Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.mft
File:                     E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.mft (raw, json)
Hash identifier:          9OLJN0JE0oKEknSzlf+PvH7MHbJvMGQcufJcGLZThqg=
Subject key identifier:   42:F7:B1:46:1B:C2:A4:34:7F:CF:D3:E5:F2:B6:5F:9F:92:34:55:B6
Authority key identifier: E3:9C:8B:A5:F3:D1:22:7D:86:25:CE:6F:02:FE:CB:FA:6E:3B:82:B1
Certificate issuer:       /CN=E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1
Certificate serial:       40278E5B99B4B40FBB87A2CCC5841753742EE08F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.mft
Manifest number:          0158
Signing time:             Sun 27 Apr 2025 00:17:12 +0000
Manifest this update:     Sun 27 Apr 2025 00:12:12 +0000
Manifest next update:     Mon 28 Apr 2025 01:13:12 +0000
Files and hashes:         1: E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.crl (hash: deGf9WAhW6g+RdvUahLXXa4MjJsg4clv/h+K110qeEQ=)
                          2: 3137372e3138352e3234302e302f32302d3234203d3e20323633363233.roa (hash: H7uByCC2qL1DDQ87q5K4MJvKwx8zUG8Dbrz4+leblfM=)
                          3: 3134332e3235352e34342e302f32322d3234203d3e20323633363233.roa (hash: QdtfLPQBhQoyeKhiSXQOCpfdT9Wr2NEhFFViNdomfrk=)
                          4: 323830343a313032633a3a2f33322d3438203d3e20323633363233.roa (hash: cB1zGvvjDInTlSUTOlC3yRx0oOjqN0abQELHCyCZ9cE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.crl
                          rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 01:13:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:27:8e:5b:99:b4:b4:0f:bb:87:a2:cc:c5:84:17:53:74:2e:e0:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1
        Validity
            Not Before: Apr 27 00:12:12 2025 GMT
            Not After : Apr 28 01:13:12 2025 GMT
        Subject: CN=42F7B1461BC2A4347FCFD3E5F2B65F9F923455B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:97:06:b6:0c:77:4c:83:fe:a3:77:9a:6b:be:
                    27:bc:51:c6:08:3f:f1:10:1c:66:1c:bf:fc:4e:d1:
                    e0:0a:ae:57:57:6c:75:cc:db:81:61:1a:8b:0c:6b:
                    0e:aa:67:11:0f:f8:6c:2e:04:42:12:a7:49:b3:3a:
                    a8:a2:b3:0d:66:b1:0f:35:c5:4d:3b:d0:57:81:2b:
                    75:09:c6:4b:54:97:22:d6:b3:0d:b9:d8:c3:5c:46:
                    f6:85:fa:a5:27:70:bd:02:e6:85:9e:32:a3:51:27:
                    1c:0d:96:cf:40:48:f6:56:f9:27:93:13:51:f6:81:
                    ff:cb:e9:32:e2:42:bd:8f:34:38:88:a4:ae:4d:55:
                    2c:f3:d0:15:f6:e1:76:df:0f:84:34:f2:56:1f:ee:
                    5e:9d:bf:ec:b0:f1:9d:a4:ad:c7:07:ab:11:1f:b3:
                    6a:86:75:3c:49:25:2e:29:29:dd:48:19:0e:6f:ab:
                    6e:e1:bd:f2:00:f4:fd:63:9c:14:22:56:fb:63:ce:
                    2e:ba:83:81:f1:b4:b3:e5:bc:2d:fb:b6:e9:7d:83:
                    ec:f4:d3:24:53:f7:7a:c8:47:23:a6:e2:80:3e:48:
                    05:07:33:a9:99:c3:3f:f0:09:c4:b8:2b:d5:58:f6:
                    94:d6:57:8b:4c:b9:43:e4:26:9e:c8:2c:0d:50:ca:
                    d2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F7:B1:46:1B:C2:A4:34:7F:CF:D3:E5:F2:B6:5F:9F:92:34:55:B6
            X509v3 Authority Key Identifier:
                keyid:E3:9C:8B:A5:F3:D1:22:7D:86:25:CE:6F:02:FE:CB:FA:6E:3B:82:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:34:0a:03:86:db:a4:ce:75:b3:f7:1f:62:76:d8:ef:b5:27:
         d0:7a:bf:0f:31:45:3f:7e:75:4c:5b:00:23:ee:7f:ee:e3:20:
         ef:07:46:6d:99:cb:36:be:4d:35:f5:30:79:7a:85:5f:8b:ad:
         10:2e:85:77:60:57:25:d7:10:31:21:e5:77:2c:df:08:0b:58:
         5e:14:a4:c5:5d:f8:2b:e6:8b:33:74:8a:1f:53:45:bb:99:77:
         4a:c4:82:75:d4:e2:2e:7a:3e:b6:39:89:42:53:a1:85:9a:94:
         7a:53:0e:e6:f7:35:22:9a:43:b5:a3:34:0e:53:f8:74:a5:47:
         79:bc:76:3f:c2:f7:f3:3b:e9:97:74:ee:d2:3d:34:d3:85:ee:
         ed:1a:78:64:da:07:a3:ef:4e:c6:4b:22:82:b2:b1:3f:ca:05:
         6d:67:b7:fe:fc:3c:23:50:ec:77:47:dc:ba:a1:96:f2:4f:70:
         46:a0:1b:b7:00:8f:53:e8:fe:59:26:d3:16:62:ff:0b:c3:90:
         88:6f:3c:8b:52:83:a9:b1:2d:62:17:b2:36:de:b5:51:0f:d7:
         34:21:63:7d:77:32:ba:d6:27:da:f6:eb:c0:45:ba:da:71:4a:
         dd:46:e3:15:e2:ca:4d:ee:ec:98:b7:77:37:06:d1:81:eb:d0:
         92:b8:61:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:53 2025 by rpki-client on console.sobornost.net