Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.mft
File:                     1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.mft (raw, json)
Hash identifier:          +z0Zz8O+aHgDXtTflwCaICUp1P/JSERZ2Svt0o+xokU=
Subject key identifier:   D7:3D:63:AC:7F:A9:46:B9:DD:C8:FF:6F:95:63:2C:0F:44:F4:C7:16
Authority key identifier: 1F:88:BE:2C:C4:CA:60:A3:45:8E:9F:8C:F2:FB:AA:FF:1F:ED:7A:07
Certificate issuer:       /CN=1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07
Certificate serial:       395892656885599287A7BFBD346442475DC982D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.mft
Manifest number:          5E
Signing time:             Mon 28 Apr 2025 14:01:28 +0000
Manifest this update:     Mon 28 Apr 2025 13:56:28 +0000
Manifest next update:     Tue 29 Apr 2025 16:36:28 +0000
Files and hashes:         1: 34352e3136362e3136342e302f32322d3332203d3e20323634303735.roa (hash: pH4nH9XnoINKxujLS+1Xl9tkL61JzzencLAT+Z/UbQ0=)
                          2: 3134332e3230382e32302e302f32322d3332203d3e20323634303735.roa (hash: 2fTfgk/FpE8z3PRGr2I6DYD99MKmP29Btk+BpLqCttE=)
                          3: 1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.crl (hash: j0xgouHpePbwgBmXP4/B9xo9ZtP6uOdmbybnT1Z7WfY=)
                          4: 3136382e3232372e35322e302f32322d3332203d3e20323634303735.roa (hash: 50yGs+iAXQUdCh0/nqVOVm9UmiIKcalmfjQafSLV590=)
                          5: 3134332e302e32342e302f32322d3332203d3e20323634303735.roa (hash: OC6qs+Lsdg5kgdbysx1b1OCsM6ZaemTrjIW7I5Rg/l4=)
                          6: 3138362e3233352e3132302e302f32312d3332203d3e20323634303735.roa (hash: B/RgHfboyf+FWMJv0IdyWCeTPk8uZm2HaHO+H4GCvRA=)
                          7: 323830343a326137633a3a2f33322d313238203d3e20323634303735.roa (hash: 4zzi2jdV8s+pEi3hbslRHvrswgwol/vUIR4V6cj0sUg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.crl
                          rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:58:92:65:68:85:59:92:87:a7:bf:bd:34:64:42:47:5d:c9:82:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07
        Validity
            Not Before: Apr 28 13:56:28 2025 GMT
            Not After : Apr 29 16:36:28 2025 GMT
        Subject: CN=D73D63AC7FA946B9DDC8FF6F95632C0F44F4C716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:aa:37:56:e5:02:92:7f:cc:9f:f2:34:0b:81:
                    9b:b9:ce:f9:c6:11:8e:41:c1:86:1c:9b:26:c3:c7:
                    36:46:59:d6:0b:b7:83:02:19:d5:99:4d:96:6f:b5:
                    d9:b6:91:c7:8f:2e:04:3f:89:66:30:84:f0:c3:41:
                    67:9f:7a:2d:df:61:fa:1f:8e:7b:20:33:c3:74:e6:
                    8b:74:d5:9d:95:c9:09:b1:4e:a2:6a:b2:ce:55:ef:
                    b9:b4:10:97:6e:37:db:1b:58:e4:55:a1:fb:c4:be:
                    ed:4e:95:6a:6e:58:c8:c6:a4:5d:b1:ea:ed:33:b1:
                    9c:58:35:94:1d:29:8f:f7:0c:7d:28:34:63:30:cd:
                    5d:79:a7:38:72:e4:1d:f1:e6:b1:df:f0:92:94:6e:
                    8b:59:36:a9:02:c2:05:0e:7a:94:c1:76:75:a6:da:
                    53:71:a9:6e:3d:dc:0e:d4:4f:9a:03:0e:97:7c:75:
                    5c:b2:1e:7c:44:f2:e0:ed:18:3a:13:a7:c0:a4:3c:
                    65:50:28:36:bf:98:7a:77:46:8a:75:79:16:0e:42:
                    18:b5:24:ae:4e:fe:7b:20:3d:14:c9:0d:70:36:29:
                    e8:c0:4d:38:00:7b:62:32:bf:5f:eb:9d:0c:91:3c:
                    d7:c8:34:de:20:ab:44:0b:2e:36:4c:0c:e1:2f:03:
                    d6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3D:63:AC:7F:A9:46:B9:DD:C8:FF:6F:95:63:2C:0F:44:F4:C7:16
            X509v3 Authority Key Identifier:
                keyid:1F:88:BE:2C:C4:CA:60:A3:45:8E:9F:8C:F2:FB:AA:FF:1F:ED:7A:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:10:0e:b0:3d:c4:f4:34:44:42:1f:ce:df:ad:64:4c:b4:4b:
         96:77:7d:3a:55:4a:f5:b8:a9:4a:84:66:8b:76:c3:a9:fb:43:
         4e:09:e6:38:09:ed:c5:9b:ea:b3:dc:7d:e4:85:c0:c0:f9:48:
         a2:bf:02:44:6c:cc:69:b7:a6:84:31:e1:fc:a1:fe:1d:69:15:
         55:44:3c:96:75:92:89:98:aa:aa:02:c4:a3:c8:e3:58:2c:2c:
         46:46:85:01:43:dd:04:15:fc:87:b0:c0:83:77:28:b0:1a:2b:
         be:6a:5c:53:ec:b3:85:18:5d:4e:e9:6f:9e:fe:ac:68:80:54:
         56:9a:24:49:05:39:cb:4f:13:5c:82:dc:5a:34:a7:16:5b:bd:
         d3:1c:a1:51:d4:4a:21:99:ac:ec:8e:eb:91:6f:c3:f4:d0:5d:
         3b:1e:5a:af:66:be:8a:e5:b1:79:9e:f9:d8:58:3b:1d:ca:06:
         91:a8:e3:e2:7f:5b:a5:e2:60:3c:17:35:d0:9d:9d:ec:78:09:
         f2:8e:0a:a1:75:0b:d0:2e:8d:ce:6c:26:e3:a5:06:c4:06:17:
         63:eb:72:a4:38:96:61:17:c2:af:4f:a3:20:90:fe:8b:70:26:
         58:97:1c:45:61:18:23:c3:f6:fc:1b:0b:90:e8:25:d6:0a:1c:
         9f:a9:64:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:06 2025 by rpki-client on console.sobornost.net