Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8uC2hDsozSTeGpiQBXSJbZcb2jbgYz1h3EuoKQLKsWAr/0/E14B2967EB27FABA72E72C102347AF3AAB884C92.mft
File:                     E14B2967EB27FABA72E72C102347AF3AAB884C92.mft (raw, json)
Hash identifier:          CnHko/D1dJgLd1zu1Sv7Bk6nJIyvis8GyaZvyHJi1nk=
Subject key identifier:   9D:79:CA:63:F7:93:AB:D6:75:59:31:3A:04:E8:78:2F:C2:54:F4:34
Authority key identifier: E1:4B:29:67:EB:27:FA:BA:72:E7:2C:10:23:47:AF:3A:AB:88:4C:92
Certificate issuer:       /CN=E14B2967EB27FABA72E72C102347AF3AAB884C92
Certificate serial:       068FBDC59AECF79EFA0ED9CB9ECBE3B2406EE739
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E14B2967EB27FABA72E72C102347AF3AAB884C92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uC2hDsozSTeGpiQBXSJbZcb2jbgYz1h3EuoKQLKsWAr/0/E14B2967EB27FABA72E72C102347AF3AAB884C92.mft
Manifest number:          AD
Signing time:             Thu 24 Apr 2025 17:25:12 +0000
Manifest this update:     Thu 24 Apr 2025 17:20:12 +0000
Manifest next update:     Fri 25 Apr 2025 21:07:12 +0000
Files and hashes:         1: 323830313a38313a33303a3a2f34382d313238203d3e20323733353334.roa (hash: b9HFkAeYiqHFKh9nlH+YlUH3yfUkRvt+WCoPp9EPp3I=)
                          2: E14B2967EB27FABA72E72C102347AF3AAB884C92.crl (hash: a2kqhQ2I/kIrJBOfxvIAphoF1j6Bx9F8gCdbJrgjVcc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8uC2hDsozSTeGpiQBXSJbZcb2jbgYz1h3EuoKQLKsWAr/0/E14B2967EB27FABA72E72C102347AF3AAB884C92.crl
                          rsync://rpki-repo.registro.br/repo/8uC2hDsozSTeGpiQBXSJbZcb2jbgYz1h3EuoKQLKsWAr/0/E14B2967EB27FABA72E72C102347AF3AAB884C92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E14B2967EB27FABA72E72C102347AF3AAB884C92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8f:bd:c5:9a:ec:f7:9e:fa:0e:d9:cb:9e:cb:e3:b2:40:6e:e7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E14B2967EB27FABA72E72C102347AF3AAB884C92
        Validity
            Not Before: Apr 24 17:20:12 2025 GMT
            Not After : Apr 25 21:07:12 2025 GMT
        Subject: CN=9D79CA63F793ABD67559313A04E8782FC254F434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:06:ce:78:11:e5:aa:05:90:85:30:b1:9d:1f:
                    b3:c2:f4:94:6b:25:7c:70:d8:64:66:08:04:51:ac:
                    c6:08:2f:91:64:49:10:3b:fd:03:d0:e6:62:87:5d:
                    af:28:d4:eb:09:6e:05:57:44:d3:95:db:e2:13:13:
                    4a:37:13:c4:b6:ba:fa:85:f1:a4:16:fd:cd:23:f9:
                    a2:08:c6:cf:90:cf:68:6c:05:7e:0f:9c:1f:8f:62:
                    e6:ae:d5:f4:b8:7d:54:41:1d:68:14:1d:87:57:b2:
                    76:ff:0e:56:14:71:e1:74:23:8d:a8:f7:94:fa:f6:
                    19:1f:b0:b7:b0:fb:74:d5:b2:c5:75:9e:eb:0b:17:
                    99:4b:73:10:31:74:c1:5c:59:27:23:bc:e6:9b:9b:
                    e6:85:70:1f:8a:da:4b:fe:05:34:71:4c:60:74:ff:
                    9c:bf:bb:67:51:83:02:ec:8c:e2:e7:04:c8:10:e1:
                    78:c4:cc:ae:02:3b:bc:b8:62:86:ec:f0:94:32:93:
                    de:28:8c:df:ac:09:f1:89:d9:47:d5:f5:e9:1d:9d:
                    a5:0f:df:40:53:6e:c3:c2:ad:67:06:13:2a:4a:76:
                    06:34:ca:6f:46:0e:06:5b:8a:03:9d:ff:5a:13:75:
                    a8:82:ea:13:a0:00:6d:62:d5:48:dd:2c:ba:01:e7:
                    66:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:79:CA:63:F7:93:AB:D6:75:59:31:3A:04:E8:78:2F:C2:54:F4:34
            X509v3 Authority Key Identifier:
                keyid:E1:4B:29:67:EB:27:FA:BA:72:E7:2C:10:23:47:AF:3A:AB:88:4C:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uC2hDsozSTeGpiQBXSJbZcb2jbgYz1h3EuoKQLKsWAr/0/E14B2967EB27FABA72E72C102347AF3AAB884C92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E14B2967EB27FABA72E72C102347AF3AAB884C92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uC2hDsozSTeGpiQBXSJbZcb2jbgYz1h3EuoKQLKsWAr/0/E14B2967EB27FABA72E72C102347AF3AAB884C92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:2b:72:f7:00:e5:8e:a1:5e:66:89:86:52:b1:67:86:b6:ae:
         74:36:cf:ee:b2:05:3c:48:31:8a:b8:8c:0f:6c:56:27:cb:b2:
         00:e5:1d:4e:56:1e:70:28:da:73:89:b6:c7:7c:bc:2d:cd:fd:
         16:32:36:da:98:06:af:1a:03:98:1f:b7:48:2a:ea:96:e1:bc:
         17:ff:3f:2a:55:7f:28:14:7c:95:11:1e:f3:bb:6e:98:7a:2b:
         12:2e:8e:b2:5f:2b:34:66:8e:94:7d:6e:49:d1:32:a7:59:48:
         a1:4f:0e:d6:54:1e:7c:b8:cd:6e:d2:83:23:a7:f7:86:07:89:
         45:38:f0:5d:f1:2c:12:ed:cb:a5:b7:ff:a1:16:0b:3e:e1:2d:
         1d:82:1e:f8:ab:0d:04:55:33:ae:13:63:82:47:18:82:c0:0c:
         28:91:61:a5:a3:46:30:9f:fd:a0:d1:b3:64:30:93:f3:77:d1:
         57:d5:34:2c:fb:dd:28:36:75:c7:9b:77:7a:00:f7:5d:7e:d4:
         43:60:b7:0b:a1:a7:29:57:50:b2:81:53:00:84:fa:54:6b:e7:
         7f:63:d3:1a:07:c8:3b:17:56:f9:3c:70:6d:e7:ba:dd:9e:63:
         e9:30:84:5b:8a:e1:4c:98:aa:4f:df:11:f9:3b:90:ba:50:7b:
         e0:f0:b3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:32 2025 by rpki-client on console.sobornost.net