Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft
File:                     355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft (raw, json)
Hash identifier:          mfGVTmG+MTdLcH3ntW+4QDyJhBdFRsLk1+IKr8cCkdo=
Subject key identifier:   DF:2D:62:3F:A6:5C:2B:4A:9E:8A:44:7B:4A:51:61:82:4E:BB:28:3B
Authority key identifier: 35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2
Certificate issuer:       /CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
Certificate serial:       08FB4109CD46E08BCB279F7BA3E5924575642B7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft
Manifest number:          018A
Signing time:             Fri 25 Apr 2025 23:27:33 +0000
Manifest this update:     Fri 25 Apr 2025 23:22:33 +0000
Manifest next update:     Sun 27 Apr 2025 02:32:33 +0000
Files and hashes:         1: 3137392e3139312e34362e302f32332d3234203d3e20323635303933.roa (hash: 68LZSfrKNi0hBbuOw7JN2Vu8ha/meRSDLhsQcZoRBjU=)
                          2: 323830343a333262303a3a2f33322d3333203d3e20323635303933.roa (hash: YVQplHyc9rw9x3WuqVtniAMfwFm5/+Qcsn2Vlg2Pq8Y=)
                          3: 3137392e3139312e34342e302f32342d3234203d3e20323635303933.roa (hash: xv2khDVJYGIhIg+JFeYwwY3ta3Enq1KGCTEQ4PFvlY4=)
                          4: 3137392e3139312e34352e302f32342d3234203d3e20323635303933.roa (hash: 8mwMOeydVQWqqs8nGUrL7fRl2fCNjY4K0DtoO2RXtKg=)
                          5: 3137302e3233332e3130342e302f32332d3234203d3e20323635303933.roa (hash: 95jG4rvfi60w9OtyIhb2zTuiXlGQO5WAzfB+QpPeago=)
                          6: 323830343a333262303a633030323a3a2f34382d3438203d3e20323635303933.roa (hash: dhNSIFQta2w/FqMKS/+CjYToAJPwa1RJihELpV7ivKU=)
                          7: 3137302e3233332e3130372e302f32342d3234203d3e20323635303933.roa (hash: 8CrravckGP2gkzTVcof2J2NA/bkjYuoIvnBOEMTSRfE=)
                          8: 3137302e3233332e3130362e302f32342d3234203d3e20323731313333.roa (hash: 8t7K4xqOsslfPPhNprk265rMY8Tiip34jFBtSKq7vS0=)
                          9: 323830343a333262303a633030303a3a2f34382d3438203d3e20323635303933.roa (hash: 6Q8ArHjU6gmuSu7GK63J70NmwsONXtraMlbKWsblSJY=)
                          10: 355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl (hash: c2i47gs9+pacWp5UIgm2v7sFAtbd0QPBjr4D5oL4fIs=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl
                          rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 02:32:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:fb:41:09:cd:46:e0:8b:cb:27:9f:7b:a3:e5:92:45:75:64:2b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
        Validity
            Not Before: Apr 25 23:22:33 2025 GMT
            Not After : Apr 27 02:32:33 2025 GMT
        Subject: CN=DF2D623FA65C2B4A9E8A447B4A5161824EBB283B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0e:87:d3:2a:16:bf:a6:9a:2d:e3:29:5b:f4:
                    d2:cd:03:a7:95:1f:6f:d5:b9:7f:84:b7:33:e9:ed:
                    85:4e:cb:05:d7:3e:61:1f:dc:d5:61:9c:90:5e:94:
                    67:07:aa:65:0c:bc:d5:77:95:32:09:5a:71:60:90:
                    e6:a7:52:a5:9a:54:58:af:a7:bd:b0:b5:c1:75:73:
                    ba:5a:a9:d0:76:17:f5:21:f1:7a:60:d1:d8:cd:96:
                    de:1c:b1:b0:5a:82:0d:18:f1:42:3a:a6:5d:9a:42:
                    d5:8f:95:61:a9:00:ae:c2:98:da:fa:14:f8:0b:92:
                    e6:2b:41:ba:29:9e:d2:47:97:47:0a:db:16:71:f6:
                    c2:be:78:80:d8:1e:33:a2:15:f7:ba:18:3a:e8:98:
                    04:de:8f:7c:50:d9:b3:fe:64:b8:1e:16:2f:28:19:
                    0b:4d:f5:0f:c9:8b:39:ed:b0:ea:c8:a5:47:bc:65:
                    c2:81:5b:7f:18:30:9f:4e:af:ee:48:80:b0:48:cc:
                    45:7e:66:60:ef:f2:c3:a5:1a:b4:a5:99:37:c2:2a:
                    ba:3c:5a:c8:d8:d2:3b:99:93:69:34:6a:5f:be:0d:
                    84:e5:ca:8a:16:18:80:22:ba:fb:dc:9e:7b:2f:a8:
                    53:2a:26:2f:10:5a:1e:5e:5c:22:18:6c:e9:c1:40:
                    fd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2D:62:3F:A6:5C:2B:4A:9E:8A:44:7B:4A:51:61:82:4E:BB:28:3B
            X509v3 Authority Key Identifier:
                keyid:35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f0:96:f4:85:07:06:d3:39:01:d2:4a:c3:b7:ba:7b:06:98:
         72:2b:74:3d:03:97:eb:8e:03:1a:2f:af:22:53:73:c4:0b:7d:
         23:5f:99:a4:89:4f:de:e6:64:fd:89:d8:10:31:61:8e:76:45:
         72:cf:0b:71:d8:0e:c9:51:55:30:81:6a:5e:7b:9d:17:46:cd:
         ac:de:aa:ce:09:52:a6:21:17:f2:b7:a6:bb:7b:8f:b6:a3:77:
         ce:2e:92:f3:1a:76:24:97:60:20:62:cf:52:c0:ac:65:54:90:
         23:17:12:4d:c3:d6:60:4d:fc:3d:4c:1e:a1:56:d9:70:8c:19:
         87:5a:f6:86:38:1d:6c:34:ff:d3:02:d9:c0:ed:83:9a:20:d1:
         0c:f1:f3:3d:83:87:84:ea:98:12:10:fc:fe:d8:a7:d4:f0:6a:
         56:c0:3e:9b:20:31:d0:49:94:23:c5:51:74:9a:d1:e8:4a:ec:
         5c:c2:60:7b:c6:07:38:3d:82:1d:3d:37:9a:2a:47:15:e6:e0:
         21:d3:72:45:05:78:fd:cd:4d:eb:a0:9a:e6:7f:76:08:81:f4:
         08:4f:90:8b:a8:8a:b4:59:26:61:7f:49:2f:43:71:92:f7:d0:
         19:26:81:4b:3c:2e:8f:3d:93:34:a3:76:02:4e:8f:2e:bd:3a:
         e1:c2:f1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:52 2025 by rpki-client on console.sobornost.net