Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
File:                     BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft (raw, json)
Hash identifier:          1UjalggRr4+MpgQLk6kWtMaGlzxG9fOOxLPUScfHrek=
Subject key identifier:   F7:34:9B:B2:FC:8F:B2:E5:0C:11:3A:3E:E1:EB:F5:C7:9C:48:EA:11
Authority key identifier: BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Certificate issuer:       /CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Certificate serial:       0BAD39E527FA575A9BF9369A2B2FCFD63B3250F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
Manifest number:          01E7
Signing time:             Mon 28 Apr 2025 07:12:56 +0000
Manifest this update:     Mon 28 Apr 2025 07:07:56 +0000
Manifest next update:     Tue 29 Apr 2025 10:27:56 +0000
Files and hashes:         1: 3138362e3234392e31362e302f32312d3231203d3e20323633303232.roa (hash: DOeYQ0dwoH/3lYRpTBMHS7pBOmoWUaYPPxSXnT1ujb8=)
                          2: 323830343a6131383a383030303a3a2f33332d3334203d3e20323633303232.roa (hash: g2G67ufeop6TzLj8bz5NkpBU2ApyMKCoqz/NfsR154w=)
                          3: 3138362e3234392e32302e302f32332d3233203d3e20323633303232.roa (hash: bmC09WGeYdDECssoZBHMb30dnaKneoeEZK+KTVFyCK0=)
                          4: BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl (hash: SyjjQVxH7vmF8xTusQa5B4NwKRUvcghjYzQMwi09YAI=)
                          5: 323830343a6131383a3a2f33332d3334203d3e20323633303232.roa (hash: QGn1e741uH3SxLWvJiXHqYPk6n/umppkhESLNY0qUs8=)
                          6: 3138362e3234392e32322e302f32332d3233203d3e20323633303232.roa (hash: hRxGZ4Jal3c/Na8Cz3p5NhOihShNL3T7sJasYUPCz5w=)
                          7: 3138362e3234392e31382e302f32332d3233203d3e20323633303232.roa (hash: loRifbaEiE0t81ck7mBypgpiHRitrR/IadRIzPn7m+Q=)
                          8: 3138362e3234392e31362e302f32332d3233203d3e20323633303232.roa (hash: 23O6JYPEmUAOy+JqpCN+UO5DD1jtlLi18ehB1exk55g=)
                          9: 323830343a6131383a3a2f33322d3332203d3e20323633303232.roa (hash: hHzj/1U34Hb14mhLSmOaJOe36Adh6w5jMwEAPr+/2MQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ad:39:e5:27:fa:57:5a:9b:f9:36:9a:2b:2f:cf:d6:3b:32:50:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
        Validity
            Not Before: Apr 28 07:07:56 2025 GMT
            Not After : Apr 29 10:27:56 2025 GMT
        Subject: CN=F7349BB2FC8FB2E50C113A3EE1EBF5C79C48EA11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1b:6a:24:35:47:c0:41:22:74:f1:d3:97:bd:
                    64:51:c7:1a:1a:09:73:21:e8:c0:2c:8d:d2:3d:90:
                    09:80:39:cd:77:d0:fe:97:2d:39:d4:10:6f:c6:b2:
                    60:be:bf:c6:27:06:8a:3c:50:63:7b:02:45:41:0e:
                    53:9c:80:a5:b2:b1:51:f9:02:f5:6b:90:25:bf:ec:
                    91:ff:e8:59:76:bc:0c:2f:f8:9c:67:c3:21:f9:01:
                    7f:21:a3:4e:53:63:77:d7:80:90:73:13:16:3c:65:
                    5d:79:10:83:eb:ce:5c:7d:b5:90:93:ad:8c:b1:b3:
                    d7:56:a4:64:56:a8:13:5d:3d:a2:92:56:42:fb:17:
                    96:cd:aa:b9:11:27:92:b2:c5:5e:5b:c2:32:86:6f:
                    8e:93:6a:fe:6b:ff:fc:81:c8:ab:79:a0:98:36:63:
                    b0:3d:17:d0:34:a5:55:06:65:16:ac:23:b7:ae:de:
                    de:3c:26:93:cd:1e:b7:a5:de:ef:05:21:34:c3:74:
                    8d:03:96:c9:21:36:76:7e:0e:b1:0e:c8:35:ef:8d:
                    5f:69:64:c7:55:17:b1:74:6e:9f:b5:e8:94:59:bd:
                    db:8e:2a:8d:8a:44:1d:f8:0e:60:9e:aa:82:18:2f:
                    c4:27:fb:42:cb:14:8e:d1:7c:6a:64:03:ac:b1:ba:
                    eb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:34:9B:B2:FC:8F:B2:E5:0C:11:3A:3E:E1:EB:F5:C7:9C:48:EA:11
            X509v3 Authority Key Identifier:
                keyid:BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:a7:56:bd:34:e4:a6:ad:a0:82:3a:e6:d8:27:cb:d0:26:10:
         16:cc:ea:4a:da:cf:a7:0b:48:db:b4:91:c1:fc:b0:e1:b2:da:
         64:d5:4b:10:27:ee:a9:57:73:1e:14:8b:7e:c4:ef:5a:aa:e2:
         d0:81:7a:a6:8e:5c:a1:c6:7a:c2:b8:14:e2:81:d0:ef:e1:13:
         59:32:bd:d7:a1:8b:83:c9:86:46:64:e5:42:83:a0:24:f1:66:
         e0:33:b2:0d:8a:f6:ee:8c:98:61:5d:8c:54:c2:b9:9e:0d:39:
         8f:7a:9f:64:87:b5:2a:01:ac:44:50:92:59:7e:8e:7e:17:d8:
         5c:05:8e:b5:b7:80:63:99:00:c4:ee:45:bd:82:f8:02:e7:36:
         30:1a:af:e6:8c:38:b6:1b:49:75:84:a7:8e:1b:e6:bb:c1:72:
         12:81:26:78:c6:40:7b:06:9c:7c:33:7c:0c:1a:13:54:f4:ef:
         8d:30:61:15:a9:a6:a6:08:d9:74:35:34:2d:bf:bd:47:b5:e7:
         3c:53:29:d9:4f:09:f1:2b:69:11:dc:6d:10:2d:4c:6d:60:e0:
         56:49:cd:ae:3d:b6:5f:e3:09:80:a9:a7:39:0e:10:85:93:b7:
         21:7a:fc:e6:da:3b:dc:ed:dd:99:c6:4d:f9:4c:3e:85:b9:d3:
         a1:12:bf:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:26 2025 by rpki-client on console.sobornost.net