Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft
File:                     31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft (raw, json)
Hash identifier:          fWt+zj/7goMtA+tAsbyzJNxW+JhsZIt2SV05Dpe3r1I=
Subject key identifier:   F2:5A:64:56:FF:4A:B7:42:88:4C:67:26:E6:06:8E:7F:A2:18:B5:F9
Authority key identifier: 31:AE:EE:52:73:A3:1C:20:77:C2:F9:57:CF:5A:2C:2D:24:07:50:E3
Certificate issuer:       /CN=31AEEE5273A31C2077C2F957CF5A2C2D240750E3
Certificate serial:       4C33627418F4F276F5B27DBBF4C124F48B904DA5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft
Manifest number:          0209
Signing time:             Mon 28 Apr 2025 13:28:59 +0000
Manifest this update:     Mon 28 Apr 2025 13:23:59 +0000
Manifest next update:     Tue 29 Apr 2025 13:53:59 +0000
Files and hashes:         1: 3230312e3231362e3132342e302f32322d3332203d3e20323730333034.roa (hash: sfnLaTHDQS9Ygt/qvSr8vquvrC5x88RVTot0u1y0wjs=)
                          2: 323830343a363966633a3a2f33322d313238203d3e20323730333034.roa (hash: mCWseisLBFmCaMIAICO1RASOUVqA8VtzNh9BsMwSD1Q=)
                          3: 31AEEE5273A31C2077C2F957CF5A2C2D240750E3.crl (hash: OB0B2LBpBaCAmnEc4ajkXGVJPVuu8gcveXc0TbevPMo=)
                          4: 3230312e3231362e3132372e302f32342d3332203d3e20323733343538.roa (hash: Mh6mp2NI59RQVoXN3aFVokMT6fJWu85UdtTFNII0mpc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.crl
                          rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 13:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:33:62:74:18:f4:f2:76:f5:b2:7d:bb:f4:c1:24:f4:8b:90:4d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31AEEE5273A31C2077C2F957CF5A2C2D240750E3
        Validity
            Not Before: Apr 28 13:23:59 2025 GMT
            Not After : Apr 29 13:53:59 2025 GMT
        Subject: CN=F25A6456FF4AB742884C6726E6068E7FA218B5F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ad:36:24:ba:5a:22:62:ec:b5:62:f1:49:d8:
                    48:3f:aa:8b:d5:58:0e:75:1a:1c:2e:39:e8:30:b4:
                    ca:88:03:05:50:fc:39:78:5d:79:af:f8:ea:57:b5:
                    b5:ed:2f:97:61:03:8e:eb:d9:ce:5a:d2:ae:b0:0c:
                    bd:23:46:59:f0:4d:b3:ae:62:0f:fb:7f:67:be:7c:
                    e4:eb:9d:eb:06:3b:b0:69:10:af:cc:c6:f7:f9:6b:
                    48:19:0a:2a:8b:10:c4:e1:02:cb:77:77:87:14:c0:
                    9b:c3:c6:d1:bb:0a:97:83:73:f9:30:9f:cb:bd:1c:
                    59:d2:a1:c6:b5:6a:af:65:f6:94:57:15:ce:fc:8b:
                    f9:8d:d8:d7:c1:87:00:71:5b:8f:2b:30:74:7a:0c:
                    16:29:65:d4:5c:cd:2b:5b:c9:21:5d:92:46:8d:7b:
                    5a:40:c8:fd:0a:c7:d6:80:a7:37:7a:5c:f2:7a:40:
                    ff:c2:29:51:83:23:04:38:f3:44:d6:84:e1:cd:a8:
                    a1:79:7c:81:cc:23:5e:ee:4f:ac:5c:6a:cc:55:f9:
                    56:39:66:03:35:47:ef:a1:d6:a6:0c:52:8c:c5:d3:
                    9f:b3:c5:2c:e5:01:79:2a:52:e7:16:f9:4c:10:ab:
                    08:da:27:e2:ac:0a:fc:ca:f9:73:28:70:04:9f:34:
                    bf:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5A:64:56:FF:4A:B7:42:88:4C:67:26:E6:06:8E:7F:A2:18:B5:F9
            X509v3 Authority Key Identifier:
                keyid:31:AE:EE:52:73:A3:1C:20:77:C2:F9:57:CF:5A:2C:2D:24:07:50:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:f1:84:54:3f:de:64:ea:04:71:f1:e4:7d:ea:8e:17:4e:c8:
         f1:4a:43:16:b5:24:97:17:46:d7:d3:02:19:ca:86:37:cb:7c:
         1c:9e:0f:a7:cb:be:7b:a5:50:e9:f9:03:7e:5d:d8:68:b9:3d:
         0c:a0:b2:46:7d:4c:be:3d:84:73:8b:91:f1:27:fe:8f:1c:c9:
         3a:d4:04:e6:df:f7:54:b9:32:a5:86:ed:4f:2e:eb:a0:38:3c:
         1b:50:91:be:82:95:9d:dc:25:1f:e8:b1:d7:63:c9:b9:1e:e2:
         2a:45:98:7e:4d:df:e7:93:c8:92:d9:91:99:e4:b5:66:6f:a7:
         ef:0a:5f:e1:ff:f4:30:c7:c2:1a:1c:72:fd:5f:5c:24:e8:68:
         ee:12:a7:3b:8e:19:cf:8d:a4:eb:a0:ea:fa:18:db:f1:ff:25:
         ce:8f:44:9f:0b:ac:0d:5c:d7:b5:55:2e:4f:e6:b1:8f:9d:bb:
         3e:fa:1d:cf:eb:2f:cb:55:0c:14:1c:24:e9:8b:37:89:31:59:
         52:08:90:78:95:d0:d5:9d:db:59:59:b2:a5:8a:50:46:23:7c:
         09:84:70:3e:42:11:24:9b:89:e1:44:69:c3:55:7b:ef:70:d9:
         19:7d:5b:59:d3:91:80:ba:df:9e:84:30:fd:dc:43:b6:63:d7:
         98:fb:7f:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTDNidBj08nb1sn279MEk9IuQTaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzFBRUVFNTI3M0EzMUMyMDc3QzJGOTU3Q0Y1QTJDMkQy
NDA3NTBFMzAeFw0yNTA0MjgxMzIzNTlaFw0yNTA0MjkxMzUzNTlaMDMxMTAvBgNV
BAMTKEYyNUE2NDU2RkY0QUI3NDI4ODRDNjcyNkU2MDY4RTdGQTIxOEI1RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5rTYkuloiYuy1YvFJ2Eg/qovV
WA51GhwuOegwtMqIAwVQ/Dl4XXmv+OpXtbXtL5dhA47r2c5a0q6wDL0jRlnwTbOu
Yg/7f2e+fOTrnesGO7BpEK/Mxvf5a0gZCiqLEMThAst3d4cUwJvDxtG7CpeDc/kw
n8u9HFnSoca1aq9l9pRXFc78i/mN2NfBhwBxW48rMHR6DBYpZdRczStbySFdkkaN
e1pAyP0Kx9aApzd6XPJ6QP/CKVGDIwQ480TWhOHNqKF5fIHMI17uT6xcasxV+VY5
ZgM1R++h1qYMUozF05+zxSzlAXkqUucW+UwQqwjaJ+KsCvzK+XMocASfNL99AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU8lpkVv9Kt0KITGcm5gaOf6IYtfkwHwYDVR0j
BBgwFoAUMa7uUnOjHCB3wvlXz1osLSQHUOMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTdKb0pZRVFFdFcxZjVlS2paRVpnTDE5YjRnTnBwdzRZcktTOXNkeDg3
S0wvMS8zMUFFRUU1MjczQTMxQzIwNzdDMkY5NTdDRjVBMkMyRDI0MDc1MEUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxQUVFRTUyNzNBMzFDMjA3
N0MyRjk1N0NGNUEyQzJEMjQwNzUwRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QTdKb0pZRVFFdFcxZjVlS2paRVpnTDE5YjRnTnBwdzRZcktTOXNkeDg3S0wvMS8z
MUFFRUU1MjczQTMxQzIwNzdDMkY5NTdDRjVBMkMyRDI0MDc1MEUzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXvGEVD/eZOoEcfHkfeqOF07I8UpDFrUklxdG19MCGcqGN8t8HJ4Pp8u+e6VQ
6fkDfl3YaLk9DKCyRn1Mvj2Ec4uR8Sf+jxzJOtQE5t/3VLkypYbtTy7roDg8G1CR
voKVndwlH+ix12PJuR7iKkWYfk3f55PIktmRmeS1Zm+n7wpf4f/0MMfCGhxy/V9c
JOho7hKnO44Zz42k66Dq+hjb8f8lzo9EnwusDVzXtVUuT+axj527Pvodz+svy1UM
FBwk6Ys3iTFZUgiQeJXQ1Z3bWVmypYpQRiN8CYRwPkIRJJuJ4URpw1V773DZGX1b
WdORgLrfnoQw/dxDtmPXmPt/3g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:09 2025 by rpki-client on console.sobornost.net