Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft
File:                     D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft (raw, json)
Hash identifier:          dnuGFLOrxRSFLUC+dnE8zyeJlXdL0/VgA9XrpUvcLOc=
Subject key identifier:   3B:D4:10:DE:95:3D:2F:63:8C:81:29:32:04:A5:82:4A:D6:E6:6A:A8
Authority key identifier: D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0
Certificate issuer:       /CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0
Certificate serial:       2BA44FDEB78CAA2B195F0C790DF0AA7F6888B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft
Manifest number:          0189
Signing time:             Mon 28 Apr 2025 09:40:42 +0000
Manifest this update:     Mon 28 Apr 2025 09:35:42 +0000
Manifest next update:     Tue 29 Apr 2025 10:21:42 +0000
Files and hashes:         1: 3139302e3132332e3139322e302f32322d3234203d3e20323636323533.roa (hash: KpOmHNyf+qk8mZG+75EeGAxo+/Mu9xpKUyBHcWeY2Yc=)
                          2: 323830343a336431383a3a2f33322d3438203d3e20323636323533.roa (hash: bkc7PD/eoMEAwVgn7rQvXWlY3Vh94NdNwzo2VtWfGSs=)
                          3: D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl (hash: 4gV1qqZkQGC4xHEbTRntNhU0JgSA2koi7c6MT3OnUJc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl
                          rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 10:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a4:4f:de:b7:8c:aa:2b:19:5f:0c:79:0d:f0:aa:7f:68:88:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0
        Validity
            Not Before: Apr 28 09:35:42 2025 GMT
            Not After : Apr 29 10:21:42 2025 GMT
        Subject: CN=3BD410DE953D2F638C81293204A5824AD6E66AA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:63:8b:d0:eb:e9:6c:89:7e:28:b1:50:eb:ed:
                    77:82:37:cc:02:19:49:a6:85:56:95:80:e7:2a:da:
                    68:bf:a0:3e:ed:30:f3:47:18:2f:53:c5:84:c8:54:
                    7d:13:b7:86:37:f4:21:fe:c4:86:82:57:ae:d1:b7:
                    3e:33:e2:73:81:d4:15:33:fd:ea:f0:81:ce:17:49:
                    2a:6f:22:cf:9f:e0:00:9f:cb:f1:60:f1:19:a4:81:
                    42:f9:b8:bd:67:4f:78:b7:0f:28:e1:27:65:73:0a:
                    0e:9a:ce:71:68:0d:74:c2:5c:8f:f2:97:79:86:49:
                    b0:2b:86:6f:cd:a0:9f:2b:9c:cf:50:63:77:e0:56:
                    8d:af:2d:99:17:ba:c4:7d:e3:bf:6a:b9:99:f4:40:
                    4a:b6:92:48:f7:a0:6b:24:18:cc:7b:3d:f3:78:ba:
                    d9:99:06:63:66:ab:3d:dd:66:6c:2e:6d:67:66:3b:
                    b1:02:c6:a1:9b:b2:01:b5:5f:68:f1:a8:85:13:49:
                    f7:9c:6b:6a:7c:b1:f2:03:8e:d7:97:27:61:d3:8e:
                    69:1d:d4:ff:d3:68:3e:0c:4e:31:9a:61:6a:51:e6:
                    7f:c1:1c:9e:7f:9d:bb:a1:af:da:f2:ab:23:8a:80:
                    8e:ef:41:aa:50:7c:fe:7e:2d:c1:d4:38:63:2c:41:
                    03:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D4:10:DE:95:3D:2F:63:8C:81:29:32:04:A5:82:4A:D6:E6:6A:A8
            X509v3 Authority Key Identifier:
                keyid:D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:a8:c7:63:9d:e3:b7:37:38:fc:fd:25:2b:bf:76:0b:9d:b3:
         fb:88:e0:27:dc:6a:72:7d:0e:a8:8f:c7:2f:39:0c:d4:b6:c4:
         9a:72:74:1d:e8:2a:cf:43:80:70:04:2f:6c:04:fd:82:2e:17:
         75:30:bc:67:f3:a1:d3:95:7a:19:dd:9a:91:36:1f:d2:fd:99:
         16:89:56:c9:0d:e4:68:42:cd:5b:da:50:29:7d:2d:b6:bc:4d:
         c1:8c:06:26:76:01:bc:aa:84:02:65:79:88:77:b0:f2:ac:ec:
         72:da:9a:2a:68:c9:de:a2:1b:fb:ed:da:4b:17:6e:90:4e:9d:
         fc:90:34:9d:0f:6b:9b:ad:aa:fd:f1:9f:81:16:54:c0:06:c7:
         a3:15:57:9c:cc:f1:64:bf:8e:2e:f2:a2:bc:3b:e5:10:8e:15:
         cf:ca:bb:5e:76:2d:f0:07:49:b2:79:5d:6e:a1:37:13:e1:3a:
         73:fd:cb:72:b0:6b:b9:49:dc:16:74:79:e6:99:0e:cd:30:70:
         15:69:b8:fb:b3:14:4a:61:1a:a5:ff:03:8d:ae:f9:a7:99:86:
         59:7e:20:a2:37:4b:15:50:07:40:c4:ec:8c:54:26:5b:26:81:
         1d:7a:95:ce:58:d4:74:3d:fa:0d:97:ff:0c:0e:80:c2:45:a2:
         34:e9:3c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:57 2025 by rpki-client on console.sobornost.net