Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/704F7944732F98AD0D651DC0C5B89C092F753A92.mft
File:                     704F7944732F98AD0D651DC0C5B89C092F753A92.mft (raw, json)
Hash identifier:          FXT5FXsVbseEISRDG0UcegzLT8av0i7FFkPkJs8zUec=
Subject key identifier:   4C:B9:46:91:47:F5:82:18:B5:2C:E4:87:F8:5A:7B:99:3C:1F:F6:38
Authority key identifier: 70:4F:79:44:73:2F:98:AD:0D:65:1D:C0:C5:B8:9C:09:2F:75:3A:92
Certificate issuer:       /CN=704F7944732F98AD0D651DC0C5B89C092F753A92
Certificate serial:       1914D97A1B9241289C6AAD11DD1A5005209E13A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704F7944732F98AD0D651DC0C5B89C092F753A92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/704F7944732F98AD0D651DC0C5B89C092F753A92.mft
Manifest number:          024B
Signing time:             Mon 28 Apr 2025 20:10:01 +0000
Manifest this update:     Mon 28 Apr 2025 20:05:01 +0000
Manifest next update:     Tue 29 Apr 2025 20:10:01 +0000
Files and hashes:         1: 704F7944732F98AD0D651DC0C5B89C092F753A92.crl (hash: apSnSo5W00zOiIBWTj2q92ICUJsZjAPB3Fh5g6MfZno=)
                          2: 323830343a343635633a3a2f33322d3334203d3e20323636393835.roa (hash: NSUTd+jNQlxEWgEHUGBU26ljbt8t1wltALHSyy3OQwM=)
                          3: 34352e3232362e35322e302f32322d3234203d3e20323636393835.roa (hash: gFKNGQWnxf/lO0ukJjdU4O1Hi8MvZwPF3BEGK/CEjdo=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/704F7944732F98AD0D651DC0C5B89C092F753A92.crl
                          rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/704F7944732F98AD0D651DC0C5B89C092F753A92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704F7944732F98AD0D651DC0C5B89C092F753A92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:14:d9:7a:1b:92:41:28:9c:6a:ad:11:dd:1a:50:05:20:9e:13:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704F7944732F98AD0D651DC0C5B89C092F753A92
        Validity
            Not Before: Apr 28 20:05:01 2025 GMT
            Not After : Apr 29 20:10:01 2025 GMT
        Subject: CN=3082010A0282010100E605135BE6D50EF2973EC9631C5C604D3C111B0338F298FEF831E68E24C2DB319D58628C12DF2A2B9698424C888288B433EF6EB1E30FA476FF0F6D940901240A2DF47EAAB00825B42CB7D9A9C978E0938097CBD305F84DB5898C38621799183A5B805B4D2516E35FD2D8158B13CAA74D10C29A3AE896C5D99552F4EFDBEF54848DD78C430ED2D1DD4B9328463E50739A199ACE7653AC8467B60D63F8D83DA5426B77B6D585534DFD021D981E2A2A719936C3D4E43ABA4754AF87481BD29E3A53A4FFC6BDA31B496702C537C51EDB9A2CF860A0673C97D62771C4D9789EEB77C86694BE62284BADF571F921E413C4EECD5A308553FFFACB97D6CBF0FC1277B2FF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:05:13:5b:e6:d5:0e:f2:97:3e:c9:63:1c:5c:
                    60:4d:3c:11:1b:03:38:f2:98:fe:f8:31:e6:8e:24:
                    c2:db:31:9d:58:62:8c:12:df:2a:2b:96:98:42:4c:
                    88:82:88:b4:33:ef:6e:b1:e3:0f:a4:76:ff:0f:6d:
                    94:09:01:24:0a:2d:f4:7e:aa:b0:08:25:b4:2c:b7:
                    d9:a9:c9:78:e0:93:80:97:cb:d3:05:f8:4d:b5:89:
                    8c:38:62:17:99:18:3a:5b:80:5b:4d:25:16:e3:5f:
                    d2:d8:15:8b:13:ca:a7:4d:10:c2:9a:3a:e8:96:c5:
                    d9:95:52:f4:ef:db:ef:54:84:8d:d7:8c:43:0e:d2:
                    d1:dd:4b:93:28:46:3e:50:73:9a:19:9a:ce:76:53:
                    ac:84:67:b6:0d:63:f8:d8:3d:a5:42:6b:77:b6:d5:
                    85:53:4d:fd:02:1d:98:1e:2a:2a:71:99:36:c3:d4:
                    e4:3a:ba:47:54:af:87:48:1b:d2:9e:3a:53:a4:ff:
                    c6:bd:a3:1b:49:67:02:c5:37:c5:1e:db:9a:2c:f8:
                    60:a0:67:3c:97:d6:27:71:c4:d9:78:9e:eb:77:c8:
                    66:94:be:62:28:4b:ad:f5:71:f9:21:e4:13:c4:ee:
                    cd:5a:30:85:53:ff:fa:cb:97:d6:cb:f0:fc:12:77:
                    b2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B9:46:91:47:F5:82:18:B5:2C:E4:87:F8:5A:7B:99:3C:1F:F6:38
            X509v3 Authority Key Identifier:
                keyid:70:4F:79:44:73:2F:98:AD:0D:65:1D:C0:C5:B8:9C:09:2F:75:3A:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/704F7944732F98AD0D651DC0C5B89C092F753A92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704F7944732F98AD0D651DC0C5B89C092F753A92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/704F7944732F98AD0D651DC0C5B89C092F753A92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9b:2c:e3:19:29:39:eb:a9:80:19:65:bc:c1:f2:f2:70:25:
         6f:b2:6b:9a:84:55:f7:8f:25:e2:07:69:e6:d4:8e:d2:fa:e2:
         6b:20:27:cb:b4:0a:6c:8c:98:04:8d:39:ed:0c:ec:03:f8:1f:
         18:c8:9a:8c:a6:02:c2:37:4b:ce:d2:c7:73:5e:b7:d1:32:5e:
         43:27:81:9a:f9:96:d0:a0:d2:52:b4:ff:db:bd:39:76:f2:3f:
         ba:33:b1:0d:1a:f0:bd:7e:bf:7c:67:a3:bc:2b:71:ad:d0:3f:
         3e:78:dd:d6:fc:91:cb:d7:30:ab:7d:59:d7:49:3e:b7:1f:3a:
         5a:12:f6:27:20:38:a6:c4:dd:bd:98:11:18:74:18:fd:7d:4b:
         c1:34:f4:6b:87:14:d7:d3:74:2f:d3:c2:8c:40:a7:ce:1b:70:
         83:31:05:1f:b6:a4:ba:03:7c:5b:47:f9:0e:c1:e4:2a:82:ac:
         e9:ee:c0:59:66:33:c9:e3:22:06:3d:8d:2b:65:c8:7c:34:88:
         17:52:c8:a5:f5:28:62:11:7f:09:8e:6d:bb:db:c3:2b:f2:2a:
         6d:00:b5:b2:74:ab:65:6f:9c:8d:a9:76:c3:90:66:93:ee:e3:
         66:65:57:ec:37:0f:cc:ca:60:3a:99:ef:19:48:17:e3:6c:cb:
         9e:3a:c8:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:59 2025 by rpki-client on console.sobornost.net