Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.mft
File:                     7B02316541C9F170484214259E6C028DF7BB0F4A.mft (raw, json)
Hash identifier:          til2V9uDeSsGt+THTS0xnZorZUdsmxzop6pMxMAczpc=
Subject key identifier:   EB:07:59:33:46:E2:C8:9A:D5:A7:91:7D:D7:AE:4A:1D:CD:1E:9C:93
Authority key identifier: 7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A
Certificate issuer:       /CN=7B02316541C9F170484214259E6C028DF7BB0F4A
Certificate serial:       3A4959B4EF1885351EE1D956B5C151BB26ACD696
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.mft
Manifest number:          0209
Signing time:             Mon 28 Apr 2025 08:40:03 +0000
Manifest this update:     Mon 28 Apr 2025 08:35:03 +0000
Manifest next update:     Tue 29 Apr 2025 11:39:03 +0000
Files and hashes:         1: 7B02316541C9F170484214259E6C028DF7BB0F4A.crl (hash: 7Bg0K47+A6xgTnadt5lgdPGXaTiEBhLWeyRLSwSZcZA=)
                          2: 34352e3136372e3134302e302f32322d3232203d3e20323638303131.roa (hash: 9iDXG0JIWbNMqIwgo2K/TChQA6oKdrR5Ky63Vbq/ra0=)
                          3: 323830343a353639383a3930303a3a2f34302d3430203d3e20323638303131.roa (hash: XR+Ho6meu5j0cJ85dzVwbhhheTluNi4OrfmJIHCO/WY=)
                          4: 34352e3136372e3134332e302f32342d3234203d3e20323638303131.roa (hash: iswk5t9dB85tkwTbZ5hvO+Sccs/AVW6i3PYKjbPLT00=)
                          5: 34352e3136372e3134302e302f32342d3234203d3e20323638303131.roa (hash: bvofTO4p/RXr3veTfLpNX5ZbyOpv69RdW4gAhFFiCrA=)
                          6: 323830343a353639383a3a2f33322d3332203d3e20323638303131.roa (hash: 7/oZ5YDAg2s8eP+0iq0G7aqHMR4Ybw45HbH0QypRAww=)
                          7: 34352e3136372e3134322e302f32342d3234203d3e20323638303131.roa (hash: +fTYsStmK9Ww5QCPTyC8E5U4PMfmh89ORxjd9BQnR5Q=)
                          8: 34352e3136372e3134302e302f32332d3233203d3e20323638303131.roa (hash: 8Q/yxBIT8oxmIspDJmLyMyv1UCLeO+bwPCsbbRl7GMg=)
                          9: 34352e3136372e3134312e302f32342d3234203d3e20323638303131.roa (hash: SR2bGmpRVtvJcmsmtIDu+OAqfqbAeXT8aGUyx04el0M=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl
                          rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:49:59:b4:ef:18:85:35:1e:e1:d9:56:b5:c1:51:bb:26:ac:d6:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B02316541C9F170484214259E6C028DF7BB0F4A
        Validity
            Not Before: Apr 28 08:35:03 2025 GMT
            Not After : Apr 29 11:39:03 2025 GMT
        Subject: CN=EB07593346E2C89AD5A7917DD7AE4A1DCD1E9C93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:60:72:b7:6d:aa:5b:28:47:51:df:93:e6:27:
                    03:d6:cd:0e:02:01:20:ae:61:e4:a5:63:f8:5f:83:
                    ef:e4:40:3e:82:92:d7:5b:7d:bd:77:0f:54:73:42:
                    0a:a0:72:bf:64:1b:d9:d0:cb:2c:82:41:1d:b6:ab:
                    7f:ca:dc:8e:a2:65:56:de:0e:38:d9:91:6f:21:69:
                    16:6b:ca:4b:d3:41:dd:7e:7d:4d:ba:12:c5:1d:4d:
                    f9:eb:ab:8c:73:8a:62:b7:75:39:f6:76:c6:2c:ad:
                    2f:0d:f4:5e:7e:00:0c:d7:4d:fd:69:7b:c5:2e:68:
                    c6:60:79:a3:02:59:96:4e:47:2c:64:62:88:31:f4:
                    a9:2b:da:5d:7e:cc:2a:6c:c6:a5:f2:e8:a3:b3:c2:
                    df:f7:99:32:6c:e6:cc:4e:7f:e8:72:b7:41:c3:e7:
                    a7:14:62:7c:ee:ac:29:b3:be:74:e4:3f:3e:72:8b:
                    34:51:eb:7e:e9:a3:3d:e0:0e:12:e5:af:a1:5c:00:
                    2b:52:f6:33:10:49:4a:cf:33:58:56:d8:46:26:f7:
                    41:78:04:8d:50:e6:b4:92:24:ca:fb:3e:46:cc:12:
                    5e:28:24:cb:51:da:8a:f4:5b:22:85:5c:26:a9:ad:
                    2c:c4:e5:dc:97:98:8c:d3:32:29:fd:e2:7c:db:7a:
                    1a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:07:59:33:46:E2:C8:9A:D5:A7:91:7D:D7:AE:4A:1D:CD:1E:9C:93
            X509v3 Authority Key Identifier:
                keyid:7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e7:aa:fa:32:57:28:82:81:2f:14:0a:29:d9:b4:60:45:3e:
         1b:7c:92:49:34:a1:55:2a:e0:c1:b3:0f:2e:df:02:7c:80:91:
         8d:01:6b:e7:d0:70:66:f9:56:53:8c:cb:c2:52:4a:d7:46:c8:
         d2:ee:c4:b2:39:f3:dc:50:95:56:1e:cd:f5:c6:92:db:a0:a1:
         58:88:cb:32:6c:b3:fa:0e:f6:3b:ea:28:f2:12:14:bc:61:9f:
         b5:1d:8a:32:57:79:43:c4:f6:29:3f:66:72:b9:5e:b5:e6:fc:
         b9:6d:8d:dd:1e:60:a5:5e:77:a7:10:ee:a3:13:a7:9b:1f:b5:
         77:03:32:c9:10:05:07:ef:3e:ed:29:c5:4b:47:81:bc:27:07:
         40:6e:63:92:11:13:ff:0c:39:f3:db:f5:6c:60:6b:8a:37:0e:
         be:42:98:60:2f:a5:8f:f1:f4:63:8b:a6:70:71:94:1a:96:19:
         db:4d:a8:10:2d:85:d4:61:b2:4d:92:6e:7c:db:10:c6:a3:55:
         1b:8f:b8:1f:21:84:01:ee:54:38:fd:e7:3e:9b:9c:47:39:ed:
         f6:1f:20:8b:75:4e:e7:56:f0:d5:d4:42:d4:76:88:b9:a6:d5:
         57:31:6f:b3:3a:7e:90:02:33:9c:b4:0e:57:30:62:05:8c:47:
         67:ae:f5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:25 2025 by rpki-client on console.sobornost.net