Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.mft
File:                     F5B3CC6963F291D11F0193BD27FC4E83D14592B9.mft (raw, json)
Hash identifier:          QbLblUVcrpZZL4BVPxpPbSbj9qDehnWXPw1xmJhnPLc=
Subject key identifier:   CF:F0:5A:8A:B3:C7:76:61:0D:F3:16:23:54:2C:AB:16:EC:71:47:B1
Authority key identifier: F5:B3:CC:69:63:F2:91:D1:1F:01:93:BD:27:FC:4E:83:D1:45:92:B9
Certificate issuer:       /CN=F5B3CC6963F291D11F0193BD27FC4E83D14592B9
Certificate serial:       792D9E7E312ACA13C30A0EE496BE9CB49B892831
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.mft
Manifest number:          024B
Signing time:             Mon 28 Apr 2025 03:20:00 +0000
Manifest this update:     Mon 28 Apr 2025 03:15:00 +0000
Manifest next update:     Tue 29 Apr 2025 03:20:00 +0000
Files and hashes:         1: 34352e3232392e3136342e302f32322d3234203d3e20323636323131.roa (hash: /y/94ilrU2B0FEiWde0MsSMx3bQUcxEBXoBGaW2/+io=)
                          2: 3139322e3134342e3130302e302f32322d3234203d3e20323636323131.roa (hash: ebjWxm47+yP42trmLuFCysPVKrlYd6DKPes9EjAwdo8=)
                          3: 323830343a336337303a3a2f33322d3335203d3e20323636323131.roa (hash: TGxkC4x1QDFzLxqOKO5TyGIsM5+ZdtWHFxQegUKFSTQ=)
                          4: F5B3CC6963F291D11F0193BD27FC4E83D14592B9.crl (hash: SuEKQeradbWizYD96VbUoBDi6Q9uCgOnxOA/oimVPeE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.crl
                          rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:2d:9e:7e:31:2a:ca:13:c3:0a:0e:e4:96:be:9c:b4:9b:89:28:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5B3CC6963F291D11F0193BD27FC4E83D14592B9
        Validity
            Not Before: Apr 28 03:15:00 2025 GMT
            Not After : Apr 29 03:20:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:69:7c:f2:13:ad:a1:cb:b4:47:67:ea:61:
                    82:fe:ab:04:9d:6f:af:4a:56:af:3f:dc:a1:c4:f5:
                    54:d7:7c:c2:e9:d7:bb:65:07:9d:14:d9:43:b1:72:
                    79:24:a7:90:7a:84:69:ac:ac:ba:21:60:d3:60:4d:
                    5c:e4:6f:0e:68:5c:1c:38:b7:cb:9b:ee:44:c1:63:
                    10:9c:8a:cb:7d:d7:03:3b:fa:63:fc:12:1d:3a:f5:
                    7b:50:b9:c1:f9:e6:e3:41:37:87:49:89:4d:2a:3d:
                    c0:34:68:dd:c3:3b:dc:27:f2:6d:32:64:f3:6a:c5:
                    63:8d:f2:d9:f1:0f:79:0e:ef:5b:c6:f8:a5:a5:6a:
                    6f:09:61:9e:11:74:74:19:7c:8a:bb:c9:82:6c:26:
                    ad:b4:7a:ea:91:bc:02:4f:12:af:9f:61:ca:2a:fe:
                    94:a2:04:c7:28:cc:bb:d3:03:04:8a:fc:15:c1:90:
                    db:2b:5c:6d:c4:5f:37:43:91:42:bc:50:d2:13:e1:
                    05:a0:3d:90:95:23:f0:89:06:85:eb:8e:e0:02:9a:
                    b6:99:70:92:b6:b8:7f:40:31:3e:a9:f7:cd:0b:89:
                    d4:5a:62:26:ff:43:f3:74:e9:e8:c3:f9:75:2b:46:
                    84:8b:a0:0f:14:73:42:9e:be:3f:17:09:b8:0d:bb:
                    3f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F0:5A:8A:B3:C7:76:61:0D:F3:16:23:54:2C:AB:16:EC:71:47:B1
            X509v3 Authority Key Identifier:
                keyid:F5:B3:CC:69:63:F2:91:D1:1F:01:93:BD:27:FC:4E:83:D1:45:92:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:8a:46:6f:bc:4b:41:32:a4:63:2f:a4:cc:4c:a3:a4:42:e6:
         0e:5f:6d:6e:02:5e:be:dc:b8:f6:ac:91:2f:88:cf:82:e8:c5:
         1c:11:6b:ac:4f:73:fb:50:25:16:65:51:0e:c0:6c:cd:af:68:
         23:d2:b8:8f:06:20:46:5a:35:51:8f:b5:e0:61:b4:2d:23:25:
         61:ce:d8:0d:7a:94:7b:1b:a8:10:59:4e:f6:08:5f:dc:44:eb:
         27:59:2c:30:7a:ac:ca:24:47:a8:03:c3:f1:6a:0e:5c:e7:49:
         5e:bd:af:c3:bf:d2:14:bd:dc:13:8c:27:5b:9f:6f:0c:41:4a:
         93:68:5b:3a:7f:3a:0e:c0:01:42:2b:89:10:29:72:c3:4a:ca:
         c0:ce:d7:b9:b0:45:d1:44:26:22:68:a1:0d:ef:13:d3:6a:5a:
         f9:40:0f:20:35:47:d4:f9:8a:0c:bd:1a:ab:4c:94:c6:66:33:
         a0:af:69:09:e3:e3:58:51:51:0f:a8:0e:f0:44:2b:32:87:fa:
         b4:bc:32:35:c6:bf:8a:65:ca:8a:db:32:41:d4:97:98:86:82:
         91:2d:b1:a9:2f:4f:9c:a7:87:0e:7e:7f:5c:9c:ae:f8:f7:44:
         e0:2c:3a:6d:c4:34:db:bf:e3:65:ed:9c:e4:fd:0c:4a:86:83:
         3d:49:26:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:24 2025 by rpki-client on console.sobornost.net