Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.mft
File:                     2109BE321BAA489853B95DD9EB2882D4F824F0F2.mft (raw, json)
Hash identifier:          +uUEvsHcFg1hMpjJrFkZ52dzf82l2+Yh8sh3ml8dvQU=
Subject key identifier:   71:EF:08:BE:FC:87:37:B2:AC:19:90:89:C0:0F:EA:6A:E7:93:9A:07
Authority key identifier: 21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2
Certificate issuer:       /CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
Certificate serial:       758C35C3CDAA366903E806B6DB8469A176935743
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.mft
Manifest number:          020B
Signing time:             Mon 28 Apr 2025 20:42:23 +0000
Manifest this update:     Mon 28 Apr 2025 20:37:23 +0000
Manifest next update:     Tue 29 Apr 2025 22:31:23 +0000
Files and hashes:         1: 323830343a353737633a3a2f33332d3333203d3e20323638303638.roa (hash: 1yQHJ1CrblWY7NoUFPBhpqn0RFxEI4hPFV7m8xxoymI=)
                          2: 34352e3136382e3138332e302f32342d3234203d3e20323638303638.roa (hash: IjBKMn9uKe2n9yI+2BZ0dU1ddOVCNkrS6LUfwhTE0NA=)
                          3: 34352e3136382e3138312e302f32342d3234203d3e20323638303638.roa (hash: abafNPKxwihiWHcj+NJ/3NmGND9ZG3TPk4/RXF2u8Fk=)
                          4: 323830343a353737633a3a2f33322d3332203d3e20323638303638.roa (hash: DvmJCOWPHXagel9CfX8RyHdJGRPBHJ/A6Tb4k9j56xw=)
                          5: 2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl (hash: ylqdt9vaAN+TWnHUc4YDVs3VR9eyGzj5lClGjZbWG9s=)
                          6: 323830343a353737633a313030303a3a2f33362d3336203d3e20323638303638.roa (hash: gdX68l6ZW3RH6CXWSJwGQrWKYdgN0LyivIYKSmPFcnM=)
                          7: 34352e3136382e3138302e302f32332d3233203d3e20323638303638.roa (hash: zD5RDA7sRBlavYHdp1eRfhinpK9NHXTSLW0P+QLAC4Q=)
                          8: 323830343a353737633a3a2f33362d3336203d3e20323638303638.roa (hash: d56EFAi5BQv5yqjSFnY2q2wMEmsHxWBTfNqeoEqQPe8=)
                          9: 323830343a353737633a313230303a3a2f34302d3430203d3e20323638303638.roa (hash: OLU9WR+I5HcSTg7ERtXxFiCwPVWhH1LMxPofxOneXvw=)
                          10: 34352e3136382e3138322e302f32342d3234203d3e20323638303638.roa (hash: Ljv7HH2TilEEvI2cbd8R87/DSu2DWbYf4aEcYAgURvA=)
                          11: 323830343a353737633a383030303a3a2f33332d3333203d3e20323638303638.roa (hash: yjhwLRX+WZP5iik0MBKJsNEJwiwm86szrNpkv8o4mIM=)
                          12: 34352e3136382e3138302e302f32322d3232203d3e20323638303638.roa (hash: D0Uoi0aZ9RHHVfDoRC6u4UciSF2YxK6+tCSePSg0Y9A=)
                          13: 34352e3136382e3138322e302f32332d3233203d3e20323638303638.roa (hash: 6xGtzLH2buZOXMAu1Rebz86PBC2KYNQ12oTxuCXeUWo=)
                          14: 323830343a353737633a313130303a3a2f34302d3430203d3e20323638303638.roa (hash: qMO2zBmhLA9ty6I7lvFvONJCOoUHAHJbTINJqP9fshc=)
                          15: 34352e3136382e3138302e302f32342d3234203d3e20323638303638.roa (hash: A6RCDa53XFzC3sYNamI7sZPQgCw8/DVKPpjhXt1J6Gc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl
                          rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8c:35:c3:cd:aa:36:69:03:e8:06:b6:db:84:69:a1:76:93:57:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
        Validity
            Not Before: Apr 28 20:37:23 2025 GMT
            Not After : Apr 29 22:31:23 2025 GMT
        Subject: CN=71EF08BEFC8737B2AC199089C00FEA6AE7939A07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a3:b6:43:4c:6c:c6:75:d5:e3:67:ab:be:a0:
                    2b:d1:6a:56:b6:2b:b7:65:59:68:0a:ac:64:fe:8d:
                    cf:1b:d1:5a:10:eb:81:e1:cb:95:0a:0c:17:51:6f:
                    27:c2:90:cc:6e:b4:d8:46:45:f3:4c:88:cb:14:bf:
                    89:04:9e:54:e6:99:fa:0f:05:7d:73:27:af:be:26:
                    76:7f:39:42:20:40:2a:9f:6c:aa:23:b1:06:45:39:
                    1d:45:ee:2a:2c:9f:83:b8:72:71:fc:06:22:95:7d:
                    75:35:f9:a4:c5:fb:04:81:da:bc:94:13:28:b5:ae:
                    09:fd:1b:df:0c:55:84:97:c6:f6:b7:60:44:e9:c6:
                    a8:9a:df:1b:30:d6:4b:58:83:ed:0f:35:d4:94:51:
                    c2:66:7d:f1:29:5c:53:b4:21:98:17:8f:85:27:20:
                    e2:3c:7c:db:95:5a:c4:23:54:81:19:2e:ef:61:2b:
                    b1:8c:22:03:87:70:1f:19:8f:5c:20:e9:52:09:8d:
                    5e:12:cb:15:ce:1e:22:f3:d4:73:8e:60:76:fe:f2:
                    f9:c9:b7:2b:36:14:c1:7a:78:91:16:1c:4f:db:a0:
                    63:4f:5e:9e:39:eb:d2:39:a9:89:c8:23:74:11:56:
                    c0:c7:93:76:48:12:b4:99:4b:fa:0f:05:39:27:c3:
                    d7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EF:08:BE:FC:87:37:B2:AC:19:90:89:C0:0F:EA:6A:E7:93:9A:07
            X509v3 Authority Key Identifier:
                keyid:21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b4:e8:51:a4:af:7d:6b:7e:69:61:8b:a5:89:74:14:66:64:
         aa:68:92:58:38:2b:13:df:dd:cc:47:5a:3e:8a:41:b8:18:4f:
         89:96:ec:b3:37:68:3d:2b:33:60:b9:63:2d:85:9d:fe:80:e9:
         35:6f:89:d3:c3:27:f5:64:8b:fd:73:05:4c:b0:ea:bf:1a:48:
         88:25:16:78:07:96:d4:02:71:b8:f4:4e:9a:ad:b4:7b:d7:5e:
         c1:b3:27:31:34:fa:1f:5b:7f:ec:44:23:49:11:fa:c5:96:c1:
         ee:18:54:0b:88:e6:94:9c:e3:49:41:b6:d4:e1:e1:9e:7a:e2:
         6c:52:67:d2:f0:2a:10:25:f2:7d:01:ad:c0:62:92:05:72:42:
         b4:4e:58:2a:a4:d0:14:27:94:c0:9f:a1:bb:53:21:3f:9d:cd:
         a6:30:e7:5d:94:c0:c5:08:c4:15:88:b4:32:b5:75:bc:1e:01:
         5a:88:14:91:a0:e1:c0:a4:a6:a3:d9:f0:11:9c:0a:0d:72:8f:
         ae:3f:3f:5d:02:b2:8a:50:ac:65:ac:58:00:ab:91:7b:d6:d5:
         10:35:2f:8a:57:65:f2:8c:94:79:45:15:ff:d3:c1:2d:95:1e:
         4c:6b:ec:99:22:ba:f3:a9:57:07:dd:b8:43:3e:28:94:6a:82:
         15:4b:15:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:02 2025 by rpki-client on console.sobornost.net