Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.mft
File:                     5DB9D1112BE2979B659023FF1013B1891DF0BC2F.mft (raw, json)
Hash identifier:          nXOwSu89EyB2tt0SpU2Q2jpaxBsmixrSYw6yqDcanG8=
Subject key identifier:   31:EF:DB:15:A2:A4:42:83:00:5B:0C:11:B2:C2:B0:57:1C:85:D0:5E
Authority key identifier: 5D:B9:D1:11:2B:E2:97:9B:65:90:23:FF:10:13:B1:89:1D:F0:BC:2F
Certificate issuer:       /CN=5DB9D1112BE2979B659023FF1013B1891DF0BC2F
Certificate serial:       29A146B74514AD7E6499DB76C0918381585708B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.mft
Manifest number:          2B
Signing time:             Sun 27 Apr 2025 03:01:51 +0000
Manifest this update:     Sun 27 Apr 2025 02:56:51 +0000
Manifest next update:     Mon 28 Apr 2025 06:03:51 +0000
Files and hashes:         1: 323830343a383739633a3a2f33322d3333203d3e20323732373230.roa (hash: UIFYaXICVinmcyN/GiMBixZu8B6KaPa5illfAdp2QM0=)
                          2: 5DB9D1112BE2979B659023FF1013B1891DF0BC2F.crl (hash: UcvLsLcwYig0uHi7XQ/5qhBBywgaTZ3gQa3Mv7PVajk=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.crl
                          rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a1:46:b7:45:14:ad:7e:64:99:db:76:c0:91:83:81:58:57:08:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DB9D1112BE2979B659023FF1013B1891DF0BC2F
        Validity
            Not Before: Apr 27 02:56:51 2025 GMT
            Not After : Apr 28 06:03:51 2025 GMT
        Subject: CN=31EFDB15A2A44283005B0C11B2C2B0571C85D05E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:72:89:b9:84:56:68:81:f5:ac:27:a9:65:84:
                    d4:b1:b1:dd:c7:27:81:f9:46:ed:2e:c7:7f:12:d7:
                    13:49:f6:25:97:8a:1d:d5:26:92:26:33:eb:4b:be:
                    95:44:40:d3:87:a5:a5:ca:ee:a3:4e:cd:8a:61:e6:
                    8b:84:58:01:8e:d3:cc:28:83:23:fa:f2:c7:36:29:
                    47:4e:48:78:d5:63:39:c7:d2:93:50:19:87:9e:6a:
                    46:e4:a8:b9:7c:ad:6f:01:05:3a:8a:01:f4:d2:f8:
                    e1:c6:50:ac:a9:b6:bb:ae:91:f1:b5:82:41:2a:80:
                    99:c1:b5:a8:30:b7:b0:77:70:19:52:74:57:b7:44:
                    70:b8:67:1f:12:c4:ee:97:5b:ea:bb:bd:98:a8:4f:
                    f9:e6:ce:d6:36:e5:77:0e:71:16:77:4a:30:c4:f9:
                    16:01:b5:8b:18:a1:a9:d9:5b:81:f1:e6:ea:6d:83:
                    39:1d:f2:96:2a:fd:a5:72:33:99:92:e2:30:58:11:
                    99:34:63:40:e9:90:1a:22:7a:52:48:2c:f1:1c:91:
                    d3:c5:46:ba:88:f3:62:c4:c9:eb:3b:69:34:48:a9:
                    a4:d1:28:ad:5b:38:16:16:9b:03:78:01:7d:ad:38:
                    59:c4:fc:e0:ed:59:03:43:b1:9e:93:c5:02:88:f0:
                    4d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EF:DB:15:A2:A4:42:83:00:5B:0C:11:B2:C2:B0:57:1C:85:D0:5E
            X509v3 Authority Key Identifier:
                keyid:5D:B9:D1:11:2B:E2:97:9B:65:90:23:FF:10:13:B1:89:1D:F0:BC:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:5a:75:6d:ae:6d:80:1b:ea:e8:18:7a:e9:89:ea:5e:50:a4:
         ed:4c:39:f6:44:26:ec:13:11:48:be:12:d2:3e:c3:27:9f:91:
         6e:90:a0:e3:6f:a3:2a:5f:c8:cd:64:4a:7c:16:ad:e9:7e:db:
         4d:58:26:85:6e:31:fd:09:2d:5e:98:62:93:42:a5:30:1a:9a:
         10:54:df:4f:c0:b2:e4:0b:24:0d:55:ad:b4:c6:27:49:34:c6:
         70:61:11:af:09:29:b1:73:22:d6:a3:50:0b:2c:3c:af:f5:75:
         a7:47:08:5d:36:70:24:a9:a7:6b:5e:f8:ce:39:9c:f7:77:85:
         61:b5:b6:dd:0f:e0:68:af:0c:43:ed:36:dd:49:1e:1d:35:e2:
         ff:76:15:c5:02:cd:89:cc:91:15:01:be:ca:e0:24:c8:64:20:
         61:93:9d:4f:ce:ce:79:59:e2:68:a9:0f:76:57:f7:74:4e:fc:
         76:5f:ee:79:0a:88:a9:9c:af:d6:6e:f3:6d:25:50:87:dd:c0:
         e5:5d:02:cc:77:fc:5a:ef:5f:4c:c3:de:91:57:d3:ce:93:ab:
         37:14:e4:a4:b2:ec:d8:f4:36:a2:7d:fb:80:98:ed:f3:b2:4b:
         88:2f:0e:96:fe:bd:99:d2:a5:8d:b6:a1:b8:d3:5b:51:e1:97:
         22:8e:50:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:51 2025 by rpki-client on console.sobornost.net