Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.mft
File:                     3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.mft (raw, json)
Hash identifier:          m21r+P0IZBz2SHqOE0WtrAjyRr5L5XiGTaI9nNwhBqg=
Subject key identifier:   02:09:20:09:35:A3:64:8C:45:56:55:F1:7E:9F:82:43:2D:34:F2:C5
Authority key identifier: 3C:9F:72:B9:D4:E7:CA:7E:EF:4F:D6:EA:F0:70:32:0A:18:60:9E:FF
Certificate issuer:       /CN=3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF
Certificate serial:       3696CA7844C34C3220A1F02084E6F2BD2A859A7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.mft
Manifest number:          63
Signing time:             Thu 24 Apr 2025 20:24:01 +0000
Manifest this update:     Thu 24 Apr 2025 20:19:01 +0000
Manifest next update:     Fri 25 Apr 2025 21:02:01 +0000
Files and hashes:         1: 323830343a353764633a383030303a3a2f33342d3334203d3e20323638303931.roa (hash: Nvr4bicixCDJK9lSN0EmOQFMTBz5G8YfJFgKfgqQD08=)
                          2: 34352e3136392e32372e302f32342d3234203d3e20323638303931.roa (hash: QZ1czFjp/KYCDVWwmY9BJJWCgMum9qtWeDXC508grAU=)
                          3: 323830343a353764633a383030303a3a2f33332d3333203d3e20323638303931.roa (hash: qqu8GYvHENpe3cfHPZrbviRAd1peUW3PPy0ht7oVCPw=)
                          4: 34352e3136392e32342e302f32332d3233203d3e20323638303931.roa (hash: jcFuK1q0OWDIRa2Sy8xc62lFtEizp3+SG1b6YjO6ThY=)
                          5: 323830343a353764633a633030303a3a2f33342d3334203d3e20323638303931.roa (hash: G+TKJ6Fu/xLQDVzMocDxabF7GHbzKuGLhJJ4eM/kI/4=)
                          6: 323830343a353764633a3a2f33332d3333203d3e20323638303931.roa (hash: bZLdn4tlKCjIP4Nhxd+LeV3jhs1JdxOWhYJqNDLSFFk=)
                          7: 34352e3136392e32342e302f32342d3234203d3e20323638303931.roa (hash: Z9f/ubw5JSEsPIWhy+WmxunSIaZaRRY0FKnkiG1UnLw=)
                          8: 34352e3136392e32352e302f32342d3234203d3e20323638303931.roa (hash: +tYUkof60PwGOAlPnJMU7Uq6Ua1Sd376LkWwm2jlo1U=)
                          9: 3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.crl (hash: CrzN2fH6/+neMPnoD4MzL96yrFVm/VD0uh2HUYY80eU=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.crl
                          rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:96:ca:78:44:c3:4c:32:20:a1:f0:20:84:e6:f2:bd:2a:85:9a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF
        Validity
            Not Before: Apr 24 20:19:01 2025 GMT
            Not After : Apr 25 21:02:01 2025 GMT
        Subject: CN=0209200935A3648C455655F17E9F82432D34F2C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6a:fc:43:81:d0:d3:0e:47:2d:e1:e1:f9:a5:
                    e6:bb:2e:21:9c:ec:b4:ac:31:95:70:11:36:87:1c:
                    78:d8:74:3b:e5:47:0a:80:16:a6:83:0e:1e:ff:1e:
                    bc:04:92:01:f7:7b:ba:48:d9:c5:35:26:7c:84:bc:
                    29:25:1f:01:58:04:fd:96:eb:d8:00:f1:33:97:dd:
                    58:3d:de:66:8b:12:8c:11:b3:fd:3c:5f:7b:e3:56:
                    bd:16:54:cc:ee:80:22:b9:fb:15:03:b1:e9:a0:09:
                    99:aa:31:0a:cd:e4:5e:28:44:5a:1c:19:19:86:09:
                    5c:0a:41:6d:21:99:e2:f1:60:5e:c9:5e:fa:00:f5:
                    44:bb:e7:72:71:d2:d5:74:37:e4:9e:bc:c1:7a:80:
                    f1:8d:c8:c3:63:c2:be:84:6e:63:ac:00:2c:22:d1:
                    14:08:34:0a:aa:10:c8:43:b5:a9:94:e8:8c:12:7f:
                    dc:38:fb:1c:96:96:36:21:d2:ed:5a:e2:72:82:87:
                    dc:a8:b8:7b:45:64:81:df:a8:fb:b7:80:e0:88:c4:
                    63:f5:bd:80:75:c8:8f:ca:a4:8c:9a:0a:d0:a2:17:
                    20:df:f4:94:b0:6e:68:5d:ab:c6:d3:66:1d:25:cb:
                    9f:e8:be:8f:c7:bf:f9:d4:90:a1:85:ac:50:cd:5e:
                    a2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:09:20:09:35:A3:64:8C:45:56:55:F1:7E:9F:82:43:2D:34:F2:C5
            X509v3 Authority Key Identifier:
                keyid:3C:9F:72:B9:D4:E7:CA:7E:EF:4F:D6:EA:F0:70:32:0A:18:60:9E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c8:b3:3a:ea:00:76:f0:43:a8:d9:3d:9c:37:ac:42:33:e9:
         03:b9:a6:d1:ab:95:78:87:54:0d:49:a9:b4:d9:f0:e3:65:5e:
         e7:23:f7:ee:e2:f7:eb:9d:66:3f:82:f8:84:42:b0:d3:3b:59:
         bb:b5:e6:37:60:94:7c:5c:8c:1f:54:70:fb:b4:e3:c3:74:65:
         d2:d3:d0:8e:82:23:0b:b8:f0:b5:bd:db:68:9e:39:b5:4f:11:
         0d:56:7b:ab:78:7d:a4:2b:f5:7c:7d:8c:72:00:85:03:21:c6:
         f1:27:53:36:30:fe:f3:dd:fd:8a:84:ae:f9:c1:56:38:c1:e3:
         65:c5:3a:af:e9:8a:b2:5f:80:55:f3:93:f4:ef:4f:59:02:53:
         1c:77:ef:6c:0a:48:8a:13:fd:cd:79:0f:31:29:92:e4:cd:08:
         00:2a:22:e1:df:69:cf:9c:2b:92:e5:a5:92:83:fa:c5:c5:94:
         3a:fe:96:35:72:2b:14:42:38:93:0b:72:4b:26:5e:ee:55:15:
         82:76:02:1d:23:46:0c:56:6d:d1:61:1e:7f:b4:52:07:3a:e2:
         0e:bf:7a:df:49:71:16:f4:bb:a4:50:a2:cd:af:9f:da:1d:f6:
         bb:94:b1:28:1e:05:b5:33:00:64:1a:68:d3:51:60:57:cf:d2:
         a3:0d:59:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:43 2025 by rpki-client on console.sobornost.net