Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft
File:                     B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft (raw, json)
Hash identifier:          ZFeEUYzkhGKra6D/oVMpI1WjxonaVKbNx/0Ok06X+mk=
Subject key identifier:   B2:D8:3B:DF:D1:9A:08:89:44:B0:C7:FD:5B:5E:CB:94:CD:02:2E:45
Authority key identifier: B0:33:7D:29:70:CB:09:EC:BA:6C:93:B9:F7:30:52:6E:8A:BD:17:9C
Certificate issuer:       /CN=B0337D2970CB09ECBA6C93B9F730526E8ABD179C
Certificate serial:       1D4CC8E02838DFA800B65232E79D1D0AAFDF4202
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft
Manifest number:          79
Signing time:             Fri 25 Apr 2025 18:09:33 +0000
Manifest this update:     Fri 25 Apr 2025 18:04:33 +0000
Manifest next update:     Sat 26 Apr 2025 21:53:33 +0000
Files and hashes:         1: 3137372e33382e32342e302f32322d3234203d3e20323632393038.roa (hash: dGUuPMBAaOXlYlzrmpRc8TAZ4SZ3d8aZsmWcWxA6jcY=)
                          2: 3137372e35322e35362e302f32322d3234203d3e20323632393038.roa (hash: CYet3kKlZMq0bVz27G5Q21l43aX4pgm4MbAST0VmGkg=)
                          3: 3137372e33382e32382e302f32322d3234203d3e20323632393038.roa (hash: HJFC7iXGTFPZDU8AX26DfYJHqA8ZIk/nP70vX6+jQo4=)
                          4: 3136382e3139362e35362e302f32322d3234203d3e20323632393038.roa (hash: CveRwIcrqNwQKM9zizyilPdp+fXc4SVnOCQsPgpHD6o=)
                          5: B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl (hash: 8pqFl4V/YyhfPx1qjw8zieNnCYrpI4fbQLAFbcRrrFw=)
                          6: 3137372e39312e3133362e302f32322d3234203d3e20323632393038.roa (hash: MAXqeMftrDx2qfIrNZeHi1Fg5BRXYViJaP7l5pPBgyg=)
                          7: 323830343a3363383a3a2f33322d3336203d3e20323632393038.roa (hash: 0NGsiRjwRCwvztO0HQSwZ5G2u2NyRn8qasG89BQU4fw=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl
                          rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 21:53:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4c:c8:e0:28:38:df:a8:00:b6:52:32:e7:9d:1d:0a:af:df:42:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0337D2970CB09ECBA6C93B9F730526E8ABD179C
        Validity
            Not Before: Apr 25 18:04:33 2025 GMT
            Not After : Apr 26 21:53:33 2025 GMT
        Subject: CN=B2D83BDFD19A088944B0C7FD5B5ECB94CD022E45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:f5:64:9d:77:02:19:15:9b:7a:87:13:6c:
                    0d:8e:aa:c9:c2:7d:1e:3d:31:70:a0:e1:20:48:92:
                    23:e5:a2:ba:49:9c:5b:c5:ff:94:0f:19:ff:12:63:
                    66:8b:9c:26:d7:ce:1e:c1:51:a0:4e:1b:11:9a:24:
                    c8:df:6b:09:f7:ca:6a:05:d9:95:e6:81:c7:20:f0:
                    77:3c:09:3d:62:5a:07:5c:f4:3a:4d:b8:74:99:fc:
                    75:9e:78:a4:b0:81:d3:4d:e2:67:a4:69:f7:d7:71:
                    73:02:55:2f:1e:96:28:59:32:a5:90:98:a5:41:6d:
                    57:1f:fe:cc:b0:08:39:15:65:74:ee:38:3d:43:5d:
                    bb:87:83:9e:ad:83:25:51:68:e8:ec:99:5e:6a:a7:
                    bc:33:ca:dc:38:6d:96:c5:7d:3a:2b:5b:12:62:a2:
                    59:b3:92:03:fa:8b:fd:ac:9b:6d:b1:08:93:81:7a:
                    ee:92:33:12:3b:65:5b:b0:45:ed:65:31:13:3b:b9:
                    6f:ce:f4:5f:15:27:d3:aa:1e:92:c7:11:37:05:a2:
                    06:a1:c9:69:dd:db:b0:f6:3e:68:2a:ec:b1:af:9b:
                    b2:91:41:35:3b:84:b4:49:55:41:04:02:c0:76:57:
                    74:8e:fc:68:d7:3b:b8:06:6b:15:a6:3a:6d:24:e3:
                    c1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D8:3B:DF:D1:9A:08:89:44:B0:C7:FD:5B:5E:CB:94:CD:02:2E:45
            X509v3 Authority Key Identifier:
                keyid:B0:33:7D:29:70:CB:09:EC:BA:6C:93:B9:F7:30:52:6E:8A:BD:17:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:73:72:3a:36:71:d5:82:e3:3e:03:00:d9:c9:1c:65:7e:f4:
         d7:47:68:18:47:7b:6f:aa:11:3a:fc:55:f3:0a:63:99:7d:26:
         5f:ac:af:2a:37:dd:cd:0d:3a:16:29:f3:c2:c1:e4:0c:5c:c5:
         f3:0c:38:2f:cf:1f:3c:8d:a8:db:c2:f8:22:f9:39:bc:4e:f3:
         28:55:1a:93:de:17:31:55:08:4b:54:5b:1c:3d:40:9a:e2:0a:
         08:4a:d5:3f:ee:de:dc:09:5a:9d:cf:8e:38:49:6c:5f:58:e6:
         ce:df:22:8b:f4:58:fa:1c:b6:eb:ec:ae:8b:98:a4:5d:de:9c:
         ff:fe:26:6c:e3:62:fb:d2:8e:66:fa:2e:40:fb:3f:7b:32:ed:
         89:27:f1:ad:cd:c9:3b:73:ff:02:0b:ab:5d:44:9a:81:e5:8d:
         59:08:81:81:5e:02:4c:84:c8:67:a2:22:b2:25:1c:97:59:19:
         90:43:a0:b3:aa:82:33:ad:27:7a:4e:78:5a:69:aa:a4:52:ec:
         81:36:31:f0:17:ae:bf:94:92:c7:53:91:07:03:ae:dd:8b:58:
         9d:89:39:5e:f3:01:c3:55:d4:d6:93:55:16:77:29:c1:c5:ce:
         c1:7d:76:19:66:f3:64:fb:ee:69:dd:7b:32:29:51:6e:36:c7:
         73:95:37:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHUzI4Cg436gAtlIy550dCq/fQgIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjAzMzdEMjk3MENCMDlFQ0JBNkM5M0I5RjczMDUyNkU4
QUJEMTc5QzAeFw0yNTA0MjUxODA0MzNaFw0yNTA0MjYyMTUzMzNaMDMxMTAvBgNV
BAMTKEIyRDgzQkRGRDE5QTA4ODk0NEIwQzdGRDVCNUVDQjk0Q0QwMjJFNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAu/VknXcCGRWbeocTbA2OqsnC
fR49MXCg4SBIkiPlorpJnFvF/5QPGf8SY2aLnCbXzh7BUaBOGxGaJMjfawn3ymoF
2ZXmgccg8Hc8CT1iWgdc9DpNuHSZ/HWeeKSwgdNN4mekaffXcXMCVS8elihZMqWQ
mKVBbVcf/sywCDkVZXTuOD1DXbuHg56tgyVRaOjsmV5qp7wzytw4bZbFfTorWxJi
olmzkgP6i/2sm22xCJOBeu6SMxI7ZVuwRe1lMRM7uW/O9F8VJ9OqHpLHETcFogah
yWnd27D2Pmgq7LGvm7KRQTU7hLRJVUEEAsB2V3SO/GjXO7gGaxWmOm0k48H9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUstg739GaCIlEsMf9W17LlM0CLkUwHwYDVR0j
BBgwFoAUsDN9KXDLCey6bJO59zBSboq9F5wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXBoN3pEWVpHOG5yQXJmS1Jjb25ZcWlMSzRxU1M5dlEzOWZWMm82UlBr
UWUvMC9CMDMzN0QyOTcwQ0IwOUVDQkE2QzkzQjlGNzMwNTI2RThBQkQxNzlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwMzM3RDI5NzBDQjA5RUNC
QTZDOTNCOUY3MzA1MjZFOEFCRDE3OUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OXBoN3pEWVpHOG5yQXJmS1Jjb25ZcWlMSzRxU1M5dlEzOWZWMm82UlBrUWUvMC9C
MDMzN0QyOTcwQ0IwOUVDQkE2QzkzQjlGNzMwNTI2RThBQkQxNzlDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkHNyOjZx1YLjPgMA2ckcZX7010doGEd7b6oROvxV8wpjmX0mX6yvKjfdzQ06
FinzwsHkDFzF8ww4L88fPI2o28L4Ivk5vE7zKFUak94XMVUIS1RbHD1AmuIKCErV
P+7e3Alanc+OOElsX1jmzt8ii/RY+hy26+yui5ikXd6c//4mbONi+9KOZvouQPs/
ezLtiSfxrc3JO3P/AgurXUSageWNWQiBgV4CTITIZ6IisiUcl1kZkEOgs6qCM60n
ek54WmmqpFLsgTYx8Beuv5SSx1ORBwOu3YtYnYk5XvMBw1XU1pNVFncpwcXOwX12
GWbzZPvuad17MilRbjbHc5U32g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:38 2025 by rpki-client on console.sobornost.net