Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
File:                     68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft (raw, json)
Hash identifier:          JcXl0XpLiWCUfj5+wY/H5LtfJWWwJSmGtS+cv9qyCiU=
Subject key identifier:   9A:00:61:21:6C:C0:59:5C:BF:A4:DF:28:D5:D6:64:FF:13:27:07:E8
Authority key identifier: 68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76
Certificate issuer:       /CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
Certificate serial:       6491CAF3DDE3D90A2C5866EEF115584248EC0585
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
Manifest number:          FD
Signing time:             Mon 28 Apr 2025 19:53:20 +0000
Manifest this update:     Mon 28 Apr 2025 19:48:20 +0000
Manifest next update:     Tue 29 Apr 2025 22:28:20 +0000
Files and hashes:         1: 323830343a333564343a3a2f33332d3333203d3e20323636333039.roa (hash: NBE6K6zJ/FotRliNVDb8nUAwWjiBFGRk7f5Lj9E98Xo=)
                          2: 3137302e37392e3137362e302f32322d3232203d3e20323636333039.roa (hash: qvIMK685FSdFyB1oJt5aRMfVxCvrfR5JXAjYLXbC+4w=)
                          3: 68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl (hash: 9n5VRewb3HUUvJWvuL6+/P8zKssv57CIiJjmbNaGiPk=)
                          4: 323830343a333564343a3a2f33322d3332203d3e20323636333039.roa (hash: A0xY8FQpNJ+Dmu/PZSKbDs05Sg3vxalRRBfAWO03pMk=)
                          5: 323830343a333564343a383030303a3a2f33332d3333203d3e20323636333039.roa (hash: 2INq3xE6upAmDztTdWwtjePXTuQOj2MAyDG9knhJelM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl
                          rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:91:ca:f3:dd:e3:d9:0a:2c:58:66:ee:f1:15:58:42:48:ec:05:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
        Validity
            Not Before: Apr 28 19:48:20 2025 GMT
            Not After : Apr 29 22:28:20 2025 GMT
        Subject: CN=9A0061216CC0595CBFA4DF28D5D664FF132707E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:72:34:dd:f3:b9:e5:88:b2:fb:73:3c:55:
                    fa:5a:05:e8:22:42:e0:ed:e9:38:cf:8e:a0:fe:6c:
                    6c:cd:72:41:e9:ee:8b:de:fd:b5:26:f9:49:0a:81:
                    8e:5f:08:d1:43:91:7d:86:63:69:6c:2a:bf:0c:2d:
                    35:61:ae:00:e7:35:17:5e:75:54:3f:b5:a4:18:9c:
                    ff:5e:a6:7d:46:54:15:e6:90:8e:13:a0:6e:fe:b3:
                    c4:9b:70:16:7b:30:37:f0:ad:14:25:b1:b6:6d:03:
                    48:e3:ba:27:3f:18:60:9f:eb:18:27:3b:cf:0e:49:
                    9d:bb:52:dc:fe:f0:14:60:d9:87:65:63:f1:b0:33:
                    6b:29:4f:88:8f:e5:96:46:d6:24:3c:a1:49:7a:5a:
                    5e:87:67:30:e8:d7:75:74:e7:ac:5d:77:26:56:98:
                    b7:3d:be:76:c2:99:4e:1e:a2:a7:6c:05:f1:86:d8:
                    e2:be:6c:fb:66:9c:e6:a9:f5:78:ff:71:7c:dd:6c:
                    9a:1f:ac:dd:28:61:41:4d:51:16:2f:ea:31:52:9d:
                    6d:6f:e5:58:97:74:f7:02:68:39:12:03:60:62:56:
                    1a:4c:45:63:4a:f9:0a:55:f1:05:a4:22:da:9c:1b:
                    85:e1:95:09:8e:81:f5:7b:c6:72:5e:e1:72:0d:24:
                    8d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:00:61:21:6C:C0:59:5C:BF:A4:DF:28:D5:D6:64:FF:13:27:07:E8
            X509v3 Authority Key Identifier:
                keyid:68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:f8:ae:31:48:3a:ef:f3:67:c3:ac:85:d3:97:ed:62:25:76:
         21:ed:fc:9d:f2:57:f6:90:14:43:02:70:0c:da:20:0d:5f:e2:
         67:f8:5d:21:9f:62:ce:25:d4:8f:a3:05:3b:65:0e:25:28:94:
         c9:54:75:f2:f3:d9:76:7c:e0:a2:2b:f7:48:ab:28:c4:89:d1:
         28:ba:2b:d9:08:a1:4e:7f:03:21:e2:71:ec:5a:77:33:9b:a5:
         a7:bd:a0:60:20:44:f3:b8:07:0d:8e:b1:60:f6:5b:a9:9c:fa:
         30:aa:0e:61:9a:d1:d9:7b:0d:aa:fe:c7:8e:8b:57:59:58:11:
         95:ef:be:aa:8d:96:45:0e:0c:ff:8c:43:83:9f:5d:b9:75:81:
         0d:d3:44:04:b9:e4:17:3e:ff:a3:9d:b2:7c:4d:a6:81:73:aa:
         d8:e7:2f:46:88:f8:a5:0f:d0:13:c6:92:a3:fb:38:59:80:94:
         04:e9:0a:f7:a6:2a:d5:0b:87:d6:0d:6d:e0:d1:26:c8:03:27:
         40:36:92:eb:e7:0f:7d:95:9f:d3:8a:d7:53:b0:46:9e:1f:e5:
         21:46:43:20:1f:24:aa:a2:a5:92:0c:11:d8:1b:23:e5:7b:f9:
         8e:ce:37:00:8d:7e:e3:68:94:a7:47:99:ea:c2:86:04:ad:1d:
         65:01:29:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:47 2025 by rpki-client on console.sobornost.net