Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft
File:                     08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft (raw, json)
Hash identifier:          MdsGfjrXcFmh6xUlKaKt7dPnOsj8dLFPoLROGn/xyXU=
Subject key identifier:   EA:C8:BB:98:DC:03:AF:AB:25:5F:2A:BE:53:83:DE:7A:CF:2A:61:83
Authority key identifier: 08:B3:92:C8:17:3B:C0:63:AC:E9:F4:F4:2C:85:E8:F3:BC:29:7F:A4
Certificate issuer:       /CN=08B392C8173BC063ACE9F4F42C85E8F3BC297FA4
Certificate serial:       186AC4FE72A4A955522EC741AEA1817551EFAAB4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft
Manifest number:          0158
Signing time:             Mon 28 Apr 2025 13:14:58 +0000
Manifest this update:     Mon 28 Apr 2025 13:09:58 +0000
Manifest next update:     Tue 29 Apr 2025 16:22:58 +0000
Files and hashes:         1: 3137302e38322e3134302e302f32322d3332203d3e20323634343034.roa (hash: Hr9Rmw/4WJSxmHCw4yqdOtapmIw5xc0wse7DjCyjOEI=)
                          2: 323830343a316466383a3a2f33322d313238203d3e20323634343034.roa (hash: kRz7afkv1IyAanpOIg2wrOFhUj0g99+6EzKNBOrop7Y=)
                          3: 08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.crl (hash: x0J0seqjpUTto9uUIy0JiheWUnP5/htB7HToiR4cwSk=)
                          4: 3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa (hash: l0YfA8W4HJzDeblNvcYfJxi2qQ3myY9q9a7WKtIUKSI=)
                          5: 3133382e3235352e31362e302f32322d3332203d3e20323634343034.roa (hash: 3bxYfN8+RWfMagKX4C0gih6QrpSpCz4LWePYD1fQXlg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.crl
                          rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6a:c4:fe:72:a4:a9:55:52:2e:c7:41:ae:a1:81:75:51:ef:aa:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08B392C8173BC063ACE9F4F42C85E8F3BC297FA4
        Validity
            Not Before: Apr 28 13:09:58 2025 GMT
            Not After : Apr 29 16:22:58 2025 GMT
        Subject: CN=EAC8BB98DC03AFAB255F2ABE5383DE7ACF2A6183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d9:9a:35:e8:b1:d4:88:00:19:0b:f8:25:d6:
                    68:74:7b:55:90:72:bf:5d:fb:b8:d8:1c:51:cb:c8:
                    fd:ef:91:e3:40:37:bf:f6:bb:2b:60:37:cd:c8:ca:
                    5b:15:65:1c:ae:45:31:71:46:97:45:f2:71:66:c2:
                    9a:db:6e:a6:0f:11:6b:a2:ef:28:2a:0e:6f:28:13:
                    06:a6:cf:61:47:6d:34:d1:82:37:4d:1e:3d:7a:d3:
                    08:dd:f8:7f:cf:a8:4c:87:8f:ca:84:ee:3a:33:a1:
                    77:5b:a1:e2:e0:c4:0a:35:a4:07:de:23:93:58:25:
                    78:9f:b0:00:f7:c2:87:7e:13:57:fc:05:f2:0e:84:
                    93:00:7f:bd:6c:da:c7:78:12:b3:b6:44:1b:0b:e1:
                    8c:05:8c:c0:34:b9:82:36:9f:a7:b3:7d:54:e3:1a:
                    79:aa:c2:fe:e6:f5:aa:94:d3:fd:ef:33:d9:81:32:
                    bd:ac:62:a9:51:65:17:83:91:7c:b4:87:68:55:64:
                    03:58:ec:df:1f:59:28:20:cf:f7:1a:85:c3:90:c2:
                    bf:66:bb:25:5d:64:da:ac:ec:bc:30:c9:de:67:56:
                    70:9e:bd:c2:29:bc:7e:17:bb:08:d8:ad:bc:d4:7a:
                    d2:7a:57:34:ee:14:25:ce:31:ed:54:c8:80:b7:d1:
                    85:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C8:BB:98:DC:03:AF:AB:25:5F:2A:BE:53:83:DE:7A:CF:2A:61:83
            X509v3 Authority Key Identifier:
                keyid:08:B3:92:C8:17:3B:C0:63:AC:E9:F4:F4:2C:85:E8:F3:BC:29:7F:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ec:6f:bc:ad:ec:b5:f8:24:42:e6:3a:c3:aa:f6:64:7d:61:
         8e:93:d6:9e:e6:20:57:74:34:0b:de:ac:94:48:6f:c6:96:63:
         3c:6f:6a:9a:e6:9f:ce:29:a8:a4:3b:c8:3b:5b:6d:00:fa:cf:
         4a:75:fb:28:c6:5f:93:61:d1:8d:5b:3a:ba:b6:55:4b:94:10:
         50:9e:30:c4:bc:4e:c9:79:9f:27:89:5c:78:05:e4:fc:29:6f:
         9b:d7:e9:11:88:48:2b:a0:e9:ed:ed:92:72:d8:a9:ff:83:3f:
         00:75:da:1f:95:e9:85:47:82:bc:bf:d3:67:4e:f9:43:13:f0:
         73:b7:cc:65:88:4f:66:24:6f:f4:c6:86:f2:5d:c2:9c:9f:a6:
         1d:69:11:17:11:b9:7a:8f:91:b7:76:99:67:9c:a0:07:ff:c3:
         21:f6:ca:ac:0c:8a:2e:99:13:7c:e2:70:18:6a:6f:82:6c:b1:
         ad:6b:0d:a9:51:b1:e2:e7:24:cc:f9:d2:05:58:9f:f0:92:30:
         0b:07:bb:03:27:02:af:29:91:33:cd:f1:5f:3d:a9:2c:04:eb:
         d2:82:e4:74:eb:98:b0:56:f6:57:2c:6d:aa:b4:ba:58:e7:77:
         d1:17:db:b6:67:fb:22:92:e4:b4:39:10:7b:02:ac:a0:f9:82:
         73:f8:b5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:10 2025 by rpki-client on console.sobornost.net