Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
File:                     B8BF0367B559121777A21A84D953A717D6E82AEA.mft (raw, json)
Hash identifier:          1UvzwUBDUa+u3somqEjNdTJM+QeSZZCUCcuc1wFcbiw=
Subject key identifier:   D7:8B:7C:93:A9:51:24:7D:F6:87:32:66:BC:A5:83:13:1D:4B:DC:46
Authority key identifier: B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
Certificate issuer:       /CN=B8BF0367B559121777A21A84D953A717D6E82AEA
Certificate serial:       35CFD8A84764EDFC1F6DE6F883A37D355B7D00C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
Manifest number:          0217
Signing time:             Mon 28 Apr 2025 14:16:53 +0000
Manifest this update:     Mon 28 Apr 2025 14:11:53 +0000
Manifest next update:     Tue 29 Apr 2025 15:24:53 +0000
Files and hashes:         1: 323830343a313434303a3a2f33322d3430203d3e20323633333231.roa (hash: 4zy1wfhCDfCEc1joqTfUw3AH6G7CAwgUFDHcwplid3k=)
                          2: B8BF0367B559121777A21A84D953A717D6E82AEA.crl (hash: tf944Sw6hO0MP0DIGneuW/XslITn0h2lX8Il3RlhoJ0=)
                          3: 3137302e3233332e3230342e302f32322d3234203d3e20323633333231.roa (hash: UeHadeVJurQ6ENd9ZAl6ibI/ZSyvYXfgwwd/iHAfyI0=)
                          4: 3136382e39302e32342e302f32322d3234203d3e20323633333231.roa (hash: 3m6deiNIWH8marGu+EF5nE3sSOyMxJnVZnTqukdEVaI=)
                          5: 3139312e372e3133362e302f32312d3234203d3e20323633333231.roa (hash: jq33KYU9CFhSabj7FQHib1ORj2LmOp7hWFRBMmOuUz0=)
                          6: 323830343a313434303a3a2f33322d3334203d3e20323633333231.roa (hash: SKkd6T2FtnRBoMRG1gHzLFRqFIiv+vR6d5EwAbC7wyg=)
                          7: 3133382e3131372e32342e302f32322d3234203d3e20323633333231.roa (hash: HGdBSKiFk/DeL8vH+MszMy1P4lWK9jQ4lctnfCkuvr0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl
                          rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:24:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:cf:d8:a8:47:64:ed:fc:1f:6d:e6:f8:83:a3:7d:35:5b:7d:00:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF0367B559121777A21A84D953A717D6E82AEA
        Validity
            Not Before: Apr 28 14:11:53 2025 GMT
            Not After : Apr 29 15:24:53 2025 GMT
        Subject: CN=D78B7C93A951247DF6873266BCA583131D4BDC46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7a:81:03:0e:6c:b5:87:45:d1:24:4f:8a:1a:
                    1d:6a:43:ee:92:88:2f:f8:e7:fa:8f:9e:2b:74:1c:
                    7e:a6:1d:9e:a0:bf:ae:a7:a2:0f:59:02:cd:8f:1d:
                    55:1a:3e:a0:45:8d:21:4f:33:5d:10:a5:ef:98:88:
                    6f:5a:57:02:7b:07:d2:01:9e:ac:b2:6e:7e:49:aa:
                    0f:03:27:ff:cf:e8:05:c5:da:b1:4e:10:61:dc:fd:
                    d5:40:b7:11:fe:9a:c5:66:26:07:b2:1d:45:99:d5:
                    60:41:0c:e6:18:e2:e1:40:25:ca:f9:55:c4:c3:c3:
                    0a:13:02:3d:26:35:02:da:fc:46:b0:18:59:3a:86:
                    c6:a6:9f:0e:d8:97:e4:fb:04:9d:72:a8:de:de:be:
                    e4:c0:36:a6:80:44:98:9c:39:c2:ad:fb:1f:c7:33:
                    48:28:cb:ae:6c:d6:7b:5d:bb:b5:a7:a7:27:07:3c:
                    55:2c:0b:5e:29:6a:af:a2:08:c1:4c:d0:ae:26:4f:
                    32:4b:c8:14:34:80:7a:a6:98:ca:26:4e:f5:81:21:
                    9c:1e:ca:b7:5f:5d:fe:36:a8:b8:76:e7:9c:5f:90:
                    df:e7:31:f4:8d:d9:da:27:f3:8b:84:ff:7b:2b:0f:
                    a0:6b:4a:ee:da:1c:43:3a:92:18:79:e0:71:20:1f:
                    b4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8B:7C:93:A9:51:24:7D:F6:87:32:66:BC:A5:83:13:1D:4B:DC:46
            X509v3 Authority Key Identifier:
                keyid:B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:6c:a7:b0:63:75:c2:2e:07:91:12:46:a0:d0:87:dc:19:7c:
         7b:0c:28:c4:15:2a:0d:c8:2b:4c:81:88:cd:cd:dd:3f:a9:f5:
         f7:cf:27:68:62:19:ca:59:6b:56:30:c1:84:2f:27:0e:e3:c8:
         eb:b4:d4:e9:6f:d1:f0:ba:4a:40:ff:51:53:f3:5a:83:9f:33:
         fa:a1:9e:3b:36:3c:0a:d9:d4:e3:dd:d9:17:b2:46:57:a2:e1:
         93:c7:31:9a:7e:8d:4f:5a:a0:74:37:5e:f1:72:75:bc:96:cb:
         26:aa:84:0e:55:ff:d4:a5:3b:3c:48:7e:47:cf:07:5c:77:e7:
         de:99:7a:ce:d3:be:53:e5:cb:9a:80:a4:97:45:cb:a7:ff:53:
         33:0a:b0:ef:5d:a2:33:76:9f:d1:8e:53:7d:1a:3a:a8:bc:73:
         8f:5a:55:43:1c:2f:60:7b:35:89:de:ba:91:d3:c2:05:3f:b3:
         85:96:ab:cb:08:da:57:4b:78:9f:c6:6b:f3:7f:bc:a6:64:2d:
         61:f9:bc:cb:f1:3f:ee:e9:9f:22:42:72:32:25:42:2a:e4:ea:
         18:84:34:c4:28:12:d0:18:40:62:47:76:37:92:66:7a:d9:8f:
         9a:9b:cd:f0:1c:29:8e:9d:e2:81:d7:d2:42:6f:2f:01:46:89:
         1a:81:3d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:56 2025 by rpki-client on console.sobornost.net