Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
File:                     0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft (raw, json)
Hash identifier:          +dYmulqDcSPCPCA5+LpIamcLTglFxuyOhSOcKtcOY/s=
Subject key identifier:   F5:CA:26:7E:FF:01:1D:B9:FC:38:3C:7E:48:E9:61:B1:A3:78:82:8A
Authority key identifier: 0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9
Certificate issuer:       /CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
Certificate serial:       14A1AD4FB9FB56448A9FCE920FCC22D705FA80B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
Manifest number:          0204
Signing time:             Sat 26 Apr 2025 06:40:00 +0000
Manifest this update:     Sat 26 Apr 2025 06:35:00 +0000
Manifest next update:     Sun 27 Apr 2025 07:05:00 +0000
Files and hashes:         1: 3136382e3139352e32382e302f32322d3232203d3e20323635343235.roa (hash: FSsGN+HO/Zej0yrB1pNYsEFT0GVE+OEY9UUk6Wk220A=)
                          2: 323830343a333365633a3a2f33332d3333203d3e20323635343235.roa (hash: sau1gZQqGxfz85qo0i2qbo2Nh7RVr0qJvhyo/Ete0UI=)
                          3: 3136382e3139352e33312e302f32342d3234203d3e20323635343235.roa (hash: SSvnKIou5tapPwYANrt1w6Bru2q0yrR/frue1eKNrWE=)
                          4: 323830343a333365633a383030303a3a2f33332d3333203d3e20323635343235.roa (hash: CQ7eH9kbYFZuZreCpF9p6qELQgT6h1M5M3nPgro3GfY=)
                          5: 3136382e3139352e33302e302f32342d3234203d3e20323635343235.roa (hash: OCzuBnMVYYGKPUlgYk2j0N0SB06bD4LIJp3X0YXh13Q=)
                          6: 0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl (hash: PTyZ4gTdwvzYzlfW673OZ/ZhdV6lVpcw7UCkW1NKpqQ=)
                          7: 3136382e3139352e32392e302f32342d3234203d3e20323635343235.roa (hash: 68RQP2yM+06MNPnqd/qYQzS8B+kRQV5MWQe53XcDcs8=)
                          8: 3136382e3139352e32382e302f32332d3233203d3e20323635343235.roa (hash: vc5HIanI94CfVniPYOnoR6bba67e09mRWoDfM9Ixh6g=)
                          9: 323830343a333365633a3a2f33322d3332203d3e20323635343235.roa (hash: NwZDv+QQM8b2WkaSLAzsb5e3tpYPOPJWTqR4tFHYSj4=)
                          10: 3136382e3139352e32382e302f32342d3234203d3e20323635343235.roa (hash: dq/+8oOd5VUasJ5fSEIwYjwyyDp/VhN13OR1io5e43U=)
                          11: 3136382e3139352e33302e302f32332d3233203d3e20323635343235.roa (hash: gi4tWcwLcyLSJfXv9vVY2KQsbWR14ow5M2EkT9JOalg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl
                          rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a1:ad:4f:b9:fb:56:44:8a:9f:ce:92:0f:cc:22:d7:05:fa:80:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
        Validity
            Not Before: Apr 26 06:35:00 2025 GMT
            Not After : Apr 27 07:05:00 2025 GMT
        Subject: CN=F5CA267EFF011DB9FC383C7E48E961B1A378828A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:77:fa:32:0e:6d:1b:1f:7c:c9:5d:fe:f7:74:
                    61:bf:34:9e:56:96:e2:cc:ff:2a:ee:90:12:96:c2:
                    33:25:2f:0b:5d:20:8a:64:28:d8:eb:1a:34:e4:ff:
                    d0:29:27:9e:1d:9d:da:66:63:f5:e4:d1:b6:59:b2:
                    e4:92:e5:81:ef:f8:d3:d9:88:85:f4:9c:97:9b:21:
                    4a:0a:23:a8:8d:d7:c0:ed:4f:b9:90:b7:eb:97:4c:
                    6b:3a:83:8c:80:d0:77:35:68:f6:39:76:17:85:3b:
                    90:4e:a4:c4:b0:85:07:cf:c3:e0:f9:e5:a8:24:a2:
                    91:56:f4:a4:2f:e6:d0:a4:a4:72:8b:43:ef:6b:9e:
                    4d:eb:e9:a7:59:60:06:54:ad:7d:21:57:bd:00:c8:
                    65:a6:64:ad:3c:ca:02:62:33:70:9d:cf:92:05:7d:
                    32:90:dc:24:48:10:6d:fa:21:8b:bb:a7:65:34:d0:
                    53:09:b5:a4:64:15:11:f0:7d:63:32:6b:1c:e4:e3:
                    9c:3a:0a:2e:98:14:fc:ec:a1:54:00:12:e2:28:f1:
                    7e:8f:d7:c5:d3:b4:32:58:ed:33:8d:78:22:dc:cb:
                    40:11:3a:df:ab:37:58:3a:d8:2b:d1:91:a7:64:d6:
                    34:61:07:89:c6:85:45:93:e1:8c:0e:27:e5:71:f4:
                    ef:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CA:26:7E:FF:01:1D:B9:FC:38:3C:7E:48:E9:61:B1:A3:78:82:8A
            X509v3 Authority Key Identifier:
                keyid:0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ca:6b:5c:71:cf:ec:0a:34:45:0f:7d:9e:6c:3f:da:9d:e9:
         98:ab:8a:5a:f9:83:e9:83:68:11:56:18:fb:6e:0b:c9:40:42:
         c7:eb:b8:3b:9e:ec:61:cc:36:1d:f2:28:ab:a9:16:97:ba:f4:
         6b:32:94:3d:a5:aa:79:06:ff:27:8b:5f:14:49:b0:68:f1:09:
         ad:11:7c:ac:78:0c:12:0b:48:26:71:ba:58:98:bb:95:dd:d7:
         a6:bc:89:88:b1:b4:98:09:7e:fc:d9:e4:41:5b:f3:f2:b9:a0:
         c6:f1:11:d9:c5:56:05:ae:98:21:da:bb:ba:bb:7b:fc:c0:a1:
         79:47:38:65:75:e5:10:67:ea:da:05:16:02:4b:96:4e:a7:d8:
         bc:40:da:28:dc:77:4c:db:4e:20:8c:5f:67:ce:9a:e8:b6:95:
         73:2e:7e:10:0a:bc:8f:dd:cb:e8:7d:75:d0:fb:8a:c8:df:c2:
         b5:ac:3a:09:fd:5c:a8:0c:9c:c5:2e:9b:f6:7a:8e:71:05:e9:
         bf:7e:0e:1b:7b:e6:1f:a1:d7:5f:a6:e6:a0:c4:30:26:db:15:
         85:80:3c:48:23:27:2c:0d:56:c2:da:2f:e3:d4:43:31:2f:8e:
         d5:fd:9a:27:17:46:f7:14:03:54:dd:73:f8:2f:7a:9d:0e:70:
         aa:85:e2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:20 2025 by rpki-client on console.sobornost.net