Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.mft
File:                     6933A3E9616B92D4A6606885C3C206355CC19035.mft (raw, json)
Hash identifier:          gr5fZthDrhvd8AVSzV9CtJh8StQseidFLvGiCTeztFY=
Subject key identifier:   AC:DA:29:05:BA:5B:66:50:19:45:BF:FB:99:B9:3E:D6:46:21:70:9E
Authority key identifier: 69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35
Certificate issuer:       /CN=6933A3E9616B92D4A6606885C3C206355CC19035
Certificate serial:       418DD664A6C2C557F21C17445E74856F9E62D8E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.mft
Manifest number:          0209
Signing time:             Mon 28 Apr 2025 10:30:00 +0000
Manifest this update:     Mon 28 Apr 2025 10:25:00 +0000
Manifest next update:     Tue 29 Apr 2025 10:38:00 +0000
Files and hashes:         1: 3136382e3139362e3134342e302f32322d3234203d3e20323633393934.roa (hash: HZQLpTXOVfpwJ+9TdlL3OdSDATF/hcwQzWBu82N1HLM=)
                          2: 3133382e3235352e3232302e302f32332d3233203d3e20323633393934.roa (hash: OQS7p5PIvdNDkVsEjaTtffzpRj5lCDjCd7jRvXaimwk=)
                          3: 3133382e3235352e3232302e302f32342d3234203d3e20323633393934.roa (hash: /PyoYcmUofW1Y9zSQytrKppDA+86C3zdrEMr79fGkz0=)
                          4: 3133382e3235352e3232302e302f32322d3232203d3e20323633393934.roa (hash: YJGoDr3j/7AwFyCgp5wFhJr5Q6xJuSJZo/RfkQz0EUQ=)
                          5: 323830343a323930633a3a2f33322d3332203d3e20323633393934.roa (hash: C5flGQm7Jh4Fc5Nw8OO2z8Ae2BkJm6bV5GQjh13EuiY=)
                          6: 3133382e3235352e3232312e302f32342d3234203d3e20323633393934.roa (hash: htd7hA3P2JTSqX29K9gItjOdTRUdNU5AS+Y25pP4m1c=)
                          7: 3133382e3235352e3232322e302f32342d3234203d3e20323633393934.roa (hash: rUA2p8XCtJ6rr6DcjJLPqRDbL93mf7G7+Rto4dptglM=)
                          8: 323830343a323930633a3a2f33362d3336203d3e20323633393934.roa (hash: M4Ujg7F+YRR8VjOtmCZOK/YX3P82f3I5xnGeG6Ulsvs=)
                          9: 6933A3E9616B92D4A6606885C3C206355CC19035.crl (hash: 9M6/bRPxmVkkFwzyyUz2soAJz8VxaFfS5CBNE4auaTM=)
                          10: 3133382e3235352e3232322e302f32332d3233203d3e20323633393934.roa (hash: xCfMNNlfJRGJdybQOQ6TA499+s1V3nmlROUJcyt6ZDE=)
                          11: 3133382e3235352e3232332e302f32342d3234203d3e20323633393934.roa (hash: AfbQRnRRxbVYCUFT4iYukSZZVa0Xtv8t/e+MBpTgZp8=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl
                          rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 10:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8d:d6:64:a6:c2:c5:57:f2:1c:17:44:5e:74:85:6f:9e:62:d8:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6933A3E9616B92D4A6606885C3C206355CC19035
        Validity
            Not Before: Apr 28 10:25:00 2025 GMT
            Not After : Apr 29 10:38:00 2025 GMT
        Subject: CN=ACDA2905BA5B66501945BFFB99B93ED64621709E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:51:b3:36:fd:9c:23:60:06:64:83:31:a7:3e:
                    96:bb:ae:33:be:a8:fb:e6:70:c5:b1:68:16:98:8f:
                    b5:d9:53:db:6e:d8:ef:21:2c:fa:6b:a9:84:68:67:
                    04:12:b9:28:77:73:e1:4d:94:cc:c6:79:51:52:f9:
                    c1:be:b2:ff:aa:42:d8:64:86:79:e8:71:61:1a:f5:
                    eb:7d:50:e7:17:0c:a5:30:b9:75:d6:e6:91:02:6f:
                    10:59:f7:bd:70:a4:e3:91:71:99:7f:f1:a3:24:9d:
                    78:3a:54:1a:52:c5:6e:0e:a6:f3:a1:9d:21:41:30:
                    12:ac:21:65:f0:76:e9:81:59:b0:2a:3c:92:78:e0:
                    64:37:48:02:b2:07:8b:f7:da:18:60:06:e6:25:53:
                    37:05:ee:dc:59:11:74:c9:08:89:c3:fe:af:03:c2:
                    ba:85:23:ae:59:79:71:41:a4:ca:23:85:fa:5f:66:
                    23:0a:ab:94:5c:2f:26:39:ca:94:0b:e4:ce:e8:2a:
                    1a:0a:65:fa:7b:09:b1:c9:d3:da:68:c5:ba:e1:c2:
                    89:ef:de:71:22:34:67:75:53:82:23:73:9f:87:84:
                    bd:d3:d3:34:5a:b1:63:e6:96:4e:28:73:00:70:44:
                    d8:c6:57:87:38:5b:51:7c:8c:94:33:e5:b6:65:df:
                    27:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DA:29:05:BA:5B:66:50:19:45:BF:FB:99:B9:3E:D6:46:21:70:9E
            X509v3 Authority Key Identifier:
                keyid:69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:64:b4:9f:ef:96:40:82:61:64:2f:e5:dc:ae:cc:1d:d4:5f:
         83:05:25:2c:ff:22:de:15:ad:de:95:a9:e0:ff:14:b0:4c:ca:
         fe:2d:bc:c2:85:0b:a6:0f:3e:11:d6:97:ca:49:5b:49:1c:80:
         49:6d:1d:6f:ba:59:92:a9:33:22:f8:d3:70:7c:31:3c:1b:91:
         9d:1a:26:2c:7b:c1:28:94:18:00:b5:c0:4a:dd:98:b2:e9:c5:
         3e:7d:a9:0c:e0:09:11:ec:71:5c:f5:05:fa:08:3d:e1:5d:73:
         56:6f:2f:e2:11:b1:28:52:ab:9d:d0:14:91:4d:4d:b2:9b:bb:
         45:46:db:8e:cc:af:d2:ee:df:00:2a:41:d0:99:c0:05:fb:d8:
         80:3a:0f:19:ae:fd:1c:af:e4:ac:43:83:c1:7f:1a:ba:c6:81:
         35:44:66:c5:e1:70:96:93:f7:66:84:40:14:55:f8:06:82:d6:
         05:ca:21:26:8a:7f:e2:77:ce:e1:28:99:a8:ed:e1:c2:ab:1e:
         c8:3e:d4:57:ec:54:01:2e:c6:0c:f1:b1:a3:0b:15:99:38:e9:
         2c:db:b5:69:e9:9e:cc:67:4b:5e:05:86:e1:7d:8d:a5:6b:34:
         86:da:c2:f3:7e:2b:c6:97:fe:90:8e:6a:9f:7e:c8:c5:63:e5:
         47:ed:49:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:58 2025 by rpki-client on console.sobornost.net