Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.mft
File:                     D477F47EB674BB270E21D1DF467090789AFE23F1.mft (raw, json)
Hash identifier:          x2S42Qo2q0UAd20oWA743J4iWhvI70V7m6I2nH0TFpw=
Subject key identifier:   CA:96:1A:01:6B:AD:09:57:96:F4:A2:69:D8:66:5B:E2:C8:0D:ED:D1
Authority key identifier: D4:77:F4:7E:B6:74:BB:27:0E:21:D1:DF:46:70:90:78:9A:FE:23:F1
Certificate issuer:       /CN=D477F47EB674BB270E21D1DF467090789AFE23F1
Certificate serial:       7365647BED7F0FFA95C9E54C0E9E849478A2DD76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D477F47EB674BB270E21D1DF467090789AFE23F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.mft
Manifest number:          0245
Signing time:             Thu 24 Apr 2025 19:10:00 +0000
Manifest this update:     Thu 24 Apr 2025 19:05:00 +0000
Manifest next update:     Fri 25 Apr 2025 19:10:00 +0000
Files and hashes:         1: 323830343a373931633a3a2f33322d3334203d3e20323731323835.roa (hash: hXTYPt1Yw1sMRL5Z3ykoks6g6LwcdgvcthhRMPh0s10=)
                          2: D477F47EB674BB270E21D1DF467090789AFE23F1.crl (hash: rffMzSQ3vFXPNQdmR7UuxSSi2OxsU25sknrKbMGxI1A=)
                          3: 3230302e38302e3130342e302f32322d3234203d3e20323731323835.roa (hash: Urz/wdbHILR1f/MOA+bOHI7wYWyHCIoi+pb+vzL+0yU=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.crl
                          rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D477F47EB674BB270E21D1DF467090789AFE23F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:65:64:7b:ed:7f:0f:fa:95:c9:e5:4c:0e:9e:84:94:78:a2:dd:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D477F47EB674BB270E21D1DF467090789AFE23F1
        Validity
            Not Before: Apr 24 19:05:00 2025 GMT
            Not After : Apr 25 19:10:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d4:e3:ce:b9:3e:f5:a7:80:23:c4:98:1e:36:
                    da:1f:db:e2:75:03:5f:c7:e3:8a:70:94:a7:38:ab:
                    53:dd:8b:36:cc:44:aa:0d:d4:60:93:03:36:5f:cf:
                    e9:e7:7a:9e:e0:87:91:4a:ac:2a:9c:eb:12:0a:cf:
                    f4:b0:75:1f:c7:a0:e4:42:70:9c:39:f6:12:d4:95:
                    0e:d6:a6:38:75:9d:15:d2:d5:a8:8e:51:a8:81:be:
                    5e:ca:37:2d:ca:80:e1:59:3d:63:63:83:00:35:de:
                    f4:4b:33:c3:99:58:31:22:81:88:a7:a1:90:4f:4f:
                    db:05:88:7e:5a:3f:fc:40:4f:2d:92:61:f7:1e:e4:
                    57:a5:e6:4e:4e:9d:1a:b5:9e:53:80:98:d1:f6:2f:
                    2e:a7:5e:7b:25:08:72:32:06:46:22:ef:46:36:8b:
                    99:15:72:b6:06:33:da:9f:76:b9:ca:52:36:57:d8:
                    53:5b:60:c3:18:c4:44:a9:b4:74:fe:90:1e:fa:0d:
                    9d:66:79:50:6b:02:d5:f4:60:2e:2d:30:5a:1d:89:
                    ea:37:fb:75:17:96:9d:fa:66:8c:d7:33:d7:bc:d1:
                    38:f6:0b:d7:95:ed:21:76:e9:67:9a:5e:f7:c8:8e:
                    e2:56:02:22:e5:17:1c:ab:6c:69:f9:e2:94:c5:68:
                    a7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:96:1A:01:6B:AD:09:57:96:F4:A2:69:D8:66:5B:E2:C8:0D:ED:D1
            X509v3 Authority Key Identifier:
                keyid:D4:77:F4:7E:B6:74:BB:27:0E:21:D1:DF:46:70:90:78:9A:FE:23:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D477F47EB674BB270E21D1DF467090789AFE23F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c5:51:3c:3d:3a:e8:d0:28:64:38:10:17:2e:5d:90:af:1c:
         f8:47:42:70:54:ff:3d:11:81:84:1e:b1:05:17:94:f3:09:ef:
         01:75:0c:3d:3d:a9:0e:89:e4:c7:e0:63:98:f3:55:08:65:eb:
         ad:c5:17:81:73:bb:07:bb:b8:e8:66:bf:2a:af:dd:73:cd:54:
         64:90:b2:37:da:a9:fb:62:eb:63:96:17:06:57:94:59:c9:33:
         aa:4b:16:ba:7c:2d:74:91:c2:76:92:3b:ff:8a:93:a6:d7:80:
         c4:e1:a1:95:e5:74:83:03:37:6f:24:b1:13:df:b3:03:98:3c:
         8d:6c:2e:5a:00:fa:f1:0b:bf:81:25:a3:d1:2d:20:d6:ac:59:
         a3:65:c1:8d:0f:13:53:59:18:06:a7:ee:30:9e:8a:5d:1d:4b:
         bb:4f:9c:41:28:91:1b:71:91:66:e8:bc:ab:ed:2e:57:5d:70:
         24:0b:3c:a9:8d:ac:e7:67:07:9f:c3:bb:90:f9:ab:22:91:9f:
         dc:83:aa:cc:73:c8:7d:f9:17:c6:5b:7c:c4:1a:f7:bb:82:5f:
         c4:59:89:7d:66:7a:e6:26:41:c3:9b:3c:20:1f:0a:2e:ef:46:
         99:ca:e9:31:1c:a2:bf:94:9c:10:b4:8d:bd:86:f6:f0:76:07:
         1f:96:11:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:42 2025 by rpki-client on console.sobornost.net