Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft
File:                     371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft (raw, json)
Hash identifier:          CLXr0HHhj+ZB8vqOtBiZBURpqpUL+nWu/ZRT2AER9+E=
Subject key identifier:   66:C9:E6:8A:5E:90:F9:F0:F2:D0:AA:5F:BA:80:41:F8:22:5C:02:D8
Authority key identifier: 37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F
Certificate issuer:       /CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
Certificate serial:       2C791B40C2FF42353AA68F58D1F5646BC1A16FA2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft
Manifest number:          0207
Signing time:             Mon 28 Apr 2025 07:16:04 +0000
Manifest this update:     Mon 28 Apr 2025 07:11:04 +0000
Manifest next update:     Tue 29 Apr 2025 10:59:04 +0000
Files and hashes:         1: 34352e37312e3132382e302f32322d3234203d3e20323637363038.roa (hash: cx891cQXtIN+jj9f3EbIn7uHPbaL/q8mM9PqcPDCQkI=)
                          2: 371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl (hash: 9TX1scWUYAMDvRZKzINFN9oDO9YKX1nGVM6MpkS+4f0=)
                          3: 323830343a343433303a3a2f33322d3438203d3e20323637363038.roa (hash: OBwRGbZLP2uUxZqwZEvZlusxcCtRxUbSxwfuFIQtq4M=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl
                          rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:79:1b:40:c2:ff:42:35:3a:a6:8f:58:d1:f5:64:6b:c1:a1:6f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
        Validity
            Not Before: Apr 28 07:11:04 2025 GMT
            Not After : Apr 29 10:59:04 2025 GMT
        Subject: CN=66C9E68A5E90F9F0F2D0AA5FBA8041F8225C02D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:78:3d:1a:6d:0b:86:7a:4c:90:3c:fb:4f:48:
                    d3:ff:b7:6b:18:9a:2d:f8:b3:d1:73:c2:81:08:c9:
                    f4:78:7c:83:ef:49:48:c1:cd:79:dc:e0:89:ad:a9:
                    5f:09:27:01:5f:8a:93:85:c2:88:c0:f0:55:78:6b:
                    9d:a3:65:24:37:22:7a:31:e4:1c:3d:38:7f:97:c5:
                    ef:33:ad:e8:51:50:62:6c:a7:39:1f:23:9f:0f:eb:
                    73:05:44:15:7f:60:a7:a6:56:5c:a4:e3:6a:9a:a5:
                    59:a6:81:b2:02:83:73:6f:8a:50:66:bd:66:a5:fc:
                    ea:1c:6b:1d:97:61:e6:1d:b7:d2:3f:41:17:dd:8f:
                    5c:ca:e7:95:4d:77:65:d8:b9:74:72:41:70:88:7c:
                    5e:d6:88:7b:02:e1:82:fa:23:2b:d1:bd:29:95:88:
                    a7:24:9b:0b:c0:24:62:4d:7f:dd:2b:e1:59:96:5e:
                    41:96:f9:10:33:19:0b:42:de:aa:93:42:b5:9b:f6:
                    9b:76:99:48:dd:57:ff:83:42:be:8e:65:4d:35:f2:
                    5f:59:20:dd:e7:0e:86:1c:d5:05:a6:77:17:82:1d:
                    6a:59:0f:04:d8:bf:ec:ca:07:17:c9:3b:c9:73:c2:
                    42:4d:07:20:5c:cb:52:69:18:d3:6a:db:a6:58:6d:
                    04:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C9:E6:8A:5E:90:F9:F0:F2:D0:AA:5F:BA:80:41:F8:22:5C:02:D8
            X509v3 Authority Key Identifier:
                keyid:37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:61:69:a7:d1:ae:68:7d:50:9a:1e:6d:a2:fe:e9:67:34:f5:
         79:04:0e:7d:cc:81:f7:15:70:8d:ad:1f:31:d8:7b:40:bd:df:
         47:c7:e4:b4:c6:fe:f4:5a:33:bf:82:df:62:ce:18:b3:01:a4:
         fd:c0:aa:e2:b2:a6:d7:47:03:ee:5f:f8:ef:50:37:c7:d7:b1:
         65:e8:77:8e:3f:8b:06:a9:99:79:5a:27:5c:bd:0c:d3:05:6d:
         c6:0f:3e:7a:9d:e9:03:c3:ca:d9:80:25:72:72:a5:cf:5c:67:
         17:25:14:c7:04:e0:76:11:4e:64:f8:13:fd:d9:46:22:b7:1e:
         f9:9d:9d:45:0b:f1:c9:1e:60:2f:09:8a:89:5c:8d:81:56:b6:
         ae:bd:51:05:22:0d:06:96:83:11:7d:6e:13:6d:d2:3f:07:16:
         10:33:0b:51:05:73:5e:0b:1c:cc:a5:75:28:c5:6f:d6:8d:99:
         c2:52:62:85:aa:ec:27:fd:e6:b6:e2:77:f5:b4:ca:fc:60:ee:
         d7:90:ad:ab:27:ea:fd:c4:df:11:6c:d8:a7:3b:64:ee:2c:5f:
         69:d7:39:fd:55:39:31:15:09:46:34:cc:77:57:6c:b6:47:e8:
         0f:fb:11:63:9d:1f:0b:5f:ad:73:42:ab:c7:9c:1c:6b:0f:ce:
         80:ac:ad:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:27 2025 by rpki-client on console.sobornost.net