Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft
File:                     D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft (raw, json)
Hash identifier:          zJssVB/tAOj59Gk8mGklX8XAqiDix6LJ72cWJoS3B00=
Subject key identifier:   1C:9F:77:A1:4C:82:B2:34:3B:C5:50:AD:79:38:10:E7:00:84:39:50
Authority key identifier: D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38
Certificate issuer:       /CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
Certificate serial:       691FFA63AEB039427953FAB9D725198EE8FE5EA7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft
Manifest number:          0213
Signing time:             Mon 28 Apr 2025 09:35:09 +0000
Manifest this update:     Mon 28 Apr 2025 09:30:09 +0000
Manifest next update:     Tue 29 Apr 2025 12:53:09 +0000
Files and hashes:         1: 323830343a326439343a3a2f33322d3334203d3e20323635323930.roa (hash: kWy+KFGUaAZrPS5L1uMSNk7nabZrJmPBwwbdk2M3D+k=)
                          2: 323830343a326439343a666130303a3a2f34302d3430203d3e20323635323930.roa (hash: pVjdYkbfOeXKElM1eDSGlFmdTQYSiNTkXdOOeJ1wb3o=)
                          3: 3136382e39302e3230362e302f32332d3234203d3e20323635323930.roa (hash: 5Kz92E7dmaGiDvn5OQF7P48AohtTTO3u/CgOdAlXJOk=)
                          4: 3136382e39302e3230342e302f32332d3234203d3e20323635323930.roa (hash: sOqje+t86gHWEq91Nahf6waLG/Bt67tz7Ty3X7VmiO4=)
                          5: D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl (hash: gKCNLOACUw39F/We8dO/3AOfvvicGEAVUPo/XVZjepk=)
                          6: 3136382e39302e3230342e302f32322d3232203d3e20323635323930.roa (hash: ZU9KvqVGm8P3mgQ79bZVqEr6CzwEvUL9dvZSWmDkOZI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl
                          rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:1f:fa:63:ae:b0:39:42:79:53:fa:b9:d7:25:19:8e:e8:fe:5e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
        Validity
            Not Before: Apr 28 09:30:09 2025 GMT
            Not After : Apr 29 12:53:09 2025 GMT
        Subject: CN=1C9F77A14C82B2343BC550AD793810E700843950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:54:da:30:d7:7f:a7:48:41:28:51:01:04:98:
                    0e:8e:4b:56:cd:aa:10:50:f3:84:92:3a:fa:d6:a6:
                    2e:ff:82:ec:54:0f:45:fa:0a:80:a5:fe:c7:62:83:
                    9f:79:f7:d0:f1:aa:a1:14:7a:8f:9d:bf:36:73:0a:
                    9c:ce:97:38:35:ce:1f:e2:0e:fe:0f:29:6c:9a:56:
                    67:2f:70:4b:bf:fc:0a:54:4d:19:5f:b4:a0:d4:d6:
                    d6:e5:e9:fa:15:7d:29:11:36:ec:5b:c3:5a:5d:82:
                    60:5a:d7:59:f0:47:8a:c2:e3:cb:09:ce:e1:54:2d:
                    96:9e:62:80:14:ca:93:c4:01:61:16:e4:b4:d4:e3:
                    56:5f:f6:89:4b:fd:e3:8b:9e:73:cb:12:89:d6:4d:
                    fb:2d:c7:3d:26:17:e3:5b:7f:c2:6d:29:48:3f:e5:
                    f6:05:7e:7d:6d:1e:52:d4:57:29:30:7a:78:d1:81:
                    39:f4:a9:31:41:a7:09:40:d3:11:8e:f3:85:23:bb:
                    25:43:07:88:e9:32:2b:7a:69:61:59:9b:a0:5a:ef:
                    12:77:3b:c6:50:dc:ca:87:17:94:c1:03:62:54:3f:
                    87:22:86:88:28:4f:ac:cc:e3:de:7b:7e:80:17:e7:
                    bc:5f:d9:25:00:9f:b3:7c:aa:fb:b5:b2:bc:2f:45:
                    bb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9F:77:A1:4C:82:B2:34:3B:C5:50:AD:79:38:10:E7:00:84:39:50
            X509v3 Authority Key Identifier:
                keyid:D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:6e:9b:68:8d:6e:94:2d:1b:25:0e:6b:54:80:5c:12:86:2c:
         c5:5e:1a:eb:54:65:78:6e:60:11:29:ca:78:73:53:2a:c4:24:
         48:3f:0c:2f:51:c3:70:14:e2:43:6d:2f:f3:20:34:83:1b:0b:
         15:ef:a0:e3:f5:11:89:47:44:47:77:92:79:70:f3:a7:14:d2:
         f1:30:57:eb:ed:53:02:b3:3b:a1:4b:b7:39:e8:84:21:9e:2f:
         13:cb:77:13:8f:fe:50:50:68:1c:d2:af:cf:0f:42:ad:53:47:
         e3:91:38:a3:43:77:20:63:6b:79:95:ec:2a:94:11:56:70:5b:
         e3:24:d5:b4:f6:c4:91:62:a1:6f:df:f2:b0:87:a2:c9:35:d1:
         46:6c:e8:97:26:db:5d:ff:fd:90:0f:04:d1:ac:a4:06:ee:09:
         f5:bd:9d:97:29:19:64:83:59:f5:03:aa:4c:58:53:60:58:1e:
         06:88:90:6c:66:75:ab:59:85:45:32:cf:9f:f2:1e:b9:33:ed:
         b8:1a:be:b0:8d:e6:d8:e1:a0:c6:ad:3b:a7:06:57:32:85:41:
         07:17:4c:24:77:69:41:ca:cc:ee:01:5f:00:96:79:0e:71:49:
         a6:88:50:0b:8f:88:a7:90:07:e9:66:9e:15:13:9c:3d:55:65:
         27:16:dc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:58 2025 by rpki-client on console.sobornost.net