Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.mft
File:                     74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.mft (raw, json)
Hash identifier:          Dau0jR2tNxP2ZbM2bNqy1WXN0WsrJDQYXYKZ6CEjK0s=
Subject key identifier:   F0:D4:3F:56:0C:93:B4:53:39:58:75:FA:38:AE:B2:72:B7:B9:47:34
Authority key identifier: 74:EA:71:FA:A5:CE:D5:BB:59:CB:34:FC:46:F4:0B:11:98:A3:1A:07
Certificate issuer:       /CN=74EA71FAA5CED5BB59CB34FC46F40B1198A31A07
Certificate serial:       442E640DB3A0412054722DCD2763DC77B20FAE2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.mft
Manifest number:          0207
Signing time:             Mon 28 Apr 2025 12:31:39 +0000
Manifest this update:     Mon 28 Apr 2025 12:26:39 +0000
Manifest next update:     Tue 29 Apr 2025 13:11:39 +0000
Files and hashes:         1: 3136382e3139362e3232322e302f32342d3234203d3e20323635343632.roa (hash: zb5oyTonZBoXVKExUmCok/lNjPbHkMq8r0KXGbo7XzE=)
                          2: 323830343a333438303a3a2f33322d3332203d3e20323635343632.roa (hash: zeACF+DNxsYVKunNPjKHfeurrsrSVvrN92FTahVrSoA=)
                          3: 3136382e3139362e3232302e302f32342d3234203d3e20323635343632.roa (hash: lGIZbXgjNzKsV/0+XUi/MXa7Cekjgt/agMeY+Sg9e3g=)
                          4: 74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.crl (hash: I11Txsm9Cuz8kBSU4LiLSH9OJBPOd8CHa71C7Ia4w2A=)
                          5: 323830343a333438303a3a2f33332d3333203d3e20323635343632.roa (hash: fAss2xYaMjIzCqcPevLAVKICiUvjNdtRpQRTz7kRwAU=)
                          6: 3136382e3139362e3232302e302f32332d3233203d3e20323635343632.roa (hash: 2dMIr7d7D8XOE9w+12KleVHrr9LhfRO9xbbEVebHjAw=)
                          7: 3136382e3139362e3232302e302f32322d3232203d3e20323635343632.roa (hash: zBphmxvnFN8AgJhgmfdnC6xzb7693ASW6JWh2KQb0b8=)
                          8: 3136382e3139362e3232312e302f32342d3234203d3e20323635343632.roa (hash: 17BkynKMJ8Cd+Up6TFdENyPOqHns2WRcIKJkiOx/W60=)
                          9: 323830343a333438303a383030303a3a2f33332d3333203d3e20323635343632.roa (hash: dj64lBhzQIQ1dHJK0sSrJFAOa/xS3T08qBv47U0DXE8=)
                          10: 3136382e3139362e3232322e302f32332d3233203d3e20323635343632.roa (hash: bR3ZYCKEoUI8/IlBj4/6ivv03uCKDuSpik4RgpqAo2o=)
                          11: 3136382e3139362e3232332e302f32342d3234203d3e20323635343632.roa (hash: evRQwO+H3OsyrrgXrFcqpittU37jDD7VCd9U7zoHHDo=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.crl
                          rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 13:11:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:2e:64:0d:b3:a0:41:20:54:72:2d:cd:27:63:dc:77:b2:0f:ae:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74EA71FAA5CED5BB59CB34FC46F40B1198A31A07
        Validity
            Not Before: Apr 28 12:26:39 2025 GMT
            Not After : Apr 29 13:11:39 2025 GMT
        Subject: CN=F0D43F560C93B453395875FA38AEB272B7B94734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:be:cc:e5:91:28:5d:e9:ed:02:b5:39:d9:ae:
                    b4:ec:f5:66:01:d7:9c:19:75:bc:5d:9d:2a:85:00:
                    8c:84:a6:8a:84:76:80:b2:96:00:bb:ae:2c:9c:f2:
                    08:50:44:6d:0f:ee:aa:99:0f:31:a4:c0:8d:11:95:
                    8e:42:ff:4c:13:be:28:9b:71:da:ad:37:70:e2:63:
                    1b:09:73:a0:04:a1:79:ac:30:4e:71:7a:92:52:92:
                    b9:62:dc:95:07:ae:9d:df:3c:59:b5:28:96:9e:0a:
                    0c:c3:13:1a:10:63:5e:82:62:4b:02:c1:c5:91:82:
                    90:2b:4d:ac:3c:2f:e6:50:18:c5:bc:07:a9:5f:18:
                    cc:b5:0b:4e:b0:d1:06:09:07:7b:18:33:4b:3f:2c:
                    0d:28:76:ec:53:87:c2:0d:58:ce:d7:29:69:53:6e:
                    0c:4f:ad:d5:c6:c2:86:41:d2:e2:7f:70:56:8e:94:
                    f7:bc:50:1f:69:59:ed:70:ad:32:af:17:6a:62:42:
                    a2:6b:11:6f:f8:a9:75:dd:27:12:50:27:b9:04:26:
                    35:f0:51:40:a9:9b:fe:19:13:65:74:02:14:3b:11:
                    3c:0d:bf:1a:5d:f5:4d:49:40:86:34:f7:3c:21:a3:
                    1a:24:6a:37:ef:bf:28:82:1d:3c:28:03:bc:dc:7a:
                    e5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D4:3F:56:0C:93:B4:53:39:58:75:FA:38:AE:B2:72:B7:B9:47:34
            X509v3 Authority Key Identifier:
                keyid:74:EA:71:FA:A5:CE:D5:BB:59:CB:34:FC:46:F4:0B:11:98:A3:1A:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d3:c6:e7:90:50:a6:11:c4:59:6a:c4:24:45:37:89:e1:68:
         ab:0e:87:56:c6:73:41:58:6a:39:49:59:31:aa:a2:51:ae:a4:
         e7:c2:a0:8e:f2:1f:7d:17:b8:a8:1e:16:1b:df:56:78:d9:0c:
         9c:ef:10:be:b0:e1:78:68:77:64:fa:90:14:75:03:00:6d:14:
         c6:67:5a:93:d2:83:97:b7:47:ed:89:95:e3:ad:e6:aa:a8:92:
         47:1c:7b:b8:da:54:65:8a:b1:58:d8:ba:2a:f1:54:0f:f2:ac:
         37:d1:11:72:a0:af:03:c2:2d:97:7e:ec:ab:12:61:8a:cb:d4:
         ad:07:2d:2f:c1:c1:95:e2:53:0c:70:62:2e:9c:1c:e0:d6:12:
         a2:10:b6:77:2d:70:4a:a0:13:eb:c1:f1:74:ab:6a:3f:05:d7:
         25:32:b6:af:d5:64:6b:83:1e:33:39:5b:72:be:db:a0:01:30:
         b4:bc:bb:9e:17:94:17:90:c7:d0:33:fe:7e:00:24:70:9e:ef:
         ad:89:f3:51:f0:71:a4:b1:81:4c:93:9a:cd:95:cc:e9:85:f0:
         84:04:f4:26:ca:f1:17:3f:1e:4d:0d:38:dd:27:74:82:74:73:
         90:e8:da:07:9c:35:ea:76:fe:7e:a0:2b:06:94:85:57:cf:7f:
         82:08:50:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURC5kDbOgQSBUci3NJ2Pcd7IPriowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRFQTcxRkFBNUNFRDVCQjU5Q0IzNEZDNDZGNDBCMTE5
OEEzMUEwNzAeFw0yNTA0MjgxMjI2MzlaFw0yNTA0MjkxMzExMzlaMDMxMTAvBgNV
BAMTKEYwRDQzRjU2MEM5M0I0NTMzOTU4NzVGQTM4QUVCMjcyQjdCOTQ3MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vszlkShd6e0CtTnZrrTs9WYB
15wZdbxdnSqFAIyEpoqEdoCylgC7riyc8ghQRG0P7qqZDzGkwI0RlY5C/0wTviib
cdqtN3DiYxsJc6AEoXmsME5xepJSkrli3JUHrp3fPFm1KJaeCgzDExoQY16CYksC
wcWRgpArTaw8L+ZQGMW8B6lfGMy1C06w0QYJB3sYM0s/LA0oduxTh8INWM7XKWlT
bgxPrdXGwoZB0uJ/cFaOlPe8UB9pWe1wrTKvF2piQqJrEW/4qXXdJxJQJ7kEJjXw
UUCpm/4ZE2V0AhQ7ETwNvxpd9U1JQIY09zwhoxokajfvvyiCHTwoA7zceuUfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU8NQ/VgyTtFM5WHX6OK6ycre5RzQwHwYDVR0j
BBgwFoAUdOpx+qXO1btZyzT8RvQLEZijGgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1hSbndoeVdoUUVYYXlSbm1qODQ2QWlqMkxZZkpMaFFhWlVyYzUzck1E
Z2IvMS83NEVBNzFGQUE1Q0VENUJCNTlDQjM0RkM0NkY0MEIxMTk4QTMxQTA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0RUE3MUZBQTVDRUQ1QkI1
OUNCMzRGQzQ2RjQwQjExOThBMzFBMDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N1hSbndoeVdoUUVYYXlSbm1qODQ2QWlqMkxZZkpMaFFhWlVyYzUzck1EZ2IvMS83
NEVBNzFGQUE1Q0VENUJCNTlDQjM0RkM0NkY0MEIxMTk4QTMxQTA3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbtPG55BQphHEWWrEJEU3ieFoqw6HVsZzQVhqOUlZMaqiUa6k58KgjvIffRe4
qB4WG99WeNkMnO8QvrDheGh3ZPqQFHUDAG0Uxmdak9KDl7dH7YmV463mqqiSRxx7
uNpUZYqxWNi6KvFUD/KsN9ERcqCvA8Itl37sqxJhisvUrQctL8HBleJTDHBiLpwc
4NYSohC2dy1wSqAT68HxdKtqPwXXJTK2r9Vka4MeMzlbcr7boAEwtLy7nheUF5DH
0DP+fgAkcJ7vrYnzUfBxpLGBTJOazZXM6YXwhAT0JsrxFz8eTQ043Sd0gnRzkOja
B5w16nb+fqArBpSFV89/gghQ0w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:07 2025 by rpki-client on console.sobornost.net