Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.mft
File:                     F346A2DF3646E1D5462B83A19F3C56C660FEB218.mft (raw, json)
Hash identifier:          CWk62GyN9tG07BzNH4/fdm2sny5JyDbycn1XlDqSGps=
Subject key identifier:   96:E0:1E:4C:68:41:9C:73:7A:5E:5D:48:AC:5D:7D:DF:E3:CF:B8:A3
Authority key identifier: F3:46:A2:DF:36:46:E1:D5:46:2B:83:A1:9F:3C:56:C6:60:FE:B2:18
Certificate issuer:       /CN=F346A2DF3646E1D5462B83A19F3C56C660FEB218
Certificate serial:       03BC2E2B533D64F582170C1075F8F6901B6CDE73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.mft
Manifest number:          6C
Signing time:             Fri 25 Apr 2025 09:15:58 +0000
Manifest this update:     Fri 25 Apr 2025 09:10:58 +0000
Manifest next update:     Sat 26 Apr 2025 11:39:58 +0000
Files and hashes:         1: 323830343a343633343a3a2f33322d3332203d3e20323636393735.roa (hash: U8ggjszPYbkkqzc0fACxe/vZSUO2znBLP4yNo7UGAlg=)
                          2: 34352e3232362e33382e302f32342d3234203d3e20323636393735.roa (hash: FY/S+j3eJnypBOjrZ+bRO+vVR8geEnRYaehjFlkmNxA=)
                          3: 34352e3232362e33392e302f32342d3234203d3e20323636393735.roa (hash: KzCKpw5mIFeFb94y6gsKFGSO0Cu1Sdy/aNoSSFyv63w=)
                          4: F346A2DF3646E1D5462B83A19F3C56C660FEB218.crl (hash: C5KcNSCBpvgdkKH439SSYfHIyWWuMH2v0Prbd8vmkZY=)
                          5: 34352e3232362e33372e302f32342d3234203d3e20323636393735.roa (hash: /+roH6uKhNgpgS6MVAhPd2WMANGK45oCR2rl/f5fs+g=)
                          6: 34352e3232362e33362e302f32332d3233203d3e20323636393735.roa (hash: 8G5A7N+ePAqGBFceWS4hfkx9y15QFKnqdlxSasIeOzg=)
                          7: 34352e3232362e33362e302f32342d3234203d3e20323636393735.roa (hash: LkycYlfLfhux/co3SmDPdT8a0lABGr8+dgfsXx6NSE0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.crl
                          rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 11:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:bc:2e:2b:53:3d:64:f5:82:17:0c:10:75:f8:f6:90:1b:6c:de:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F346A2DF3646E1D5462B83A19F3C56C660FEB218
        Validity
            Not Before: Apr 25 09:10:58 2025 GMT
            Not After : Apr 26 11:39:58 2025 GMT
        Subject: CN=96E01E4C68419C737A5E5D48AC5D7DDFE3CFB8A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:97:52:32:11:ba:f7:3e:39:b6:2f:f9:b9:c9:
                    2c:3d:4e:55:c3:5d:af:97:cc:43:73:09:cd:46:1e:
                    1a:f9:d4:98:de:4b:dc:42:22:d2:8a:0d:11:b4:7f:
                    3f:da:ed:9f:56:93:c2:ce:41:45:c6:11:b8:83:50:
                    a7:cb:cb:c7:05:7f:86:6b:64:14:77:e0:6b:9d:0b:
                    27:53:8c:65:44:40:49:30:e4:ac:aa:49:9f:73:54:
                    14:e1:c3:dc:f2:ab:3b:08:ca:ba:02:ad:0e:fb:0e:
                    ce:72:64:3f:92:ab:32:4a:99:9e:7a:1e:3f:3d:51:
                    8e:6f:38:04:54:0f:90:58:a0:e3:1c:39:20:80:2b:
                    44:7c:71:b7:d6:a0:27:44:40:85:1f:08:4c:b9:69:
                    01:07:5e:9c:a1:b1:62:75:cd:a9:05:ba:bc:7c:fb:
                    6c:ed:c3:6f:5d:ba:90:fa:5d:c1:5c:c3:de:3d:c6:
                    08:65:59:23:8f:36:72:03:4b:15:2e:81:a7:b8:65:
                    5a:ba:59:9a:c6:d5:46:44:23:47:eb:5f:f9:8c:84:
                    6c:bd:07:4c:aa:19:57:88:35:d3:18:1d:1c:d1:e7:
                    91:2e:1f:c8:97:9f:0c:c8:60:b6:eb:fd:d5:b4:fe:
                    e2:10:0f:2f:29:af:88:3e:7b:fe:9e:1d:53:02:aa:
                    58:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E0:1E:4C:68:41:9C:73:7A:5E:5D:48:AC:5D:7D:DF:E3:CF:B8:A3
            X509v3 Authority Key Identifier:
                keyid:F3:46:A2:DF:36:46:E1:D5:46:2B:83:A1:9F:3C:56:C6:60:FE:B2:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:7e:35:37:89:d2:c2:37:7d:6f:5a:4c:1c:82:a5:4f:3f:79:
         cf:2b:d7:3c:d0:7d:31:ef:03:dc:c7:0b:16:2e:1d:84:b5:bf:
         69:8e:36:8a:9c:c3:66:e9:98:17:24:60:91:e4:aa:86:2e:0a:
         70:dd:ac:56:eb:d6:46:83:32:ed:50:e1:34:46:a8:10:b5:7a:
         30:d8:6e:0b:1e:c3:2c:64:97:70:ae:f7:39:41:6c:21:db:10:
         d8:24:bb:35:f3:b8:62:7f:15:43:d2:2e:5a:35:96:27:90:af:
         10:b5:8b:9d:c9:cf:db:ad:43:37:ad:1c:56:13:8a:65:70:8b:
         80:c9:98:c7:e9:f9:37:aa:fb:0d:62:5b:6c:5f:27:98:80:17:
         e0:e5:40:8f:cb:06:d5:2f:68:ee:81:f4:1e:44:d1:51:f3:4c:
         a2:3f:30:62:3a:93:11:0c:44:34:d6:0d:f1:87:42:8d:04:85:
         7a:75:1b:fc:e3:d6:1e:08:a6:3d:ea:e6:44:53:89:c1:ab:1e:
         98:7f:26:08:d2:dd:f6:86:6c:25:ee:cf:33:3e:0f:e2:ec:32:
         40:b9:55:9a:35:fc:fe:bf:ed:94:fd:24:07:0b:d3:ca:88:d2:
         46:d3:20:45:5b:56:7f:8d:ca:ca:4c:cc:e3:63:ee:ad:c2:22:
         96:2a:ac:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:19 2025 by rpki-client on console.sobornost.net