Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft
File:                     23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft (raw, json)
Hash identifier:          /zzrQsxalMAbjrnYwk1CizTtoRz+EW8hDZ97zVNdcNk=
Subject key identifier:   9C:56:D8:65:C9:A1:26:96:98:B2:37:4D:8E:96:BB:4D:C3:A4:36:42
Authority key identifier: 23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA
Certificate issuer:       /CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA
Certificate serial:       7D8018CFD098904DA554F595C27D93D533E73F93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft
Manifest number:          01A1
Signing time:             Mon 28 Apr 2025 07:00:40 +0000
Manifest this update:     Mon 28 Apr 2025 06:55:40 +0000
Manifest next update:     Tue 29 Apr 2025 09:24:40 +0000
Files and hashes:         1: 323830343a336634383a3a2f33322d313238203d3e20323636363530.roa (hash: BymP1oE1knapGmmucKq85s1m4dhcM3LP2vsYwSrRS7o=)
                          2: 23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl (hash: FfLcUUGL0qHWpuuyjeTbmiObF/6CcCV7S4k0WwkFSq8=)
                          3: 3132382e3230312e3231362e302f32322d3332203d3e20323636363530.roa (hash: Wsu27lj+OxEwteJDFUBY3rXDxyOYfTb6YV80eRmJbcc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl
                          rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:80:18:cf:d0:98:90:4d:a5:54:f5:95:c2:7d:93:d5:33:e7:3f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA
        Validity
            Not Before: Apr 28 06:55:40 2025 GMT
            Not After : Apr 29 09:24:40 2025 GMT
        Subject: CN=9C56D865C9A1269698B2374D8E96BB4DC3A43642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e0:a2:19:59:78:57:79:4f:f4:83:34:5e:8d:
                    51:c8:e4:b6:95:5b:c7:10:49:75:16:e9:bf:e8:16:
                    ee:23:61:28:5e:06:fc:ec:2e:7a:57:55:c4:fe:6e:
                    4c:29:91:ac:fc:a9:e8:f7:53:ad:1b:d8:65:e8:9d:
                    eb:e5:09:06:da:76:ce:ab:44:b3:d3:13:ba:66:47:
                    6c:7d:06:49:6e:a5:be:ee:ac:28:2a:82:d8:60:b9:
                    e0:3d:ee:e4:2e:df:54:28:6c:e7:5b:77:b8:11:5a:
                    8b:92:7a:d4:36:fb:b0:e7:c6:22:b9:fc:a9:71:29:
                    e1:07:68:ea:5d:1a:f1:e3:f5:e3:f1:8a:8f:51:99:
                    41:f8:3b:d2:80:29:0a:c8:1b:be:2b:c2:df:01:ec:
                    22:26:8b:23:2e:a0:7a:0a:2e:99:eb:10:4b:6b:a8:
                    e9:7e:e7:99:66:ff:06:a5:d8:41:80:84:13:85:d8:
                    17:dc:86:03:a8:52:6b:ae:eb:7a:11:75:54:8d:d9:
                    d6:69:85:4e:c5:fb:1a:f3:5b:70:cc:78:ad:f6:e8:
                    d3:cf:75:ee:71:6b:27:20:3e:81:4f:a2:62:67:d1:
                    7d:78:9e:a9:52:ab:68:2d:ee:24:93:6d:4c:3a:3a:
                    56:47:74:e4:62:cd:9b:95:72:ae:e2:c9:4a:48:84:
                    cc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:56:D8:65:C9:A1:26:96:98:B2:37:4D:8E:96:BB:4D:C3:A4:36:42
            X509v3 Authority Key Identifier:
                keyid:23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:00:56:7b:0c:42:c8:04:78:a9:be:c4:12:65:1a:55:e7:01:
         9f:92:a4:45:ee:eb:8a:d0:f5:fb:de:f0:a1:3c:10:6f:36:b2:
         d5:0c:aa:9a:ea:1e:bb:89:e4:b0:c9:15:a1:d1:6d:92:52:d3:
         83:8f:73:72:a6:d1:ca:6b:c9:4a:65:40:04:fc:43:97:87:5a:
         f4:ec:0d:4c:28:a4:ff:91:a2:3b:7e:63:9c:a9:5d:1c:5a:3a:
         12:02:1e:65:d2:98:04:ae:e4:ee:26:a3:3c:ed:6d:2e:d9:67:
         f7:14:2a:65:b4:dd:a8:aa:b1:c5:ee:2e:1d:57:93:e0:64:a1:
         d6:3f:3f:b4:45:2b:cb:e4:2d:d8:d5:c7:29:b8:1c:ac:ef:7d:
         c9:f7:ac:d6:62:fd:41:52:fe:b8:ae:2c:55:22:75:59:72:74:
         41:54:73:7e:4d:4a:7e:ab:cd:c3:eb:37:10:f0:d1:29:82:e8:
         45:b9:07:6d:ee:44:21:77:25:ad:aa:3b:4b:70:7a:23:10:23:
         72:5f:63:45:da:3a:26:a4:5d:38:90:41:39:2b:d3:ab:6b:0e:
         d8:77:80:e0:ad:38:f0:40:40:a7:fa:cb:10:86:32:b1:26:28:
         59:0a:93:b5:63:a0:93:5e:a8:21:cd:af:f2:84:63:96:8b:da:
         76:5c:a7:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfYAYz9CYkE2lVPWVwn2T1TPnP5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjNBQ0E4MzlFQ0I0NkNDM0I1QkQ2Qzg2QkY2OTk3QzE4
RTgyNzdEQTAeFw0yNTA0MjgwNjU1NDBaFw0yNTA0MjkwOTI0NDBaMDMxMTAvBgNV
BAMTKDlDNTZEODY1QzlBMTI2OTY5OEIyMzc0RDhFOTZCQjREQzNBNDM2NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF4KIZWXhXeU/0gzRejVHI5LaV
W8cQSXUW6b/oFu4jYSheBvzsLnpXVcT+bkwpkaz8qej3U60b2GXonevlCQbads6r
RLPTE7pmR2x9Bklupb7urCgqgthgueA97uQu31QobOdbd7gRWouSetQ2+7DnxiK5
/KlxKeEHaOpdGvHj9ePxio9RmUH4O9KAKQrIG74rwt8B7CImiyMuoHoKLpnrEEtr
qOl+55lm/wal2EGAhBOF2BfchgOoUmuu63oRdVSN2dZphU7F+xrzW3DMeK326NPP
de5xaycgPoFPomJn0X14nqlSq2gt7iSTbUw6OlZHdORizZuVcq7iyUpIhMw1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnFbYZcmhJpaYsjdNjpa7TcOkNkIwHwYDVR0j
BBgwFoAUI6yoOey0bMO1vWyGv2mXwY6Cd9owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTJYYlp5VmJBUERZTkdrNmtNODVWRTNyMjRFakdhWDZ3WUNtUUZMdVo5
MlEvMC8yM0FDQTgzOUVDQjQ2Q0MzQjVCRDZDODZCRjY5OTdDMThFODI3N0RBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQUNBODM5RUNCNDZDQzNC
NUJENkM4NkJGNjk5N0MxOEU4Mjc3REEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QTJYYlp5VmJBUERZTkdrNmtNODVWRTNyMjRFakdhWDZ3WUNtUUZMdVo5MlEvMC8y
M0FDQTgzOUVDQjQ2Q0MzQjVCRDZDODZCRjY5OTdDMThFODI3N0RBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAegBWewxCyAR4qb7EEmUaVecBn5KkRe7ritD1+97woTwQbzay1Qyqmuoeu4nk
sMkVodFtklLTg49zcqbRymvJSmVABPxDl4da9OwNTCik/5GiO35jnKldHFo6EgIe
ZdKYBK7k7iajPO1tLtln9xQqZbTdqKqxxe4uHVeT4GSh1j8/tEUry+Qt2NXHKbgc
rO99yfes1mL9QVL+uK4sVSJ1WXJ0QVRzfk1KfqvNw+s3EPDRKYLoRbkHbe5EIXcl
rao7S3B6IxAjcl9jRdo6JqRdOJBBOSvTq2sO2HeA4K048EBAp/rLEIYysSYoWQqT
tWOgk16oIc2v8oRjlovadlyn1Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:35 2025 by rpki-client on console.sobornost.net