Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft
File:                     91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft (raw, json)
Hash identifier:          Zl7mbXljr1GT0r83lmF4J6LYtC6gJ8pdS9EN+oql6jE=
Subject key identifier:   41:C8:87:43:BC:FE:B0:3C:46:B9:68:92:29:86:A1:F0:28:74:03:69
Authority key identifier: 91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69
Certificate issuer:       /CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
Certificate serial:       4F56FD6C10584B9F25D126DDA431DD089BA22117
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft
Manifest number:          0206
Signing time:             Fri 25 Apr 2025 05:27:57 +0000
Manifest this update:     Fri 25 Apr 2025 05:22:57 +0000
Manifest next update:     Sat 26 Apr 2025 07:54:57 +0000
Files and hashes:         1: 91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl (hash: uteVADjVpbPEPicKfAePAMYIcwjjMdAkpJP7O+ywgf0=)
                          2: 3137302e38332e3136342e302f32322d3234203d3e20323634333831.roa (hash: F4Tl9N8AJthDQdHIrizSZ6Sg+cFtmEFvjmLDH8YR8lQ=)
                          3: 3137372e31312e35362e302f32322d3234203d3e20323634333831.roa (hash: BNvxBpnJmmvxh+RAURZAKMQWXw9qY1UMFRSlWEP2N+s=)
                          4: 323830343a316439633a3a2f33322d3438203d3e20323634333831.roa (hash: vV5TK5fsIhyy6fExgeGclpDro4nHDU66ztWjs1ASkhY=)
                          5: 3133312e3136312e3137322e302f32322d3234203d3e20323634333831.roa (hash: whNNELiXGX17WIuP6N28zCH6hY578TR+z8IF7iiM+Xg=)
                          6: 3136382e3230352e3134382e302f32322d3234203d3e20323634333831.roa (hash: r3JRTZYV5KSnbu3PLYg3zGDylCuUIDLZLaLOpfzGMIA=)
                          7: 3133312e3130302e3134342e302f32322d3234203d3e20323634333831.roa (hash: j0hQAUu+SL8l06Lkbf5E+dGKRSB4OZ8UGbJioiNVvgg=)
                          8: 3137302e37382e3137362e302f32322d3234203d3e20323634333831.roa (hash: u48EbEQ/lSCeYe04IU/NtV4JNvW+Yne091vq6QJOja0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl
                          rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 07:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:56:fd:6c:10:58:4b:9f:25:d1:26:dd:a4:31:dd:08:9b:a2:21:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
        Validity
            Not Before: Apr 25 05:22:57 2025 GMT
            Not After : Apr 26 07:54:57 2025 GMT
        Subject: CN=41C88743BCFEB03C46B968922986A1F028740369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e2:fe:22:ed:3d:92:4c:be:0c:7b:2a:3c:75:
                    74:cd:be:d9:f4:9f:70:48:53:c0:b3:e9:9a:58:d8:
                    5c:07:3d:9b:a0:66:16:26:bf:87:19:5e:b9:29:c0:
                    80:0a:ed:5f:33:3b:64:64:2a:f0:5b:74:79:9f:0a:
                    29:37:b7:14:3a:19:29:4e:98:7a:ce:13:b4:b9:ea:
                    0d:cd:6e:b8:d3:41:d7:33:13:79:b1:a7:37:2e:8f:
                    c1:ae:31:c2:fc:e4:63:22:77:a5:b8:95:e2:9e:a3:
                    b0:68:ac:78:d4:7e:1b:c2:7c:2c:c1:31:51:c6:21:
                    ee:9a:ee:7b:2c:4c:4a:63:67:65:06:9f:54:53:60:
                    31:0c:97:3a:82:87:cb:24:82:08:f7:6b:58:1b:63:
                    95:7e:c7:4a:b4:ce:87:c5:fb:24:e3:52:56:ac:6a:
                    e7:ad:7d:af:f7:43:bc:3c:0f:e6:f7:45:66:e8:4f:
                    67:a2:38:f4:e1:32:d3:07:92:1c:36:20:d5:1f:7f:
                    6f:e7:e2:bc:aa:20:60:dc:0e:e8:48:7f:9b:49:c3:
                    68:0a:9a:19:94:11:c7:46:37:ef:81:09:29:aa:04:
                    b0:b8:c0:fa:18:51:32:ed:72:60:07:59:5f:9a:36:
                    b1:eb:1b:41:71:56:a3:b6:90:a1:fb:98:a7:8b:99:
                    ad:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C8:87:43:BC:FE:B0:3C:46:B9:68:92:29:86:A1:F0:28:74:03:69
            X509v3 Authority Key Identifier:
                keyid:91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d6:4c:e4:3f:1d:0c:9a:8a:e2:65:26:cf:2e:45:5b:99:73:
         52:6e:a3:9d:08:90:88:00:9f:83:29:84:a9:2b:c8:da:90:24:
         72:9a:45:77:14:3b:34:79:b4:ed:c0:78:9f:07:fa:e3:a9:c2:
         fb:95:7c:36:d4:0f:70:28:d7:f9:6c:2d:1a:e0:88:ae:8d:aa:
         5c:8d:98:dd:80:0b:3a:54:72:c9:ef:a7:07:9e:df:5d:3c:1d:
         f9:35:ad:52:0d:33:b3:62:66:85:fd:69:61:fb:17:bd:90:de:
         56:96:ac:1a:06:67:65:8c:1c:6d:b7:ca:ed:d7:40:7a:2b:53:
         c0:1d:4c:83:7e:2b:0a:5f:fd:bc:77:5e:09:cb:29:21:03:f5:
         50:05:d1:d9:0b:cf:f6:2d:94:e1:d7:a9:a5:78:60:a4:ad:4f:
         ab:53:de:58:8d:6c:db:d3:71:bc:e5:4d:bc:8c:24:c4:41:0c:
         93:9f:fc:98:8e:20:0b:c5:d2:11:21:c1:d0:d3:33:d2:87:fe:
         54:8e:92:9d:8f:ce:e3:d1:48:63:0c:70:79:5a:11:3e:cd:33:
         7f:1a:99:0c:f6:1e:c9:26:45:72:83:4c:9d:f8:9a:95:95:be:
         21:c2:1f:95:94:17:20:01:0e:b3:84:69:1d:3b:8c:7f:20:ee:
         cd:8c:ac:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:00 2025 by rpki-client on console.sobornost.net