Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/4448E004036F523126413C919162478D2C301762.mft
File:                     4448E004036F523126413C919162478D2C301762.mft (raw, json)
Hash identifier:          8DoDXYD2IlhMToq/wlI5mMgovU30lU/VS6WD7s9X15s=
Subject key identifier:   B8:9A:CC:8E:F8:27:DE:DB:54:A3:57:CA:12:AD:E1:C7:69:93:15:73
Authority key identifier: 44:48:E0:04:03:6F:52:31:26:41:3C:91:91:62:47:8D:2C:30:17:62
Certificate issuer:       /CN=4448E004036F523126413C919162478D2C301762
Certificate serial:       7658BF9740FF3FB88DE250995B15E3EEEA8468DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4448E004036F523126413C919162478D2C301762.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/4448E004036F523126413C919162478D2C301762.mft
Manifest number:          F7
Signing time:             Mon 28 Apr 2025 13:25:41 +0000
Manifest this update:     Mon 28 Apr 2025 13:20:41 +0000
Manifest next update:     Tue 29 Apr 2025 15:58:41 +0000
Files and hashes:         1: 323830343a383162303a3a2f33322d3438203d3e20323732343730.roa (hash: znsr5WfJGDk7XRz427DnPaHp36fds8h1FSFwNOxUI68=)
                          2: 4448E004036F523126413C919162478D2C301762.crl (hash: xGLXo8eyTF/YbfR7PlAKhYkX7B12kimzjuZEXT6l1jQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/4448E004036F523126413C919162478D2C301762.crl
                          rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/4448E004036F523126413C919162478D2C301762.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4448E004036F523126413C919162478D2C301762.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:58:bf:97:40:ff:3f:b8:8d:e2:50:99:5b:15:e3:ee:ea:84:68:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4448E004036F523126413C919162478D2C301762
        Validity
            Not Before: Apr 28 13:20:41 2025 GMT
            Not After : Apr 29 15:58:41 2025 GMT
        Subject: CN=B89ACC8EF827DEDB54A357CA12ADE1C769931573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:11:a5:fe:01:37:96:d2:36:ff:43:3a:84:11:
                    9f:93:e4:13:e0:da:fc:92:d8:0a:58:ec:5f:94:50:
                    33:73:c8:74:25:16:05:9b:8a:8d:d2:dc:1c:2a:00:
                    ea:19:48:6f:79:61:fd:34:c7:3d:45:da:66:af:30:
                    7d:00:aa:3b:57:cd:29:7a:b3:93:50:89:ec:7f:2e:
                    c8:1e:19:bd:f9:39:33:21:26:57:cd:a5:9a:de:f6:
                    9d:bd:5a:92:77:6f:87:ac:1b:b2:fa:56:24:31:9f:
                    ad:2b:53:21:81:15:dc:e4:08:5d:1f:0b:57:05:11:
                    0b:8a:50:fa:a3:6d:71:04:a2:a6:a4:86:05:63:87:
                    51:ff:90:e3:9b:aa:fb:5d:ec:15:65:9a:a8:92:a2:
                    75:00:36:f0:c8:0a:48:74:25:f1:6b:cd:00:1e:cb:
                    ef:1c:fd:d3:ea:81:16:6c:ea:ba:86:06:7b:5c:ef:
                    11:15:3d:07:d8:5a:98:98:a3:f3:ad:c4:6e:44:78:
                    1e:c1:8a:29:09:16:f9:ee:88:5b:ce:c2:f4:d6:69:
                    f0:14:9e:d2:01:3e:f4:88:0e:47:76:40:f7:63:ab:
                    bb:d7:60:c0:27:3b:8a:ce:01:b6:fa:40:14:f5:cb:
                    4e:61:8b:49:64:5c:5d:96:85:c6:43:a5:f3:f5:63:
                    87:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9A:CC:8E:F8:27:DE:DB:54:A3:57:CA:12:AD:E1:C7:69:93:15:73
            X509v3 Authority Key Identifier:
                keyid:44:48:E0:04:03:6F:52:31:26:41:3C:91:91:62:47:8D:2C:30:17:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/4448E004036F523126413C919162478D2C301762.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4448E004036F523126413C919162478D2C301762.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/4448E004036F523126413C919162478D2C301762.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:11:a1:0f:51:66:fe:f3:e7:a3:2f:1d:53:1c:4d:0a:bf:20:
         bf:68:d2:4f:bb:1a:e4:1e:fe:b7:22:04:12:16:09:84:e2:4d:
         9a:85:69:59:d1:53:90:61:93:79:b2:73:b0:91:97:0d:12:60:
         82:1c:5a:17:76:39:16:0e:fa:ff:ed:b4:87:52:fd:9a:8a:93:
         5f:65:d5:4f:dc:69:1d:46:c1:28:b1:43:15:a3:88:af:21:25:
         17:6e:ae:7f:f9:8e:94:95:b8:e5:09:37:bb:1b:63:e7:f5:38:
         88:d4:c0:ea:f7:05:c5:23:7c:57:9e:4b:e9:83:ad:81:d9:7a:
         90:21:17:2b:01:c3:ff:2a:a1:a5:cc:6d:3d:7a:34:ee:21:d8:
         45:f2:1b:ee:26:24:7b:63:9b:b9:0a:c5:f1:85:65:9f:8c:a5:
         97:ac:a6:33:92:29:c3:a6:12:a3:62:33:a0:57:91:82:48:5e:
         df:b7:5b:66:ef:d4:18:f4:30:4c:9e:ff:4f:e9:dc:a2:06:e1:
         f9:86:f4:a7:55:e9:e5:28:99:09:8d:73:03:66:78:03:fc:39:
         61:0a:7f:26:ca:5d:6c:46:ab:f9:92:f2:01:a0:95:72:80:01:
         a0:bc:a1:f9:89:07:3c:41:fe:f3:81:6a:f7:f1:0d:8d:39:77:
         be:cf:54:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:06 2025 by rpki-client on console.sobornost.net