Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.mft
File:                     71E169D36940CB71A5ADBB76D2764F1539336D84.mft (raw, json)
Hash identifier:          3oyYpsiANUd+Wv/5q7/atSzHjcW9w2OM+AKttTP+JRs=
Subject key identifier:   5A:B3:C5:0B:F4:88:24:F3:0F:BD:E7:C7:39:45:80:0E:EA:87:32:E7
Authority key identifier: 71:E1:69:D3:69:40:CB:71:A5:AD:BB:76:D2:76:4F:15:39:33:6D:84
Certificate issuer:       /CN=71E169D36940CB71A5ADBB76D2764F1539336D84
Certificate serial:       6EE30F8D0AAD32DC470A4518992CB2E360C49BF8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E169D36940CB71A5ADBB76D2764F1539336D84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.mft
Manifest number:          0208
Signing time:             Mon 28 Apr 2025 07:54:20 +0000
Manifest this update:     Mon 28 Apr 2025 07:49:20 +0000
Manifest next update:     Tue 29 Apr 2025 09:11:20 +0000
Files and hashes:         1: 3136382e3138312e3230302e302f32322d3234203d3e20323635333434.roa (hash: zMA1qZMtxdFHgVD1RtpPHbqRk0ZCBnEGX7PlSSdjefI=)
                          2: 71E169D36940CB71A5ADBB76D2764F1539336D84.crl (hash: gmKewGtAm9nhmg0D7ldmXt36fATPTUA+nnEOzWWckw8=)
                          3: 323830343a326536383a3a2f33322d3438203d3e20323635333434.roa (hash: bHFBloEfVs+bqeizWiYMoRScnZJIwlQ9LRbZNiJcxLQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.crl
                          rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E169D36940CB71A5ADBB76D2764F1539336D84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e3:0f:8d:0a:ad:32:dc:47:0a:45:18:99:2c:b2:e3:60:c4:9b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71E169D36940CB71A5ADBB76D2764F1539336D84
        Validity
            Not Before: Apr 28 07:49:20 2025 GMT
            Not After : Apr 29 09:11:20 2025 GMT
        Subject: CN=5AB3C50BF48824F30FBDE7C73945800EEA8732E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:35:8d:e0:22:e4:69:0e:45:d3:5d:10:90:5a:
                    b0:cc:be:60:08:c3:90:01:df:06:60:41:5a:d8:1b:
                    bf:da:94:4f:a2:fd:92:a5:0e:7e:5c:50:95:0d:a5:
                    1b:54:ee:27:bb:9b:ac:c3:05:e3:b7:c1:7b:be:4c:
                    36:fd:1e:88:77:8b:34:e2:4c:0c:62:d6:4b:a8:a7:
                    62:2f:48:7d:68:b3:4b:83:48:d1:75:40:71:0a:5c:
                    cc:f8:f7:2c:64:2e:3e:8b:f2:07:c8:33:18:e8:5b:
                    cb:b6:a3:b3:5b:91:37:9a:40:d3:9f:a6:12:55:21:
                    b0:c5:49:7c:69:a0:21:e3:a5:a7:9a:20:e3:5d:13:
                    de:cc:63:83:48:d1:1e:83:4b:a3:e2:5d:54:a7:04:
                    c3:6d:ca:72:66:bf:c1:bf:20:e8:00:36:c0:af:eb:
                    0c:0f:53:11:e6:e9:46:65:eb:32:41:5e:36:a3:ac:
                    6b:38:7a:ba:8e:bf:3b:1b:4f:f3:ad:d2:23:f0:d1:
                    10:02:f5:5c:20:c9:aa:ac:92:1e:50:62:ff:3e:e3:
                    ca:93:5c:8c:79:52:ce:35:fa:81:a9:3e:cc:17:d4:
                    62:7b:a9:32:83:32:b4:31:48:ab:92:74:01:37:57:
                    59:ee:0f:60:f3:35:4f:25:5f:09:a7:b4:22:04:31:
                    1d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B3:C5:0B:F4:88:24:F3:0F:BD:E7:C7:39:45:80:0E:EA:87:32:E7
            X509v3 Authority Key Identifier:
                keyid:71:E1:69:D3:69:40:CB:71:A5:AD:BB:76:D2:76:4F:15:39:33:6D:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E169D36940CB71A5ADBB76D2764F1539336D84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/1/71E169D36940CB71A5ADBB76D2764F1539336D84.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d6:7f:10:03:3a:3f:95:f2:06:26:00:47:33:6b:84:bd:15:
         39:5e:bc:62:24:2b:70:ba:e6:8e:29:09:89:69:28:19:6d:41:
         cc:c1:43:e2:5f:e5:9a:50:3e:e8:8b:cc:dc:c7:b6:ba:25:d8:
         fe:da:79:8f:c4:06:c9:47:c0:18:82:83:2f:14:5a:ec:b7:e1:
         f9:4a:af:dc:ae:3a:19:86:ea:b9:6f:c4:64:37:38:bd:40:09:
         f2:59:3d:36:aa:38:39:af:74:49:da:56:00:00:99:bf:fc:64:
         df:54:8c:8b:1f:a9:ad:9f:3a:c6:2b:3c:bc:5d:b1:34:04:4b:
         44:43:a1:26:65:a4:37:15:e7:10:3c:ed:dc:c4:f1:a3:29:f6:
         48:93:41:a9:a9:54:6d:5a:a5:e3:1a:ee:5a:9e:94:37:87:d6:
         df:e9:97:fd:05:27:25:ff:82:35:74:5f:24:77:93:50:ed:ce:
         cc:c8:ce:2e:7e:79:c8:83:b9:85:76:51:e4:dc:a0:5d:76:fb:
         fe:51:d9:b1:54:2d:d4:00:bf:d3:bb:ef:ca:b2:16:6a:2a:d5:
         34:8d:28:08:c5:3e:e4:9f:06:a4:56:60:70:c9:75:cd:30:9c:
         60:50:32:22:d5:eb:b1:e3:fa:c7:7f:e4:4e:20:0f:d8:42:c6:
         5a:c3:f2:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbuMPjQqtMtxHCkUYmSyy42DEm/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFFMTY5RDM2OTQwQ0I3MUE1QURCQjc2RDI3NjRGMTUz
OTMzNkQ4NDAeFw0yNTA0MjgwNzQ5MjBaFw0yNTA0MjkwOTExMjBaMDMxMTAvBgNV
BAMTKDVBQjNDNTBCRjQ4ODI0RjMwRkJERTdDNzM5NDU4MDBFRUE4NzMyRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3NY3gIuRpDkXTXRCQWrDMvmAI
w5AB3wZgQVrYG7/alE+i/ZKlDn5cUJUNpRtU7ie7m6zDBeO3wXu+TDb9Hoh3izTi
TAxi1kuop2IvSH1os0uDSNF1QHEKXMz49yxkLj6L8gfIMxjoW8u2o7NbkTeaQNOf
phJVIbDFSXxpoCHjpaeaIONdE97MY4NI0R6DS6PiXVSnBMNtynJmv8G/IOgANsCv
6wwPUxHm6UZl6zJBXjajrGs4erqOvzsbT/Ot0iPw0RAC9Vwgyaqskh5QYv8+48qT
XIx5Us41+oGpPswX1GJ7qTKDMrQxSKuSdAE3V1nuD2DzNU8lXwmntCIEMR2PAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUWrPFC/SIJPMPvefHOUWADuqHMucwHwYDVR0j
BBgwFoAUceFp02lAy3Glrbt20nZPFTkzbYQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2prZlVoYmhkeEh2S3FLaFcyd05EOEhtWTRzSlF6N3UyN0JFWXk4RVF3
TDUvMS83MUUxNjlEMzY5NDBDQjcxQTVBREJCNzZEMjc2NEYxNTM5MzM2RDg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxRTE2OUQzNjk0MENCNzFB
NUFEQkI3NkQyNzY0RjE1MzkzMzZEODQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N2prZlVoYmhkeEh2S3FLaFcyd05EOEhtWTRzSlF6N3UyN0JFWXk4RVF3TDUvMS83
MUUxNjlEMzY5NDBDQjcxQTVBREJCNzZEMjc2NEYxNTM5MzM2RDg0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE9Z/EAM6P5XyBiYARzNrhL0VOV68YiQrcLrmjikJiWkoGW1BzMFD4l/lmlA+
6IvM3Me2uiXY/tp5j8QGyUfAGIKDLxRa7Lfh+Uqv3K46GYbquW/EZDc4vUAJ8lk9
Nqo4Oa90SdpWAACZv/xk31SMix+prZ86xis8vF2xNARLREOhJmWkNxXnEDzt3MTx
oyn2SJNBqalUbVql4xruWp6UN4fW3+mX/QUnJf+CNXRfJHeTUO3OzMjOLn55yIO5
hXZR5NygXXb7/lHZsVQt1AC/07vvyrIWairVNI0oCMU+5J8GpFZgcMl1zTCcYFAy
ItXrseP6x3/kTiAP2ELGWsPyPg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:25 2025 by rpki-client on console.sobornost.net