Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft
File:                     2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft (raw, json)
Hash identifier:          eBnA9oS3OMEZXgbu8ddTxhoaZya+syr3DidluJGwnwk=
Subject key identifier:   11:78:92:1F:1A:22:D6:46:8B:A4:73:FE:F3:DA:98:6B:05:C8:B6:CE
Authority key identifier: 22:64:D1:7A:1D:E6:58:F2:5F:A0:EB:77:73:DA:7F:6B:41:E5:2F:D0
Certificate issuer:       /CN=2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0
Certificate serial:       0291BECC0CDD480A9899ACE268981810AD3E4A50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft
Manifest number:          AF
Signing time:             Sun 27 Apr 2025 00:40:27 +0000
Manifest this update:     Sun 27 Apr 2025 00:35:27 +0000
Manifest next update:     Mon 28 Apr 2025 01:23:27 +0000
Files and hashes:         1: 323830343a333964633a3a2f33322d3438203d3e20323636303535.roa (hash: lVjQzNWaA6sgin+JcE6yIGp5pKVWTu71HlqWbMqLcRA=)
                          2: 34352e342e34342e302f32322d3234203d3e20323636303535.roa (hash: M1VFgYTrOUFDbP0quSBm77YUIyLqayRU7rDUKkoVyBM=)
                          3: 2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.crl (hash: ut/6+PP5Z7y0IkzZl7kaGiqanR+Bl+xQrYDD8B68cWA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.crl
                          rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 01:23:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:91:be:cc:0c:dd:48:0a:98:99:ac:e2:68:98:18:10:ad:3e:4a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0
        Validity
            Not Before: Apr 27 00:35:27 2025 GMT
            Not After : Apr 28 01:23:27 2025 GMT
        Subject: CN=1178921F1A22D6468BA473FEF3DA986B05C8B6CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:79:b4:61:38:77:ac:8e:66:57:6b:12:c1:74:
                    8b:5f:9e:e1:6b:33:f3:17:13:da:2a:4f:b6:b6:f4:
                    03:8d:63:59:aa:18:66:89:2d:5e:1e:67:99:d5:0c:
                    9c:13:92:d6:04:7d:43:48:56:96:7f:7f:3b:db:e9:
                    93:b5:8d:81:83:bf:ca:0c:fa:45:8f:94:96:e5:78:
                    90:d3:48:4f:14:c2:17:65:9e:a9:8b:66:a7:31:bb:
                    51:ac:9f:cd:e6:1f:7f:86:7b:7f:a7:2a:87:fa:60:
                    53:ba:c0:29:75:c5:67:b9:4d:be:c7:71:c2:5a:16:
                    9e:03:a2:1e:53:2d:92:34:9f:f5:80:68:0f:b6:33:
                    03:4b:8f:2b:9a:98:80:9b:46:d0:fd:e4:32:e8:70:
                    c9:1d:4b:b3:63:52:b1:cd:45:49:fa:a5:b2:b5:c2:
                    14:39:79:bd:c0:98:75:82:98:61:cd:6b:ba:a1:e1:
                    7c:42:dd:a3:f7:4c:13:97:67:27:68:27:77:b3:4d:
                    c0:c5:cc:6d:67:e5:26:26:83:11:92:51:7c:3b:3b:
                    35:90:8d:c0:34:be:b9:69:dc:a5:ed:28:f5:a4:e9:
                    13:c3:e6:ee:d2:f3:57:57:30:2e:17:ec:29:69:5f:
                    7e:60:0e:46:64:b4:a7:3e:a7:61:49:6d:33:e7:db:
                    01:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:78:92:1F:1A:22:D6:46:8B:A4:73:FE:F3:DA:98:6B:05:C8:B6:CE
            X509v3 Authority Key Identifier:
                keyid:22:64:D1:7A:1D:E6:58:F2:5F:A0:EB:77:73:DA:7F:6B:41:E5:2F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:08:d8:28:8f:c1:13:37:cc:39:f0:19:cc:87:01:8d:89:39:
         2b:59:ca:ba:7c:e7:07:d6:d9:b1:af:b5:4f:aa:4e:25:24:31:
         65:ee:e8:97:e6:b7:d2:07:f4:ed:8e:fa:d6:6d:05:be:ca:59:
         3e:34:ae:2c:5d:ea:b3:e9:5a:49:05:61:e8:28:51:e3:fe:c8:
         d7:11:4e:93:0c:67:2e:93:dd:68:1f:0c:1c:7f:7f:45:74:b7:
         25:23:7c:a7:a0:c1:37:36:79:08:c0:3d:65:be:96:e9:71:5b:
         40:dc:58:41:b4:11:0b:8e:ee:8e:c3:f3:8b:04:76:b7:70:dd:
         6a:8d:79:32:0c:3d:f8:a1:7a:0a:66:c1:82:b5:0c:48:05:0d:
         6e:d3:6e:1e:bf:ad:14:92:79:0b:cb:fd:53:45:bc:d1:5f:20:
         58:53:51:8f:82:83:9f:cd:fb:cc:c4:cf:47:a1:f3:32:7b:c9:
         c0:7f:e4:93:a0:5f:57:7d:bb:d8:95:47:5d:e4:cf:90:f8:c0:
         da:c5:f4:3b:6b:cd:34:61:83:09:b8:67:2f:a3:82:02:29:b2:
         f5:33:d2:00:46:04:fc:a3:f3:30:b5:49:50:51:48:5d:5d:da:
         42:19:2f:e8:34:0e:f7:94:f0:3a:05:6e:6a:92:b5:d6:e6:a8:
         b5:27:4e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:55 2025 by rpki-client on console.sobornost.net