Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.mft
File:                     089033F3A2658F713EF52AAD4E26A915E28F2C55.mft (raw, json)
Hash identifier:          aNJdtLNGgtZx/1NZvrWTM0dIxR7cVY3DqZAwss7yGtM=
Subject key identifier:   55:D1:4E:E0:0E:46:D5:CD:93:5E:1C:11:0C:07:68:FE:5E:B4:1C:E1
Authority key identifier: 08:90:33:F3:A2:65:8F:71:3E:F5:2A:AD:4E:26:A9:15:E2:8F:2C:55
Certificate issuer:       /CN=089033F3A2658F713EF52AAD4E26A915E28F2C55
Certificate serial:       5A3533C72B537EFC371ED50D0D4F081E4E08A190
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.mft
Manifest number:          0206
Signing time:             Mon 28 Apr 2025 15:30:01 +0000
Manifest this update:     Mon 28 Apr 2025 15:25:01 +0000
Manifest next update:     Tue 29 Apr 2025 16:48:01 +0000
Files and hashes:         1: 323830343a326461343a3a2f33332d3333203d3e20323635323934.roa (hash: q3srhUDFxk4L9tlLZPIX3dKSjEwKhigXdIbisogODAY=)
                          2: 3136382e3132312e32362e302f32332d3233203d3e20323635323934.roa (hash: T0i5pCBay1EP2HPsI+cbEFII4HMvCelwj1ft7TZS41Q=)
                          3: 323830343a326461343a3a2f33352d3335203d3e20323635323934.roa (hash: JNhlHT8ZF+fJGymstfBZr2h6nViEFsiXJ60TXGobxxw=)
                          4: 3136382e3132312e32342e302f32332d3233203d3e20323635323934.roa (hash: 8/rqxb4PArgJNJ2XLR5xGVtKmadPCNoZ+AvvLNOlne0=)
                          5: 323830343a326461343a383030303a3a2f33332d3333203d3e20323635323934.roa (hash: S+KhMH3Ux3mx7nUcJ+CWXiG/glArUrhPNPGPbtsYwVQ=)
                          6: 089033F3A2658F713EF52AAD4E26A915E28F2C55.crl (hash: 4NJFCxDQqT8Ql04bXPPZzJC0DTjqHGqpoj+bpg1bdnc=)
                          7: 323830343a326461343a3a2f33342d3334203d3e20323635323934.roa (hash: ipzqwY6Qx5Oh19LYA7yPWSRVAaMBPbcoYF+UjMTXUsg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.crl
                          rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:35:33:c7:2b:53:7e:fc:37:1e:d5:0d:0d:4f:08:1e:4e:08:a1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089033F3A2658F713EF52AAD4E26A915E28F2C55
        Validity
            Not Before: Apr 28 15:25:01 2025 GMT
            Not After : Apr 29 16:48:01 2025 GMT
        Subject: CN=55D14EE00E46D5CD935E1C110C0768FE5EB41CE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:91:95:3e:a3:0f:55:04:eb:ef:8e:b6:fd:65:
                    f1:66:fc:4f:02:40:ba:21:fe:f7:ec:e7:72:77:64:
                    3a:4b:42:6b:40:90:7d:18:67:ac:29:8b:84:87:fb:
                    cb:34:5f:79:52:2d:9b:99:54:d4:8b:11:54:19:56:
                    c7:bb:41:6b:09:5e:2d:fc:90:ff:3b:12:b3:3f:c1:
                    3c:ef:2d:a8:79:bd:db:40:5c:f3:14:eb:31:3c:26:
                    6b:43:12:b0:0f:29:04:30:9f:39:63:30:4e:b9:d1:
                    06:b4:65:3f:fe:48:6a:d2:a6:b3:32:71:17:ac:73:
                    8b:c4:f9:fe:26:a2:12:71:14:7d:1b:e1:8a:ef:14:
                    6d:33:48:43:86:ce:8a:a9:3a:7a:94:03:e1:3e:1f:
                    2c:a7:70:8a:0b:26:69:31:08:4e:32:e5:fb:64:9f:
                    c6:d7:c6:89:11:fe:d6:d8:b6:24:47:8f:5a:c5:a2:
                    bf:bf:ba:18:6b:9a:95:24:46:dd:d8:c6:fa:a5:75:
                    70:3c:be:be:d1:4a:c0:ce:08:8a:89:82:88:ec:1f:
                    6f:df:4f:63:ab:2d:e2:18:2c:7d:4a:32:b4:b2:f8:
                    c4:40:e2:d5:cf:b4:e7:22:23:6c:b1:4e:4d:68:29:
                    65:ed:60:84:2a:7d:cf:b3:8a:03:6d:bf:f7:a2:46:
                    4f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D1:4E:E0:0E:46:D5:CD:93:5E:1C:11:0C:07:68:FE:5E:B4:1C:E1
            X509v3 Authority Key Identifier:
                keyid:08:90:33:F3:A2:65:8F:71:3E:F5:2A:AD:4E:26:A9:15:E2:8F:2C:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:3b:f0:c5:65:10:e2:e0:57:85:60:2f:ec:96:d4:89:df:e6:
         d3:7a:e3:c8:d9:25:14:a2:07:77:35:86:cc:eb:90:56:01:64:
         b5:a8:c4:5b:15:ed:60:e9:ee:c8:3c:6b:43:0d:fc:13:a0:f5:
         e3:e6:07:06:23:33:a0:3b:57:3b:03:05:39:f0:75:0e:88:f8:
         71:b4:3f:ae:6b:ec:92:33:05:85:b9:db:de:80:ae:a1:e9:65:
         c0:61:4f:15:b6:4b:21:d2:f5:72:d4:01:ba:0c:3a:65:c5:f0:
         1d:dc:ba:6c:c6:0c:44:41:75:64:56:56:54:5c:a8:85:8b:5c:
         94:d4:85:91:1c:fd:e9:b1:74:cf:e5:ad:dd:9e:17:43:d9:aa:
         86:e2:f8:ac:ca:5c:c4:c7:00:b7:d9:e5:14:6b:37:49:df:84:
         8c:d8:cc:33:14:13:3c:6f:fa:f5:59:30:03:a3:4c:dc:7a:23:
         8c:b8:80:53:10:b3:0a:db:2d:02:e7:31:62:6e:46:d6:bb:30:
         19:fd:29:a3:f1:5a:1d:8a:4a:50:e7:57:6c:43:bf:5e:c3:e1:
         c3:5e:85:59:7f:69:10:ed:b2:0d:55:f0:d0:24:6e:45:5a:5d:
         88:0d:58:d9:1f:55:68:45:44:39:21:04:32:91:27:ee:f5:33:
         6b:5d:a4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:56 2025 by rpki-client on console.sobornost.net