Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.mft
File:                     8C2701B7080D1081AAECCD107A57E11F3AEB77BA.mft (raw, json)
Hash identifier:          kzsw0Zi/p9Kh7/yz9+TpbsgFX+Vkw6DYt2VOFLXar1w=
Subject key identifier:   9C:93:FA:C7:B0:92:59:A0:B4:C4:6C:8A:34:FC:D4:B1:8A:FC:1B:E1
Authority key identifier: 8C:27:01:B7:08:0D:10:81:AA:EC:CD:10:7A:57:E1:1F:3A:EB:77:BA
Certificate issuer:       /CN=8C2701B7080D1081AAECCD107A57E11F3AEB77BA
Certificate serial:       6F07E1CBA1CBE7DD4B3E6B540D86B43A46E600C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.mft
Manifest number:          FF
Signing time:             Mon 28 Apr 2025 03:20:41 +0000
Manifest this update:     Mon 28 Apr 2025 03:15:41 +0000
Manifest next update:     Tue 29 Apr 2025 04:02:41 +0000
Files and hashes:         1: 323830343a386238633a3a2f33342d3334203d3e20323733373430.roa (hash: DNNdiPYDTpJmkzi51k+sHNZ4auSD08Z0mDJv0lDDhMs=)
                          2: 323830343a386238633a633030303a3a2f33342d3334203d3e20323733373430.roa (hash: L8sttHDgrky38HTOTf1Gffni1vmroy5EiVy6+3Zd43g=)
                          3: 323830343a386238633a343030303a3a2f33342d3334203d3e20323733373430.roa (hash: bR8b+HnjFUk2PBcZuWie/3Xqfxoju+/AwcB69u2rjOs=)
                          4: 323830343a386238633a383030303a3a2f33342d3334203d3e20323733373430.roa (hash: oJThmqoMDP/ckdQbhsaYNCTnBOE3506zgNegtQO1M5U=)
                          5: 323830343a386238633a3a2f33322d3332203d3e20323733373430.roa (hash: YpW69J5uRYFdd9ZVd8CFTmSca7pakhs4RrJeb5sgPQw=)
                          6: 8C2701B7080D1081AAECCD107A57E11F3AEB77BA.crl (hash: WeeyF6tDf1+V/LquAUt0O6W/Pk1HyJiljSarL6R00Qo=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.crl
                          rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:07:e1:cb:a1:cb:e7:dd:4b:3e:6b:54:0d:86:b4:3a:46:e6:00:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C2701B7080D1081AAECCD107A57E11F3AEB77BA
        Validity
            Not Before: Apr 28 03:15:41 2025 GMT
            Not After : Apr 29 04:02:41 2025 GMT
        Subject: CN=9C93FAC7B09259A0B4C46C8A34FCD4B18AFC1BE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7c:0f:73:1e:7f:3f:c4:5b:ac:c5:1c:7a:cc:
                    20:34:25:24:5a:a3:6c:d0:01:3f:36:bf:25:6c:e0:
                    fd:f7:94:db:a6:34:1b:4b:67:1f:4f:44:c5:77:54:
                    70:13:78:52:04:e8:47:da:bb:44:75:a5:a5:f3:41:
                    d6:32:d5:f8:15:0d:18:22:ce:fa:50:6c:d7:a2:a7:
                    16:e5:af:a2:e8:4b:c4:84:5c:ac:dd:92:d6:19:b5:
                    a7:51:64:ab:ec:0d:78:00:63:d4:32:15:5d:03:42:
                    22:c2:84:29:f7:7d:dd:88:68:b6:0b:fc:f9:a0:fa:
                    42:2d:b7:be:2c:20:cb:78:c5:0f:57:9e:b0:5f:0c:
                    59:85:d8:4d:96:15:98:3b:59:a8:7c:15:b3:ee:16:
                    ed:ea:9a:26:94:bc:ad:91:53:c9:18:e1:88:86:bd:
                    6f:6f:76:89:33:a4:1c:9b:78:65:08:fe:27:55:ec:
                    03:68:b0:9b:0e:c1:1e:1f:d5:20:43:a4:c1:d4:34:
                    d7:87:7c:09:66:27:ef:06:f3:43:10:1f:da:99:35:
                    61:99:da:7e:16:d6:f0:84:fb:a7:79:8e:c8:21:be:
                    07:0b:dd:0e:4d:84:98:3d:3b:9f:a2:85:a4:a2:f4:
                    b3:09:7d:df:db:bf:03:ba:26:8f:54:56:cc:dc:b0:
                    b2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:93:FA:C7:B0:92:59:A0:B4:C4:6C:8A:34:FC:D4:B1:8A:FC:1B:E1
            X509v3 Authority Key Identifier:
                keyid:8C:27:01:B7:08:0D:10:81:AA:EC:CD:10:7A:57:E1:1F:3A:EB:77:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:fc:f8:a5:be:2a:f8:f0:2d:b1:1e:ef:08:81:c4:72:1f:63:
         3d:61:e0:7c:bd:52:c8:3b:00:7e:d6:51:48:5e:8e:f1:3b:f0:
         c0:d5:56:d7:61:e4:6c:cd:db:bb:05:54:a6:4f:1c:4f:0b:41:
         20:84:15:9b:e4:2d:c0:36:28:2e:7c:e2:87:47:12:a1:9c:85:
         12:3a:31:0c:7f:03:36:69:18:ac:e5:6e:56:6a:61:d4:b6:26:
         a9:1f:82:7c:26:61:32:7f:22:ae:4f:69:80:30:93:ef:9e:fa:
         a3:4f:c1:8a:bc:e2:4a:33:cb:4c:d9:5d:1b:a2:3f:19:37:90:
         e5:aa:1b:de:61:56:a9:9f:77:03:28:f5:51:bf:3a:34:34:26:
         46:03:09:49:9c:c2:d5:3f:ba:49:4b:74:08:34:6c:b2:74:73:
         93:92:25:27:1c:2a:c5:60:cb:24:e4:74:38:e9:29:01:26:2e:
         82:50:a6:73:28:47:a6:b1:0e:5c:08:36:76:17:72:4f:15:ea:
         e9:31:2e:c7:77:ef:fd:38:55:1b:63:2e:ae:ba:ec:da:03:33:
         5d:d4:64:f2:d6:b8:1e:4e:fc:c3:fa:c2:15:b1:5f:a8:8a:04:
         c4:b9:a3:5a:a8:9c:50:3b:50:1e:0f:ac:c9:1e:f3:1b:5c:85:
         7a:a0:dc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:14 2025 by rpki-client on console.sobornost.net