Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.mft
File:                     E533674BA5C26CC97186C54907220754478B1596.mft (raw, json)
Hash identifier:          2Y6LLa+LfM7JPDN8OpCyXvekMsubwr5HAsan7ie4ijY=
Subject key identifier:   93:4C:3C:6B:DB:1D:08:8C:63:6E:71:A8:2A:23:06:50:8E:8F:3F:6B
Authority key identifier: E5:33:67:4B:A5:C2:6C:C9:71:86:C5:49:07:22:07:54:47:8B:15:96
Certificate issuer:       /CN=E533674BA5C26CC97186C54907220754478B1596
Certificate serial:       07C7A225F708E24A5B5AAC32D53CD0D8573CE04D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.mft
Manifest number:          016F
Signing time:             Mon 28 Apr 2025 02:05:22 +0000
Manifest this update:     Mon 28 Apr 2025 02:00:22 +0000
Manifest next update:     Tue 29 Apr 2025 04:17:22 +0000
Files and hashes:         1: 34352e3232392e32312e302f32342d3234203d3e20323637303931.roa (hash: I7BIDIJi3iCaWYerp/PhHNnLTqF8EU3R+zjy8+DnC1E=)
                          2: 34352e3232392e32332e302f32342d3234203d3e20323637303931.roa (hash: STUTTS9Wj0hf5bSZd/NwsL0QIxxDmsLuJ+nSe4pQjPc=)
                          3: 34352e3232392e32322e302f32342d3234203d3e20323637303931.roa (hash: 00ulnhT2clKAj5Z6OK+iggphhmHJrrSSDuCe0rMHUPI=)
                          4: E533674BA5C26CC97186C54907220754478B1596.crl (hash: SrXZLYYRMuc5i8PXtzrWfV/zPpiv/xCgPRyMsNI91/I=)
                          5: 323830343a343830303a3a2f33322d3332203d3e20323637303931.roa (hash: P1iVoJfxgVgvLp6czCL9TvfGbVslmweuGYAC31iY/H4=)
                          6: 34352e3232392e32302e302f32322d3232203d3e20323637303931.roa (hash: PmZa6XWW8N0henoxOZeBx1dJrefChIYpP++Fbka1nSU=)
                          7: 34352e3232392e32302e302f32342d3234203d3e20323637303931.roa (hash: G4RWRbFzkiPtRpwuxbHytfYOPuZHnvzajHmAKaSv+pM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.crl
                          rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c7:a2:25:f7:08:e2:4a:5b:5a:ac:32:d5:3c:d0:d8:57:3c:e0:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E533674BA5C26CC97186C54907220754478B1596
        Validity
            Not Before: Apr 28 02:00:22 2025 GMT
            Not After : Apr 29 04:17:22 2025 GMT
        Subject: CN=934C3C6BDB1D088C636E71A82A2306508E8F3F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:66:d8:71:0c:da:36:60:9b:0c:29:79:78:cc:
                    99:2d:1b:a6:2c:78:39:ea:de:36:af:7f:61:54:27:
                    6b:b8:e8:0b:5f:fe:06:1b:c5:d8:6e:46:43:02:ef:
                    c3:5e:b1:b7:82:ca:39:16:75:72:77:18:a0:7c:6a:
                    06:7b:52:79:d2:1b:78:0d:07:55:cb:95:f4:55:c5:
                    a2:9f:9e:69:6b:74:67:8b:de:0a:63:d8:6d:71:9d:
                    44:7e:85:e1:cc:c1:8e:e1:c8:ad:0c:eb:f2:5e:9a:
                    9d:7b:01:1d:63:e7:8d:b3:a4:f2:aa:56:0f:9c:40:
                    19:55:df:1a:63:ac:34:97:15:ea:0f:61:9e:b4:65:
                    19:69:37:90:d7:23:e0:15:2f:89:ed:01:6d:e5:8e:
                    85:d2:c2:68:0e:73:22:4f:41:a5:e2:e0:c0:60:03:
                    03:22:66:5b:6b:61:f0:4c:f7:0a:f4:a9:bf:74:b1:
                    01:21:67:f5:9d:b5:63:cf:64:38:7f:d4:fa:ad:d1:
                    34:5b:91:04:74:c1:ca:b4:c2:fd:55:b4:33:76:63:
                    56:d2:c1:a0:05:4e:9c:7b:f7:f2:a2:b9:90:4c:e6:
                    46:01:a2:90:74:eb:af:88:d9:85:46:09:f4:69:6f:
                    0c:ce:58:8d:45:0e:b8:e4:c8:a0:d5:59:3f:8f:39:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4C:3C:6B:DB:1D:08:8C:63:6E:71:A8:2A:23:06:50:8E:8F:3F:6B
            X509v3 Authority Key Identifier:
                keyid:E5:33:67:4B:A5:C2:6C:C9:71:86:C5:49:07:22:07:54:47:8B:15:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:f8:c8:cc:9f:49:20:64:1e:8c:85:ff:99:57:d4:08:79:2e:
         7e:f9:4c:33:2d:19:47:e3:8f:bf:29:59:36:76:d4:4d:b0:78:
         e1:22:74:31:ac:d1:b0:22:36:70:be:83:bc:9f:0f:3c:40:04:
         d7:de:2b:86:d0:ee:39:97:88:f8:4f:5c:04:65:d0:80:5b:66:
         a1:da:a2:e5:1b:a7:b5:5b:1a:cd:78:da:ea:29:60:bb:11:53:
         9f:d9:e3:bc:63:aa:40:83:f9:1d:e6:7f:83:2f:13:29:90:8b:
         81:a5:3b:08:33:e3:a7:db:b3:2e:b4:2b:54:07:dc:e8:fd:ec:
         22:8b:03:4a:82:68:46:f0:33:76:99:2e:14:00:c4:98:68:22:
         7d:ff:62:48:6f:20:bd:da:48:f0:03:10:5f:3b:ac:ee:d1:58:
         3f:35:9c:b1:48:6f:d6:6c:8f:5d:c2:f2:fd:0a:09:c8:02:8e:
         79:37:3d:9e:61:21:ff:0c:c8:cd:67:d3:8a:8c:b2:a3:68:ab:
         f0:69:6e:f6:d8:44:b6:f1:73:0c:97:e9:ad:8f:73:d1:3a:a8:
         e8:cf:c6:e7:2e:74:84:e3:32:27:35:63:b6:90:43:db:0f:34:
         cf:7f:2f:50:62:81:5b:07:ef:ac:74:b5:d2:f6:f0:23:4b:41:
         08:23:ed:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUB8eiJfcI4kpbWqwy1TzQ2Fc84E0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTUzMzY3NEJBNUMyNkNDOTcxODZDNTQ5MDcyMjA3NTQ0
NzhCMTU5NjAeFw0yNTA0MjgwMjAwMjJaFw0yNTA0MjkwNDE3MjJaMDMxMTAvBgNV
BAMTKDkzNEMzQzZCREIxRDA4OEM2MzZFNzFBODJBMjMwNjUwOEU4RjNGNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfZthxDNo2YJsMKXl4zJktG6Ys
eDnq3javf2FUJ2u46Atf/gYbxdhuRkMC78NesbeCyjkWdXJ3GKB8agZ7UnnSG3gN
B1XLlfRVxaKfnmlrdGeL3gpj2G1xnUR+heHMwY7hyK0M6/Jemp17AR1j542zpPKq
Vg+cQBlV3xpjrDSXFeoPYZ60ZRlpN5DXI+AVL4ntAW3ljoXSwmgOcyJPQaXi4MBg
AwMiZltrYfBM9wr0qb90sQEhZ/WdtWPPZDh/1Pqt0TRbkQR0wcq0wv1VtDN2Y1bS
waAFTpx79/KiuZBM5kYBopB066+I2YVGCfRpbwzOWI1FDrjkyKDVWT+POVxnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUk0w8a9sdCIxjbnGoKiMGUI6PP2swHwYDVR0j
BBgwFoAU5TNnS6XCbMlxhsVJByIHVEeLFZYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGVCd3RQb2VkUGc5Nm5aNW80RmtxcVlwQjlObzhaem43VWVDOVBoOHFk
R1cvMS9FNTMzNjc0QkE1QzI2Q0M5NzE4NkM1NDkwNzIyMDc1NDQ3OEIxNTk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1MzM2NzRCQTVDMjZDQzk3
MTg2QzU0OTA3MjIwNzU0NDc4QjE1OTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OGVCd3RQb2VkUGc5Nm5aNW80RmtxcVlwQjlObzhaem43VWVDOVBoOHFkR1cvMS9F
NTMzNjc0QkE1QzI2Q0M5NzE4NkM1NDkwNzIyMDc1NDQ3OEIxNTk2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEfjIzJ9JIGQejIX/mVfUCHkufvlMMy0ZR+OPvylZNnbUTbB44SJ0MazRsCI2
cL6DvJ8PPEAE194rhtDuOZeI+E9cBGXQgFtmodqi5RuntVsazXja6ilguxFTn9nj
vGOqQIP5HeZ/gy8TKZCLgaU7CDPjp9uzLrQrVAfc6P3sIosDSoJoRvAzdpkuFADE
mGgiff9iSG8gvdpI8AMQXzus7tFYPzWcsUhv1myPXcLy/QoJyAKOeTc9nmEh/wzI
zWfTioyyo2ir8Glu9thEtvFzDJfprY9z0Tqo6M/G5y50hOMyJzVjtpBD2w80z38v
UGKBWwfvrHS10vbwI0tBCCPt7Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:13 2025 by rpki-client on console.sobornost.net