Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.mft
File:                     A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.mft (raw, json)
Hash identifier:          kAdhC8sqH1rQwP22eCIm2l3jpI8o3IIK7C8IoTAjq3k=
Subject key identifier:   E7:5B:96:79:7E:8C:12:A0:27:56:79:52:4D:3A:68:B6:EC:E3:33:06
Authority key identifier: A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF
Certificate issuer:       /CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
Certificate serial:       5A83DE11D496899EE690F9D904D8CD1B7C888CBF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.mft
Manifest number:          0202
Signing time:             Thu 24 Apr 2025 15:07:02 +0000
Manifest this update:     Thu 24 Apr 2025 15:02:02 +0000
Manifest next update:     Fri 25 Apr 2025 17:22:02 +0000
Files and hashes:         1: 323830343a333164633a633030303a3a2f33342d3334203d3e20323635303431.roa (hash: IH3HyNT6vN6HxhHXUIxbv8K4qWloiMtDKeidR/QEEJw=)
                          2: 3137302e3135302e3133392e302f32342d3234203d3e20323635303431.roa (hash: Htzg8pItk0vNuKCkvTh8ujN897pkP3UDXkRnvmtThZU=)
                          3: 323830343a333164633a3a2f33322d3332203d3e20323635303431.roa (hash: 858yFcKT82F0hbLDgn/mCMAgcXoAtLYe7GRTxiY2j60=)
                          4: 3137302e3135302e3133382e302f32342d3234203d3e20323635303431.roa (hash: gWRR5C6yWvd09kR8srlr9TcOZRQnnxt5ykXmE6Tqsps=)
                          5: 3137302e3135302e3133362e302f32342d3234203d3e20323635303431.roa (hash: hu6QzU60pjNKiVdDWLLcaRos4L6jv/Bft3auxsl7RaE=)
                          6: 323830343a333164633a3a2f33342d3334203d3e20323635303431.roa (hash: JIDQ5OJfYiZzL+EwmGqxHmbtuCyp62IcQhBY/taq8D0=)
                          7: 323830343a333164633a343030303a3a2f33342d3334203d3e20323635303431.roa (hash: Kz2zFv9ooWsuy4m+N+BLsjovksV5M/8CuNe6I7b+2gg=)
                          8: 323830343a333164633a383030303a3a2f33342d3334203d3e20323635303431.roa (hash: sAxJXuqt1RidzXG1Hcvg+3TXNmY0AyyDcNIf/DatSk8=)
                          9: A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl (hash: XaloirPP45uybUxTaElDQdgQl5W15vtS+66X9mRfTAA=)
                          10: 3137302e3135302e3133372e302f32342d3234203d3e20323635303431.roa (hash: d6oGku83gjHOs4tK0JTPfqz/BnrJWnp1yKLT4S8LL1w=)
                          11: 3137302e3135302e3133362e302f32322d3232203d3e20323635303431.roa (hash: d5GtxArHR4ZxZXq5j44i8V+WO7oiiG1JHaQ7B6JP0Gk=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl
                          rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 17:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:83:de:11:d4:96:89:9e:e6:90:f9:d9:04:d8:cd:1b:7c:88:8c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
        Validity
            Not Before: Apr 24 15:02:02 2025 GMT
            Not After : Apr 25 17:22:02 2025 GMT
        Subject: CN=E75B96797E8C12A0275679524D3A68B6ECE33306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:27:be:df:fb:eb:ee:eb:bc:a6:82:eb:83:c2:
                    b9:a0:9f:c8:3e:db:5f:04:bd:6e:cb:f1:66:da:95:
                    3a:16:4d:25:1a:db:48:e7:8a:0d:6d:9f:b3:eb:e6:
                    05:f1:c9:fa:1e:66:52:bb:07:b9:95:c6:de:b4:99:
                    6c:15:0c:7a:4c:2e:5c:85:07:65:6f:c9:34:99:1a:
                    1e:a5:49:d1:f0:e5:c8:2e:c9:9d:2c:66:f0:dc:87:
                    de:ac:3d:58:8b:52:1d:80:53:a5:e1:7a:89:81:2f:
                    c9:35:80:de:cc:a4:46:09:73:6c:45:c4:91:35:9a:
                    f9:23:b9:c3:d0:f4:8b:18:29:f5:b4:ef:d0:a0:84:
                    7a:11:98:e5:ad:78:e3:42:e0:07:b6:7c:a4:b9:6b:
                    a1:85:6c:eb:ec:57:f9:8d:79:38:be:25:d9:07:db:
                    1f:c7:37:ee:43:fd:11:6e:27:26:ba:11:8e:86:69:
                    a5:01:6a:cb:64:e8:02:91:44:41:83:f5:86:f7:f5:
                    1e:a6:9c:2d:48:41:f2:e7:8a:dc:c0:c3:9f:12:43:
                    88:23:1d:56:63:85:bc:5e:7a:ce:91:6c:ab:13:0e:
                    67:33:7a:d1:e2:aa:dc:21:bf:5b:10:09:ec:97:aa:
                    1f:e4:a7:72:87:e4:28:70:a1:7b:74:7b:83:59:1b:
                    53:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5B:96:79:7E:8C:12:A0:27:56:79:52:4D:3A:68:B6:EC:E3:33:06
            X509v3 Authority Key Identifier:
                keyid:A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:55:fc:0a:e6:ed:3f:f3:2f:38:59:d9:3a:b3:cd:ae:14:f7:
         d2:6c:54:89:27:61:3a:ac:ad:5a:2f:b0:90:23:8c:0b:3d:94:
         6d:03:7b:6d:35:0b:9d:0b:eb:b7:30:71:6b:e1:8e:c2:16:e8:
         36:2b:a1:be:0e:3e:e7:75:e2:e4:fd:c1:b7:da:65:6a:74:dc:
         64:fe:87:89:1b:96:62:6b:23:ba:58:08:97:ad:76:78:0f:27:
         fe:91:29:63:4e:a3:d8:21:f5:67:62:5f:11:55:f3:47:85:71:
         d3:83:35:fb:68:bb:91:9b:9d:65:13:49:eb:b5:0b:ce:13:6b:
         92:a7:c6:1d:26:15:77:ef:c2:a5:5b:08:d9:91:d2:68:53:98:
         0c:68:83:61:14:58:94:3a:08:ec:0c:89:2f:09:53:d9:25:c0:
         44:16:d1:11:8e:76:04:8c:d2:7a:56:af:ad:ba:7a:94:d9:78:
         e4:b1:6d:c4:96:98:bf:5d:89:c8:04:b5:e7:3f:a2:d7:62:41:
         e0:e9:69:59:79:81:ec:7e:1c:8b:ca:aa:d3:8a:ef:97:3a:87:
         37:9f:db:ba:ae:5e:0b:cc:88:1f:b7:e3:31:da:0b:5f:80:40:
         d6:9f:32:68:08:ee:0d:95:a5:bc:f4:e4:18:36:64:a5:3f:bb:
         3c:95:0d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:51 2025 by rpki-client on console.sobornost.net