:8e:49:55:52:2b:e1:32:f7:6c:5e:bd:2b:
         26:ae:6e:ab:15:26:e7:e9:e9:5e:61:d8:75:db:63:0e:10:3d:
         56:99:2e:21:81:ed:20:90:5e:35:39:7d:8d:a1:e0:cb:c4:86:
         4c:f6:36:5e:00:bb:6c:04:7f:7c:bb:9f:5f:f6:b2:4c:2d:4b:
         15:6b:fc:a5:f8:99:29:87:ff:53:47:65:9f:db:ef:53:27:7e:
         ca:be:46:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:43 2025 by rpki-client on console.sobornost.net