Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/651BB908DC925893C10634A004650501D017E848.mft
File:                     651BB908DC925893C10634A004650501D017E848.mft (raw, json)
Hash identifier:          KX5dEyVjh2lW/ah1M/WGvgSD9BVxbb85WLOrzfcKjL8=
Subject key identifier:   1F:8B:79:4D:B4:3D:6D:8B:65:1A:F4:59:60:A2:F3:D0:1E:D6:03:2A
Authority key identifier: 65:1B:B9:08:DC:92:58:93:C1:06:34:A0:04:65:05:01:D0:17:E8:48
Certificate issuer:       /CN=651BB908DC925893C10634A004650501D017E848
Certificate serial:       419B9F4B0D96924D95904E103ED6DE88979EF3D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/651BB908DC925893C10634A004650501D017E848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/651BB908DC925893C10634A004650501D017E848.mft
Manifest number:          01EA
Signing time:             Mon 28 Apr 2025 17:58:04 +0000
Manifest this update:     Mon 28 Apr 2025 17:53:04 +0000
Manifest next update:     Tue 29 Apr 2025 21:16:04 +0000
Files and hashes:         1: 651BB908DC925893C10634A004650501D017E848.crl (hash: 4vUhYKw1+jUfHTvOjHeSPrGD9gga/nmFU7Iw3MMEcDA=)
                          2: 323830343a383161343a3a2f33322d3438203d3e20323732343637.roa (hash: LLkjnQ60sg8kB7sIJ7/6d3BpdO1XaRFOa1dm35plcP4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/651BB908DC925893C10634A004650501D017E848.crl
                          rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/651BB908DC925893C10634A004650501D017E848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/651BB908DC925893C10634A004650501D017E848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9b:9f:4b:0d:96:92:4d:95:90:4e:10:3e:d6:de:88:97:9e:f3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=651BB908DC925893C10634A004650501D017E848
        Validity
            Not Before: Apr 28 17:53:04 2025 GMT
            Not After : Apr 29 21:16:04 2025 GMT
        Subject: CN=1F8B794DB43D6D8B651AF45960A2F3D01ED6032A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9d:3d:b3:7d:bb:d2:68:cb:f4:3c:7c:e8:ca:
                    6f:eb:78:d7:ae:a3:e2:2c:59:6c:56:6c:5a:cb:28:
                    0b:1f:54:9c:99:f5:c7:10:25:a6:20:3a:ae:74:61:
                    4a:b2:4d:3f:54:7a:0d:e6:4d:93:8a:4f:fa:ce:8b:
                    56:a5:db:6e:b8:b4:22:a7:95:fe:15:80:45:b0:7b:
                    e0:31:bf:f9:02:d9:ed:2a:a8:34:b9:2f:bd:3c:34:
                    95:fe:63:0e:64:a5:a8:29:62:b6:75:c9:5d:a8:a3:
                    bf:e2:36:f4:5c:0d:00:0e:0b:11:0e:d8:07:ec:cd:
                    4d:33:32:9d:b2:47:13:c7:34:62:16:46:48:15:6d:
                    81:85:03:65:84:26:20:4e:76:5e:1c:14:f4:6e:16:
                    df:59:a2:bd:c6:09:5d:0a:e8:ef:e8:b9:5e:c4:0e:
                    c3:5f:a2:fb:8c:54:f7:2a:41:d5:3e:76:24:54:45:
                    22:65:16:f5:32:eb:15:54:01:e4:c8:f2:b0:41:b6:
                    39:51:49:e8:57:60:b2:60:12:88:af:30:cf:0d:cc:
                    bc:cb:45:40:e7:1b:ac:af:a3:b3:8b:4e:64:26:01:
                    47:33:08:a0:7d:e7:1c:f1:da:50:6a:00:ac:05:6f:
                    f6:7c:20:fb:16:e8:1d:4e:57:60:5e:5f:f8:8a:fd:
                    63:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8B:79:4D:B4:3D:6D:8B:65:1A:F4:59:60:A2:F3:D0:1E:D6:03:2A
            X509v3 Authority Key Identifier:
                keyid:65:1B:B9:08:DC:92:58:93:C1:06:34:A0:04:65:05:01:D0:17:E8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/651BB908DC925893C10634A004650501D017E848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/651BB908DC925893C10634A004650501D017E848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuSjmBqn9y87h6Gibd5zz3kfXNKWed9dqww769tPU8QU/0/651BB908DC925893C10634A004650501D017E848.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:22:22:3f:a6:d2:e2:d2:01:4c:d1:9e:08:32:f4:86:6a:fe:
         ef:20:9f:38:05:f5:8c:2b:98:4f:7f:fd:58:30:12:ef:9d:d1:
         bb:55:71:dc:c8:3b:b7:0d:87:b2:b7:e5:3e:10:d2:af:62:f0:
         80:68:d4:72:95:0e:1b:08:37:69:5e:24:81:cf:f6:73:68:5e:
         8a:5a:41:8b:3d:d5:ff:60:c5:77:00:1d:4a:ca:ef:51:60:04:
         66:20:8d:73:5e:83:36:6f:67:d6:0c:63:ed:fc:1a:ec:d0:8b:
         c9:c2:b8:1c:3c:7e:2a:f5:d5:c4:99:99:ba:94:ff:b4:6f:2b:
         4e:fb:b7:07:e1:da:71:75:5f:d7:77:3e:25:9b:9b:83:0b:80:
         32:e4:44:c7:f1:c3:88:34:f1:59:3d:d4:67:b9:6d:d1:5a:df:
         0f:53:55:8e:ca:ca:ad:13:38:76:8f:c2:45:b7:a5:07:a2:9d:
         fc:25:b7:4a:e2:d2:a3:89:1e:af:61:29:b3:9d:03:af:4a:70:
         68:3d:30:18:7f:03:5d:2e:38:7e:15:99:18:35:40:9f:16:c2:
         6c:a1:08:ae:39:96:17:a6:66:84:db:08:cd:47:48:ff:ca:f6:
         0a:77:28:1e:91:54:aa:23:f7:b4:da:c9:b2:0f:3a:54:13:bf:
         41:25:58:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:42 2025 by rpki-client on console.sobornost.net