Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.mft
File:                     912EC49C89BDC1DCBECB52C922BE4EC94D79882A.mft (raw, json)
Hash identifier:          Tfh6oEgZlwl3tx7FMX+jZuOxq5GB6npuPOhHKN2iJkI=
Subject key identifier:   16:0D:47:5B:AA:27:00:14:B2:D9:14:D4:29:0A:2B:5A:02:BD:EC:CF
Authority key identifier: 91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A
Certificate issuer:       /CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A
Certificate serial:       1A25236FAD001DA57EF83BADD4AE1E388F986544
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.mft
Manifest number:          020B
Signing time:             Fri 25 Apr 2025 17:10:01 +0000
Manifest this update:     Fri 25 Apr 2025 17:05:01 +0000
Manifest next update:     Sat 26 Apr 2025 17:50:01 +0000
Files and hashes:         1: 34352e3136382e3135392e302f32342d3234203d3e20323638313031.roa (hash: +QuJa0+02hz3U1DP0lXaXiQk+chqs1vz/T5VDiBhTes=)
                          2: 34352e3136382e3135362e302f32332d3233203d3e20323638313031.roa (hash: WZGmv6pHsaV1DRCTZ2F95tLwHZJ1m6GjJulXptsw2bY=)
                          3: 34352e3136382e3135382e302f32332d3233203d3e20323638313031.roa (hash: MfRULjlvFU3DzlOHgMncw3KgiP17YDG+EL2L8qix+M8=)
                          4: 34352e3136382e3135372e302f32342d3234203d3e20323638313031.roa (hash: tdIRpxLlIwDURe4ZnBaRCRvYENa7rFlSTXRIldThN1o=)
                          5: 34352e3136382e3135362e302f32342d3234203d3e20323638313031.roa (hash: uMgmpj/4cJHTF4Ft3BptXFQfY/sx1JoiL73HRw4DbMw=)
                          6: 34352e3136382e3135382e302f32342d3234203d3e20323638313031.roa (hash: UYICwSpaLqwVGiDvZuj1a5Wi+SMOpCchjuQas5Cahvw=)
                          7: 912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl (hash: +q7V8F/O18XLmChFA3vvWME+uhNzOtuhfOZokpxQggA=)
                          8: 34352e3136382e3135362e302f32322d3232203d3e20323638313031.roa (hash: 0sjTqErlsSFdghL+rpnFOlgGip6n9JdgnY6uFqiigxM=)
                          9: 323830343a353830383a3a2f33322d3332203d3e20323638313031.roa (hash: mbsHctgNTFi5Hu5ZqhnVT2jLlhteKtTNG1nz9qwqqUg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl
                          rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:25:23:6f:ad:00:1d:a5:7e:f8:3b:ad:d4:ae:1e:38:8f:98:65:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A
        Validity
            Not Before: Apr 25 17:05:01 2025 GMT
            Not After : Apr 26 17:50:01 2025 GMT
        Subject: CN=160D475BAA270014B2D914D4290A2B5A02BDECCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:7d:8f:57:6c:49:88:25:a8:b5:7f:8b:7c:
                    f3:1d:ff:90:19:d3:ca:32:c3:fc:db:a1:65:d8:ee:
                    f9:e9:95:4d:1b:62:cb:34:f1:da:71:3c:f3:41:db:
                    57:3a:c7:ab:98:13:3b:d7:a6:e6:76:b9:57:8d:ac:
                    80:b6:a6:47:9e:d3:27:9b:b3:c9:50:ab:8c:f8:92:
                    b3:1b:48:6c:40:e7:fd:0f:f1:87:fd:09:59:75:76:
                    8e:e0:5e:dc:cf:60:a8:e8:77:6f:dc:f9:23:ce:de:
                    11:88:0a:94:47:82:59:ce:8e:19:fc:92:56:c7:7c:
                    62:c2:95:9e:2d:af:c5:6e:f1:f4:39:98:9a:70:2c:
                    d7:e4:46:ca:66:af:37:71:3a:cd:21:f0:a1:87:0a:
                    48:46:07:84:5d:0b:ee:a4:50:6d:52:a1:41:91:41:
                    9a:93:c5:e6:f6:21:b9:61:bc:95:5b:8f:8a:ed:b9:
                    dd:76:c9:dc:0f:20:c9:d1:e9:01:6c:e8:6c:02:a5:
                    23:94:25:46:9a:7a:02:d7:6d:87:22:fa:d6:98:bd:
                    25:bc:f0:14:c0:e6:83:a2:b7:a6:a9:1a:a0:88:8c:
                    f9:20:be:87:f0:5d:91:0b:4e:f9:b5:bd:97:9b:53:
                    81:d8:fc:78:97:77:53:5a:cb:32:da:9e:41:a9:61:
                    41:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0D:47:5B:AA:27:00:14:B2:D9:14:D4:29:0A:2B:5A:02:BD:EC:CF
            X509v3 Authority Key Identifier:
                keyid:91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a3:06:f9:c5:b4:b0:40:30:7f:5d:66:a4:18:8e:3a:d3:7a:
         2e:87:97:f7:84:4b:0b:53:db:7f:a1:d4:9c:5f:3e:6e:34:9d:
         e2:97:9c:84:5a:d3:6d:8e:73:ab:bf:14:48:3a:6b:e4:ac:ea:
         ea:64:da:e3:e1:6e:5c:f8:5a:3e:86:87:77:46:95:38:ab:b6:
         56:4d:13:38:9e:db:dc:55:7e:a3:c3:25:04:b2:cb:df:17:ff:
         4e:1a:66:1e:8c:13:13:1c:6a:89:d4:9e:a1:d7:0a:2f:29:a2:
         ae:0d:da:aa:c2:3c:b6:5d:0c:b3:b5:13:43:97:e1:3c:4a:7c:
         fc:89:1b:5a:d7:20:e6:47:9d:9b:58:7a:29:61:4a:ed:ca:1b:
         98:a6:59:9b:ed:ce:05:bf:d8:07:bc:04:6c:a7:04:ab:56:1a:
         c0:b9:fb:ea:20:78:ee:a0:e0:ca:05:3d:6a:b8:7b:aa:5c:c5:
         00:4e:54:11:a5:93:65:49:c0:ba:4e:96:7b:c4:dc:ec:ee:36:
         8a:26:60:8a:2f:a7:ca:25:ca:bc:6e:cd:84:8c:28:40:b8:3c:
         e8:fa:ea:31:ca:45:10:3f:fb:bc:5a:a9:10:5a:22:a8:5c:f4:
         f9:d4:fd:e5:63:16:0f:ff:e5:a7:21:bc:77:f8:c4:9b:ab:36:
         a2:e1:04:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:39 2025 by rpki-client on console.sobornost.net