Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5bRkeh3Pvp9D1uzWKX5JWNWpXdciW6xk9G6uMiw3TGJY/0/926ABE242D2F3F617248A0DE34C7CC9FB8FEE5F7.mft
File:                     926ABE242D2F3F617248A0DE34C7CC9FB8FEE5F7.mft (raw, json)
Hash identifier:          emZilxEMLEyS0Ql4xpwQv82syOgU4uyrsKdKBF788LA=
Subject key identifier:   8B:E3:EB:D5:96:01:D7:03:2F:35:C6:44:D7:A2:BA:BC:2F:C0:0E:1D
Authority key identifier: 92:6A:BE:24:2D:2F:3F:61:72:48:A0:DE:34:C7:CC:9F:B8:FE:E5:F7
Certificate issuer:       /CN=926ABE242D2F3F617248A0DE34C7CC9FB8FEE5F7
Certificate serial:       02A217A830B27FC97D2FDA8B67F8EC08FD0C4C32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/926ABE242D2F3F617248A0DE34C7CC9FB8FEE5F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5bRkeh3Pvp9D1uzWKX5JWNWpXdciW6xk9G6uMiw3TGJY/0/926ABE242D2F3F617248A0DE34C7CC9FB8FEE5F7.mft
Manifest number:          40
Signing time:             Sat 26 Apr 2025 17:49:22 +0000
Manifest this update:     Sat 26 Apr 2025 17:44:22 +0000
Manifest next update:     Sun 27 Apr 2025 19:32:22 +0000
Files and hashes:         1: 323830343a393335303a3a2f33322d313238203d3e20323734373639.roa (hash: 5JVwpUegxsRgZvLIR5aL1MlN97nep0nXTvpm8Cxl04M=)
                          2: 926ABE242D2F3F617248A0DE34C7CC9FB8FEE5F7.crl (hash: OciW6hCJwYsQTkbM8V8mK+8Mo7qrNhEe3VIQb9J/xQw=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5bRkeh3Pvp9D1uzWKX5JWNWpXdciW6xk9G6uMiw3TGJY/0/926ABE242D2F3F617248A0DE34C7CC9FB8FEE5F7.crl
                          rsync://rpki-repo.registro.br/repo/5bRkeh3Pvp9D1uzWKX5JWNWpXdciW6xk9G6uMiw3TGJY/0/926ABE242D2F3F617248A0DE34C7CC9FB8FEE5F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/926ABE242D2F3F617248A0DE34C7CC9FB8FEE5F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 19:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a2:17:a8:30:b2:7f:c9:7d:2f:da:8b:67:f8:ec:08:fd:0c:4c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926ABE242D2F3F617248A0DE34C7CC9FB8FEE5F7
        Validity
            Not Before: Apr 26 17:44:22 2025 GMT
            Not After : Apr 27 19:32:22 2025 GMT
        Subject: CN=8BE3EBD59601D7032F35C644D7A2BABC2FC00E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:22:c2:c2:bd:44:e8:86:a1:d3:8b:29:59:80:
                    14:17:7d:e9:a2:15:48:b0:19:0d:17:32:87:9e:f9:
                    7f:51:06:14:51:87:03:47:1c:5f:03:c5:66:12:48:
                    4f:20:e3:25:69:0d:4c:ec:18:a9:2c:46:21:2c:83:
                    2b:b1:c3:7c:29:53:44:47:d0:21:cd:a6:a8:46:fa:
                    54:e7:de:ab:72:f9:ee:38:96:8a:b9:ba:e9:fd:79:
                    20:5c:25:b1:e0:2e:1d:52:10:3a:e9:c3:40:b3:1c:
                    d8:c7:33:ed:02:b6:ce:95:aa:58:ef:91:2b:37:2b:
                    ae:9e:9c:d5:38:bf:41:7e:b3:7d:34:c6:15:bb:28:
                    7f:01:19:3e:e0:3a:c2:ca:18:45:e9:5a:23:56:8c:
                    ac:24:1d:9e:50:3b:29:ac:1e:de:69:3c:ff:ee:fc:
                    2c:fc:f2:03:31:dd:df:79:73:32:aa:6e:4d:40:10:
                    8c:4a:ab:15:d1:4e:bd:30:75:ab:de:03:0f:33:2a:
                    03:31:8a:bd:53:d9:51:05:8f:b0:ea:62:bd:f7:0c:
                    d9:1e:48:f5:4c:de:59:13:b8:94:70:c0:93:54:0e:
                    18:d9:3f:cc:04:13:a6:5b:30:74:e2:43:57:55:54:
                    24:9b:23:1c:5c:11:2c:d0:52:5a:57:83:5f:2b:86:
                    66:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E3:EB:D5:96:01:D7:03:2F:35:C6:44:D7:A2:BA:BC:2F:C0:0E:1D
            X509v3 Authority Key Identifier:
                keyid:92:6A:BE:24:2D:2F:3F:61:72:48:A0:DE:34:C7:CC:9F:B8:FE:E5:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5bRkeh3Pvp9D1uzWKX5JWNWpXdciW6xk9G6uMiw3TGJY/0/926ABE242D2F3F617248A0DE34C7CC9FB8FEE5F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/926ABE242D2F3F617248A0DE34C7CC9FB8FEE5F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5bRkeh3Pvp9D1uzWKX5JWNWpXdciW6xk9G6uMiw3TGJY/0/926ABE242D2F3F617248A0DE34C7CC9FB8FEE5F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:ea:14:36:85:f6:5e:c4:f3:9a:d3:6c:54:b9:b2:78:fb:99:
         76:26:42:90:61:ef:c0:8d:a5:96:97:f6:75:e0:d2:35:fe:70:
         a2:56:4f:5f:9f:ed:ca:b0:83:3f:3a:03:98:31:d9:0e:40:f5:
         c3:46:2e:6c:b1:d5:2d:21:7f:22:48:aa:92:10:cb:05:4a:1e:
         ae:7b:49:11:db:10:0a:ae:c2:fb:d0:6d:50:e2:21:98:69:53:
         4b:45:ca:fd:09:9c:41:cc:5a:ec:9f:46:02:91:25:84:42:cf:
         e4:b6:0e:77:ca:2d:0d:63:61:b0:9c:18:16:33:77:85:2d:13:
         6d:87:67:d7:96:ea:25:2a:f2:0e:0e:c0:62:6b:fa:39:45:d9:
         e5:e9:22:b4:75:fc:d5:02:3a:1a:84:dc:dd:0f:d7:6c:e2:7a:
         7f:66:4e:08:10:0a:5c:95:63:9a:0b:f8:ab:cf:6f:f7:df:98:
         53:6b:19:a5:83:5d:58:9d:c3:bb:27:d0:1d:f8:d3:bc:30:b5:
         d1:c7:3d:34:1f:e7:e3:50:5a:85:94:5c:35:d7:c1:d5:4c:79:
         13:04:4e:d0:6c:eb:ec:bd:9d:1a:10:62:85:66:69:9d:b6:61:
         36:42:79:4a:e4:6a:34:ad:07:32:32:08:e5:d2:2d:29:f3:03:
         46:8c:a0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:06 2025 by rpki-client on console.sobornost.net