Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
File:                     D1171AF24520C9934655F1D0B335CC88750F0C2F.mft (raw, json)
Hash identifier:          zvhiq+MU8NEw++Mx7fBIegbHGGx37TPA5uoq4AQYhXQ=
Subject key identifier:   0A:D2:9B:47:CB:6C:52:AB:D9:CA:8F:C5:BA:BC:AC:FF:32:4C:26:39
Authority key identifier: D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F
Certificate issuer:       /CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
Certificate serial:       783D2036E9D09AF857263606DDBC30370E70709A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
Manifest number:          14
Signing time:             Mon 28 Apr 2025 09:03:21 +0000
Manifest this update:     Mon 28 Apr 2025 08:58:21 +0000
Manifest next update:     Tue 29 Apr 2025 11:28:21 +0000
Files and hashes:         1: D1171AF24520C9934655F1D0B335CC88750F0C2F.crl (hash: zEIoTRnEOi3Vx6D8kNti2ESOaE8R/Bp+Z0VtfWVtHNQ=)
                          2: 3137392e34382e31322e302f32322d3232203d3e20323731313630.roa (hash: rskIrxxYUExi7PHLwav+dE62vtLiBrj7a6GYBNV+wTI=)
                          3: 323830343a373732633a3a2f33322d3332203d3e20323731313630.roa (hash: 1lj+3sFMNB4egkilmG1GQjAutsJHZiknJoxF8YP/VHY=)
                          4: 3137392e34382e31322e302f32332d3233203d3e20323731313630.roa (hash: IInVxv3kcMa5vG/U4cTD9sr87/Sbsyr6ChFNUDZQdGI=)
                          5: 323830343a373732633a383030303a3a2f33332d3333203d3e20323731313630.roa (hash: nbN4ukyce754UAe7rihr7N/UFNah0kB8NkqYIQh4yFQ=)
                          6: 323830343a373732633a3a2f33332d3333203d3e20323731313630.roa (hash: 7qbfjGwinlfawR0X//sZeHGiCnVc4qfkZRjUARdD6XY=)
                          7: 3137392e34382e31342e302f32332d3233203d3e20323731313630.roa (hash: Ck0jPPfwVnJ7yIjXh5w3w6LjDjZUSDneN0x/3hVn1AI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl
                          rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3d:20:36:e9:d0:9a:f8:57:26:36:06:dd:bc:30:37:0e:70:70:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
        Validity
            Not Before: Apr 28 08:58:21 2025 GMT
            Not After : Apr 29 11:28:21 2025 GMT
        Subject: CN=0AD29B47CB6C52ABD9CA8FC5BABCACFF324C2639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ac:e9:dd:86:ba:42:a9:19:07:3a:a8:a3:3f:
                    b4:4f:c6:7e:89:6a:89:24:6f:76:81:06:8f:9f:11:
                    6f:b6:93:5b:37:ba:e9:d5:20:90:ab:9b:41:6d:60:
                    20:77:f0:b1:0c:cc:e2:4c:c3:be:e4:c6:92:c8:8a:
                    96:fe:35:63:96:22:6c:bd:5f:d2:29:c9:c2:5a:73:
                    0f:fc:8a:39:9c:e5:c9:4b:b5:41:49:30:b2:3d:ba:
                    c3:a0:19:33:0c:6a:64:56:72:f3:71:2d:cc:41:02:
                    9a:16:54:32:fa:c9:6e:38:59:04:50:a6:94:49:77:
                    af:67:28:fc:33:6e:f1:76:82:3c:dc:3e:53:e9:22:
                    8a:8a:39:49:6c:60:c5:91:69:ec:15:aa:65:cc:39:
                    b1:e4:bf:5e:c9:bc:ce:b3:cb:51:4a:88:35:0f:b8:
                    6d:82:f2:c3:b8:05:2b:37:d2:ae:95:78:c3:8c:fc:
                    84:7f:42:29:0e:4b:12:d7:4c:4c:0a:c9:4e:0f:25:
                    2d:e0:47:59:26:b2:45:d0:4d:7c:94:28:d0:c9:13:
                    ef:83:fe:99:07:98:ec:47:b4:7b:60:5a:bf:e6:4a:
                    93:50:5f:b7:bb:37:5f:87:8e:31:52:f4:e0:08:09:
                    82:e6:25:3c:87:a1:1e:72:6b:25:93:9f:7e:e5:8c:
                    48:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D2:9B:47:CB:6C:52:AB:D9:CA:8F:C5:BA:BC:AC:FF:32:4C:26:39
            X509v3 Authority Key Identifier:
                keyid:D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:42:8e:56:31:22:37:cd:e1:2c:b8:0a:04:04:99:5b:0f:bd:
         8b:aa:1d:cb:cc:21:49:8f:70:87:f0:69:2e:ea:65:d1:b9:f1:
         0e:f7:bf:18:51:14:2b:02:1e:10:52:e2:5f:58:7d:01:ad:a9:
         57:16:5b:85:89:d3:73:9f:9a:4e:a9:23:c5:b1:bc:2f:71:10:
         bd:39:6b:6c:34:23:47:55:7a:d4:12:eb:cd:b2:13:8d:d5:cd:
         26:82:fd:e1:05:9b:f1:7c:53:5c:7d:68:92:d9:6d:a3:82:3f:
         7c:52:96:31:81:de:3e:a7:83:d1:1d:d4:df:67:4d:da:ac:f3:
         95:b5:b0:f6:b4:ef:32:87:81:c6:2b:4b:a5:ae:0b:eb:79:2e:
         2a:73:f5:d5:06:e5:df:a9:b4:f7:29:e8:c3:14:d9:e8:82:3c:
         44:c9:a5:2a:37:39:3b:dd:fa:b8:f4:86:ab:d8:3f:c1:ac:99:
         18:d8:81:2a:43:ba:62:12:18:9e:ce:fa:71:08:9a:81:52:4d:
         cd:81:eb:92:69:67:b9:ac:94:e5:be:fc:d4:18:36:0e:33:a2:
         12:f3:4e:6d:58:70:bd:2e:69:60:0d:93:1d:99:15:43:26:7c:
         58:4f:f4:85:c8:f1:6c:df:93:8c:48:36:df:ab:95:d3:e6:7b:
         73:72:0e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:25 2025 by rpki-client on console.sobornost.net