Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft
File:                     CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft (raw, json)
Hash identifier:          4XvfpA/OW6/Ip85TO36Fb6vRTVFd3n+tBlj86ZbrsMw=
Subject key identifier:   3D:A9:A8:CD:0F:C2:20:D9:8A:BC:A4:4B:5D:84:22:50:CF:6D:C5:60
Authority key identifier: CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D
Certificate issuer:       /CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D
Certificate serial:       2CD6B9AE4DC75CCA561DE6998F595352B27193DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft
Manifest number:          01ED
Signing time:             Mon 28 Apr 2025 16:00:33 +0000
Manifest this update:     Mon 28 Apr 2025 15:55:33 +0000
Manifest next update:     Tue 29 Apr 2025 17:05:33 +0000
Files and hashes:         1: 323830343a6461633a3a2f33322d3438203d3e203238313831.roa (hash: JvwegUUzqtOYrCDplzNKYzOOoU16ChE9rMTQfVBPQa0=)
                          2: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl (hash: GyUapFpZi1vpZRBR2D9AF6wH7nfqxIM1LPyC1T7P/KY=)
                          3: 3137392e39372e31362e302f32312d3234203d3e203238313831.roa (hash: h2W8XM2at3NYFJYnufJYaTXSX9GJvpJOp/TMajp4JtE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl
                          rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d6:b9:ae:4d:c7:5c:ca:56:1d:e6:99:8f:59:53:52:b2:71:93:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D
        Validity
            Not Before: Apr 28 15:55:33 2025 GMT
            Not After : Apr 29 17:05:33 2025 GMT
        Subject: CN=3DA9A8CD0FC220D98ABCA44B5D842250CF6DC560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:de:d9:c8:d9:57:a5:3d:c5:11:e6:df:78:88:
                    cf:9b:43:94:7b:6a:ac:80:3d:3e:15:3c:98:f9:2d:
                    17:02:af:01:18:4e:ca:c6:0d:89:d9:34:4b:50:af:
                    c8:48:b8:c4:ba:35:74:0d:09:f0:90:4f:b6:e5:d5:
                    0c:c4:2d:4f:8b:e9:19:58:3b:ff:a7:28:89:f2:c1:
                    1a:75:b9:b6:af:dd:fd:6f:87:5b:f7:82:fa:09:0b:
                    55:ca:12:ce:73:db:dc:ef:34:b7:c3:7a:ff:ce:59:
                    d5:38:e2:56:9b:fd:66:88:98:11:a4:e1:db:a2:ae:
                    04:99:b6:6a:de:ab:b0:db:aa:3d:7f:50:6b:77:1d:
                    f9:b2:2b:59:b2:d5:7a:38:88:7f:69:63:26:4c:fd:
                    32:f9:6b:64:55:8a:a1:7b:93:fa:69:76:a3:a6:fb:
                    39:40:de:9c:27:65:65:77:26:d9:e3:92:96:14:c6:
                    60:a4:8d:26:98:9d:e5:2b:c6:6f:cd:9e:21:ac:43:
                    83:35:3c:21:0a:14:1e:9a:40:c4:fd:ea:a3:4e:68:
                    19:11:82:00:17:84:1b:aa:43:b4:2a:b0:b2:d9:f8:
                    d6:09:15:92:93:e7:e2:1a:c7:ab:9e:8d:59:a6:a6:
                    fc:77:8c:c2:53:7e:4a:9a:45:2a:06:39:c4:2a:fe:
                    fc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A9:A8:CD:0F:C2:20:D9:8A:BC:A4:4B:5D:84:22:50:CF:6D:C5:60
            X509v3 Authority Key Identifier:
                keyid:CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:c8:35:cd:75:cf:c0:3d:4e:61:02:50:f5:76:32:ae:6a:33:
         31:6a:23:64:f1:3e:92:95:9e:cc:d9:5c:c6:73:c8:3f:15:f6:
         15:05:73:43:67:9a:fc:67:6e:c6:08:07:b5:12:8b:f0:d6:59:
         9d:4d:c3:37:6e:a7:5b:1e:a3:0b:2f:c7:65:95:f6:21:2b:ae:
         17:ed:d5:40:52:97:11:1d:71:87:60:be:31:01:65:4f:ad:24:
         d7:d3:81:b1:e3:9d:39:ed:e1:0c:3a:3e:c6:e7:03:ef:70:e7:
         ee:10:32:59:15:e1:64:81:d1:46:b2:3f:68:a0:0e:32:89:2a:
         f7:9c:bc:38:ec:fe:25:93:38:9a:e5:39:b7:84:8d:b9:1b:93:
         d6:00:bf:77:34:09:42:52:4d:3b:19:1d:ba:40:9f:cf:43:97:
         a4:ae:6b:e0:4a:e0:55:e8:8d:e5:a1:5b:0b:52:be:96:2a:8f:
         3e:a7:7b:87:c3:94:1a:0d:3e:03:3c:e4:6f:4e:5c:ed:f8:3a:
         b4:81:6a:dc:08:94:5c:fb:38:1e:72:0d:98:c2:b6:6d:43:51:
         1c:22:18:4b:66:d9:23:13:16:25:a0:a7:bc:9e:fe:15:b4:81:
         f3:18:62:d6:47:79:7c:9f:50:37:03:80:e6:c9:30:3b:08:6f:
         78:df:34:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULNa5rk3HXMpWHeaZj1lTUrJxk9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EyMEVGQzBCOTlBOEE4NkI0QjRDRkExMDdCMDAxRDUw
OEI3MjkwRDAeFw0yNTA0MjgxNTU1MzNaFw0yNTA0MjkxNzA1MzNaMDMxMTAvBgNV
BAMTKDNEQTlBOENEMEZDMjIwRDk4QUJDQTQ0QjVEODQyMjUwQ0Y2REM1NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ3tnI2VelPcUR5t94iM+bQ5R7
aqyAPT4VPJj5LRcCrwEYTsrGDYnZNEtQr8hIuMS6NXQNCfCQT7bl1QzELU+L6RlY
O/+nKInywRp1ubav3f1vh1v3gvoJC1XKEs5z29zvNLfDev/OWdU44lab/WaImBGk
4duirgSZtmreq7Dbqj1/UGt3HfmyK1my1Xo4iH9pYyZM/TL5a2RViqF7k/ppdqOm
+zlA3pwnZWV3JtnjkpYUxmCkjSaYneUrxm/NniGsQ4M1PCEKFB6aQMT96qNOaBkR
ggAXhBuqQ7QqsLLZ+NYJFZKT5+Iax6uejVmmpvx3jMJTfkqaRSoGOcQq/vzDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUPamozQ/CINmKvKRLXYQiUM9txWAwHwYDVR0j
BBgwFoAUyiDvwLmaioa0tM+hB7AB1Qi3KQ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9Y
R0cvMC9DQTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMjBFRkMwQjk5QThBODZC
NEI0Q0ZBMTA3QjAwMUQ1MDhCNzI5MEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9YR0cvMC9D
QTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvsg1zXXPwD1OYQJQ9XYyrmozMWojZPE+kpWezNlcxnPIPxX2FQVzQ2ea/Gdu
xggHtRKL8NZZnU3DN26nWx6jCy/HZZX2ISuuF+3VQFKXER1xh2C+MQFlT60k19OB
seOdOe3hDDo+xucD73Dn7hAyWRXhZIHRRrI/aKAOMokq95y8OOz+JZM4muU5t4SN
uRuT1gC/dzQJQlJNOxkdukCfz0OXpK5r4ErgVeiN5aFbC1K+liqPPqd7h8OUGg0+
Azzkb05c7fg6tIFq3AiUXPs4HnINmMK2bUNRHCIYS2bZIxMWJaCnvJ7+FbSB8xhi
1kd5fJ9QNwOA5skwOwhveN80VQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:57 2025 by rpki-client on console.sobornost.net