Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.mft
File:                     02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.mft (raw, json)
Hash identifier:          rKohdtTCyN42tCv7SCBGv1xLUcCJNvMkMM+kLzq45iw=
Subject key identifier:   A7:D4:DA:22:55:5D:09:FD:CC:53:E9:5A:8F:A1:BE:EE:F4:7B:E1:C1
Authority key identifier: 02:AF:15:78:6C:E0:3E:FA:4A:63:F9:B5:B5:E9:50:54:9A:B9:7D:A5
Certificate issuer:       /CN=02AF15786CE03EFA4A63F9B5B5E950549AB97DA5
Certificate serial:       3722D594C9A475EA75EE5C23A41B1099756471E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.mft
Manifest number:          0C
Signing time:             Fri 25 Apr 2025 07:42:56 +0000
Manifest this update:     Fri 25 Apr 2025 07:37:56 +0000
Manifest next update:     Sat 26 Apr 2025 09:14:56 +0000
Files and hashes:         1: 323830343a386261633a3a2f33322d313238203d3e20323733373438.roa (hash: IXtbrZ88S7iaYvfOEJ+5JHb4koMATl5+ir1CrW4Xk+Y=)
                          2: 02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.crl (hash: /Z7FO36q7NT8yP/g2zeN3dsvBfFRFAQoDkxi36Wu0eM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.crl
                          rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:14:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:22:d5:94:c9:a4:75:ea:75:ee:5c:23:a4:1b:10:99:75:64:71:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02AF15786CE03EFA4A63F9B5B5E950549AB97DA5
        Validity
            Not Before: Apr 25 07:37:56 2025 GMT
            Not After : Apr 26 09:14:56 2025 GMT
        Subject: CN=A7D4DA22555D09FDCC53E95A8FA1BEEEF47BE1C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:c9:37:53:80:c3:6f:c6:91:25:ed:8e:16:
                    2a:93:51:b6:29:40:54:e3:de:96:39:64:01:38:56:
                    d6:ee:cd:80:f7:79:e5:f5:a9:17:dc:e8:ea:f8:9a:
                    c8:57:a4:f4:fc:02:3f:db:86:8a:0f:26:e7:42:58:
                    2e:92:99:41:49:d7:c2:5e:66:67:2f:2b:d7:96:48:
                    80:2b:67:8f:33:77:8c:92:37:79:1e:86:8c:b8:48:
                    3a:5e:38:09:f1:59:fd:d3:65:a3:af:e3:f0:1a:67:
                    57:d4:35:06:a4:9a:07:70:ac:7a:35:59:d5:d7:5a:
                    b7:f6:0f:59:7b:2b:f4:37:12:02:46:41:1b:1b:68:
                    bd:a9:36:b2:d1:a5:10:43:15:83:ba:54:0d:8d:ba:
                    a1:05:b1:6c:75:e6:cb:7e:b5:dd:ae:4d:05:1e:71:
                    46:69:75:a0:05:61:2f:20:9a:62:0c:70:43:ea:3b:
                    a0:bd:ee:63:18:c2:67:f3:0d:d0:78:93:20:bf:ba:
                    89:a2:d0:fb:cc:b0:26:96:4f:8f:e9:d6:87:9b:8b:
                    c3:d4:6f:78:d4:b7:3e:20:24:ed:60:3c:1f:d9:ce:
                    57:34:41:6b:4e:9f:13:2b:7a:b9:9b:f0:36:d4:4a:
                    a7:02:a0:0e:cb:c8:6c:53:b1:b3:3d:41:24:b1:cd:
                    c7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D4:DA:22:55:5D:09:FD:CC:53:E9:5A:8F:A1:BE:EE:F4:7B:E1:C1
            X509v3 Authority Key Identifier:
                keyid:02:AF:15:78:6C:E0:3E:FA:4A:63:F9:B5:B5:E9:50:54:9A:B9:7D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:1b:b5:67:d9:31:42:30:ec:61:ca:cb:b4:90:65:ce:2e:be:
         34:7c:fa:d8:cf:67:43:3c:7f:8e:9d:63:dd:2a:b2:69:ff:45:
         92:56:ff:42:2b:15:78:95:68:73:82:9d:fd:16:5e:9d:c3:0a:
         ae:d1:1b:e0:f9:d5:b8:9d:4f:db:bf:04:27:90:48:57:5c:ea:
         4c:a0:23:c0:bb:03:9a:db:cc:d6:df:b7:64:9d:27:e6:cd:94:
         04:ff:95:49:04:03:68:69:00:da:0d:a0:91:8c:01:ef:29:42:
         2e:be:1f:aa:34:2a:95:f3:da:20:3a:6e:9c:ba:a2:00:7b:4b:
         90:28:e2:2f:62:b7:2b:6c:b3:a1:9d:57:a0:ce:f1:a1:da:5a:
         b4:a2:45:e8:d1:79:8a:76:36:37:ab:54:28:46:a4:a0:bc:ef:
         ef:91:04:dc:9f:bd:a5:c3:92:ee:90:ac:e5:2a:b4:9e:51:aa:
         2f:aa:45:40:71:47:84:e8:83:d0:b0:5d:84:dc:45:9c:25:47:
         62:dd:78:fb:7a:0f:c0:a7:1b:a7:fa:a7:dc:a0:35:fa:4f:b9:
         c2:f1:5b:f9:bb:7f:5c:f2:a3:ff:b0:1e:d7:2e:03:33:7c:ea:
         f1:46:3f:6a:20:72:98:44:b1:58:22:ed:52:f8:f5:02:41:c4:
         fa:34:50:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:00 2025 by rpki-client on console.sobornost.net