Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.mft
File:                     38E14B86FE172DD4D8E534146604EB873463394D.mft (raw, json)
Hash identifier:          LB5dpprWvD2cyo+9KNNwsM7NZG4bI3ufzoc1eFXJybY=
Subject key identifier:   4A:19:69:C6:53:BD:DF:34:16:59:94:F1:C5:BA:D6:26:AD:7C:6A:69
Authority key identifier: 38:E1:4B:86:FE:17:2D:D4:D8:E5:34:14:66:04:EB:87:34:63:39:4D
Certificate issuer:       /CN=38E14B86FE172DD4D8E534146604EB873463394D
Certificate serial:       415E5EBFE6EBE21849FB81554D32B684446E657B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38E14B86FE172DD4D8E534146604EB873463394D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.mft
Manifest number:          B3
Signing time:             Mon 28 Apr 2025 09:09:13 +0000
Manifest this update:     Mon 28 Apr 2025 09:04:13 +0000
Manifest next update:     Tue 29 Apr 2025 09:14:13 +0000
Files and hashes:         1: 323830343a376236303a3a2f33322d3438203d3e20323731343238.roa (hash: KS3CIPQBP8uBSzv8b+te50bhqKxNppim+ZvFE5maTMk=)
                          2: 3230302e33362e3139322e302f32322d3234203d3e20323731343238.roa (hash: FGbym0C7oy+3WkWLxGeUkkMs9tZRG07fiF6hYHOGFP8=)
                          3: 38E14B86FE172DD4D8E534146604EB873463394D.crl (hash: ghMZml9He1RkZ7GhGO7HOvKz9YbF/tARTvmj2TsgckQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.crl
                          rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38E14B86FE172DD4D8E534146604EB873463394D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5e:5e:bf:e6:eb:e2:18:49:fb:81:55:4d:32:b6:84:44:6e:65:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38E14B86FE172DD4D8E534146604EB873463394D
        Validity
            Not Before: Apr 28 09:04:13 2025 GMT
            Not After : Apr 29 09:14:13 2025 GMT
        Subject: CN=4A1969C653BDDF34165994F1C5BAD626AD7C6A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:63:14:7f:0b:f6:77:46:af:ea:ac:ef:30:
                    0c:84:2d:f7:f9:a3:4a:a2:b8:3d:4b:48:e1:48:c5:
                    ef:da:02:20:7b:ee:c3:53:36:27:6a:86:bb:cf:39:
                    d6:73:dd:a2:e9:d7:25:92:6d:c2:01:d9:9b:2b:c4:
                    66:98:a9:47:8d:e4:66:8d:4a:62:fe:4d:da:26:e5:
                    9f:21:6d:bd:78:fe:fa:e5:93:6a:fa:1c:fd:c4:fb:
                    e5:17:74:b4:ac:f2:1b:6e:21:ba:42:e9:4e:4a:d8:
                    53:d8:49:a5:fc:a6:31:45:9f:12:82:d4:90:3a:a3:
                    94:a3:32:c6:be:bb:76:c3:3d:6e:8e:97:56:8d:01:
                    9d:45:f8:10:70:3a:7f:64:4d:d3:5c:38:72:b7:95:
                    94:ff:f4:2c:e0:c1:6c:68:d9:b9:8e:69:76:1e:46:
                    0e:ae:92:39:97:c2:73:fc:85:89:83:bc:7d:ee:0d:
                    27:df:66:58:e3:0f:28:3d:a3:a0:7e:57:b8:b3:29:
                    51:6e:26:3f:98:12:eb:68:c7:05:66:b0:91:38:75:
                    af:86:0a:0c:b7:4a:7d:77:7f:a6:48:e7:e8:ec:c8:
                    44:09:40:51:67:ee:3c:28:c6:13:9f:f4:94:9c:29:
                    17:33:65:3a:1c:95:85:60:cb:38:30:12:a9:87:6c:
                    ad:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:19:69:C6:53:BD:DF:34:16:59:94:F1:C5:BA:D6:26:AD:7C:6A:69
            X509v3 Authority Key Identifier:
                keyid:38:E1:4B:86:FE:17:2D:D4:D8:E5:34:14:66:04:EB:87:34:63:39:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38E14B86FE172DD4D8E534146604EB873463394D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d1:d5:a3:86:77:3d:82:a0:7c:26:c5:7d:53:1b:95:d8:6a:
         c2:2e:ec:49:99:a9:4f:d3:51:8e:cf:9a:46:ce:7f:49:36:a2:
         12:87:d2:0e:4a:f9:7f:77:b6:8e:c3:60:0a:7a:cb:7b:0e:91:
         a8:c7:42:62:c2:65:2a:39:1c:e0:89:fd:7a:d5:3f:a4:ca:ab:
         69:45:6a:0c:ec:13:42:47:b3:de:40:7f:57:aa:a5:1a:95:97:
         6f:b2:35:08:3a:35:55:18:fd:3a:dc:6c:08:df:94:57:76:7b:
         b3:46:df:e1:3a:10:f8:a3:5a:54:0f:e1:60:92:fc:a9:76:d0:
         8a:8e:cc:69:ac:a3:2f:44:21:57:33:43:a8:18:90:66:45:3b:
         23:75:3e:b6:0d:b0:9e:00:af:d7:ab:62:ff:46:a4:92:e3:31:
         fa:8a:8b:67:ca:2d:ae:3d:4d:85:fc:11:4d:8c:f9:a7:8b:64:
         dd:75:f7:87:c6:4e:69:f2:9a:4f:67:ff:89:c8:d6:34:54:37:
         91:09:dc:20:bd:98:98:b5:eb:6e:18:1f:0e:54:6b:9f:f4:39:
         e5:7e:3c:31:4d:0a:8e:12:c9:cc:93:c2:9a:af:8f:db:88:69:
         f2:ae:5e:03:c2:33:80:16:92:d5:61:ae:87:8f:d2:fa:d1:16:
         a7:3f:e1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:25 2025 by rpki-client on console.sobornost.net