Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.mft
File:                     D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.mft (raw, json)
Hash identifier:          d1AG9HMyk2Ki54p49T0gxc9t0+LeYPEhQrH6i4ytcRc=
Subject key identifier:   2B:CA:1D:BC:40:C4:E0:96:DC:90:D6:99:B0:F7:5C:C1:E8:8B:19:18
Authority key identifier: D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D
Certificate issuer:       /CN=D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D
Certificate serial:       5B20E3498260A73E506AAE184601A743C7885B0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.mft
Manifest number:          020E
Signing time:             Thu 24 Apr 2025 22:22:08 +0000
Manifest this update:     Thu 24 Apr 2025 22:17:08 +0000
Manifest next update:     Fri 25 Apr 2025 23:27:08 +0000
Files and hashes:         1: 323830343a376562303a3a2f33322d313238203d3e20323731363431.roa (hash: 3SQQvzD6o4UQPapLKN88SP5VJs4r0fp0uZl0eCj7z3g=)
                          2: 3230302e3139342e3138382e302f32322d3332203d3e20323731363431.roa (hash: h/yOU+BsuM0lafGvOlyEtlIG9nfQLGkyUEcGyEN/dOI=)
                          3: D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.crl (hash: uV9G4NjChm3pxirJlhtq/KxX8N9kWcsF3P4a5ysuok4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.crl
                          rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:20:e3:49:82:60:a7:3e:50:6a:ae:18:46:01:a7:43:c7:88:5b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D
        Validity
            Not Before: Apr 24 22:17:08 2025 GMT
            Not After : Apr 25 23:27:08 2025 GMT
        Subject: CN=2BCA1DBC40C4E096DC90D699B0F75CC1E88B1918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b6:c0:87:5e:95:f2:02:bf:e1:f7:64:81:0a:
                    16:75:f0:22:3c:c8:48:0e:2c:47:c5:1d:b9:23:d2:
                    fd:72:4b:01:bd:2c:4f:79:ac:d7:fc:17:df:70:1f:
                    98:3d:42:bd:66:2e:5a:bd:2b:5c:82:32:d0:0a:2b:
                    36:0b:64:03:0b:c0:f1:b2:a5:e4:85:be:30:ab:ea:
                    6b:91:7b:65:15:91:45:56:e1:e2:03:c3:2f:d4:28:
                    ab:8d:78:66:5e:d0:94:e4:11:44:d2:a4:20:0f:f2:
                    52:5c:0f:99:a1:b8:9b:33:ac:96:59:76:8b:9e:73:
                    2f:d3:dd:62:17:ea:5b:11:e8:1d:bf:9d:21:6b:6a:
                    31:99:71:a7:fc:cf:f2:3d:d5:d4:1b:3f:79:35:68:
                    5a:41:d5:98:93:d8:5f:f7:e2:a7:c5:6d:b8:5a:e1:
                    99:24:85:59:fe:ab:a6:0b:b5:05:4c:1c:2c:c5:44:
                    e1:e3:09:78:dc:4d:b6:6c:57:6c:a5:8c:79:3d:bc:
                    78:d5:b3:39:9d:fd:2b:c7:be:6c:e9:12:be:ce:cc:
                    85:be:01:7f:1d:6f:95:61:64:9b:c1:ab:48:b6:39:
                    7e:c4:e9:4e:da:64:6f:95:b0:36:dd:d8:44:d0:60:
                    b6:28:83:8d:0b:4c:c0:e4:6d:66:95:95:10:22:07:
                    8d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:CA:1D:BC:40:C4:E0:96:DC:90:D6:99:B0:F7:5C:C1:E8:8B:19:18
            X509v3 Authority Key Identifier:
                keyid:D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:20:d8:b7:6f:15:af:40:a3:fd:af:2a:f7:84:34:cf:a8:db:
         57:be:58:2c:b4:d2:86:39:79:8c:bd:3f:4a:3a:c0:22:81:4b:
         7d:d1:5c:bc:a8:62:d6:17:ea:93:b4:a7:ab:6d:21:4a:4a:19:
         d3:71:21:31:f3:9d:5e:ab:46:cc:b3:3d:53:dd:75:3a:3a:aa:
         d8:5b:61:0b:d0:ee:ed:5f:52:92:6d:4c:bd:72:ec:a3:67:9f:
         13:dc:bb:10:54:b5:84:b4:ec:6d:2a:af:f4:a4:14:58:73:82:
         a1:cb:ff:7b:c3:9a:ab:ce:62:5d:cd:5b:6b:62:0f:a9:73:77:
         db:64:0a:18:e6:b9:ef:96:07:fb:e9:55:43:d5:15:d4:8a:1a:
         19:88:ae:41:c4:32:60:78:3d:64:04:cb:5a:d7:f0:d6:d9:e6:
         c3:fe:37:87:87:c0:35:37:ca:5e:49:d2:de:60:b2:3d:61:24:
         82:89:7c:3d:c7:59:74:76:22:be:a7:b6:7f:a3:c4:c6:42:54:
         b5:f7:f7:49:4e:a8:83:9d:4a:06:dd:94:63:b7:53:47:4a:04:
         b1:44:7b:aa:8c:82:5e:62:53:4f:1d:e8:89:76:bd:9b:4c:de:
         41:84:77:01:18:7f:4a:f8:3d:c9:83:70:a7:99:1d:9c:9f:30:
         ca:8b:b7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:24 2025 by rpki-client on console.sobornost.net