Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.mft
File:                     241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.mft (raw, json)
Hash identifier:          w/3Wmvtuj0YLTW4o7pFc9lYMMzw4pc5C9dAtIt7/F9s=
Subject key identifier:   00:03:D6:1F:F9:D0:73:F6:B2:6F:CE:FC:C9:9B:E8:BC:31:DA:BC:23
Authority key identifier: 24:1D:A0:E2:A6:F4:A4:E7:C8:83:18:57:C6:6C:16:E8:7C:2C:5C:6B
Certificate issuer:       /CN=241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B
Certificate serial:       7987F0ABF1AC1021B3127908058BA93DC5E4DF84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.mft
Manifest number:          0130
Signing time:             Mon 28 Apr 2025 09:49:15 +0000
Manifest this update:     Mon 28 Apr 2025 09:44:15 +0000
Manifest next update:     Tue 29 Apr 2025 10:54:15 +0000
Files and hashes:         1: 241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.crl (hash: SDA2Xcb8mYDqoZ+iMReGpae8a7Fm5G377jxTCRlSPXk=)
                          2: 3230302e3136392e36342e302f32312d3332203d3e203532393736.roa (hash: k0j0ThO3C3eVJxnuc6HtIlfX+rjx7+I5ODmbWgeCYLE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.crl
                          rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 10:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:87:f0:ab:f1:ac:10:21:b3:12:79:08:05:8b:a9:3d:c5:e4:df:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B
        Validity
            Not Before: Apr 28 09:44:15 2025 GMT
            Not After : Apr 29 10:54:15 2025 GMT
        Subject: CN=0003D61FF9D073F6B26FCEFCC99BE8BC31DABC23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a8:08:ca:19:02:fc:37:21:1e:50:ed:e5:06:
                    20:fd:90:e2:26:e7:2c:19:9b:58:4b:b5:d0:b4:73:
                    49:18:63:e9:f4:65:41:3f:ba:1d:43:88:39:ae:bc:
                    f5:62:8b:20:ad:60:89:c5:d9:32:de:08:29:b6:2c:
                    c5:51:15:21:02:da:ab:cc:a0:21:93:3e:9d:8e:35:
                    7b:17:ef:ed:a4:af:ec:ea:24:a9:44:22:e9:40:b7:
                    d9:c7:d5:30:28:22:7b:2c:e5:ef:a7:ee:a7:a8:5f:
                    e2:7d:4c:17:fd:2c:77:1e:f6:37:5a:51:1f:70:c5:
                    df:c5:6b:45:70:fa:87:4f:cd:19:67:bc:cb:4a:f4:
                    e1:57:01:62:48:48:b7:04:2b:3c:a8:4a:4f:ce:63:
                    ba:ab:8f:4d:60:1a:7d:48:76:2a:2b:49:63:a6:76:
                    b7:8a:9c:04:04:20:3c:80:5c:0c:f3:ff:b6:73:f6:
                    ce:dc:73:a2:7d:4c:64:91:1e:57:fb:19:73:3b:53:
                    af:f0:55:7b:18:3a:51:14:ab:ba:3d:f6:4d:07:1e:
                    71:f6:08:26:34:16:31:5e:2c:e5:2a:7a:7e:df:ac:
                    5a:e6:69:39:fb:2a:cf:fe:e1:bb:14:1d:da:5b:58:
                    3d:a3:1e:b4:95:97:c7:8e:7e:f8:18:73:aa:ec:1b:
                    9f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:03:D6:1F:F9:D0:73:F6:B2:6F:CE:FC:C9:9B:E8:BC:31:DA:BC:23
            X509v3 Authority Key Identifier:
                keyid:24:1D:A0:E2:A6:F4:A4:E7:C8:83:18:57:C6:6C:16:E8:7C:2C:5C:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:4f:8a:32:40:62:cc:ed:b1:8d:08:a2:d8:34:70:f2:32:a9:
         73:da:db:95:88:e2:57:cc:ea:4c:59:22:b7:7e:d5:08:bb:fa:
         1a:4e:fa:44:f1:1a:45:54:01:18:36:7f:40:d3:3d:99:29:02:
         7f:5c:4c:fc:29:46:51:d6:1f:b4:88:df:af:42:31:ba:a2:1f:
         40:a8:ed:32:2b:e7:8f:68:a0:c0:a8:41:09:29:93:ce:ea:be:
         f2:57:d0:70:e3:e1:65:94:90:ca:01:ad:ba:11:63:19:2a:f6:
         b4:8f:95:ba:b3:86:9e:55:8f:fd:cc:a5:cd:af:45:e3:f8:4c:
         27:63:02:e6:12:c4:de:aa:cf:89:d5:ed:ae:37:e0:1c:37:4b:
         8b:a3:04:03:cb:bc:43:47:11:b2:a5:2b:4e:8e:f4:c7:f3:1d:
         ff:8a:e8:73:38:62:c5:fb:b2:27:27:a0:c2:f9:b5:b4:d9:52:
         b9:bb:08:1f:2b:fd:b2:3e:47:ce:c7:56:ff:0a:c4:1c:e6:7f:
         5e:f6:d5:22:c6:36:dd:44:32:25:8c:e1:b2:3c:47:35:64:a6:
         dd:bf:ab:21:21:8a:bb:88:d0:12:24:d9:d9:08:0f:ee:d4:2c:
         70:32:b7:35:1b:8f:7c:3c:4b:b4:2a:2a:bd:4e:2c:4c:f3:a7:
         5d:ac:8d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:56 2025 by rpki-client on console.sobornost.net