Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.mft
File:                     4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.mft (raw, json)
Hash identifier:          UWn0CSbpQIYcmRbbjeT0+gYzqgKgWJ/8hgmHcsb0ITI=
Subject key identifier:   44:94:27:17:E2:C1:DD:45:0A:81:8F:0C:B2:DA:A5:B8:98:D1:A0:EA
Authority key identifier: 4A:51:83:10:DD:6B:72:E1:34:A4:AF:B5:3D:BA:57:27:F5:7D:5D:9E
Certificate issuer:       /CN=4A518310DD6B72E134A4AFB53DBA5727F57D5D9E
Certificate serial:       02F457514E2C2A650C07AE5CB583999A5731C6D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.mft
Manifest number:          49
Signing time:             Sun 27 Apr 2025 19:04:43 +0000
Manifest this update:     Sun 27 Apr 2025 18:59:43 +0000
Manifest next update:     Mon 28 Apr 2025 19:46:43 +0000
Files and hashes:         1: 3133382e33362e3136352e302f32342d3234203d3e20323633343434.roa (hash: FO/Ct7fbd3fKpHeHlk+ALxP20EHRwFuCFEqgB5Xx2Yg=)
                          2: 3133382e33362e3136342e302f32342d3234203d3e20323633343434.roa (hash: E5VgvafZXnuul346/lfysF6NKbH+lxH88rH5YBTQAhc=)
                          3: 323830343a313164633a3a2f33322d3336203d3e20323633343434.roa (hash: ISfKboNMYFfiDg7D6M4oftxHEam5BZIXrhnOI4qhJOA=)
                          4: 3133382e33362e3136342e302f32322d3232203d3e20323633343434.roa (hash: D/hESU/KWqjlTko1BY7hZVMCHPSoYaiTlEBWpUWUW+I=)
                          5: 3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa (hash: J29GCjk4bRASszxSetx+354wvA2e6FZOmFIN5uD7jDk=)
                          6: 3133382e33362e3136372e302f32342d3234203d3e20323633343434.roa (hash: qMqqCKyCSZwJMRK/q6VuHw6QMrKbX33FBf+PXj0Mvs0=)
                          7: 4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.crl (hash: naRGKQpYk6bMgi91QirOep8dAxMzkPxrXxQjXcxZ4pk=)
                          8: 3133382e33362e3136362e302f32342d3234203d3e20323633343434.roa (hash: Vv789YYHFaPbwqAZmXurM0ADTKIE59KcC8qcC4wxP1M=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 19:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f4:57:51:4e:2c:2a:65:0c:07:ae:5c:b5:83:99:9a:57:31:c6:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A518310DD6B72E134A4AFB53DBA5727F57D5D9E
        Validity
            Not Before: Apr 27 18:59:43 2025 GMT
            Not After : Apr 28 19:46:43 2025 GMT
        Subject: CN=44942717E2C1DD450A818F0CB2DAA5B898D1A0EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:65:f4:91:32:5e:7c:d2:b0:20:3d:8d:fd:38:
                    3f:41:5e:be:a3:cd:f0:ad:90:0f:aa:b7:c0:d1:d3:
                    96:39:0b:29:f1:2f:5f:f2:d3:8b:db:bc:71:bd:ca:
                    6e:8a:5b:2a:dc:6f:5b:95:2e:04:33:d4:b6:40:80:
                    f3:90:0f:9f:60:e1:64:a8:8e:9e:a8:39:8c:bd:36:
                    07:09:76:84:e9:fd:96:74:76:d1:b7:a5:3a:ce:ab:
                    5a:13:9c:b1:46:cf:17:09:73:fd:05:2c:d8:18:0c:
                    41:75:53:3f:a8:a2:09:9a:8e:f5:c3:4b:8c:72:2a:
                    fe:83:a9:4f:a8:f3:63:42:65:53:5a:e1:de:15:50:
                    1e:4d:aa:c7:8f:0e:2c:bf:63:22:6d:92:0b:b8:8d:
                    b8:65:bf:82:c1:7e:3a:ea:bc:1f:77:a3:21:25:03:
                    0f:1c:24:c0:cd:78:4c:f1:6d:3c:b9:3d:c4:ac:d7:
                    f3:a4:cc:6e:36:1a:56:03:49:d6:d8:de:4d:c1:d2:
                    6b:cf:50:5a:2f:17:fc:0c:9d:6b:e2:67:07:b0:35:
                    47:19:4a:c0:12:38:ce:4a:27:3e:8b:31:13:3f:5c:
                    33:96:4c:90:af:c3:83:68:50:5b:a3:da:08:5e:99:
                    ac:92:9f:4d:a4:26:5e:b1:96:3e:e6:3f:c4:fd:c6:
                    df:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:94:27:17:E2:C1:DD:45:0A:81:8F:0C:B2:DA:A5:B8:98:D1:A0:EA
            X509v3 Authority Key Identifier:
                keyid:4A:51:83:10:DD:6B:72:E1:34:A4:AF:B5:3D:BA:57:27:F5:7D:5D:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:d0:41:75:a0:8b:6b:a2:47:fa:16:36:62:2a:e7:c9:88:c3:
         84:97:0f:ca:78:2e:7b:90:be:f0:16:44:bb:31:ca:37:96:fa:
         0e:58:6e:f0:69:68:f5:16:bb:93:24:16:1b:c5:37:3d:4b:06:
         d5:55:df:36:2c:b4:b8:42:a0:bf:23:e1:aa:aa:65:84:89:22:
         8a:09:9e:8e:e8:0b:47:9b:08:d8:9b:24:56:8e:71:38:9d:0b:
         80:28:3a:5e:93:50:c4:1f:64:2d:56:77:c2:74:d5:0a:00:ec:
         3d:d4:84:2b:99:aa:7f:02:c2:b5:77:7e:e5:c1:4a:16:f8:9c:
         75:b6:b7:c4:84:d5:37:e9:99:fc:31:3e:5f:08:c0:bf:77:4d:
         5c:86:49:ba:62:9e:fe:8c:51:80:67:8d:ef:ff:e7:be:39:74:
         73:ad:ad:e9:4f:ec:31:97:ed:a2:92:62:1e:2c:2c:c7:55:26:
         c8:e3:4d:5f:c5:b1:18:8e:f2:4d:60:c8:7e:02:09:70:6c:4f:
         fd:e9:3c:0c:e8:a8:1a:ce:bb:33:b7:4c:68:09:fb:43:2f:c9:
         72:36:13:af:7a:10:c2:6b:41:09:53:09:7d:56:85:b0:19:6b:
         a5:5f:f9:21:85:26:9a:3c:14:3b:ff:c1:17:9f:3e:34:59:8c:
         a8:24:54:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:10 2025 by rpki-client on console.sobornost.net