Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft
File:                     8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft (raw, json)
Hash identifier:          kNPglknGGllTdIfEiOL2bcaI/jQDbCo89CMr/1/8C4o=
Subject key identifier:   09:17:9E:D4:AD:33:C2:73:6B:01:37:F3:81:26:2C:63:F3:BC:29:6C
Authority key identifier: 8D:E1:EB:F4:EE:33:44:5E:39:8B:F5:5C:7B:FB:B0:54:E8:54:6F:FD
Certificate issuer:       /CN=8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD
Certificate serial:       7DECA30A138E4BA84B50148FCB14153736D9F7B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft
Manifest number:          0188
Signing time:             Sun 27 Apr 2025 10:58:57 +0000
Manifest this update:     Sun 27 Apr 2025 10:53:57 +0000
Manifest next update:     Mon 28 Apr 2025 12:35:57 +0000
Files and hashes:         1: 3230302e37312e37322e302f32322d3234203d3e20323636323136.roa (hash: cmJxvHZtV8PuPYG/iAqlecJfSj+3Vw9jiCCKrj8tUwk=)
                          2: 323830343a336338303a3a2f33322d3438203d3e20323636323136.roa (hash: mYI9A/vht/YRbpoanygLB9lBhstFWDPzXkP4I0DAoTU=)
                          3: 8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl (hash: nRhjrEPHyALTfOd7CXQZmf/HZcygSOS9BnQTblkkhBc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl
                          rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ec:a3:0a:13:8e:4b:a8:4b:50:14:8f:cb:14:15:37:36:d9:f7:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD
        Validity
            Not Before: Apr 27 10:53:57 2025 GMT
            Not After : Apr 28 12:35:57 2025 GMT
        Subject: CN=09179ED4AD33C2736B0137F381262C63F3BC296C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1e:87:20:34:bf:cb:fb:7f:ab:4b:e7:59:c5:
                    1c:f3:05:45:9a:85:f1:62:ee:f5:4d:ec:a9:fb:11:
                    2f:bc:05:25:b1:2a:6e:e7:29:ef:20:e1:c4:f0:bd:
                    f5:e8:09:41:02:e3:ed:f7:0e:77:31:bd:8a:ff:f8:
                    eb:19:80:86:51:f3:7e:c3:55:2e:f7:78:42:ec:29:
                    a5:b8:8e:dc:27:18:90:0d:2b:12:29:41:4f:e1:90:
                    de:38:7c:10:48:f2:4f:21:4a:ed:7e:eb:a6:4f:f2:
                    db:fe:e5:73:8b:db:47:af:31:59:87:78:c3:95:88:
                    42:27:bc:05:3f:a2:53:39:14:03:b1:d0:37:fa:06:
                    f5:c1:fe:8b:e4:61:54:f0:59:0b:84:65:cd:ea:76:
                    85:cb:e5:73:54:3b:39:90:78:0b:24:22:a8:45:26:
                    f7:65:9d:d3:d1:1f:74:13:0c:f3:ed:89:b6:f7:23:
                    a1:f7:35:8a:8a:bb:cd:ef:d9:d6:32:d2:53:02:73:
                    27:39:2e:97:4e:b0:6a:64:20:21:1d:05:60:2c:7c:
                    d2:f8:56:d5:5e:0c:ad:d4:c0:83:cd:ae:da:c9:91:
                    0d:f7:f9:a3:d7:7d:c4:1c:4c:88:de:c8:f3:26:69:
                    4f:9d:5b:06:fd:9a:34:60:a9:63:28:55:98:f9:68:
                    67:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:17:9E:D4:AD:33:C2:73:6B:01:37:F3:81:26:2C:63:F3:BC:29:6C
            X509v3 Authority Key Identifier:
                keyid:8D:E1:EB:F4:EE:33:44:5E:39:8B:F5:5C:7B:FB:B0:54:E8:54:6F:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:2f:7e:18:83:ad:4f:64:e6:1d:8d:30:18:a1:a7:7e:4b:ed:
         f4:5b:51:7f:51:74:3a:35:e3:18:a2:be:19:25:05:1e:ba:1f:
         4f:16:09:4f:70:ef:16:43:f3:33:c8:da:54:10:7a:c2:47:8f:
         ea:41:1d:2d:dc:36:ad:6f:b3:c7:f7:18:d9:2a:13:cb:4d:43:
         e4:22:53:60:67:ad:aa:16:fb:7d:3e:70:e5:3e:0d:9f:00:06:
         08:6e:ff:3f:dc:49:68:8c:32:e0:35:57:77:9b:ee:57:74:65:
         60:b8:83:fc:8b:e5:92:6f:35:16:e7:2c:14:4b:e5:1d:44:09:
         79:49:6a:d2:ba:bb:60:21:7d:96:8d:c8:ac:a1:e7:06:05:be:
         ff:4c:b7:25:dc:3c:a4:b5:75:ed:ff:6a:c8:e4:24:6e:7f:8c:
         b6:5b:f9:99:6a:8d:35:bd:90:7e:ba:b4:e4:ce:e3:5c:6d:24:
         a3:a2:5d:95:1c:fe:4b:a8:11:f7:da:ad:dc:23:0e:9e:d8:36:
         f0:1c:58:21:ff:f0:a2:a0:5e:de:be:e1:e3:db:71:c2:c1:ae:
         4f:c3:34:2c:b1:3b:e8:63:d3:01:b3:90:9c:45:2c:20:2d:13:
         4d:1b:53:d5:e0:98:b6:e3:8e:ad:7c:6f:1b:f7:bc:93:0e:ef:
         2e:a5:1e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:39 2025 by rpki-client on console.sobornost.net