Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft
File:                     CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft (raw, json)
Hash identifier:          FJKQQ4GXISTDMf6Gpt5LUiqPOgFazfRGJkAhkR9jgiw=
Subject key identifier:   53:FB:95:2F:AB:70:62:0F:AE:45:36:93:BA:10:2C:91:0E:D9:CF:4B
Authority key identifier: CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3
Certificate issuer:       /CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
Certificate serial:       602998C4D6C0A4EA978FDA769399DCFFE91F2312
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft
Manifest number:          01BA
Signing time:             Fri 25 Apr 2025 14:19:49 +0000
Manifest this update:     Fri 25 Apr 2025 14:14:49 +0000
Manifest next update:     Sat 26 Apr 2025 17:57:49 +0000
Files and hashes:         1: 3230302e33392e36342e302f31392d3234203d3e203533303436.roa (hash: MRcXyI0TlEOfi1NedYnXkpGkWPAoWDvVPDKiC67WdWk=)
                          2: 323830343a316630343a3a2f33322d3438203d3e203533303436.roa (hash: 3SlslTfV7qgXhUSvNVGWHN1mhK5XSbvZzPV7YmJswEw=)
                          3: 3134332e3230382e3136302e302f32322d3234203d3e203533303436.roa (hash: qMXAgAO+BYJEdMdz8p6FM+YprIAh/MFGlG4IvcfJNBQ=)
                          4: 3137372e3130312e31362e302f32302d3234203d3e203533303436.roa (hash: YeSNvYvqBCjMEoK+Q/NJDOiZCK53JOBBsKlvXOvwRh0=)
                          5: 3137372e39332e3132302e302f32312d3234203d3e203533303436.roa (hash: SJPejeWmrCKU2BVHGCUBvNYhZpJRohjg03NLqxmX0eA=)
                          6: CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl (hash: vaRzNzpAM7TnyyZFQdz2VA/Vg4tNPkojtvOIUAHsPvQ=)
                          7: 34352e3138362e3134332e302f32342d3234203d3e203631363030.roa (hash: k1hcI9nO9X9S7wh/gHdSapShUnJQXtmpCeggDbpWkbs=)
                          8: 323830313a38303a333761303a3a2f34382d3438203d3e203631363030.roa (hash: 1jZLHeI3moYUonEOUTeh8owqdbmZA9cZxOOkiq6Cwo4=)
                          9: 323830313a38303a3333303a3a2f34382d3438203d3e203533303436.roa (hash: 7B977IITp/ZAZsfynUjTyk6lyqSnirUNhyLE2X1QWIc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl
                          rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:29:98:c4:d6:c0:a4:ea:97:8f:da:76:93:99:dc:ff:e9:1f:23:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
        Validity
            Not Before: Apr 25 14:14:49 2025 GMT
            Not After : Apr 26 17:57:49 2025 GMT
        Subject: CN=53FB952FAB70620FAE453693BA102C910ED9CF4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:3b:ba:ca:f0:a2:a0:d5:f5:eb:73:22:57:
                    a0:6f:8d:ea:58:32:84:80:72:75:72:3f:90:b3:96:
                    d4:ab:62:d1:7e:2f:57:4c:e7:de:2a:c1:22:ba:1d:
                    34:f6:6e:d8:e3:03:05:7e:7e:9c:06:c7:54:1e:3a:
                    15:cf:82:c8:1d:4a:f8:1b:e9:83:fa:a4:40:66:48:
                    1d:f3:e7:da:87:d7:f1:9f:9e:d9:43:ee:b1:d7:27:
                    b1:04:b0:03:c1:7e:49:9b:9f:98:3b:99:b0:7f:25:
                    78:8b:14:3f:3d:f8:02:78:10:c4:a0:b4:bf:60:e7:
                    a2:4e:99:bb:59:8c:df:f3:a0:d8:b8:5f:e6:81:92:
                    3a:79:c4:ba:df:0f:a3:9b:8e:e9:90:e6:98:4b:1c:
                    02:d5:22:f5:16:56:eb:0a:d7:b6:18:4f:0f:e6:37:
                    e6:23:d1:8e:ff:d0:18:05:70:70:dd:1c:10:de:a9:
                    0e:18:f8:9e:9e:b5:83:0b:1d:e9:0e:2c:87:22:1d:
                    9a:af:e8:b7:9b:c3:ff:75:ef:a6:57:8a:24:b7:2a:
                    9f:b8:78:17:7f:79:1c:b8:6d:b1:d8:2e:6f:42:80:
                    b7:c2:f7:46:42:77:97:a4:ef:f5:2a:06:96:2a:4a:
                    cb:29:cc:5a:e8:f4:cb:86:ba:86:a7:ad:7d:2a:a7:
                    49:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FB:95:2F:AB:70:62:0F:AE:45:36:93:BA:10:2C:91:0E:D9:CF:4B
            X509v3 Authority Key Identifier:
                keyid:CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:80:bb:37:e9:ee:3c:f4:6d:3e:0e:80:e1:27:32:0e:f6:03:
         2b:7c:d9:fd:0a:0d:c9:bf:99:7d:75:a5:b8:02:f8:53:99:bc:
         f8:27:c1:ee:ea:14:8b:06:70:ed:07:18:4f:6f:b9:84:ab:df:
         a3:15:5d:d6:69:a7:8c:03:68:2c:29:fb:04:24:72:56:f3:2b:
         a8:7e:a7:b1:a3:ce:6e:ea:94:b8:a9:aa:a1:94:42:81:fb:f1:
         48:d3:5b:62:80:ad:09:70:e2:26:88:ae:aa:89:25:2d:4b:e2:
         2e:ee:37:93:20:93:bc:c9:d3:dd:a2:d3:35:11:a4:8d:94:7a:
         ca:3c:1d:f1:d4:95:18:10:9d:0b:85:df:ee:ab:b0:32:35:75:
         d1:b5:10:e5:b3:f1:ee:71:53:14:9d:b2:86:61:bf:94:1e:22:
         28:b1:77:38:9f:74:72:a1:da:d7:4c:06:3f:4d:f0:73:8a:8b:
         f2:25:f3:6a:a4:38:d6:6b:81:00:06:22:02:d1:97:59:05:6d:
         7c:58:e5:98:81:11:6f:ae:95:4f:1b:89:19:5f:43:91:12:d8:
         08:ff:cc:10:f1:4d:d7:df:5d:83:3e:4d:15:cf:75:71:42:c1:
         32:8f:af:48:a7:33:d3:eb:8b:a0:50:84:30:8a:81:2d:75:1b:
         81:b1:fb:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYCmYxNbApOqXj9p2k5nc/+kfIxIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U2ODdCREZEM0U4RUJBQ0U3RUUxRUE4NEY3RkMxQkIy
NzhCM0NDMzAeFw0yNTA0MjUxNDE0NDlaFw0yNTA0MjYxNzU3NDlaMDMxMTAvBgNV
BAMTKDUzRkI5NTJGQUI3MDYyMEZBRTQ1MzY5M0JBMTAyQzkxMEVEOUNGNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyUDu6yvCioNX163MiV6BvjepY
MoSAcnVyP5CzltSrYtF+L1dM594qwSK6HTT2btjjAwV+fpwGx1QeOhXPgsgdSvgb
6YP6pEBmSB3z59qH1/GfntlD7rHXJ7EEsAPBfkmbn5g7mbB/JXiLFD89+AJ4EMSg
tL9g56JOmbtZjN/zoNi4X+aBkjp5xLrfD6ObjumQ5phLHALVIvUWVusK17YYTw/m
N+Yj0Y7/0BgFcHDdHBDeqQ4Y+J6etYMLHekOLIciHZqv6Lebw/9176ZXiiS3Kp+4
eBd/eRy4bbHYLm9CgLfC90ZCd5ek7/UqBpYqSsspzFro9MuGuoanrX0qp0k5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUU/uVL6twYg+uRTaTuhAskQ7Zz0swHwYDVR0j
BBgwFoAUzmh739Po66zn7h6oT3/BuyeLPMMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm5jRzlzMmd1cFg4c0VMa25Yam9UMjYyOFhYVmFtRlJxZ21CYU5YRW1V
WVEvMC9DRTY4N0JERkQzRThFQkFDRTdFRTFFQTg0RjdGQzFCQjI3OEIzQ0MzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNjg3QkRGRDNFOEVCQUNF
N0VFMUVBODRGN0ZDMUJCMjc4QjNDQzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Nm5jRzlzMmd1cFg4c0VMa25Yam9UMjYyOFhYVmFtRlJxZ21CYU5YRW1VWVEvMC9D
RTY4N0JERkQzRThFQkFDRTdFRTFFQTg0RjdGQzFCQjI3OEIzQ0MzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcYC7N+nuPPRtPg6A4ScyDvYDK3zZ/QoNyb+ZfXWluAL4U5m8+CfB7uoUiwZw
7QcYT2+5hKvfoxVd1mmnjANoLCn7BCRyVvMrqH6nsaPObuqUuKmqoZRCgfvxSNNb
YoCtCXDiJoiuqoklLUviLu43kyCTvMnT3aLTNRGkjZR6yjwd8dSVGBCdC4Xf7quw
MjV10bUQ5bPx7nFTFJ2yhmG/lB4iKLF3OJ90cqHa10wGP03wc4qL8iXzaqQ41muB
AAYiAtGXWQVtfFjlmIERb66VTxuJGV9DkRLYCP/MEPFN199dgz5NFc91cULBMo+v
SKcz0+uLoFCEMIqBLXUbgbH7QA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:14 2025 by rpki-client on console.sobornost.net