Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft
File:                     DD880B71129737798123EE9EDC1423C3E8280892.mft (raw, json)
Hash identifier:          7wHdNicBnKIlwVUA1FZfH6GlD3HJML8SO7rJS1jxtUY=
Subject key identifier:   CB:E4:FC:18:CF:CB:4B:3A:C8:0A:48:DB:C4:00:00:23:66:78:B8:50
Authority key identifier: DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92
Certificate issuer:       /CN=DD880B71129737798123EE9EDC1423C3E8280892
Certificate serial:       2D4BD58C5670E12D964E3CCC06068A671B9366AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft
Manifest number:          022D
Signing time:             Sat 26 Apr 2025 21:00:00 +0000
Manifest this update:     Sat 26 Apr 2025 20:55:00 +0000
Manifest next update:     Sun 27 Apr 2025 21:00:00 +0000
Files and hashes:         1: 323830343a356266633a3a2f33322d3438203d3e20323638383831.roa (hash: i06R7ZftAjC7a/YY6upqVlOH5minL/+0Kvab9Pct10w=)
                          2: DD880B71129737798123EE9EDC1423C3E8280892.crl (hash: yjKGsEnGf7jcwNLAR507iRFyEXSNWGfcV/4L2j2fFhU=)
                          3: 34352e3137352e33322e302f32322d3234203d3e20323638383831.roa (hash: EiFbXmNwfUfEkSI4qCqsU5jU8ePYLs88ZEXUItBxJT0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl
                          rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:4b:d5:8c:56:70:e1:2d:96:4e:3c:cc:06:06:8a:67:1b:93:66:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD880B71129737798123EE9EDC1423C3E8280892
        Validity
            Not Before: Apr 26 20:55:00 2025 GMT
            Not After : May  3 21:00:00 2025 GMT
        Subject: CN=3082010A0282010100CBE9483D851DB964DB0C92A94B6038195F104B013699DD627A74A4329A430075B91F3C16333B798FF8D4CCF54B6B83D1D1A13AC0AB7A2BCAB73E5EE6D96123298E66AB98C53C31D449E1860CEAC91BE86B47369D5D70DE7673E6E7FD6138656B6F72B50EA25531692E6099B75462314BE75763805593F5C2FF964193F683F122CCB0A04715EB83E788F6AD7CD98A5E41A981F6A158E6BBC3D5C8D9A5869BCFEFEB9544898A44FBE62C31363C269DF2F0A4C0ADA058CD4B4130129973EA01DF567D91720EE950FF512D02120873B17ACB9D626F2BD285E8C7A7980C3067D96B1A92A331485E190D2A0D9DD02C71F59772AC5A87B784A7F6EFA6F2449947E8F2A30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e9:48:3d:85:1d:b9:64:db:0c:92:a9:4b:60:
                    38:19:5f:10:4b:01:36:99:dd:62:7a:74:a4:32:9a:
                    43:00:75:b9:1f:3c:16:33:3b:79:8f:f8:d4:cc:f5:
                    4b:6b:83:d1:d1:a1:3a:c0:ab:7a:2b:ca:b7:3e:5e:
                    e6:d9:61:23:29:8e:66:ab:98:c5:3c:31:d4:49:e1:
                    86:0c:ea:c9:1b:e8:6b:47:36:9d:5d:70:de:76:73:
                    e6:e7:fd:61:38:65:6b:6f:72:b5:0e:a2:55:31:69:
                    2e:60:99:b7:54:62:31:4b:e7:57:63:80:55:93:f5:
                    c2:ff:96:41:93:f6:83:f1:22:cc:b0:a0:47:15:eb:
                    83:e7:88:f6:ad:7c:d9:8a:5e:41:a9:81:f6:a1:58:
                    e6:bb:c3:d5:c8:d9:a5:86:9b:cf:ef:eb:95:44:89:
                    8a:44:fb:e6:2c:31:36:3c:26:9d:f2:f0:a4:c0:ad:
                    a0:58:cd:4b:41:30:12:99:73:ea:01:df:56:7d:91:
                    72:0e:e9:50:ff:51:2d:02:12:08:73:b1:7a:cb:9d:
                    62:6f:2b:d2:85:e8:c7:a7:98:0c:30:67:d9:6b:1a:
                    92:a3:31:48:5e:19:0d:2a:0d:9d:d0:2c:71:f5:97:
                    72:ac:5a:87:b7:84:a7:f6:ef:a6:f2:44:99:47:e8:
                    f2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E4:FC:18:CF:CB:4B:3A:C8:0A:48:DB:C4:00:00:23:66:78:B8:50
            X509v3 Authority Key Identifier:
                keyid:DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b7:c0:4c:a1:01:c4:92:c7:3c:2c:4c:a8:66:74:96:a2:3f:
         35:45:9b:3f:57:6e:18:d0:8c:9f:51:6b:3e:0c:41:c2:b4:05:
         04:27:82:94:67:1b:f8:52:e9:b3:ae:79:c4:96:d8:a4:79:d2:
         79:b3:b9:44:47:be:f8:ff:7b:66:35:bc:d6:cc:82:b7:bb:87:
         47:65:b8:77:f9:78:61:fd:56:6e:47:5f:3d:ee:6c:4a:de:34:
         41:d3:a4:75:37:4a:4f:17:48:f9:99:e1:0e:18:1d:83:3a:c9:
         ad:79:83:27:04:0e:b8:0d:9f:6b:9d:93:bb:0c:26:92:98:a3:
         ec:24:69:84:c1:b0:b3:d6:4e:1c:14:9c:7e:ee:f8:90:14:0a:
         1d:a2:3e:dd:a1:d8:8f:90:45:32:02:83:d3:ab:f5:09:52:b1:
         f7:45:b1:ac:8f:e9:c6:8e:16:f6:c0:c5:1f:27:7b:85:d6:d3:
         3c:d9:d9:42:79:1f:7b:5e:cd:ab:06:fd:da:7d:05:ac:7a:b5:
         2e:9a:f9:6b:c1:94:74:d8:b3:7b:70:02:82:53:25:f7:ff:a5:
         31:28:fa:12:69:08:5d:c2:ef:fe:27:f0:ce:0d:e9:ab:6a:57:
         9c:fe:f2:01:06:d3:35:3c:cc:b9:53:9c:5b:da:e5:fd:a0:af:
         db:9f:ec:f7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:17 2025 by rpki-client on console.sobornost.net