Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
File:                     A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft (raw, json)
Hash identifier:          MFYmdTw3EZ5qwU70X+/GkuI17Jq4hOcSSjXbtmFP0vs=
Subject key identifier:   43:B7:45:6E:91:E5:B8:83:3E:52:71:05:BC:EB:C6:74:52:2C:22:C0
Authority key identifier: A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36
Certificate issuer:       /CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
Certificate serial:       767021113FCCC63072331193E226BB70D257B0FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
Manifest number:          024C
Signing time:             Mon 28 Apr 2025 19:20:00 +0000
Manifest this update:     Mon 28 Apr 2025 19:15:00 +0000
Manifest next update:     Tue 29 Apr 2025 19:20:00 +0000
Files and hashes:         1: 323830343a343566383a3a2f33322d3332203d3e20323636393538.roa (hash: oIn9GZF5p5pNefIVeN0UiS8wgqn3Gv7XI5/YxvIRfSA=)
                          2: 34352e3232362e34352e302f32342d3234203d3e20323636393538.roa (hash: GxoI1DsIOHonoYDFpLsELEka4FnyR3oyfVJn+2wiMAE=)
                          3: 34352e3232362e34362e302f32342d3234203d3e20323636393538.roa (hash: SErwqqgGaKkYiiTZSZGe1niblQP3x2+Q6HGo8mm/f7g=)
                          4: 34352e3232362e34372e302f32342d3234203d3e20323636393538.roa (hash: cvl9XN6D9prdMFpaUtK33s8zHTgWyCPhHvs5DTeHQOk=)
                          5: 34352e3232362e34342e302f32342d3234203d3e20323636393538.roa (hash: +K5pOFau4ZXe2MVLt8P7O8Yh0nJiT0WuYcjyq4lHU0U=)
                          6: A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl (hash: 8NAz33gABXzExAB7zJBTgafaz/fPaStlxRkYJqqz7+c=)
                          7: 34352e3232362e34342e302f32322d3232203d3e20323636393538.roa (hash: mFDQzS/Ad8gKFIuL0FgAwGbiz2AkpGyAGickt8RlhVc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl
                          rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:70:21:11:3f:cc:c6:30:72:33:11:93:e2:26:bb:70:d2:57:b0:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
        Validity
            Not Before: Apr 28 19:15:00 2025 GMT
            Not After : Apr 29 19:20:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e3:0a:bb:56:7b:0c:a5:b0:22:4d:07:f4:56:
                    04:12:61:3f:95:fd:f2:a0:48:ba:67:74:37:af:4a:
                    a8:15:89:1e:f5:9b:4a:10:ec:40:78:d7:38:42:a0:
                    b5:46:81:ae:2e:6c:d1:ec:27:80:c9:63:e6:f4:c1:
                    e2:6c:57:3f:4b:f3:12:ad:c3:d2:db:fc:2b:87:d3:
                    ab:23:77:af:5c:df:74:56:70:db:cf:21:de:12:bf:
                    9e:b8:27:88:bb:cf:fb:57:99:fa:80:f8:b9:78:0f:
                    e9:90:0f:ce:45:7d:75:68:63:68:91:e1:b9:fe:da:
                    c7:93:e1:ea:7a:3e:9d:6f:4f:46:09:4a:87:fe:f2:
                    d8:0a:2a:52:2a:2b:00:98:43:82:ef:4c:8d:f4:c9:
                    76:7f:f1:e8:01:3e:4b:1c:d6:20:7d:62:ce:51:71:
                    ac:74:36:b2:98:2c:dc:9a:6d:ef:8f:f7:55:af:0c:
                    ba:26:ee:6b:0d:cc:9a:e6:6b:00:1d:73:05:d5:4e:
                    7d:2b:8e:47:71:df:a1:96:83:59:fe:bc:d7:4e:b0:
                    b5:97:38:d7:cb:78:36:82:c1:db:1e:95:68:d1:01:
                    ab:90:b0:9a:5e:56:1a:19:1a:97:19:7c:2b:40:50:
                    dc:6d:64:f1:28:0a:bc:68:8c:fb:90:7d:1b:a8:e0:
                    b0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B7:45:6E:91:E5:B8:83:3E:52:71:05:BC:EB:C6:74:52:2C:22:C0
            X509v3 Authority Key Identifier:
                keyid:A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a2:d4:eb:af:6a:7a:d5:5d:0b:dd:3b:e7:de:28:aa:99:9e:
         4d:2a:94:90:f9:f5:10:a2:a7:40:26:b1:51:0d:87:c0:eb:9b:
         d8:96:cb:1d:8f:5c:eb:9e:1f:98:2e:8a:76:33:88:5d:17:9a:
         e2:38:7e:ce:4f:76:8b:7b:4d:64:19:ec:5f:48:dc:56:90:80:
         25:14:87:85:15:33:4c:15:ee:c5:5b:2e:1d:eb:9b:d3:06:eb:
         22:ff:85:98:67:55:68:38:61:00:94:12:89:74:b6:38:71:92:
         ed:5c:1d:15:c7:ee:a8:3b:d8:f9:16:d4:a2:bc:48:01:bd:a0:
         4f:4f:14:4b:83:7d:dd:a9:37:5c:da:9a:24:b2:bd:34:ea:59:
         55:c8:df:9e:97:54:f7:98:3e:13:f7:7f:fd:df:4c:a7:d1:0e:
         d1:cf:4d:1f:44:5f:f4:63:22:fd:c3:bd:36:e4:09:76:21:7d:
         f9:77:bf:94:53:9b:77:f7:3a:9d:70:24:93:44:16:1b:5d:b7:
         f2:eb:2e:85:ce:18:e4:7b:89:fb:8f:39:8b:9f:2b:72:f2:b3:
         cb:ea:f0:b9:41:d3:6e:f9:9e:05:57:e4:df:a2:fd:98:5c:02:
         85:20:f0:25:b4:ba:b7:53:58:7c:2b:e2:ed:06:e6:6f:38:e3:
         8c:b8:2d:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:59 2025 by rpki-client on console.sobornost.net