Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.mft
File:                     5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.mft (raw, json)
Hash identifier:          G5y1PDWncoauNQTmIQKEORxsr3x3/4JAkzAYriAY7sY=
Subject key identifier:   E2:70:37:DA:1B:FA:63:11:D2:DA:87:CA:39:15:0A:66:C1:92:00:46
Authority key identifier: 5D:79:80:6D:AD:4F:4A:CB:46:CA:F2:5A:4A:3E:D4:69:42:6E:6A:2F
Certificate issuer:       /CN=5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F
Certificate serial:       2604241F00A482266352148828CF59511607FE14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.mft
Manifest number:          0209
Signing time:             Mon 28 Apr 2025 05:03:48 +0000
Manifest this update:     Mon 28 Apr 2025 04:58:48 +0000
Manifest next update:     Tue 29 Apr 2025 07:14:48 +0000
Files and hashes:         1: 3138362e32362e39302e302f32342d3234203d3e20323730393236.roa (hash: DFLiVmNpU2egEOqUr1ccev8/SIJivW1YXgBIeSJIcOg=)
                          2: 3138362e32362e39302e302f32332d3233203d3e20323730393236.roa (hash: 1I+mQ1hBicYUDNzk81QFDXPHMTqHG5QHNo6h00uRenA=)
                          3: 3138362e32362e38382e302f32342d3234203d3e20323730393236.roa (hash: GTb6VissBeNUP4hUPNUF5/XMaSyMv6j/4YTai4SyZt4=)
                          4: 3138362e32362e38392e302f32342d3234203d3e20323730393236.roa (hash: lTS5e0RbQx2mukhAeXzV+d8lE8O0hWH3l2oHpAEyzh0=)
                          5: 5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.crl (hash: lCHBknxJfXn081eD/+pjwcv5B7uot86JOmtFhCmn7Xg=)
                          6: 323830343a373339633a3a2f33322d3332203d3e20323730393236.roa (hash: WkLhVWPbNGMOrUra4Yg+nzEXYsVgmQsMxzrX8cgPQ7I=)
                          7: 3138362e32362e39312e302f32342d3234203d3e20323730393236.roa (hash: e7MbESyniExTHL3Fzt18TrU88OIgavVqAyA3mhxZgQg=)
                          8: 3138362e32362e38382e302f32332d3233203d3e20323730393236.roa (hash: 1pAW17WG/lpWhQ1Ekn7CDplOXsZzzmXS+MGQ1Pta9zk=)
                          9: 3138362e32362e38382e302f32322d3232203d3e20323730393236.roa (hash: HjjQuYddnQaIhHJRxBST6qveeFydIjy8a2oilHhTC9k=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.crl
                          rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:04:24:1f:00:a4:82:26:63:52:14:88:28:cf:59:51:16:07:fe:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F
        Validity
            Not Before: Apr 28 04:58:48 2025 GMT
            Not After : Apr 29 07:14:48 2025 GMT
        Subject: CN=E27037DA1BFA6311D2DA87CA39150A66C1920046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3e:9d:17:b2:57:31:b4:b0:fe:32:1e:ca:ec:
                    ad:8e:cb:c7:a0:65:64:e5:0f:49:07:a4:1d:f9:e6:
                    2a:47:f8:0d:76:6a:d2:84:dd:9b:48:c1:65:56:16:
                    85:43:b7:16:fd:f8:b0:8e:e6:b9:eb:38:bf:84:bb:
                    a1:6f:b2:38:2d:4a:b1:2f:be:3e:b1:10:ba:ac:05:
                    a5:1b:39:f0:f3:08:2a:a5:82:00:ef:b1:d4:0b:89:
                    68:7b:2e:34:9f:d0:a2:aa:1d:73:a3:5c:b1:e3:e8:
                    6a:ad:00:33:45:6f:70:ab:05:40:73:39:19:cc:19:
                    33:f1:43:3b:57:7a:c9:cf:d0:54:b4:a0:01:a5:00:
                    07:8a:51:54:0d:e5:77:c4:e3:be:1d:53:63:fb:16:
                    eb:1a:c3:47:6f:ba:2e:c9:1d:5b:80:a0:4c:11:ec:
                    a1:b6:12:f2:9f:14:b6:15:fb:86:65:87:4a:22:11:
                    ec:3d:0a:fb:db:c0:7e:92:29:b5:0e:68:bd:cb:e1:
                    8e:4c:5c:42:48:42:35:de:dd:59:12:bd:3e:e3:a8:
                    af:7a:73:1d:47:18:92:a7:67:f4:29:59:0b:8e:42:
                    be:82:0e:02:f4:83:3c:65:71:3f:c9:bf:5b:d5:af:
                    aa:56:0a:ae:dc:e8:21:3e:4b:76:b2:db:64:ba:ae:
                    85:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:70:37:DA:1B:FA:63:11:D2:DA:87:CA:39:15:0A:66:C1:92:00:46
            X509v3 Authority Key Identifier:
                keyid:5D:79:80:6D:AD:4F:4A:CB:46:CA:F2:5A:4A:3E:D4:69:42:6E:6A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:4b:0d:cb:85:18:33:16:48:ab:4a:a8:b1:ad:dd:46:d5:a5:
         69:41:e2:c8:8e:b7:76:43:f9:d0:ec:b5:c3:a1:31:4b:03:77:
         9d:f0:27:68:2a:a0:0c:c2:54:dc:0a:a2:6f:f4:1b:6c:6c:05:
         2c:19:fa:7b:c4:55:bb:6e:46:fd:83:5e:1b:d8:a5:36:ec:eb:
         c0:a0:be:af:04:4e:f6:b5:cc:6e:bb:71:a8:91:78:d4:83:8d:
         83:14:03:f7:7f:70:b2:56:9d:77:ce:b1:b7:ed:93:d8:5f:81:
         51:bc:bf:ce:fe:40:ed:e3:1d:49:8a:cb:14:ec:fa:ad:31:9b:
         54:8c:71:59:fc:97:72:34:a7:04:ae:5a:40:3b:2b:8c:bb:ad:
         6d:4c:f0:6b:0b:38:b7:84:b9:33:6b:a8:7e:80:43:e2:e8:61:
         a8:a0:2f:be:fd:d1:a6:87:5a:a7:43:36:f1:55:a6:04:b0:3a:
         14:e8:d3:4a:74:f2:57:6d:a8:2b:7d:e2:8f:f0:5f:1d:c5:94:
         4e:4e:23:5a:52:04:21:0d:0e:88:2c:3c:ba:f4:e9:a4:30:15:
         63:74:e0:a3:b5:56:1d:65:dc:fb:66:68:33:18:ee:de:ad:85:
         9a:70:c4:a0:1f:31:06:e7:9c:5b:da:0e:d1:b6:81:80:ea:f9:
         09:6e:41:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:34 2025 by rpki-client on console.sobornost.net