Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/684027F204382A1BC3E39E8891804EBB07906C89.mft
File:                     684027F204382A1BC3E39E8891804EBB07906C89.mft (raw, json)
Hash identifier:          A3hF/eMeAxIh3xKG0Pmr0QFu1PSOuRRUwcaMWiKTZ7g=
Subject key identifier:   62:08:AD:33:85:CE:B8:3F:D3:A5:07:98:2A:92:31:71:DF:18:82:FD
Authority key identifier: 68:40:27:F2:04:38:2A:1B:C3:E3:9E:88:91:80:4E:BB:07:90:6C:89
Certificate issuer:       /CN=684027F204382A1BC3E39E8891804EBB07906C89
Certificate serial:       204C15422CFB84BD636F22AE06B934A5AED43A88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/684027F204382A1BC3E39E8891804EBB07906C89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/684027F204382A1BC3E39E8891804EBB07906C89.mft
Manifest number:          020A
Signing time:             Mon 28 Apr 2025 15:01:03 +0000
Manifest this update:     Mon 28 Apr 2025 14:56:03 +0000
Manifest next update:     Tue 29 Apr 2025 15:44:03 +0000
Files and hashes:         1: 684027F204382A1BC3E39E8891804EBB07906C89.crl (hash: bCh22EQ6mWAkI2IaAgV8eCRi/trxSYegpNnbn8hPn4o=)
                          2: 323830343a316338383a3a2f33322d3438203d3e203631363630.roa (hash: MvNPDvg0woR5lDZdBX/lK4ar4Gu89zfPe2BonQZJePQ=)
                          3: 3133382e3138352e3130302e302f32322d3234203d3e203631363630.roa (hash: 6YsXPpgLqbq344UXVGiq4LR05vluWKsQGp3V/suUdvU=)
                          4: 3133312e3130382e34342e302f32322d3234203d3e203631363630.roa (hash: XEQZpmAzMMqorDI3DWFDpfVoTNRRMat6uA9b3KZO36M=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/684027F204382A1BC3E39E8891804EBB07906C89.crl
                          rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/684027F204382A1BC3E39E8891804EBB07906C89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/684027F204382A1BC3E39E8891804EBB07906C89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4c:15:42:2c:fb:84:bd:63:6f:22:ae:06:b9:34:a5:ae:d4:3a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=684027F204382A1BC3E39E8891804EBB07906C89
        Validity
            Not Before: Apr 28 14:56:03 2025 GMT
            Not After : Apr 29 15:44:03 2025 GMT
        Subject: CN=6208AD3385CEB83FD3A507982A923171DF1882FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0e:7f:3a:20:4f:1e:c7:f3:fe:e6:6b:f7:08:
                    be:9f:e0:be:96:81:1a:28:67:65:75:e9:d9:5e:9e:
                    f8:58:5f:a0:2d:f6:92:49:c8:8b:24:4c:fc:75:a0:
                    38:1c:02:b7:93:60:3b:8f:17:87:c9:04:0b:49:75:
                    bb:f8:d8:65:b7:97:f0:7e:c4:63:a1:da:5b:79:00:
                    ed:55:5e:8a:9e:08:ce:7f:30:27:3d:f2:25:1d:8a:
                    2c:56:97:f5:8d:14:45:2d:93:fc:16:66:ce:83:7c:
                    52:92:59:1d:f9:25:b8:b6:c6:f6:be:27:0a:30:bc:
                    e3:73:e4:f0:cf:c9:75:18:dc:92:cc:94:fe:88:54:
                    c4:92:eb:8e:0f:ad:13:da:0a:30:7b:d6:d2:f0:9d:
                    b2:a9:f6:94:0d:aa:02:08:c2:4e:9f:04:d6:c4:62:
                    37:a9:9e:b0:82:2c:b9:3d:56:e4:8e:55:55:ba:c5:
                    33:8a:7d:41:d4:40:7f:d8:a1:74:6a:02:da:94:f8:
                    86:db:bf:72:09:be:47:00:d4:1e:93:d7:88:14:72:
                    63:18:79:b5:e1:cb:f3:1a:70:18:38:5c:f1:13:e8:
                    cd:58:a7:c3:64:36:5d:7d:af:50:3c:e3:85:63:d0:
                    04:08:2f:11:41:b9:d8:17:62:56:cf:c7:1d:11:14:
                    c9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:08:AD:33:85:CE:B8:3F:D3:A5:07:98:2A:92:31:71:DF:18:82:FD
            X509v3 Authority Key Identifier:
                keyid:68:40:27:F2:04:38:2A:1B:C3:E3:9E:88:91:80:4E:BB:07:90:6C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/684027F204382A1BC3E39E8891804EBB07906C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/684027F204382A1BC3E39E8891804EBB07906C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/684027F204382A1BC3E39E8891804EBB07906C89.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:8f:5a:94:f7:c2:4a:0b:4e:da:ff:e1:64:5a:a2:6a:b7:eb:
         3d:ab:ea:03:9d:96:65:fb:16:34:a2:5f:4f:a3:7e:1f:0a:96:
         c0:6e:63:1a:08:e5:0b:a6:62:22:3c:4e:41:5f:69:5e:17:0f:
         f1:67:cb:65:af:2b:34:92:79:dd:e8:6c:53:b2:fd:12:3f:d2:
         6e:0e:4f:64:d9:2a:2d:8e:68:67:e0:39:a5:e2:f0:97:99:ca:
         06:d0:37:17:e9:f4:1f:19:71:73:d6:7d:2a:96:95:7a:3e:56:
         1b:ad:bd:2e:fe:6e:0a:b8:8e:e4:0c:dd:01:ea:54:cf:c7:e9:
         28:27:2b:b6:01:47:21:b7:a9:1e:c8:ff:20:06:0c:13:02:e3:
         56:b1:0b:ae:49:b1:40:07:51:23:78:14:f1:bb:13:73:0b:a7:
         9c:42:a5:e0:88:79:1d:81:47:62:6c:7e:7b:af:07:1c:fd:9f:
         68:24:fd:a3:46:ef:67:2b:62:38:6b:d8:41:5f:ff:1d:98:ea:
         53:12:6c:46:c1:3c:2b:4d:f4:99:b3:9c:4f:c3:1e:2e:74:31:
         a0:b9:37:62:db:f5:97:88:da:14:79:17:1d:ab:39:5c:dc:37:
         75:49:27:ff:2c:36:53:b0:30:13:62:ae:f7:f8:48:88:bb:af:
         cf:1a:eb:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIEwVQiz7hL1jbyKuBrk0pa7UOogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg0MDI3RjIwNDM4MkExQkMzRTM5RTg4OTE4MDRFQkIw
NzkwNkM4OTAeFw0yNTA0MjgxNDU2MDNaFw0yNTA0MjkxNTQ0MDNaMDMxMTAvBgNV
BAMTKDYyMDhBRDMzODVDRUI4M0ZEM0E1MDc5ODJBOTIzMTcxREYxODgyRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgDn86IE8ex/P+5mv3CL6f4L6W
gRooZ2V16dlenvhYX6At9pJJyIskTPx1oDgcAreTYDuPF4fJBAtJdbv42GW3l/B+
xGOh2lt5AO1VXoqeCM5/MCc98iUdiixWl/WNFEUtk/wWZs6DfFKSWR35Jbi2xva+
JwowvONz5PDPyXUY3JLMlP6IVMSS644PrRPaCjB71tLwnbKp9pQNqgIIwk6fBNbE
YjepnrCCLLk9VuSOVVW6xTOKfUHUQH/YoXRqAtqU+Ibbv3IJvkcA1B6T14gUcmMY
ebXhy/MacBg4XPET6M1Yp8NkNl19r1A844Vj0AQILxFBudgXYlbPxx0RFMnLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUYgitM4XOuD/TpQeYKpIxcd8Ygv0wHwYDVR0j
BBgwFoAUaEAn8gQ4KhvD456IkYBOuweQbIkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0dXR2JIUW44R3Fma2tGUkpmZENoWGhKUmc0UGFKMzVETEZLd2lrdG9a
Um4vMS82ODQwMjdGMjA0MzgyQTFCQzNFMzlFODg5MTgwNEVCQjA3OTA2Qzg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4NDAyN0YyMDQzODJBMUJD
M0UzOUU4ODkxODA0RUJCMDc5MDZDODkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N0dXR2JIUW44R3Fma2tGUkpmZENoWGhKUmc0UGFKMzVETEZLd2lrdG9aUm4vMS82
ODQwMjdGMjA0MzgyQTFCQzNFMzlFODg5MTgwNEVCQjA3OTA2Qzg5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACI9alPfCSgtO2v/hZFqiarfrPavqA52WZfsWNKJfT6N+HwqWwG5jGgjlC6Zi
IjxOQV9pXhcP8WfLZa8rNJJ53ehsU7L9Ej/Sbg5PZNkqLY5oZ+A5peLwl5nKBtA3
F+n0Hxlxc9Z9KpaVej5WG629Lv5uCriO5AzdAepUz8fpKCcrtgFHIbepHsj/IAYM
EwLjVrELrkmxQAdRI3gU8bsTcwunnEKl4Ih5HYFHYmx+e68HHP2faCT9o0bvZyti
OGvYQV//HZjqUxJsRsE8K030mbOcT8MeLnQxoLk3Ytv1l4jaFHkXHas5XNw3dUkn
/yw2U7AwE2Ku9/hIiLuvzxrrrw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:56 2025 by rpki-client on console.sobornost.net