Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.mft
File:                     CD474EAA2CD8D52421F339174CBFE8D756A44685.mft (raw, json)
Hash identifier:          0ZhwSpquRhEJ2+pE+iSqpcI1fuFx7MMjuOA8Fhi8sxs=
Subject key identifier:   EB:DA:A1:6C:63:CF:32:6D:64:FA:E3:4C:F1:4A:EE:D3:1B:01:82:23
Authority key identifier: CD:47:4E:AA:2C:D8:D5:24:21:F3:39:17:4C:BF:E8:D7:56:A4:46:85
Certificate issuer:       /CN=CD474EAA2CD8D52421F339174CBFE8D756A44685
Certificate serial:       03CEBC26FE2D37D21DB81D8196F28B391C501E85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD474EAA2CD8D52421F339174CBFE8D756A44685.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.mft
Manifest number:          01F2
Signing time:             Mon 28 Apr 2025 06:56:00 +0000
Manifest this update:     Mon 28 Apr 2025 06:51:00 +0000
Manifest next update:     Tue 29 Apr 2025 07:16:00 +0000
Files and hashes:         1: 3138362e3231362e3231362e302f32312d3234203d3e203532393939.roa (hash: qsmdYLqqE+QpqwIwlqhFUWeaadqymEYPxDfMA75+ank=)
                          2: 3137372e36362e33322e302f32312d3234203d3e203532393939.roa (hash: EkyUQtUq8ZwCnFXCndOL37rwpzQMGbrVReyyMnswO8g=)
                          3: CD474EAA2CD8D52421F339174CBFE8D756A44685.crl (hash: 6eQHqOPYZm6grzEvVFam0UfeYVB2vARnardzwKbvDVc=)
                          4: 323830343a3530383a3a2f33322d3438203d3e203532393939.roa (hash: L2+XaIEkygw5y/1KsdDixOZ1BeoOiNJomxlX0Q3Na9k=)
                          5: 3138362e3232362e39362e302f32302d3234203d3e203532393939.roa (hash: QqKI63mBNvlFpuiZObn3plPHeWhdbsqcXsxnU2fT8Jw=)
                          6: 3136382e3139352e36382e302f32322d3234203d3e203532393939.roa (hash: AY6Vd3Nv7x4AtBQqy2GsNC9oQaiTU/aw1T14h+rG1DA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.crl
                          rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD474EAA2CD8D52421F339174CBFE8D756A44685.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ce:bc:26:fe:2d:37:d2:1d:b8:1d:81:96:f2:8b:39:1c:50:1e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD474EAA2CD8D52421F339174CBFE8D756A44685
        Validity
            Not Before: Apr 28 06:51:00 2025 GMT
            Not After : Apr 29 07:16:00 2025 GMT
        Subject: CN=EBDAA16C63CF326D64FAE34CF14AEED31B018223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:02:08:35:a4:fe:f8:a7:d0:1a:92:2a:a1:14:
                    b4:45:48:2d:7c:e0:6d:94:87:0d:99:51:71:73:67:
                    7d:06:87:16:d0:13:1a:86:dc:80:a9:69:6d:77:62:
                    24:c0:f3:b7:92:1e:08:3c:f3:df:b1:47:15:5f:f2:
                    eb:ab:7b:e6:bf:90:dd:d9:ba:4d:d7:85:7d:6e:34:
                    4b:4a:fe:09:e9:f3:21:e2:93:d1:af:90:91:55:af:
                    de:5a:9a:80:ac:3b:7f:0a:c2:22:80:23:7a:f8:52:
                    32:08:8b:ba:82:67:02:31:9f:b6:89:4d:76:70:6c:
                    0b:dd:5d:3f:91:85:6f:16:7d:b1:d6:0f:9d:a4:95:
                    2a:86:b2:c8:5b:78:12:08:39:76:43:5b:4f:01:f2:
                    22:bf:dc:3d:c2:c5:b5:17:42:96:c6:73:8d:8f:ea:
                    f5:da:a6:58:93:24:91:b7:d0:cc:af:5b:22:48:8c:
                    82:0d:f6:05:b9:9f:e9:e2:be:7d:2c:0a:b5:53:84:
                    ea:d7:41:3d:b4:7d:fa:9e:63:92:83:c3:df:90:3f:
                    7e:b4:07:1f:0b:e2:7d:7e:02:51:3b:ca:b3:e7:7e:
                    4b:c1:17:57:c4:b6:af:ed:7a:10:e3:4b:f7:8b:44:
                    da:5a:41:1c:2d:f7:41:36:86:38:dc:d6:14:bb:17:
                    71:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DA:A1:6C:63:CF:32:6D:64:FA:E3:4C:F1:4A:EE:D3:1B:01:82:23
            X509v3 Authority Key Identifier:
                keyid:CD:47:4E:AA:2C:D8:D5:24:21:F3:39:17:4C:BF:E8:D7:56:A4:46:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD474EAA2CD8D52421F339174CBFE8D756A44685.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d1:bc:8b:5f:ea:aa:9a:da:3c:87:8d:d9:af:90:6f:d2:4c:
         57:38:0f:6d:37:78:05:48:71:88:3c:44:c6:7d:78:41:38:f7:
         b1:4d:cb:84:30:a5:25:46:e8:b8:1a:04:88:52:a6:6c:a8:8b:
         8e:9a:b5:0d:a4:2b:ba:3c:35:b2:aa:8a:3d:a7:29:7a:09:d6:
         8c:f3:b9:df:ad:da:5c:a2:50:ea:aa:44:a8:d0:87:4d:bc:00:
         5e:6d:2a:07:aa:1b:88:5c:78:51:69:96:fa:ff:48:60:c3:e4:
         d8:b9:fc:70:28:80:61:c1:99:fd:8d:55:66:fd:e8:bd:87:c9:
         9d:36:0a:99:b0:86:54:a3:5f:46:69:e5:3d:50:9d:78:03:fb:
         61:cb:7d:50:c0:6c:80:c2:a1:29:a0:90:bf:77:5b:03:80:7d:
         47:95:45:e2:30:bc:ea:b8:a4:d4:31:87:1e:d5:7f:78:bd:ac:
         a7:00:24:63:a2:9a:7e:ad:4e:34:32:99:b8:84:40:78:32:c7:
         22:72:05:cd:b9:c5:a7:99:99:f9:a2:24:a5:4f:6b:f0:74:bf:
         4b:d6:67:60:c6:ac:bd:c5:68:22:b6:83:3a:ce:35:c8:9c:63:
         4b:20:87:60:83:3f:c1:e2:cd:98:0a:5b:97:03:1d:d7:76:3e:
         8c:c4:70:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:34 2025 by rpki-client on console.sobornost.net