Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.mft
File:                     A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.mft (raw, json)
Hash identifier:          Az170SxPHWkPo+WCD9d/aDfecmrWZqUGMdta3NQKkaE=
Subject key identifier:   62:B4:3B:C8:C5:B3:72:84:34:0F:F1:EF:1A:8D:F2:1B:0E:58:61:F0
Authority key identifier: A6:53:12:DF:E9:3D:F2:E9:A1:10:9A:17:CD:E8:A7:C0:7F:71:F2:B4
Certificate issuer:       /CN=A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4
Certificate serial:       55B9A542DF4A68898C46D72F0A07F1964F797D4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.mft
Manifest number:          0205
Signing time:             Sun 27 Apr 2025 10:09:02 +0000
Manifest this update:     Sun 27 Apr 2025 10:04:02 +0000
Manifest next update:     Mon 28 Apr 2025 13:44:02 +0000
Files and hashes:         1: 323830343a343631383a313030313a3a2f34382d3438203d3e20323636393638.roa (hash: 8IHob+lDrkGj8bsuKhARCOGaZhF9QYGE6Rin5ug5sj0=)
                          2: 323830343a343631383a333330303a3a2f34302d3430203d3e20323636393638.roa (hash: wMw8wME9BR4UirCA092IWuWr4cHOIaosIEMuhirX0bM=)
                          3: 323830343a343631383a3a2f33322d3335203d3e20323636393638.roa (hash: cMcCcNv//lvjX94wmJ9+A7npbYAsJeqUG1XkqYaUEtw=)
                          4: 323830343a343631383a333130303a3a2f34302d3430203d3e20323636393638.roa (hash: xBdl7aNND//7aufiy70xjYnjVLCGxti2rSe15QGXK1c=)
                          5: 34352e3232362e3134382e302f32322d3234203d3e20323636393638.roa (hash: AbNamZ0v/0xYfw2AFpy9OmYqqkmsifHoRKNAM3Kp4wg=)
                          6: 323830343a343631383a323130303a3a2f34302d3430203d3e20323636393638.roa (hash: pGz8XAHYcZTzzr3n8+FVs09rvdX5ZoM9EEEUBIZvs50=)
                          7: A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.crl (hash: 9ja4uM9C3ibev+pr3nI7gF8Kqu4dyKV4gk3xRX30dLE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.crl
                          rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b9:a5:42:df:4a:68:89:8c:46:d7:2f:0a:07:f1:96:4f:79:7d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4
        Validity
            Not Before: Apr 27 10:04:02 2025 GMT
            Not After : Apr 28 13:44:02 2025 GMT
        Subject: CN=62B43BC8C5B37284340FF1EF1A8DF21B0E5861F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:32:8c:be:c1:48:fa:dc:70:03:76:c3:b3:30:
                    dd:e1:4d:6a:71:67:14:80:24:e3:bf:86:a4:97:91:
                    70:57:3b:8c:59:46:00:af:95:f4:d6:76:41:27:57:
                    5f:60:81:de:82:34:19:ad:b3:92:ee:e4:8f:80:44:
                    41:b8:f0:e6:d6:88:ad:0b:45:94:77:33:59:86:7c:
                    56:0d:98:c1:36:ab:ac:bd:aa:5b:63:89:db:4d:79:
                    7e:05:e0:6f:2e:4b:71:82:d9:40:41:27:cc:58:df:
                    bf:fd:94:df:f0:c6:47:0c:eb:57:b7:ee:10:d1:53:
                    71:73:38:96:96:22:c1:76:20:91:74:00:5d:a2:76:
                    e9:b8:f1:68:e8:a7:26:f8:73:1e:78:4e:13:5f:ea:
                    b2:be:ce:98:1b:17:04:ff:33:81:5f:26:ee:2f:0a:
                    5c:2f:23:f3:48:e2:65:d4:93:da:cd:13:2a:e2:6d:
                    c0:10:e2:14:4a:a6:bf:55:39:c9:b5:08:ed:ae:a1:
                    82:a4:df:58:f2:f8:b4:f1:f1:ea:e9:81:a9:0c:57:
                    9f:08:a2:41:2f:57:1e:55:75:6a:f1:2f:69:49:1d:
                    a3:b1:41:d6:2e:8d:b4:aa:89:0c:95:f0:67:fb:7d:
                    f7:b8:12:be:8a:9a:55:89:e1:fe:03:81:aa:75:93:
                    42:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B4:3B:C8:C5:B3:72:84:34:0F:F1:EF:1A:8D:F2:1B:0E:58:61:F0
            X509v3 Authority Key Identifier:
                keyid:A6:53:12:DF:E9:3D:F2:E9:A1:10:9A:17:CD:E8:A7:C0:7F:71:F2:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:f6:9e:87:59:73:55:77:86:0b:d6:47:b2:f6:7c:2b:69:06:
         75:c9:4b:6f:69:9e:be:d0:84:02:4e:09:1e:32:7b:3d:c5:d5:
         e8:01:4e:a0:a0:45:68:a1:5b:ad:0d:ef:a9:95:58:f0:41:1c:
         ae:38:d6:fd:2c:d6:e2:61:6c:41:45:e9:bb:dc:d3:e8:7d:72:
         4c:53:20:5f:f9:11:1a:de:46:11:52:b4:ae:c0:43:af:03:6a:
         b0:ec:b0:d4:8e:57:cb:49:32:d5:c5:00:46:9f:ed:aa:f3:71:
         de:46:e6:5b:5c:44:7d:8a:56:88:f0:2a:7a:77:1d:5b:8f:a7:
         56:fd:92:84:f9:0c:d3:e5:bc:f0:a9:25:fb:ef:69:13:4a:59:
         2b:a5:94:81:0d:16:e0:de:e7:9e:97:b6:3d:a9:bb:25:2f:bc:
         dc:46:49:14:d9:c3:19:e8:53:7c:10:cf:57:cc:7e:c0:ec:4a:
         5a:3a:ab:a1:9c:97:d1:7f:a1:ba:3f:80:c8:cb:26:d8:7f:f2:
         cc:ce:f8:98:02:cc:47:b1:8c:74:6e:e9:01:ed:31:b6:b4:99:
         01:6f:bd:b1:f9:6a:e8:f3:29:75:f8:a2:41:45:7f:9a:e7:e6:
         5e:d4:50:52:6e:59:72:fe:16:cb:87:84:55:c4:e2:6e:8a:e0:
         3f:47:ef:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:37 2025 by rpki-client on console.sobornost.net