Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.mft
File:                     701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.mft (raw, json)
Hash identifier:          aLm/DoZvz0xonTWkBHcZJQ90dTQmxVmZz6nl9BMtrvk=
Subject key identifier:   EB:D0:F5:D4:39:81:88:C5:CB:5D:D6:F7:3C:42:6E:71:E8:48:04:28
Authority key identifier: 70:1C:A9:DD:24:FE:6B:BE:9C:FF:CE:3F:0A:DB:C6:64:A1:21:57:1A
Certificate issuer:       /CN=701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A
Certificate serial:       46B940C862D71E71FA4AFC519F1B3EA85185C818
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.mft
Manifest number:          024A
Signing time:             Sun 27 Apr 2025 11:10:00 +0000
Manifest this update:     Sun 27 Apr 2025 11:05:00 +0000
Manifest next update:     Mon 28 Apr 2025 11:10:00 +0000
Files and hashes:         1: 323830343a323662303a3a2f33322d3336203d3e20323633383439.roa (hash: HUsmBkomiI0DMXcyvCDmYvbto/jE9yHQd1Ob/wZpmp4=)
                          2: 701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.crl (hash: hQHQm3mUIAuXE0nSSwTBKxstsPVqkKnA0xJq64GEFio=)
                          3: 3133382e3138352e3230302e302f32322d3234203d3e20323633383439.roa (hash: eexWA0vLPD5Uv+sRM+dgzfA8aq2yqYvioG5xkOn3HfE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.crl
                          rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b9:40:c8:62:d7:1e:71:fa:4a:fc:51:9f:1b:3e:a8:51:85:c8:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A
        Validity
            Not Before: Apr 27 11:05:00 2025 GMT
            Not After : Apr 28 11:10:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:71:c4:0c:76:89:68:d4:4b:29:88:8b:9b:49:
                    8c:ac:69:ae:ae:ed:67:43:9f:ae:0d:4c:24:c3:83:
                    0c:3a:8b:9a:59:b1:27:e5:0b:9d:98:53:5e:af:8f:
                    49:61:12:27:63:ed:fb:2e:97:f3:55:c0:76:2f:9a:
                    78:3a:9a:47:7a:2b:f9:e5:0e:7c:26:cd:48:d8:9d:
                    a8:50:c5:28:2e:8a:1c:c3:ff:bf:d0:b3:41:c8:ae:
                    a0:04:af:3f:db:0b:25:81:12:69:ca:1a:b7:87:c2:
                    2b:13:4a:df:3e:77:b8:34:a9:87:0a:e9:30:f0:47:
                    3e:c5:53:15:cf:59:8d:09:a2:f2:56:5d:fd:2f:58:
                    09:6c:ae:11:06:25:f9:3e:d6:8f:85:c2:66:91:19:
                    7a:c5:87:79:f6:46:3a:ee:f2:1e:37:c0:f7:ca:2a:
                    bb:86:9b:de:ad:48:84:31:55:78:54:94:14:47:54:
                    ba:08:b6:90:27:c3:95:67:cc:f0:b7:66:0f:c6:1e:
                    6b:8a:86:8d:f0:d0:8e:af:62:9f:18:51:34:56:56:
                    5a:fe:6f:03:16:16:23:c0:9e:7f:ab:2f:8e:6c:45:
                    93:b1:15:dc:cc:68:89:d8:92:7e:29:97:e5:4a:e6:
                    e8:3f:42:a5:40:5e:9e:43:73:35:21:39:9d:61:42:
                    49:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D0:F5:D4:39:81:88:C5:CB:5D:D6:F7:3C:42:6E:71:E8:48:04:28
            X509v3 Authority Key Identifier:
                keyid:70:1C:A9:DD:24:FE:6B:BE:9C:FF:CE:3F:0A:DB:C6:64:A1:21:57:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:4f:ac:62:f8:ad:a5:a1:09:d6:06:ad:70:8d:d4:64:12:23:
         9a:a9:36:70:98:4d:76:f1:1c:f6:c6:9b:3a:d3:f6:d6:53:95:
         a3:b6:e7:1e:88:64:95:72:24:0e:64:bb:bb:10:fa:35:89:0e:
         c8:21:3a:cb:a9:75:a1:97:3b:f0:2d:e7:4d:c1:00:be:1c:06:
         1f:1d:ee:a2:c1:a1:cb:5a:62:69:bd:dd:19:f0:bf:a7:df:0a:
         b6:bf:68:39:56:f7:82:69:eb:d9:01:53:c3:03:ae:56:e0:e9:
         ec:55:2a:ea:86:2b:de:62:6e:1f:ed:98:0a:02:ab:22:93:59:
         b4:63:08:62:af:73:d1:e6:ca:7f:43:55:bb:d0:4f:4f:20:b6:
         a9:b9:a4:d5:1a:18:fc:1b:f6:42:ca:53:1c:d1:c6:f5:c9:57:
         b7:c9:ca:95:91:ba:52:31:dc:ee:ff:1b:58:3d:0e:f9:a9:ea:
         4e:bc:1a:44:de:5e:4c:5b:da:7f:33:6c:00:de:a6:b3:30:04:
         5b:65:de:f8:b2:22:7e:e3:ec:e1:5d:47:4d:56:14:5a:a3:97:
         03:77:e0:14:55:1c:0b:58:0d:e6:7f:29:42:62:c1:56:a5:7f:
         23:c3:0e:ed:82:c1:4d:04:8b:b3:0d:66:8f:14:bd:29:1f:74:
         89:c8:e4:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:45 2025 by rpki-client on console.sobornost.net