Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
File:                     328938F6B87D58141D853FA04B61F2EC68371E43.mft (raw, json)
Hash identifier:          SJGBYUqijsd+xuqqXIiDz+bc57oEjLgAA7OVKXW2eLg=
Subject key identifier:   4C:C4:DD:72:1C:C6:E4:97:78:D4:B9:69:16:7F:D4:20:09:78:29:AA
Authority key identifier: 32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43
Certificate issuer:       /CN=328938F6B87D58141D853FA04B61F2EC68371E43
Certificate serial:       711B812AB293DA6FFBFB4900BDE656C5331622C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
Manifest number:          024D
Signing time:             Mon 28 Apr 2025 06:40:00 +0000
Manifest this update:     Mon 28 Apr 2025 06:35:00 +0000
Manifest next update:     Tue 29 Apr 2025 06:40:00 +0000
Files and hashes:         1: 328938F6B87D58141D853FA04B61F2EC68371E43.crl (hash: 1MAbI0PS6+0RwPy3NErmhSbPmhlYL6sDvkUZDj3Afk0=)
                          2: 323830343a383333633a3a2f33322d3332203d3e20323732313835.roa (hash: aGIl/LE/JlIFKLywuV74BW53ExFvQdI3FynFIHfHA0Q=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.crl
                          rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:1b:81:2a:b2:93:da:6f:fb:fb:49:00:bd:e6:56:c5:33:16:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328938F6B87D58141D853FA04B61F2EC68371E43
        Validity
            Not Before: Apr 28 06:35:00 2025 GMT
            Not After : Apr 29 06:40:00 2025 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c5:02:5c:e4:59:35:ae:63:91:f8:c0:06:76:
                    90:17:2d:75:43:d4:e0:11:1f:ae:60:e9:d1:20:27:
                    58:00:ce:24:3d:0d:0e:1e:a3:23:53:79:b7:35:a1:
                    38:a0:0e:26:72:e4:43:df:8c:51:03:98:b8:68:0b:
                    75:00:1f:5b:be:0b:48:34:44:2e:d7:09:12:f5:25:
                    d5:97:51:c8:d3:81:7a:d6:b3:bb:90:72:4a:0c:a3:
                    7c:52:7c:fc:f8:77:78:33:8e:64:06:5a:8e:92:37:
                    2c:ea:c7:14:1a:22:4f:31:c4:b1:31:1d:da:7f:48:
                    bf:15:79:c8:1c:1d:4e:bb:7f:d4:17:0b:7d:7d:b3:
                    7a:08:10:eb:e9:7d:b9:91:45:72:34:81:34:17:40:
                    6d:0b:e8:16:ed:28:eb:8e:a8:f9:0f:96:45:86:66:
                    f6:e0:c4:1f:17:3b:00:3d:72:a7:7a:d3:2a:66:e0:
                    64:22:9a:c3:95:8e:8b:78:86:ce:c4:d9:64:33:eb:
                    64:00:ac:52:26:36:f1:f4:35:2b:0c:77:57:5e:d7:
                    c5:5c:56:7e:09:ad:ab:a7:9b:f5:14:7a:ff:c3:ca:
                    81:45:f9:05:e2:37:dd:ea:5f:df:1b:2b:d9:84:e1:
                    2a:50:07:bb:68:19:d2:30:f3:93:79:db:a7:0b:37:
                    11:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C4:DD:72:1C:C6:E4:97:78:D4:B9:69:16:7F:D4:20:09:78:29:AA
            X509v3 Authority Key Identifier:
                keyid:32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:28:ae:9b:9c:07:12:fb:54:cc:87:55:12:d2:b4:79:fe:57:
         49:79:a4:48:2f:42:a8:dd:b6:86:78:a3:83:8c:47:d0:f5:ca:
         45:7c:44:e1:f2:7e:a7:34:73:e3:e2:7b:5f:f5:1e:03:a5:e1:
         20:0f:55:3a:33:79:6e:c6:c5:15:dc:8d:6c:6d:44:f9:49:cf:
         5c:61:81:f2:9f:c0:4e:a6:05:4f:01:31:37:8b:0f:e5:56:ee:
         30:8d:57:76:4f:3f:e1:7d:30:28:d0:00:d8:cf:7d:7e:13:6e:
         81:ad:f8:02:4e:82:a1:b6:a6:d9:cc:4a:2c:ec:af:7e:d1:4c:
         a4:99:be:6b:ed:0b:31:0e:1f:d2:8f:3a:57:96:bb:89:2b:fc:
         9b:0a:77:5c:c4:18:8e:9d:05:a7:2c:15:7f:5b:98:db:1c:07:
         67:e9:4f:ca:5b:5f:02:91:db:29:e2:22:d8:34:04:4c:57:1e:
         41:d4:61:65:9c:c5:06:18:54:ae:e8:95:02:dd:9d:ed:d8:36:
         6e:b0:c4:e0:f6:c4:7f:90:06:a3:67:b0:a9:f7:66:3e:86:b9:
         f3:20:36:28:7c:72:9f:08:53:a5:4f:84:20:51:90:c1:36:cb:
         70:d3:ca:b6:bb:91:d7:51:ab:d9:63:a4:68:ae:1a:db:54:7e:
         3a:a7:71:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:27 2025 by rpki-client on console.sobornost.net