Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft
File:                     D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft (raw, json)
Hash identifier:          y6TZKee8h8KvldZDMgor0LT2sPGUYB2mzdwysxB1jx4=
Subject key identifier:   48:A0:C4:2E:63:52:3C:53:68:88:F0:8D:90:F2:8A:43:A8:F0:03:8F
Authority key identifier: D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
Certificate issuer:       /CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Certificate serial:       50B767784A9D8B9977E3120ACE39B5AEDFB243F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft
Manifest number:          021E
Signing time:             Fri 25 Apr 2025 07:37:37 +0000
Manifest this update:     Fri 25 Apr 2025 07:32:37 +0000
Manifest next update:     Sat 26 Apr 2025 10:42:37 +0000
Files and hashes:         1: 3230312e37362e39362e302f32302d3234203d3e20323632373932.roa (hash: WPXMrcktaHfePjN+pQzBhiZervUICUYDKCfjCdTqmS8=)
                          2: D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl (hash: mGI88i1Tz8EInf0EIYRgESG2j8t+NqydI/VRK7s1ZgE=)
                          3: 323830343a3232343a3a2f33322d3434203d3e20323632373932.roa (hash: +ZQg3sxpMe3JOHGzoUN+id9g13YLa1gMrVBHCj71gdc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl
                          rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 10:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b7:67:78:4a:9d:8b:99:77:e3:12:0a:ce:39:b5:ae:df:b2:43:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
        Validity
            Not Before: Apr 25 07:32:37 2025 GMT
            Not After : Apr 26 10:42:37 2025 GMT
        Subject: CN=48A0C42E63523C536888F08D90F28A43A8F0038F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:64:0f:05:6e:e3:0c:b4:fc:56:cc:58:a8:e4:
                    b2:a7:55:c2:b4:81:aa:f1:f7:5c:ae:f5:5c:ca:fc:
                    23:e1:99:14:7e:00:89:f0:d2:c2:45:5f:f1:cf:21:
                    62:1b:4a:b7:bf:4b:a3:3c:28:8f:0a:d7:fc:b5:ca:
                    a4:d1:f9:f0:34:ff:ee:ca:0f:f1:72:b6:50:4a:db:
                    0d:23:49:db:a2:db:fe:72:86:a6:78:1b:c3:15:c7:
                    5b:6c:ee:50:57:0b:cc:76:74:ae:91:b6:be:59:6b:
                    f4:ac:5f:5e:98:54:ff:26:26:ed:d2:99:ea:da:6e:
                    62:52:d1:9c:6f:4f:f7:df:8d:61:e3:50:80:9a:98:
                    83:65:df:c4:3d:e1:9f:fe:f6:25:f7:06:de:d1:3f:
                    e4:a2:03:7f:5e:b5:c6:28:5a:1c:d6:a8:88:0b:61:
                    00:79:65:b4:5c:2b:fb:a3:21:64:de:da:93:24:94:
                    49:df:ee:5b:2c:96:70:8b:c5:52:24:d2:b3:8f:cf:
                    09:d3:01:a4:a8:13:ff:db:5f:48:39:27:21:6b:b9:
                    7c:89:08:dc:e5:dd:7a:ec:f5:ef:dd:9a:24:ff:44:
                    54:e5:9d:cc:cb:af:ea:6d:f4:ce:19:f9:98:37:33:
                    2e:8d:d7:05:cb:9f:e5:5c:e0:af:29:a5:21:3a:e0:
                    40:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A0:C4:2E:63:52:3C:53:68:88:F0:8D:90:F2:8A:43:A8:F0:03:8F
            X509v3 Authority Key Identifier:
                keyid:D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:8a:77:5c:2a:ef:c5:15:1b:d3:15:ff:5c:21:81:5b:05:7a:
         37:04:1f:b3:9c:62:d9:6b:eb:02:da:1e:46:ef:d3:cf:a6:eb:
         e5:fe:9e:87:8e:30:c8:4b:93:1c:38:3e:b5:51:da:dd:b5:2d:
         c9:23:67:fe:39:db:d5:4a:9b:b2:b4:6e:36:a7:b9:04:14:27:
         ef:04:22:30:d7:ac:56:4d:30:17:69:a8:44:eb:35:0a:ec:f5:
         63:b9:b1:55:0f:a5:0d:27:24:12:eb:6a:4f:1d:69:17:f6:b1:
         66:2d:b5:bc:8e:ad:24:eb:6f:18:4c:bd:34:16:6c:68:47:e2:
         b5:c1:0e:57:ba:2f:ac:5b:32:9b:92:8a:7e:cf:eb:ce:d2:1b:
         2d:24:e8:2e:91:ef:b8:02:17:1e:be:5c:f1:2e:24:bd:3e:44:
         e5:5d:cd:cd:5c:8f:d1:53:b3:ea:b9:ac:89:bb:b4:96:70:0c:
         a7:68:13:10:99:7c:8b:95:db:a1:ac:31:f8:ef:9c:5b:ba:41:
         f7:c9:6e:01:08:28:90:0b:ef:06:b9:98:a3:dd:4a:9b:50:c6:
         43:d0:7f:ad:d8:0c:0d:7f:70:a9:14:63:85:58:3d:03:64:3d:
         b1:74:97:45:ee:3e:6b:87:b6:c4:de:35:ef:4b:98:db:9f:8c:
         fd:c6:7b:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUULdneEqdi5l34xIKzjm1rt+yQ/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDRjA0QzIzNjQxRjUxMEFBQkE3RDdDQzk3N0FDQzZF
M0IwM0Y4MTAeFw0yNTA0MjUwNzMyMzdaFw0yNTA0MjYxMDQyMzdaMDMxMTAvBgNV
BAMTKDQ4QTBDNDJFNjM1MjNDNTM2ODg4RjA4RDkwRjI4QTQzQThGMDAzOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWZA8FbuMMtPxWzFio5LKnVcK0
garx91yu9VzK/CPhmRR+AInw0sJFX/HPIWIbSre/S6M8KI8K1/y1yqTR+fA0/+7K
D/FytlBK2w0jSdui2/5yhqZ4G8MVx1ts7lBXC8x2dK6Rtr5Za/SsX16YVP8mJu3S
merabmJS0ZxvT/ffjWHjUICamINl38Q94Z/+9iX3Bt7RP+SiA39etcYoWhzWqIgL
YQB5ZbRcK/ujIWTe2pMklEnf7lsslnCLxVIk0rOPzwnTAaSoE//bX0g5JyFruXyJ
CNzl3Xrs9e/dmiT/RFTlnczLr+pt9M4Z+Zg3My6N1wXLn+Vc4K8ppSE64EArAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUSKDELmNSPFNoiPCNkPKKQ6jwA48wHwYDVR0j
BBgwFoAU0M8EwjZB9RCqun18yXesxuOwP4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU5YcXdzZkRvUXFpbW13Z2RtYUdzRFc2Qmp6VkI4YnQ4M3hwUTlGekV3
OVMvMS9EMENGMDRDMjM2NDFGNTEwQUFCQTdEN0NDOTc3QUNDNkUzQjAzRjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwQ0YwNEMyMzY0MUY1MTBB
QUJBN0Q3Q0M5NzdBQ0M2RTNCMDNGODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OU5YcXdzZkRvUXFpbW13Z2RtYUdzRFc2Qmp6VkI4YnQ4M3hwUTlGekV3OVMvMS9E
MENGMDRDMjM2NDFGNTEwQUFCQTdEN0NDOTc3QUNDNkUzQjAzRjgxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoop3XCrvxRUb0xX/XCGBWwV6NwQfs5xi2WvrAtoeRu/Tz6br5f6eh44wyEuT
HDg+tVHa3bUtySNn/jnb1UqbsrRuNqe5BBQn7wQiMNesVk0wF2moROs1Cuz1Y7mx
VQ+lDSckEutqTx1pF/axZi21vI6tJOtvGEy9NBZsaEfitcEOV7ovrFsym5KKfs/r
ztIbLSToLpHvuAIXHr5c8S4kvT5E5V3NzVyP0VOz6rmsibu0lnAMp2gTEJl8i5Xb
oawx+O+cW7pB98luAQgokAvvBrmYo91Km1DGQ9B/rdgMDX9wqRRjhVg9A2Q9sXSX
Re4+a4e2xN4170uY25+M/cZ7Jw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:05 2025 by rpki-client on console.sobornost.net