Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.mft
File:                     29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.mft (raw, json)
Hash identifier:          +upm4k+oqUpDzfForIoku472NgA1LprEAmBH9wzAdt4=
Subject key identifier:   D1:5D:05:B1:E4:7F:37:0F:93:74:D3:1D:96:B4:F0:C1:BE:69:0E:E8
Authority key identifier: 29:D7:11:2C:7B:6B:D3:94:11:33:D8:A2:DB:0F:BA:B6:CA:08:1C:17
Certificate issuer:       /CN=29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17
Certificate serial:       501C134686218B023215808E3EE3708FC5417685
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.mft
Manifest number:          0189
Signing time:             Fri 25 Apr 2025 16:51:46 +0000
Manifest this update:     Fri 25 Apr 2025 16:46:46 +0000
Manifest next update:     Sat 26 Apr 2025 19:40:46 +0000
Files and hashes:         1: 3137372e38372e3137362e302f32322d3234203d3e20323632333036.roa (hash: /1iZ7MfjI0TaFU+5fIGZM08kiGyQDGOepbs2iyRnPng=)
                          2: 323830343a383130303a3a2f33322d313238203d3e20323632333036.roa (hash: Ixun3nWW3SSxlndSkYliPomT6RUJWF3m47aF6RdUzTo=)
                          3: 29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.crl (hash: KtETOetJ+Vnv/eBrUNgozM1HHKgUBB7XZrxAufwk84o=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.crl
                          rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 18:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:1c:13:46:86:21:8b:02:32:15:80:8e:3e:e3:70:8f:c5:41:76:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17
        Validity
            Not Before: Apr 25 16:46:46 2025 GMT
            Not After : Apr 26 19:40:46 2025 GMT
        Subject: CN=D15D05B1E47F370F9374D31D96B4F0C1BE690EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f3:69:8e:cd:be:37:68:5b:50:b4:75:f0:d3:
                    38:25:62:e8:ed:93:2d:63:ed:af:08:61:5f:f7:b5:
                    45:c9:d3:74:95:9e:23:ad:b7:3d:43:23:2d:a3:82:
                    97:b0:d5:57:39:56:04:c3:89:64:05:20:5d:59:28:
                    6a:52:7f:15:fd:a2:a9:2a:b9:ff:03:51:0a:47:21:
                    b6:e8:d4:d9:5f:d7:ef:5f:d3:f1:61:d6:ff:3f:d1:
                    19:da:87:a7:a8:a1:f1:c0:dc:9f:62:0e:8e:13:3b:
                    a0:4a:6f:a7:90:24:ba:d3:f9:1d:70:1f:69:86:ca:
                    6b:67:21:69:d8:b9:79:ba:cd:24:b4:2b:1d:72:f2:
                    ca:b7:dc:3f:4a:c0:be:85:15:d6:02:98:76:21:a4:
                    b7:d1:43:06:e2:a5:53:1c:5d:ad:57:0a:b8:00:81:
                    02:0a:84:bc:28:8c:66:09:00:70:d0:38:22:31:c8:
                    c3:9d:7b:96:65:34:77:b5:d7:96:69:30:17:0a:8b:
                    57:cc:b1:53:bd:aa:a1:e9:11:bc:c3:d7:44:7d:72:
                    e6:c5:04:2f:1a:cb:78:e0:35:81:d4:0a:b4:2e:0a:
                    61:11:79:e7:52:ce:33:67:05:22:24:32:7e:8f:e3:
                    43:d7:26:ac:c7:9c:54:32:e7:c6:8d:4a:f1:b7:27:
                    c0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5D:05:B1:E4:7F:37:0F:93:74:D3:1D:96:B4:F0:C1:BE:69:0E:E8
            X509v3 Authority Key Identifier:
                keyid:29:D7:11:2C:7B:6B:D3:94:11:33:D8:A2:DB:0F:BA:B6:CA:08:1C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:dc:70:b5:ad:3e:f1:95:8a:d3:c2:4d:7b:e5:35:17:28:89:
         c1:8e:fd:b3:6d:d2:44:2a:1b:d4:8c:25:77:0b:5c:de:2b:c5:
         87:bd:17:62:a0:57:89:0a:29:9e:2c:c1:fb:a8:63:49:81:31:
         70:2a:64:ac:f7:fc:e2:b5:5b:a2:6b:21:1c:e7:48:73:6b:cb:
         b6:ce:38:ad:c5:f5:eb:a7:6f:59:3b:73:79:83:54:cb:60:37:
         2a:e5:a2:2e:85:49:c4:86:da:b8:52:96:c6:01:95:66:8b:31:
         21:62:32:ea:f7:e7:c6:9f:44:74:0c:ab:db:7d:55:5d:fb:64:
         e7:24:65:ad:1e:1d:3f:89:e8:e9:b5:eb:80:a0:bb:eb:48:40:
         08:46:db:28:84:ba:65:47:56:fd:e0:28:ce:66:d2:df:b4:90:
         5b:88:a6:77:51:0e:84:bd:4c:e1:78:e7:2c:69:6a:a2:93:60:
         a9:b4:9f:d3:d1:03:99:0e:7d:97:34:4f:32:7c:d1:f5:41:bd:
         16:07:14:0a:9f:a7:4f:92:a1:17:d3:da:ff:ad:72:ad:f6:1f:
         3c:a3:cd:15:91:09:c8:f4:0c:0d:32:c1:be:a6:ad:47:83:7b:
         46:83:1b:5e:18:3e:95:45:85:e0:af:a3:10:59:73:47:47:8c:
         7f:56:b1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:39 2025 by rpki-client on console.sobornost.net