Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/1/209EFD9083A94B4FB53BE8E724DD5F2319ADEC09.mft
File:                     209EFD9083A94B4FB53BE8E724DD5F2319ADEC09.mft (raw, json)
Hash identifier:          SFnK6RFp0CE1moQV5zY9zHwaaBEXvJfhv0MLcfz6fUE=
Subject key identifier:   AA:98:29:5D:35:5B:68:A8:91:10:43:59:CB:05:54:72:F5:53:1E:5C
Authority key identifier: 20:9E:FD:90:83:A9:4B:4F:B5:3B:E8:E7:24:DD:5F:23:19:AD:EC:09
Certificate issuer:       /CN=209EFD9083A94B4FB53BE8E724DD5F2319ADEC09
Certificate serial:       0DBFC4A4B6B6C0DE625902E56C25E2AC3F294664
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/209EFD9083A94B4FB53BE8E724DD5F2319ADEC09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/1/209EFD9083A94B4FB53BE8E724DD5F2319ADEC09.mft
Manifest number:          01FF
Signing time:             Sat 26 Apr 2025 13:19:14 +0000
Manifest this update:     Sat 26 Apr 2025 13:14:14 +0000
Manifest next update:     Sun 27 Apr 2025 16:58:14 +0000
Files and hashes:         1: 34352e3233372e3230382e302f32322d3332203d3e20323638323938.roa (hash: SVqMJRxAmbTBPonMFZlJOsUUcVg3kCzTE3WIW9mrWG0=)
                          2: 209EFD9083A94B4FB53BE8E724DD5F2319ADEC09.crl (hash: suPCxq4P9hkghGC6YhpCIoIMqtFZQYwFFpUSTYjjhJ0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/1/209EFD9083A94B4FB53BE8E724DD5F2319ADEC09.crl
                          rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/1/209EFD9083A94B4FB53BE8E724DD5F2319ADEC09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/209EFD9083A94B4FB53BE8E724DD5F2319ADEC09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 15:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:bf:c4:a4:b6:b6:c0:de:62:59:02:e5:6c:25:e2:ac:3f:29:46:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209EFD9083A94B4FB53BE8E724DD5F2319ADEC09
        Validity
            Not Before: Apr 26 13:14:14 2025 GMT
            Not After : Apr 27 16:58:14 2025 GMT
        Subject: CN=AA98295D355B68A891104359CB055472F5531E5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5f:01:d5:60:5e:d9:b2:38:aa:a5:63:e4:8c:
                    c5:e7:ab:a5:fc:07:f7:fb:ea:83:d5:6f:43:95:57:
                    d9:11:5a:da:cf:31:51:c6:8d:66:b4:6f:25:5e:d4:
                    5b:e1:de:fd:19:48:90:f4:95:8e:fa:92:41:93:5c:
                    59:27:87:e0:f0:44:f9:f5:d8:42:0a:94:74:15:3e:
                    f1:ba:11:3b:f9:1a:96:06:f2:d5:8e:cc:64:58:5c:
                    f3:4e:4e:6b:27:1a:ac:f2:b0:39:01:1a:a9:32:ca:
                    10:77:56:b1:1e:e1:be:5c:8d:c0:e1:a0:cd:31:28:
                    02:15:de:3f:20:e0:67:6a:99:69:df:fa:14:30:f7:
                    97:b9:66:c8:db:54:6f:8a:49:1e:2d:53:85:c4:3e:
                    62:bc:94:7d:be:2d:2b:96:3f:81:66:cd:de:af:d4:
                    40:81:79:55:eb:f2:b1:21:8c:cb:0f:df:da:15:83:
                    dc:ea:21:7a:a4:a2:32:02:99:ab:79:af:25:3d:f0:
                    a6:de:8b:6b:52:a4:ba:b4:44:f4:3a:ff:fe:73:ba:
                    9e:ff:23:b2:b5:34:f7:12:3f:d9:0a:bc:64:fd:2b:
                    42:8d:4c:22:de:79:b1:6c:8c:c3:30:70:33:9b:d9:
                    e6:9f:71:bb:d3:3d:34:5c:2d:76:e3:c9:8f:4e:be:
                    a2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:98:29:5D:35:5B:68:A8:91:10:43:59:CB:05:54:72:F5:53:1E:5C
            X509v3 Authority Key Identifier:
                keyid:20:9E:FD:90:83:A9:4B:4F:B5:3B:E8:E7:24:DD:5F:23:19:AD:EC:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/1/209EFD9083A94B4FB53BE8E724DD5F2319ADEC09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/209EFD9083A94B4FB53BE8E724DD5F2319ADEC09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/1/209EFD9083A94B4FB53BE8E724DD5F2319ADEC09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:59:95:0d:45:54:ca:53:5a:2d:7d:58:2a:bc:51:be:b4:ac:
         8f:20:2f:71:cc:b1:aa:70:76:6e:3c:40:32:40:f3:22:02:17:
         bd:e4:7c:6d:64:5f:e3:f4:19:62:8b:81:26:23:26:48:ad:20:
         86:24:1e:19:f5:42:48:cf:ef:cb:d4:b0:a8:7c:a1:f3:f6:e8:
         d9:76:86:1f:00:c7:d7:28:10:b5:11:ed:28:a0:72:9d:ad:51:
         94:e3:ab:16:dd:cb:a3:60:ff:e6:17:90:5a:03:fd:81:ed:66:
         91:97:d5:31:4c:60:32:aa:e1:d5:b8:b2:e6:13:90:13:a3:d2:
         d6:9b:31:88:0a:a6:6b:af:20:82:f1:76:79:70:78:12:7f:3e:
         34:73:b0:25:c2:b5:23:94:4f:ff:00:1d:5e:dd:3e:0b:73:5b:
         17:f8:0c:5e:a1:4e:ce:02:dc:d0:3a:90:3c:af:e1:d6:5b:a8:
         8c:99:6e:be:24:e4:d5:20:b4:99:70:fc:a8:79:64:45:52:a4:
         32:a3:cc:34:96:38:85:ef:89:ee:27:09:b4:4a:24:2f:f9:1b:
         a1:fb:cb:ef:e5:92:27:52:5a:88:2d:d0:97:c7:fb:fd:b5:ea:
         a3:1a:4e:ff:4d:11:36:55:72:6f:55:6d:6c:8f:71:72:d3:68:
         f4:ff:2c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:15 2025 by rpki-client on console.sobornost.net