Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft
File:                     CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft (raw, json)
Hash identifier:          LWmH9T+kdREZlu5mlOYZAsaV1Rc0HKAp7qESd1VkBOc=
Subject key identifier:   10:D3:13:0F:ED:DD:89:1A:D2:44:0A:4B:43:F2:5B:C7:84:DB:82:77
Authority key identifier: CD:EF:1F:D6:69:0D:CC:ED:52:05:33:8E:E0:BC:7D:0E:18:8D:E8:42
Certificate issuer:       /CN=CDEF1FD6690DCCED5205338EE0BC7D0E188DE842
Certificate serial:       63609BB49EDE4C1F7351BA57D5A05382BEF72684
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft
Manifest number:          8A
Signing time:             Sun 27 Apr 2025 11:34:20 +0000
Manifest this update:     Sun 27 Apr 2025 11:29:20 +0000
Manifest next update:     Mon 28 Apr 2025 14:58:20 +0000
Files and hashes:         1: 323830343a366262343a663030303a3a2f34312d3431203d3e20323730343138.roa (hash: N2nTtvb8JXqHz8HSxYE4bRZRkUdpeFoYlVaINLv7iHM=)
                          2: 3139302e3131312e3136382e302f32322d3234203d3e20323730343138.roa (hash: mJq4dFqiva5H7E/DVQTNnmaU+jNCkwWuNtHA92VtrOU=)
                          3: CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.crl (hash: raCPfebWGxc/YHnq84AvbD6snKVkzRhYLTjnPMKOB2g=)
                          4: 323830343a366262343a3a2f33322d3336203d3e20323730343138.roa (hash: iXw8eyww30FtkaY4pIbyQVccKqIHDDzs1Oowd0Qxomg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.crl
                          rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:60:9b:b4:9e:de:4c:1f:73:51:ba:57:d5:a0:53:82:be:f7:26:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDEF1FD6690DCCED5205338EE0BC7D0E188DE842
        Validity
            Not Before: Apr 27 11:29:20 2025 GMT
            Not After : Apr 28 14:58:20 2025 GMT
        Subject: CN=10D3130FEDDD891AD2440A4B43F25BC784DB8277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fc:ee:29:69:92:7b:5a:fa:26:1d:f5:7a:f6:
                    4d:0b:de:93:76:82:d8:46:6b:6c:d4:83:13:a8:63:
                    75:b7:89:dd:c1:4d:e6:8c:5d:0d:e3:2c:72:0c:bc:
                    4f:62:11:e0:78:e7:3b:b0:b1:ac:63:be:a6:38:3d:
                    93:05:07:00:d3:26:c3:28:7a:d9:a2:40:e0:6f:a9:
                    fc:88:d4:d3:a5:a6:1f:fc:11:b2:4f:bc:ac:38:3d:
                    a1:8c:07:e8:1f:7a:df:6d:b0:13:44:7d:22:0b:86:
                    60:56:77:5a:4b:11:b7:b0:6d:8a:1a:72:dc:17:4b:
                    97:cb:d9:39:51:69:37:32:6a:cc:0e:79:23:2b:bc:
                    4c:6a:78:93:81:a7:dc:c7:ca:e4:ec:af:d6:38:bb:
                    17:9d:41:cd:78:15:5d:d4:0a:eb:43:62:19:0b:90:
                    ae:91:b4:ba:b6:4e:95:33:d5:80:15:07:41:60:b6:
                    55:e4:bd:ba:37:a8:c1:5f:46:07:5f:19:ae:8b:03:
                    68:91:bf:06:23:03:45:4f:cd:58:d4:9d:fd:d4:1d:
                    e9:1c:ae:c7:5a:12:cf:42:aa:ad:7f:59:20:8d:a6:
                    fb:cc:31:9c:8e:a2:8f:70:ba:24:eb:6c:a7:23:aa:
                    e8:9b:f2:e1:f9:24:2b:2d:1e:d7:38:90:7a:0a:1f:
                    dd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D3:13:0F:ED:DD:89:1A:D2:44:0A:4B:43:F2:5B:C7:84:DB:82:77
            X509v3 Authority Key Identifier:
                keyid:CD:EF:1F:D6:69:0D:CC:ED:52:05:33:8E:E0:BC:7D:0E:18:8D:E8:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f3:e4:6d:88:15:1b:9e:cd:80:93:cf:79:8d:60:c8:3c:1b:
         ef:04:2d:11:5c:9a:54:fc:9b:2e:ec:e4:6b:c4:5c:97:3e:fb:
         ab:25:a8:99:81:46:f0:7b:d3:d5:cb:b3:09:ba:b5:38:9d:5e:
         b4:cd:23:f7:f2:e0:06:b9:83:1f:d0:c3:eb:15:96:c0:0a:e2:
         b0:f4:57:04:a4:96:88:00:a0:72:4e:ba:55:65:a2:61:dc:43:
         c2:55:ed:5d:ae:96:ed:ea:62:ba:32:89:c6:29:1f:a1:82:be:
         7a:c6:b9:84:0c:c9:28:fe:4e:f7:96:7e:a7:f7:68:98:00:f2:
         f2:bc:b6:e4:dd:90:fd:57:15:05:80:68:bb:13:54:c4:2a:b2:
         64:db:8c:49:b4:cb:3b:ca:64:f9:44:27:dd:05:ac:f7:a8:fb:
         8c:5a:97:d3:63:eb:f2:f5:9c:a2:e1:7f:26:62:23:f5:cb:bb:
         b8:9a:da:c6:e7:24:6c:95:f1:28:d9:20:34:69:f9:39:49:5c:
         14:ad:9a:f6:d4:58:39:98:c7:88:af:c1:b7:85:d6:e4:72:5c:
         78:b4:96:ad:d1:59:9b:ee:1f:42:11:7b:47:aa:89:a9:33:59:
         6f:28:cc:ca:ee:aa:3d:3c:1e:7b:6e:9b:74:71:99:f8:fd:37:
         12:3a:82:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:41 2025 by rpki-client on console.sobornost.net