Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/98EA20A009301C2358E08E395002F34F079AC9D0.mft
File:                     98EA20A009301C2358E08E395002F34F079AC9D0.mft (raw, json)
Hash identifier:          gQ6RniZW0/M/kNzJCVMJzVcTU8akJlB5r9hnc3/Eo+Q=
Subject key identifier:   38:E0:D1:77:40:04:71:2D:A9:AC:B3:D2:DF:65:A4:9B:2B:9E:61:18
Authority key identifier: 98:EA:20:A0:09:30:1C:23:58:E0:8E:39:50:02:F3:4F:07:9A:C9:D0
Certificate issuer:       /CN=98EA20A009301C2358E08E395002F34F079AC9D0
Certificate serial:       473916E912F0437BE28D0D7515509B11BBD84AF3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98EA20A009301C2358E08E395002F34F079AC9D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/98EA20A009301C2358E08E395002F34F079AC9D0.mft
Manifest number:          0208
Signing time:             Mon 28 Apr 2025 14:11:06 +0000
Manifest this update:     Mon 28 Apr 2025 14:06:06 +0000
Manifest next update:     Tue 29 Apr 2025 17:05:06 +0000
Files and hashes:         1: 34352e3138332e3131322e302f32322d3234203d3e20323639323836.roa (hash: CZZEDVHduUUEBthIPvdRuTnZE46NaFhsPK5hlYKeCDo=)
                          2: 98EA20A009301C2358E08E395002F34F079AC9D0.crl (hash: zYGY3nPkexAy5VZqJk8ck3EJaxiNEq0U+FiQFVvaT0I=)
                          3: 323830343a363234303a3a2f33322d3438203d3e20323639323836.roa (hash: OpCaSDNWIkJJX1q6+UuMG93CxmavK5wHmbySPC6n2WY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/98EA20A009301C2358E08E395002F34F079AC9D0.crl
                          rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/98EA20A009301C2358E08E395002F34F079AC9D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98EA20A009301C2358E08E395002F34F079AC9D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:39:16:e9:12:f0:43:7b:e2:8d:0d:75:15:50:9b:11:bb:d8:4a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98EA20A009301C2358E08E395002F34F079AC9D0
        Validity
            Not Before: Apr 28 14:06:06 2025 GMT
            Not After : Apr 29 17:05:06 2025 GMT
        Subject: CN=38E0D1774004712DA9ACB3D2DF65A49B2B9E6118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:05:42:d4:f8:09:79:70:9a:fa:c3:85:e2:fd:
                    9c:8e:e4:7b:9b:75:83:05:1e:2e:a3:56:48:23:12:
                    f4:96:c9:82:ac:20:10:ff:75:04:1c:71:a9:41:a4:
                    d2:5d:fe:cf:a5:72:d5:46:97:ce:9f:82:9a:f4:60:
                    53:c7:57:0f:bb:0c:a9:b0:5f:e7:93:73:f1:72:34:
                    73:72:dd:10:72:8c:f0:a2:43:c5:78:a9:fa:b5:90:
                    34:19:1e:b3:68:93:60:14:2b:8d:88:36:3b:0e:ad:
                    a5:e5:ac:4e:2a:74:3c:0e:7a:1f:80:11:6a:f7:49:
                    fb:8e:aa:5c:10:2d:78:ae:b5:b5:7b:1f:0d:89:3c:
                    b1:df:1d:f7:c4:07:50:c5:72:4c:fd:7c:f9:5e:22:
                    89:a2:a1:cb:19:6e:7b:ef:f6:02:3d:22:22:5e:a0:
                    2f:91:57:4b:81:da:ff:fb:24:33:5d:6d:63:dc:14:
                    47:2d:65:af:c0:c0:8c:25:e0:13:d1:ac:27:54:df:
                    e1:4a:21:19:28:09:2f:4d:ba:14:94:35:b3:3f:46:
                    a2:23:da:75:ad:c1:fc:16:32:3f:63:0a:07:86:34:
                    86:da:1e:a4:bd:ce:92:85:21:b6:39:5b:8a:43:cd:
                    b0:d0:84:fe:c9:e7:07:e3:dd:08:aa:93:67:e8:20:
                    56:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E0:D1:77:40:04:71:2D:A9:AC:B3:D2:DF:65:A4:9B:2B:9E:61:18
            X509v3 Authority Key Identifier:
                keyid:98:EA:20:A0:09:30:1C:23:58:E0:8E:39:50:02:F3:4F:07:9A:C9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/98EA20A009301C2358E08E395002F34F079AC9D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98EA20A009301C2358E08E395002F34F079AC9D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/98EA20A009301C2358E08E395002F34F079AC9D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:17:30:72:63:49:a0:5f:94:a2:73:b9:14:6c:ba:77:1c:91:
         e5:89:2f:95:50:90:02:0a:8a:28:a2:99:e4:68:c0:4c:2b:ee:
         90:ad:3e:a0:f7:a1:d8:16:ed:97:e0:40:b0:84:81:5f:78:b5:
         5f:41:13:8a:1d:65:8f:34:73:a6:11:fe:67:7c:6c:3d:5d:92:
         cd:52:67:93:51:9c:f3:c7:7a:12:0d:e8:58:b1:8d:71:cc:c1:
         b6:02:d5:e3:7e:99:b5:67:63:e5:eb:74:83:c4:ad:e0:9e:e3:
         83:e1:c7:6f:16:bd:d3:c6:49:e8:c6:7d:87:d8:51:62:a4:67:
         3b:3d:64:63:d5:b3:74:24:02:aa:42:05:1e:88:ef:6c:b2:75:
         72:d4:b2:31:c6:04:34:58:73:b0:95:c2:46:5d:66:bb:33:f4:
         5c:e1:fb:b4:a4:3e:bf:21:e9:57:29:b3:c8:d2:71:7d:f2:f8:
         d5:0b:92:e6:1e:c0:60:11:53:1a:35:e3:dc:2d:6a:da:bb:b7:
         3e:c3:27:cc:fc:91:bd:3c:f7:2a:a1:4a:64:b6:dd:a4:2c:9e:
         da:5d:19:96:d2:4a:83:a4:7f:00:c5:e1:7e:7b:57:1c:cd:3f:
         0e:b8:2b:e5:b4:54:3e:44:05:e4:63:07:40:ae:f5:f6:06:8d:
         4a:16:e6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:58 2025 by rpki-client on console.sobornost.net