Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ASqXDW4ngc6P5toqAzrnt63GRDbuhcDVPZn1yP1eSVXF/1/915ECA06E18624E9B2A7BDE729503B7ACD819F05.mft
File:                     915ECA06E18624E9B2A7BDE729503B7ACD819F05.mft (raw, json)
Hash identifier:          c8IzAobCFNWMwd+cg+Ct5zUtGcKpQu2zpb/DIHsyblY=
Subject key identifier:   F5:AC:38:5A:11:C7:D3:95:3E:51:E8:4D:77:5D:91:90:F0:4A:53:82
Authority key identifier: 91:5E:CA:06:E1:86:24:E9:B2:A7:BD:E7:29:50:3B:7A:CD:81:9F:05
Certificate issuer:       /CN=915ECA06E18624E9B2A7BDE729503B7ACD819F05
Certificate serial:       09D6D242035AD66C411F355E022B1BB57C4B90BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/915ECA06E18624E9B2A7BDE729503B7ACD819F05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ASqXDW4ngc6P5toqAzrnt63GRDbuhcDVPZn1yP1eSVXF/1/915ECA06E18624E9B2A7BDE729503B7ACD819F05.mft
Manifest number:          0208
Signing time:             Mon 28 Apr 2025 07:39:47 +0000
Manifest this update:     Mon 28 Apr 2025 07:34:47 +0000
Manifest next update:     Tue 29 Apr 2025 11:23:47 +0000
Files and hashes:         1: 323830343a373032343a3a2f33322d3438203d3e20323730373038.roa (hash: mF2TRuTozPIh4dLfUqurOlJtczgibJsIPp/i2symu2o=)
                          2: 3138392e3132372e3136302e302f32322d3234203d3e20323730373038.roa (hash: mCSWeVwzFWuBhx0Na/Oy4YQ/SbQkQi9zSxdRSSb+cDc=)
                          3: 915ECA06E18624E9B2A7BDE729503B7ACD819F05.crl (hash: CHyj+pDX8jZs2YsnAtK2EI8R5m/zxZBZTI12pnubsF0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ASqXDW4ngc6P5toqAzrnt63GRDbuhcDVPZn1yP1eSVXF/1/915ECA06E18624E9B2A7BDE729503B7ACD819F05.crl
                          rsync://rpki-repo.registro.br/repo/ASqXDW4ngc6P5toqAzrnt63GRDbuhcDVPZn1yP1eSVXF/1/915ECA06E18624E9B2A7BDE729503B7ACD819F05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/915ECA06E18624E9B2A7BDE729503B7ACD819F05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d6:d2:42:03:5a:d6:6c:41:1f:35:5e:02:2b:1b:b5:7c:4b:90:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=915ECA06E18624E9B2A7BDE729503B7ACD819F05
        Validity
            Not Before: Apr 28 07:34:47 2025 GMT
            Not After : Apr 29 11:23:47 2025 GMT
        Subject: CN=F5AC385A11C7D3953E51E84D775D9190F04A5382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:56:91:0b:23:00:ec:47:b3:aa:99:b8:0e:f6:
                    57:11:8d:74:2a:5d:eb:bc:b9:78:ba:d6:db:c9:63:
                    a9:8a:69:ec:1e:2a:71:d6:86:99:df:02:cc:3e:7f:
                    0d:40:4c:f5:72:52:7b:6d:ce:77:52:5e:63:2c:9f:
                    b3:3e:97:d0:71:77:4c:fb:8e:3d:c5:fc:2e:01:ab:
                    49:11:60:6b:e4:c1:fd:72:26:92:db:be:ce:bb:6f:
                    47:4a:80:74:5a:65:e0:7b:be:6f:e4:24:1d:2f:fd:
                    5c:d6:16:7c:f6:60:99:28:1f:e3:ea:5a:7c:f3:22:
                    71:96:3d:10:49:fb:d2:03:b7:86:65:4f:e4:0d:44:
                    80:5e:e6:50:56:b4:40:85:e9:cc:1a:d0:34:7a:35:
                    7c:d1:04:97:41:c5:b9:9d:24:8e:b1:00:53:78:5a:
                    04:af:f5:89:81:85:82:32:50:c0:67:3a:7c:69:ab:
                    e4:59:f0:78:bc:d1:19:c9:5c:a9:f2:1c:17:73:2d:
                    db:f6:a8:ce:1b:fa:0c:b5:44:a9:cf:96:1f:8f:3f:
                    f2:c7:ec:c0:1c:30:16:21:cf:bd:f3:d8:7d:25:3a:
                    f8:af:76:c3:d3:56:e8:13:53:44:d9:86:71:d7:94:
                    54:bf:6e:f2:5e:73:62:e5:44:8f:ae:37:94:eb:fd:
                    6c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AC:38:5A:11:C7:D3:95:3E:51:E8:4D:77:5D:91:90:F0:4A:53:82
            X509v3 Authority Key Identifier:
                keyid:91:5E:CA:06:E1:86:24:E9:B2:A7:BD:E7:29:50:3B:7A:CD:81:9F:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ASqXDW4ngc6P5toqAzrnt63GRDbuhcDVPZn1yP1eSVXF/1/915ECA06E18624E9B2A7BDE729503B7ACD819F05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/915ECA06E18624E9B2A7BDE729503B7ACD819F05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ASqXDW4ngc6P5toqAzrnt63GRDbuhcDVPZn1yP1eSVXF/1/915ECA06E18624E9B2A7BDE729503B7ACD819F05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:40:b8:f2:e1:08:b6:dc:8a:1d:f9:af:78:48:a0:df:81:3d:
         93:1c:4f:69:c8:b8:a5:6e:a9:b4:b9:f7:78:8c:6d:7e:09:5b:
         23:ac:95:47:af:c3:a8:e4:68:f0:6a:5b:36:44:ad:90:37:cd:
         48:53:a7:c8:8f:01:51:72:82:ac:78:a3:a7:71:f3:db:d8:a0:
         7c:89:02:ad:a8:54:76:a1:06:a1:2c:60:c0:2b:a6:29:e4:00:
         2b:b4:a3:8e:b8:8c:6b:ca:f4:42:83:a5:3b:46:d0:d1:51:45:
         f7:8d:26:28:7c:68:a5:26:25:0f:11:e5:a8:60:ab:a2:20:e2:
         81:fb:1e:39:f7:d8:8f:98:4d:80:cd:17:d0:a5:1d:85:aa:8c:
         0a:d4:3e:4e:bc:89:52:a7:43:c1:84:13:43:56:bb:6f:3e:27:
         19:15:e0:df:d9:7a:b9:e9:04:31:2e:61:3f:91:76:ae:f2:69:
         ff:16:43:43:57:b5:4a:1f:8a:78:69:55:ee:09:f8:37:d1:c9:
         5f:b2:3c:d2:47:0c:1d:69:04:33:69:77:5d:60:fc:bf:81:c7:
         8e:a5:54:f3:ee:94:15:3e:fb:0f:86:76:b5:2c:d6:29:ee:ac:
         40:cd:23:4e:e5:be:90:36:13:f9:75:27:13:c3:56:90:7c:17:
         b3:e6:52:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:27 2025 by rpki-client on console.sobornost.net