Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/164081884269A17674589E45798EE6EE0A93A94E.mft
File:                     164081884269A17674589E45798EE6EE0A93A94E.mft (raw, json)
Hash identifier:          5m5wMNo0pM7xrUDcWa/ohLVhG43SikwjjeVfHvPM9Q8=
Subject key identifier:   F9:2A:E1:3B:C7:2A:D6:CE:9C:4A:85:FE:89:D6:4E:63:0F:43:6B:28
Authority key identifier: 16:40:81:88:42:69:A1:76:74:58:9E:45:79:8E:E6:EE:0A:93:A9:4E
Certificate issuer:       /CN=164081884269A17674589E45798EE6EE0A93A94E
Certificate serial:       2E8745ED2C5ED06F413AE7B4478F98E8A91080E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/164081884269A17674589E45798EE6EE0A93A94E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/164081884269A17674589E45798EE6EE0A93A94E.mft
Manifest number:          0204
Signing time:             Mon 28 Apr 2025 07:14:22 +0000
Manifest this update:     Mon 28 Apr 2025 07:09:22 +0000
Manifest next update:     Tue 29 Apr 2025 10:10:22 +0000
Files and hashes:         1: 323830343a336462303a3a2f33322d3332203d3e20323636353437.roa (hash: WVdzaeCCtrIr8J+kFR7ctu3KTdz9jtXAWnA4LgLWavw=)
                          2: 3136302e3233382e3132382e302f32332d3233203d3e20323636353437.roa (hash: 7rdi1u9Sfw3ztr22F6AjcVCpogpztKJl+jW23Df/JOU=)
                          3: 3136302e3233382e3133302e302f32332d3233203d3e20323636353437.roa (hash: C17vWwBy2ZWVsNGIreFsrmrtgzG2MpcbU6EaKaL98kM=)
                          4: 164081884269A17674589E45798EE6EE0A93A94E.crl (hash: MEmM9bZcD/FlDQtRMe79DYbOV9rgTd3GZCwVMSUKOyE=)
                          5: 323830343a336462303a3a2f33332d3333203d3e20323636353437.roa (hash: 1rbaQcZw1XsBcajUc6glWznxnB166Ml+fFTLtUTwrZE=)
                          6: 3136302e3233382e3132382e302f32322d3232203d3e20323636353437.roa (hash: sdD2Yd0FBjd+7ogQhl7Csizl/Xi5rW3ubqT/9jyTos0=)
                          7: 323830343a336462303a383030303a3a2f33332d3333203d3e20323636353437.roa (hash: N8ZF8hj9T2jm0q3+XtQzZwspKzzCE6tgAY/FX/YzquE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/164081884269A17674589E45798EE6EE0A93A94E.crl
                          rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/164081884269A17674589E45798EE6EE0A93A94E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/164081884269A17674589E45798EE6EE0A93A94E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:87:45:ed:2c:5e:d0:6f:41:3a:e7:b4:47:8f:98:e8:a9:10:80:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164081884269A17674589E45798EE6EE0A93A94E
        Validity
            Not Before: Apr 28 07:09:22 2025 GMT
            Not After : Apr 29 10:10:22 2025 GMT
        Subject: CN=F92AE13BC72AD6CE9C4A85FE89D64E630F436B28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f8:81:96:84:55:f4:06:4e:67:72:c5:df:e7:
                    8b:14:f8:65:7d:c1:5a:1a:40:b5:61:63:4d:1d:14:
                    91:e7:fb:43:6b:3c:40:65:9a:9a:a6:96:af:b6:53:
                    11:bf:34:24:62:83:e1:47:7b:e6:6d:a7:01:5e:3b:
                    ae:b5:ed:59:77:de:91:d3:84:96:45:e8:f8:6b:e5:
                    5f:d5:f6:75:4a:50:0c:76:a5:3c:cd:68:5f:c5:99:
                    42:d4:ac:c3:db:49:f7:c9:77:3f:2f:87:b3:fa:ef:
                    71:fa:45:fd:44:72:27:b8:04:bf:75:a4:fe:86:47:
                    03:31:cf:44:d3:4e:20:78:5a:89:5a:4a:24:35:7f:
                    07:c0:00:36:b9:52:51:47:02:34:f0:9c:c8:d6:10:
                    1d:3b:f0:4a:d1:17:e2:96:89:09:b3:2e:82:cd:80:
                    23:19:d4:48:4f:22:72:74:79:88:35:56:b8:86:55:
                    15:fa:c6:b4:d3:a2:57:e2:86:79:32:48:a8:af:47:
                    db:cf:40:54:1d:b0:e5:06:4b:07:fc:b8:42:82:89:
                    b3:27:23:ad:c3:72:a7:da:35:bf:77:74:67:63:ff:
                    47:b1:f2:7e:83:b0:18:35:24:94:d5:5e:cf:05:26:
                    d3:de:4a:4d:57:3c:8b:16:0c:a2:7e:93:ee:02:c0:
                    89:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2A:E1:3B:C7:2A:D6:CE:9C:4A:85:FE:89:D6:4E:63:0F:43:6B:28
            X509v3 Authority Key Identifier:
                keyid:16:40:81:88:42:69:A1:76:74:58:9E:45:79:8E:E6:EE:0A:93:A9:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/164081884269A17674589E45798EE6EE0A93A94E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/164081884269A17674589E45798EE6EE0A93A94E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/164081884269A17674589E45798EE6EE0A93A94E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c0:c6:78:da:1a:26:de:e3:b3:1e:8b:49:bd:eb:d2:c2:62:
         e9:21:4e:ab:69:d5:d2:89:97:0a:3e:87:46:cb:20:47:7d:c5:
         1c:12:5d:93:df:a7:85:33:97:86:8a:53:b2:98:21:33:56:ed:
         22:6f:ee:d2:c3:a7:f5:f5:27:0c:f2:50:c7:5d:90:bc:94:85:
         32:aa:23:1c:21:f9:17:96:64:ea:07:cd:69:27:4d:68:a9:d6:
         82:29:85:2a:47:1b:2a:14:df:1e:ba:39:7a:ef:24:cf:c6:7f:
         30:14:9e:b2:8c:8d:65:24:c2:cd:5b:1d:49:86:63:5a:9d:c6:
         48:ec:a8:0c:75:d7:4c:73:fd:c9:92:69:0c:1d:27:74:73:0a:
         c1:15:c9:f7:0b:c4:7e:4b:d5:fe:ab:ba:15:97:08:de:df:d2:
         79:77:02:82:c2:d1:08:0a:10:64:89:08:00:80:42:1a:b5:1e:
         fb:75:01:94:90:e3:d3:f3:3d:3b:e7:18:5b:d1:e4:ed:5e:6d:
         8b:14:3d:07:f2:db:d6:11:1b:02:f4:b3:e7:1b:8e:6b:e1:77:
         27:04:7a:be:29:c7:42:7c:f0:b2:44:76:c1:c6:67:d0:b3:ec:
         90:c5:d2:fb:c9:8e:eb:0c:7d:83:cf:ab:53:dc:db:f8:77:44:
         07:28:ff:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:19 2025 by rpki-client on console.sobornost.net