Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
File:                     CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft (raw, json)
Hash identifier:          6SQEgiri2ll7IjyIiYd9cpSrgg/1dL7iD8grNuX5kYM=
Subject key identifier:   0C:EE:87:89:82:F9:40:78:D5:62:FE:31:7D:E5:17:A8:BC:41:11:B8
Authority key identifier: CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE
Certificate issuer:       /CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
Certificate serial:       53676B23CAA412D7D2965FDCB4A3AB9B1D376D43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
Manifest number:          15
Signing time:             Sun 27 Apr 2025 09:59:39 +0000
Manifest this update:     Sun 27 Apr 2025 09:54:39 +0000
Manifest next update:     Mon 28 Apr 2025 11:17:39 +0000
Files and hashes:         1: 3133312e3232312e3230302e302f32322d3234203d3e20323632333136.roa (hash: o0sTCMwaYkCxWQEkq5SF4UjWyAqD9Ss8VEnXcbMp2O0=)
                          2: 3133382e3131372e3139322e302f32322d3234203d3e20323632333136.roa (hash: 3lrRZ88ALQ/YEae09+IqsEdagITWdjR3q3G5UsvfNxw=)
                          3: 3137372e3132342e34382e302f32322d3234203d3e20323632333136.roa (hash: p5diy4Lfpp3uRqBtSPoACOQZG5XP892Xk7GyAi3svuU=)
                          4: 3136372e3235302e3135322e302f32322d3234203d3e20323632333136.roa (hash: sDn+4Uu4m4W5bslIPmCXR04C2X/8MTPWAS8yBpOzj8A=)
                          5: CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl (hash: dCDxaznRCDIRJyzl8len79XrU7j3hTJs2kLx2pnkBzE=)
                          6: 3137372e37342e36342e302f32302d3235203d3e20323632333136.roa (hash: jHEp77ey3eYInyX7NnipiftUAAgDp3GkFWmhML9L1Yg=)
                          7: 323830343a3763303a3a2f33322d3438203d3e20323632333136.roa (hash: a6f42d45bxiLHIMWETpqkEcBoAgdph66Eltfz5OsBcc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl
                          rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:67:6b:23:ca:a4:12:d7:d2:96:5f:dc:b4:a3:ab:9b:1d:37:6d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
        Validity
            Not Before: Apr 27 09:54:39 2025 GMT
            Not After : Apr 28 11:17:39 2025 GMT
        Subject: CN=0CEE878982F94078D562FE317DE517A8BC4111B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8b:60:78:a0:1a:a6:bb:99:30:77:a7:c6:b4:
                    36:88:46:87:b5:e6:f3:f5:51:4f:b8:bb:ca:ad:3a:
                    54:97:8c:c8:6f:00:e6:6f:d3:0a:2a:08:d3:db:61:
                    1e:8f:5e:e8:84:b5:ae:b5:50:9c:57:6c:06:c5:98:
                    0c:2a:63:6f:0d:3c:a6:b7:96:e1:8c:9a:8d:8e:ce:
                    06:75:83:39:ee:b4:92:0c:e8:50:e5:63:3d:31:ca:
                    2f:f5:2d:bd:0e:4a:08:4b:17:51:a3:59:05:98:82:
                    f3:01:46:75:6f:04:b9:ab:d3:b4:6b:76:1f:44:b7:
                    a8:49:29:0b:78:93:0c:33:81:9b:f9:16:a7:20:08:
                    c3:98:52:15:31:f0:dd:7a:7a:77:e9:27:2a:2b:dd:
                    e3:12:86:9f:2d:ca:0b:e7:8f:f6:e5:0b:96:2e:63:
                    1c:71:1c:83:ad:19:05:af:37:b5:19:33:9f:4e:ad:
                    25:6e:e3:4d:e9:17:04:4f:74:a3:26:11:ba:aa:0e:
                    5a:16:a1:72:35:15:89:88:c6:62:14:a3:48:4f:20:
                    67:22:fd:58:24:4a:dd:0f:79:cb:9b:1c:b7:44:74:
                    9a:9c:2b:b1:4e:fb:8a:1e:7e:cb:26:55:50:4c:31:
                    83:44:d4:ba:07:d2:be:f3:c8:f5:5f:a7:34:24:30:
                    77:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EE:87:89:82:F9:40:78:D5:62:FE:31:7D:E5:17:A8:BC:41:11:B8
            X509v3 Authority Key Identifier:
                keyid:CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d7:8a:60:51:76:a6:20:c6:90:01:f9:cc:17:a8:eb:e8:93:
         af:d2:14:d6:3a:b3:46:61:fe:ce:32:19:58:fd:b5:11:25:b4:
         ee:c1:1b:e6:c9:d2:56:0e:d3:51:f0:d9:e0:cf:26:5f:5e:d1:
         80:7f:53:2a:62:04:42:a2:a5:74:cb:05:51:66:9b:be:f9:f5:
         d9:99:05:c2:b3:a0:6c:c9:81:db:2d:7c:2a:7a:c3:54:2b:fe:
         97:81:71:3f:97:8e:da:a6:45:ca:a3:38:21:04:4d:55:27:77:
         0e:a0:6a:d3:e7:40:c4:39:39:21:db:78:12:da:33:78:f0:cc:
         5e:0b:08:cc:79:17:9f:09:19:ae:5c:60:db:f4:f1:29:d7:7e:
         8f:48:82:44:da:98:5c:1e:cd:92:75:b9:d5:5b:97:c4:24:79:
         47:60:81:2c:14:6c:9c:10:bb:b6:40:05:26:ef:53:23:2c:42:
         bf:d8:a2:87:82:3a:b3:f9:80:43:8f:9e:94:9b:86:68:8f:f3:
         4b:ba:ad:34:c8:cf:01:c5:8c:cf:6e:41:6d:6c:57:3a:1a:6c:
         a7:fc:e4:c8:49:8e:c4:86:e4:b4:07:12:d4:a6:3b:c2:27:63:
         65:03:13:9e:30:98:16:9d:96:8c:2e:4f:88:72:c9:8b:34:ab:
         14:48:1f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:39 2025 by rpki-client on console.sobornost.net