Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
File:                     2942F22000F3A7315703CF3B13100D76386FCAD1.mft (raw, json)
Hash identifier:          eBlMLiaQhXcgyCXas0tiFoNo+1vvMrXSD31Oh1YekFM=
Subject key identifier:   32:33:20:6A:89:FC:DF:83:0D:34:CC:B1:89:93:A9:3A:4C:7F:88:54
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       1482157F27FAFED90BFFDEBB5C8161C60419B392
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
Manifest number:          0130
Signing time:             Mon 28 Apr 2025 01:10:57 +0000
Manifest this update:     Mon 28 Apr 2025 01:05:57 +0000
Manifest next update:     Tue 29 Apr 2025 03:09:57 +0000
Files and hashes:         1: 3138362e3235302e3137322e302f32322d3332203d3e203533323138.roa (hash: OKriB/xUYr/t83s3xfIf583Y0pz7ZlYiKUb4whzpbos=)
                          2: 2942F22000F3A7315703CF3B13100D76386FCAD1.crl (hash: yEFze4cphvwvtHcDmWjcgQzdsxrs3yyOAiNqMirwqTE=)
                          3: 3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa (hash: VBr4jF3N4Wx9r0R0vor7T8MyPeBPPygT03dt8vmP4/E=)
                          4: 3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa (hash: HzuIWR1exMvAD50uoakB8kXvJ8P6ZYrZrw6m+GKyIHU=)
                          5: 3139312e352e3232302e302f32322d3332203d3e203533323138.roa (hash: 0wZwBdWsHnVkpxMrkgatFHVIycknH7b2NpcQFFf45JM=)
                          6: 3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa (hash: cMhOk1gqvGKJ43ZIN08FcrdbKk+2jpoPyVnj2SYGVQk=)
                          7: 323830343a6666343a3a2f33322d313238203d3e203533323138.roa (hash: tnq1vBxIcrDoZjcoVFNhre3fHKZMaMm8oRp5pwoZIL4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:82:15:7f:27:fa:fe:d9:0b:ff:de:bb:5c:81:61:c6:04:19:b3:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: Apr 28 01:05:57 2025 GMT
            Not After : Apr 29 03:09:57 2025 GMT
        Subject: CN=3233206A89FCDF830D34CCB18993A93A4C7F8854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:68:5f:11:3d:12:8d:e9:11:36:12:76:12:3e:
                    3c:58:35:16:93:75:d0:db:67:35:9d:9a:86:a3:0e:
                    12:99:a6:2d:61:41:1a:98:29:36:d6:d2:94:f5:15:
                    be:a8:25:78:83:86:a7:f2:33:03:66:1d:bb:3b:76:
                    ee:05:f0:af:d4:80:dc:ec:72:4a:db:b7:e7:73:73:
                    00:3b:e0:49:c4:3b:a8:dd:e3:a7:5e:ae:8d:fe:80:
                    8b:05:10:38:b9:32:f3:8d:6b:60:9d:c1:6a:08:40:
                    4b:b6:6d:60:1e:f7:d8:ff:8e:70:03:93:3b:5d:08:
                    31:60:01:35:af:b3:fa:26:d1:ef:26:4d:d0:d1:d1:
                    df:21:1f:2d:82:be:6a:af:df:ec:9f:e4:6a:73:c5:
                    74:ec:44:2d:22:be:10:5d:49:35:aa:63:a2:9b:5c:
                    4a:2c:3a:07:22:d4:ab:7e:40:c8:f6:92:63:9f:f3:
                    53:53:4e:38:72:14:ef:7b:d5:82:d0:83:6a:50:82:
                    78:bd:1c:c8:28:5f:3c:c1:bd:5e:fe:4a:6e:bf:75:
                    2d:f5:60:4f:5c:5d:cd:33:2c:20:9e:cb:e4:a5:25:
                    19:b2:63:97:04:b9:78:a1:f5:22:36:54:a1:cf:1d:
                    5d:69:84:56:79:94:52:36:93:86:df:06:1d:d2:a3:
                    47:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:33:20:6A:89:FC:DF:83:0D:34:CC:B1:89:93:A9:3A:4C:7F:88:54
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:2b:7f:16:fd:a5:45:b1:17:e1:97:ec:25:cb:38:ef:f1:82:
         e7:54:27:fa:18:29:14:72:e7:bb:07:82:ca:13:10:ce:88:ac:
         63:00:f6:df:e1:0d:c5:f2:df:43:d0:2d:22:0a:56:f1:f4:2a:
         5a:bb:86:0f:f9:56:e6:50:a4:6c:5a:bd:10:3b:be:a3:17:ee:
         72:0f:31:fa:75:9c:0a:04:1a:a7:f4:04:1f:c8:41:72:5a:6a:
         33:5d:41:44:d5:60:3a:06:94:81:53:90:fb:9e:b7:84:46:f2:
         7a:e2:53:9a:e6:e2:fd:52:9d:18:a7:c0:34:02:d3:16:51:15:
         ba:83:80:a2:35:bf:5d:23:59:1c:e4:82:69:e4:ca:da:b2:1d:
         38:c5:0b:27:26:3b:84:18:f2:f5:8f:4f:8f:e2:90:ed:7a:a4:
         6c:2c:cb:75:f8:99:f9:14:33:3c:a7:d2:0d:19:8f:6c:0b:c0:
         87:ff:a3:ab:e8:7a:81:45:7f:62:e1:ac:57:01:2a:a2:3d:0c:
         0d:91:ba:de:98:e7:ea:0e:ed:4c:78:86:e6:d2:a8:ac:9b:25:
         45:40:69:49:83:61:b3:1a:b2:c0:a2:95:4c:3a:1e:73:ce:f6:
         d2:62:6c:b2:e0:b3:97:7f:cf:64:f9:29:fd:c6:d1:0f:2b:da:
         6d:8d:61:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:04 2025 by rpki-client on console.sobornost.net