Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.mft
File:                     23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.mft (raw, json)
Hash identifier:          tRFMWAayozfAU0WFjJaP4RpxqZs1zYJqECFpdqAu7KU=
Subject key identifier:   66:AC:4E:60:BA:F1:03:6B:9A:E1:C3:EA:68:1E:C1:91:6B:65:22:DC
Authority key identifier: 23:B7:7C:F7:BD:1F:94:F7:2A:6C:08:08:56:9C:4F:51:A9:BA:38:9A
Certificate issuer:       /CN=23B77CF7BD1F94F72A6C0808569C4F51A9BA389A
Certificate serial:       33847598D1C04FE45D7F3B1B8F9D712968EF3061
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.mft
Manifest number:          F9
Signing time:             Mon 28 Apr 2025 08:35:45 +0000
Manifest this update:     Mon 28 Apr 2025 08:30:45 +0000
Manifest next update:     Tue 29 Apr 2025 12:15:45 +0000
Files and hashes:         1: 3139312e3234302e3136302e302f32322d3232203d3e203532373030.roa (hash: 5nE4j0Xb5A+hRCCCxGS78Ardb8P++ZCpc+tGozhjRXM=)
                          2: 323830343a313130633a3a2f33322d3332203d3e203532373030.roa (hash: XL7uzIpwTVCz+L1UzIc0OjE4QULX7pIxfQoJqKo9nPg=)
                          3: 323830343a313130633a3a2f33332d3333203d3e203532373030.roa (hash: oesUCndsgKoqRD5Jts7Iam5sflghg2DgcH3bQ/JOfjA=)
                          4: 3139312e3234302e3136302e302f32332d3233203d3e203532373030.roa (hash: 2Bs1Js1SLWPrdinPUhL/HhFl8nYU/0AJLPjs6wJmBd8=)
                          5: 23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.crl (hash: tfG5r9x/tG5X76SXAVSyzqd5xFkqRW55eMaieAyKTlo=)
                          6: 3139312e3234302e3136322e302f32332d3233203d3e203532373030.roa (hash: /IdHVTdkUKsYsKjEw/m2qe3tdxU1uPCcbIdCD+4UhVI=)
                          7: 3137372e37332e38342e302f32322d3232203d3e203532373030.roa (hash: qbPkVPa0ZEsQw62D2BW2r1Gmw+Wd2sLTTpIitwpzOCs=)
                          8: 3137372e37332e38362e302f32332d3233203d3e203532373030.roa (hash: 3T54jvLMdk8gSt2gFBZ7QUtfw7YpROcZZXWKxlm/U10=)
                          9: 323830343a313130633a383030303a3a2f33332d3333203d3e203532373030.roa (hash: EWjjzIGiE8yV37OstigbvrCBb6IEjmfxCP0f6YGlOsE=)
                          10: 3137372e37332e38342e302f32332d3233203d3e203532373030.roa (hash: 9qVYqhBWP2cTjH8lVv0pUh2+uwV4Gb/iLFPmS7ZsOsM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.crl
                          rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:84:75:98:d1:c0:4f:e4:5d:7f:3b:1b:8f:9d:71:29:68:ef:30:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23B77CF7BD1F94F72A6C0808569C4F51A9BA389A
        Validity
            Not Before: Apr 28 08:30:45 2025 GMT
            Not After : Apr 29 12:15:45 2025 GMT
        Subject: CN=66AC4E60BAF1036B9AE1C3EA681EC1916B6522DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bf:f6:81:6a:a9:a3:9d:51:3b:5f:10:16:f0:
                    15:4a:27:ee:93:15:1c:df:01:84:e2:b2:21:8f:80:
                    49:7f:b0:22:92:2c:d0:42:59:4a:8d:a2:91:a0:43:
                    27:ce:1e:f1:9f:40:8f:99:d2:23:ec:96:a6:e5:94:
                    1c:4a:f5:e7:8a:f1:86:80:ef:2a:14:b0:f1:53:8e:
                    0a:df:49:e5:6a:fb:5f:b6:36:f8:e7:d0:7b:02:3d:
                    1e:39:ad:3f:27:f5:2d:f3:0a:fe:bb:3d:0b:40:d0:
                    ef:4d:38:51:52:20:5f:91:e9:6d:c0:57:ea:d2:d8:
                    a2:87:dc:68:47:c0:f9:26:43:79:3e:a3:2b:10:40:
                    0b:bb:84:31:97:f4:69:47:73:18:04:27:f2:03:ad:
                    9e:8d:d6:d6:d9:0b:83:41:6c:bb:21:e1:12:6d:ab:
                    d3:33:de:ef:c4:88:a6:9e:af:ac:88:87:cd:e5:04:
                    aa:a7:5b:c7:2a:1e:ee:ff:3c:3e:3c:b8:35:fd:09:
                    90:fb:f8:af:76:9d:6f:95:0c:70:06:03:39:67:81:
                    2f:1a:55:54:08:46:d0:7c:82:03:1d:5d:61:71:e7:
                    33:f0:21:b9:74:d4:29:27:26:08:fa:25:d2:89:bf:
                    be:70:39:b3:31:82:a0:d3:2e:57:92:d5:07:fc:28:
                    00:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AC:4E:60:BA:F1:03:6B:9A:E1:C3:EA:68:1E:C1:91:6B:65:22:DC
            X509v3 Authority Key Identifier:
                keyid:23:B7:7C:F7:BD:1F:94:F7:2A:6C:08:08:56:9C:4F:51:A9:BA:38:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:79:3b:86:12:52:a8:93:de:5f:32:eb:02:52:c9:03:f9:cd:
         d4:28:22:d4:9d:aa:5a:1f:f7:b6:f9:9c:15:45:cd:e0:d6:e9:
         12:dd:7e:6a:9e:7a:1f:c3:40:24:37:a2:84:c2:9e:37:f7:f6:
         67:ef:fa:c4:03:dd:78:81:01:99:fc:8e:e5:86:67:0d:32:c8:
         01:5c:5c:62:d1:64:1f:8d:60:be:02:6c:d2:08:7c:b9:a5:ae:
         eb:79:f8:1a:c3:ed:4f:a0:bf:ae:18:18:08:d0:56:fa:e8:07:
         7d:c1:e4:ad:2a:62:b8:93:54:4d:16:fa:aa:c2:97:3c:82:fe:
         56:2f:90:b5:07:72:7a:8f:7f:a6:e2:08:20:47:0b:d5:51:45:
         b5:d0:ed:9d:36:76:79:0c:ff:48:30:42:a3:42:ea:74:4a:14:
         87:9f:ac:27:bd:14:2c:65:bf:a8:20:6b:0b:25:64:14:3c:4f:
         ed:ad:2b:7f:cc:8a:02:3b:35:bb:b0:f4:c8:31:e4:a1:2a:50:
         b9:f1:95:61:23:5d:02:48:1f:f8:ba:8b:ce:e8:fc:c9:ff:7f:
         e9:0e:98:ac:38:23:22:7a:e0:2a:c2:2d:21:75:f8:d7:ee:f4:
         99:02:3a:73:67:b3:da:e2:c7:49:ce:14:7e:cf:12:66:15:05:
         59:28:c6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:19 2025 by rpki-client on console.sobornost.net