Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft
File:                     120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft (raw, json)
Hash identifier:          E8Jm1OzOeYKOvw0DSQ4d+LiMxsuvp/KcCNf1FDl/dZk=
Subject key identifier:   5E:9C:C3:4A:68:98:87:73:58:20:38:FE:4E:01:CE:B0:72:24:DC:95
Authority key identifier: 12:0F:03:9C:87:2F:A2:AE:7F:DC:D1:D4:49:9C:40:11:CE:1A:5B:9E
Certificate issuer:       /CN=120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E
Certificate serial:       26F96899A78C80E7EF01F5EA482A2FCEB4DB96E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft
Manifest number:          B7
Signing time:             Sun 27 Apr 2025 14:29:02 +0000
Manifest this update:     Sun 27 Apr 2025 14:24:02 +0000
Manifest next update:     Mon 28 Apr 2025 16:06:02 +0000
Files and hashes:         1: 3138372e3130392e3131322e302f32322d3234203d3e20323732373533.roa (hash: w0qqFPXS1q1NP5A7+SdrqOfHPoWk++ZYHhgDw9+ls14=)
                          2: 323830343a383832343a3a2f33322d3332203d3e20323732373533.roa (hash: Z1e00J+pj3xgDu7l+bTC4iqXuYLvr6iGTUsPSS+TEdc=)
                          3: 120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.crl (hash: /hG7KUHOiBv3kEVQks9R201BUENpQXm2BO6h8/6mucM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.crl
                          rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f9:68:99:a7:8c:80:e7:ef:01:f5:ea:48:2a:2f:ce:b4:db:96:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E
        Validity
            Not Before: Apr 27 14:24:02 2025 GMT
            Not After : Apr 28 16:06:02 2025 GMT
        Subject: CN=5E9CC34A68988773582038FE4E01CEB07224DC95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b4:4e:d2:59:bf:e4:8c:05:d9:30:ac:f0:81:
                    57:24:26:a9:6a:36:ed:b7:43:59:6a:af:20:5a:13:
                    28:81:29:76:46:cd:e6:47:60:46:1e:56:b2:65:8c:
                    f9:d6:a8:da:36:f6:16:40:f4:bc:04:67:1f:96:97:
                    1a:07:39:3e:28:9c:e2:15:1e:dd:54:bd:17:92:bf:
                    9e:43:20:f0:c3:85:6e:9e:b6:f3:6b:47:63:92:4c:
                    a5:6a:95:73:a3:ca:94:1b:24:f6:94:22:fb:09:5d:
                    8e:77:e2:51:99:3c:97:d5:d1:d1:a0:f4:27:a5:d6:
                    55:00:5c:fd:d5:b1:0c:5b:b1:56:63:5a:94:68:c2:
                    3c:3f:80:c5:6c:2f:68:b8:8e:78:db:3f:2d:81:40:
                    ab:12:3d:b7:b9:40:f1:ed:fd:ac:d9:34:36:df:66:
                    f2:f5:a5:a2:6c:0d:a8:0b:af:9c:f5:aa:20:9e:00:
                    ca:78:ae:ef:28:85:79:23:72:fe:a0:d8:89:16:c1:
                    45:5e:c8:65:8d:15:39:86:4f:3c:a2:05:1c:d4:77:
                    9b:8e:0e:7e:56:cd:93:16:6a:d8:ca:b2:be:6d:11:
                    2a:c0:26:15:e0:43:c2:64:6f:b3:b2:62:f3:c1:9b:
                    ca:80:c6:41:3f:94:e1:a9:fd:32:72:11:29:80:2f:
                    92:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9C:C3:4A:68:98:87:73:58:20:38:FE:4E:01:CE:B0:72:24:DC:95
            X509v3 Authority Key Identifier:
                keyid:12:0F:03:9C:87:2F:A2:AE:7F:DC:D1:D4:49:9C:40:11:CE:1A:5B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:c1:96:14:a4:88:da:1d:53:4b:e7:8b:6d:d3:21:2b:bf:fa:
         12:71:ef:da:b8:29:58:36:ca:18:22:3a:4d:ce:81:80:07:2a:
         d5:37:1e:16:99:38:b1:ae:73:bd:5b:99:de:c4:e7:a8:7d:6e:
         69:83:95:84:b6:4b:7e:53:8d:23:22:6d:94:62:ab:06:6e:96:
         ff:65:ec:76:74:22:5b:d1:3d:1b:ea:ad:33:a9:2c:7a:7f:99:
         51:0e:82:ae:f8:f5:ef:bc:52:b1:05:a5:42:fb:f7:76:bb:8a:
         33:fe:c1:c3:62:27:96:d6:1c:af:a9:98:b1:71:9f:aa:28:a9:
         eb:cb:35:b5:c1:f8:7a:b7:00:ce:87:21:e3:69:57:55:66:60:
         40:7f:8d:08:a7:49:ec:a7:4e:e6:2c:81:c4:0d:97:09:90:7d:
         b3:2a:e2:8c:a4:eb:88:e6:e9:22:ce:41:61:ea:ab:2a:90:2c:
         c0:9a:27:ce:fb:b7:19:ff:92:17:b3:e5:99:5b:c3:16:92:00:
         9c:e0:6f:d0:17:06:a8:79:1c:df:25:50:fc:ab:34:b9:eb:88:
         b0:d9:6b:22:2a:1d:f2:69:3c:33:ed:3e:9f:44:58:a0:92:58:
         a0:c3:e5:04:0b:d6:b1:3f:6f:bc:d6:ac:0e:4b:2a:eb:b8:95:
         93:14:6f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:05 2025 by rpki-client on console.sobornost.net