Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft
File:                     9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft (raw, json)
Hash identifier:          znI8mFmXnzx+PuOSsOLclb1LFe/e3l8qYCq+41HoCoU=
Subject key identifier:   EF:5E:8D:C7:D7:6E:AF:FD:CC:DA:D9:3F:D5:AF:A1:2C:A9:43:5C:E8
Authority key identifier: 93:39:F7:20:CF:D0:D8:F9:1A:9A:8F:91:6D:79:32:CE:BE:30:10:CD
Certificate issuer:       /CN=9339F720CFD0D8F91A9A8F916D7932CEBE3010CD
Certificate serial:       647F22323F8CDCE2D058700DFE31CA602EEC9DD6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft
Manifest number:          0200
Signing time:             Thu 24 Apr 2025 11:27:03 +0000
Manifest this update:     Thu 24 Apr 2025 11:22:03 +0000
Manifest next update:     Fri 25 Apr 2025 12:25:03 +0000
Files and hashes:         1: 9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.crl (hash: bCv74YYz87lSLR54+K1FnifD8k/5zFyjlVTLjMh6D04=)
                          2: 34352e362e3131322e302f32322d3234203d3e20323636313331.roa (hash: 7Dz4w+nF0VfTfBfkOh3PyIEA3gtOe3Tz5BUNfanJK1Q=)
                          3: 323830343a336232303a3a2f33322d3438203d3e20323636313331.roa (hash: BuT6SVf+q5oMKia2hb1uFcClSeTWsZZo4z0q3Ha5OtA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.crl
                          rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 12:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:7f:22:32:3f:8c:dc:e2:d0:58:70:0d:fe:31:ca:60:2e:ec:9d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9339F720CFD0D8F91A9A8F916D7932CEBE3010CD
        Validity
            Not Before: Apr 24 11:22:03 2025 GMT
            Not After : Apr 25 12:25:03 2025 GMT
        Subject: CN=EF5E8DC7D76EAFFDCCDAD93FD5AFA12CA9435CE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:00:b5:64:b8:d3:0d:7f:ca:1d:09:a7:e9:1d:
                    64:ba:d1:2f:ce:ec:0b:eb:0b:fb:c4:65:45:c6:2c:
                    24:c4:67:ea:ef:df:d8:72:ed:d5:29:fa:19:43:62:
                    b5:ec:5c:85:db:6b:4d:4d:8d:ea:c4:6b:55:15:81:
                    62:a3:c9:0a:df:d7:6b:de:21:54:ee:4d:b5:98:ec:
                    56:f1:86:df:79:5c:00:68:92:7d:cb:16:30:e8:7f:
                    31:b2:58:24:db:14:7d:a1:49:b5:29:2e:c7:47:e4:
                    b3:54:fa:c5:b7:bb:d2:9c:89:48:73:ae:ee:0b:14:
                    ea:63:66:31:e9:88:2d:c4:5b:ac:d3:b2:7d:af:31:
                    c9:3d:62:a1:ac:bd:06:2a:dc:17:09:ee:19:d4:b5:
                    c3:b3:b6:af:97:85:ab:7d:8e:2a:a1:33:bd:30:1a:
                    c1:dc:8d:1c:00:06:83:db:ef:a5:1d:8b:ee:3d:b2:
                    24:76:ff:93:c6:89:43:4c:21:43:1b:88:af:c4:52:
                    3e:65:1a:63:c9:c7:0e:0d:cf:49:08:00:97:f9:66:
                    c2:89:75:da:1c:c0:dc:64:36:5e:e8:be:3b:52:ca:
                    14:4b:35:da:5d:1b:ed:8a:b2:57:7b:6c:ca:23:8b:
                    d0:79:08:2c:dd:eb:ad:59:8e:de:d9:08:01:9c:db:
                    16:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5E:8D:C7:D7:6E:AF:FD:CC:DA:D9:3F:D5:AF:A1:2C:A9:43:5C:E8
            X509v3 Authority Key Identifier:
                keyid:93:39:F7:20:CF:D0:D8:F9:1A:9A:8F:91:6D:79:32:CE:BE:30:10:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d8:5c:ec:1b:15:4f:3f:45:d2:ff:1c:6a:cd:75:b4:7f:56:
         58:72:cc:c2:e9:c1:cc:d9:d9:72:82:26:fd:06:13:33:e7:7e:
         b7:89:60:55:a3:5e:f6:d1:8e:da:2f:47:be:fb:cc:92:98:be:
         4b:98:32:83:f2:d8:62:61:94:a6:b0:ea:b4:4b:f4:49:43:fb:
         99:f6:da:f5:5d:42:60:3d:88:36:d4:2b:cc:2c:87:4d:da:8a:
         ce:8a:85:c0:d2:c2:a4:3c:f7:40:d6:56:92:04:b5:48:a9:83:
         c2:ee:88:30:20:08:c9:85:90:e6:58:0e:8d:ca:ed:13:c8:b5:
         93:80:b2:15:da:41:20:3a:46:8a:29:1c:87:b7:c7:1c:fb:e2:
         bc:21:ed:d2:c6:5d:b0:8e:6c:5d:aa:85:c7:fd:21:12:e3:68:
         1c:4c:f6:e9:55:43:ab:0e:d8:3b:10:0d:69:6c:3d:ce:27:de:
         e1:ac:47:c3:5e:b1:69:29:45:80:8f:e9:3b:fc:1f:ec:0a:ea:
         e0:61:ac:80:b5:00:fd:ab:58:49:c0:11:c5:02:06:4f:37:98:
         6b:ce:fa:f3:a0:91:33:ff:d1:ee:12:a7:04:30:21:18:05:75:
         8d:a0:08:53:9e:ac:51:1c:33:74:28:ee:75:2a:ae:11:4c:1c:
         53:46:6b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:39:13 2025 by rpki-client on console.sobornost.net