Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft
File:                     95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft (raw, json)
Hash identifier:          VvNA+DZS3SW3Q9ZEihWcFDUCLl+Q4frPc6m5oPn76sU=
Subject key identifier:   F8:76:EF:4F:C7:51:E2:C2:2E:3F:5B:DC:A4:BD:09:70:30:10:1C:80
Authority key identifier: 95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81
Certificate issuer:       /CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781
Certificate serial:       67B3E5141658E75EC4DE6FB7C6DA16485710B94A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft
Manifest number:          4E
Signing time:             Fri 25 Apr 2025 19:11:31 +0000
Manifest this update:     Fri 25 Apr 2025 19:06:31 +0000
Manifest next update:     Sat 26 Apr 2025 20:40:31 +0000
Files and hashes:         1: 323830343a386631343a3a2f33322d313238203d3e20323733343636.roa (hash: Q1uCgwZfNBNhk73GGmjGIKG7UN4bvWqo7yS4gO0jUSU=)
                          2: 95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl (hash: 5jtUttniizLPb1Nh8lF9jM4BbV4PC/0eI247WnE+RnE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl
                          rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 20:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b3:e5:14:16:58:e7:5e:c4:de:6f:b7:c6:da:16:48:57:10:b9:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781
        Validity
            Not Before: Apr 25 19:06:31 2025 GMT
            Not After : Apr 26 20:40:31 2025 GMT
        Subject: CN=F876EF4FC751E2C22E3F5BDCA4BD097030101C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:17:18:a0:89:91:a6:45:c5:74:c5:e8:c6:44:
                    32:a8:46:e2:34:a0:21:f9:ca:92:e5:1c:46:63:6a:
                    ce:23:db:db:69:84:5b:7c:fa:9a:44:fc:69:23:5c:
                    21:fa:9b:36:12:4e:1d:38:eb:d3:dc:e7:eb:d4:c5:
                    97:a5:7e:d5:40:0b:9a:56:cc:a4:4c:67:2d:75:ea:
                    ba:dc:93:b7:52:42:98:6f:89:6e:81:24:9d:d4:d9:
                    b4:ae:89:1a:df:15:34:a5:18:90:d4:a1:bb:76:66:
                    95:4a:35:52:99:bd:12:a7:48:d1:7d:41:12:23:03:
                    85:31:12:5d:24:af:4a:12:89:ec:94:64:f8:60:2b:
                    4f:a8:30:2a:b1:39:77:a6:17:1d:3f:13:a1:f2:d2:
                    0a:d1:99:52:6e:6e:d1:7a:29:c1:6e:41:73:68:2e:
                    56:ae:de:a5:5b:ac:73:c6:f5:73:3c:b0:6d:08:5b:
                    80:43:cd:d4:00:c7:ce:bd:19:df:21:16:c8:15:9c:
                    84:a1:cd:44:59:80:ba:4c:72:d4:db:35:f0:1a:62:
                    90:15:d0:a5:ec:d9:ae:d9:98:b0:f0:f0:64:0f:34:
                    b3:37:01:09:74:bc:7b:32:6d:5e:f4:34:7d:4a:fa:
                    b1:ec:f0:61:f1:37:68:7e:c0:a9:bd:ba:09:7d:b9:
                    83:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:76:EF:4F:C7:51:E2:C2:2E:3F:5B:DC:A4:BD:09:70:30:10:1C:80
            X509v3 Authority Key Identifier:
                keyid:95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e1:c7:bc:c4:86:01:a6:a5:80:10:81:bc:bb:f9:65:2e:39:
         c2:fd:e1:31:87:f3:74:db:bf:a1:de:2b:7a:c2:fc:c1:f5:b0:
         8a:c4:38:0b:a9:b7:97:24:c4:11:80:cb:f9:cc:a2:7c:8b:94:
         52:7f:35:35:8a:b3:10:e8:e9:fb:71:35:94:57:ee:a6:0d:02:
         a4:84:2f:50:4b:32:e2:91:ec:bf:85:ef:db:75:ab:b8:84:a4:
         60:58:f4:bd:65:b7:2a:0a:83:89:ca:7f:09:d7:2b:4a:3d:41:
         82:46:32:5c:39:a1:32:5e:80:0c:9a:4b:41:7c:7a:96:20:01:
         41:c4:a0:c7:c3:70:1c:55:3d:7e:7b:19:24:8f:44:21:fe:d5:
         30:57:18:15:08:e4:c2:20:71:25:8c:e4:c9:bf:39:9f:5c:6f:
         e6:e1:52:15:48:2f:a8:00:a4:bd:28:ff:7f:b2:b1:89:77:cc:
         66:b3:4a:2b:64:8f:6e:d6:06:3e:6d:51:92:39:15:30:f5:26:
         a6:51:99:73:07:aa:4d:ac:3c:c7:bb:34:a5:ef:6a:93:44:61:
         f0:27:7d:b7:c5:39:d2:6e:cc:b2:c4:92:3e:e3:83:cf:ab:6b:
         48:3a:d6:e8:cc:3b:de:d8:23:9a:1d:45:8f:cc:2a:5a:0f:c5:
         db:e8:60:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:37 2025 by rpki-client on console.sobornost.net