Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft
File:                     3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft (raw, json)
Hash identifier:          rxU5KXmT1hngW8kdEoY8+Cc5kUVMUac/eon1623MY6E=
Subject key identifier:   AF:7B:A7:5D:8D:56:F3:37:CD:6E:ED:22:BF:99:D9:85:DC:2A:08:30
Authority key identifier: 3E:F7:09:C8:F0:D0:D3:C6:A4:EE:47:57:C8:48:2F:4E:6D:52:5E:91
Certificate issuer:       /CN=3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91
Certificate serial:       2BDE368FE565C2B11BF9D5B2489DE80DDF7827D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft
Manifest number:          0246
Signing time:             Thu 24 Apr 2025 19:00:00 +0000
Manifest this update:     Thu 24 Apr 2025 18:55:00 +0000
Manifest next update:     Fri 25 Apr 2025 19:00:00 +0000
Files and hashes:         1: 34352e3138372e3132342e302f32322d3234203d3e20323639343738.roa (hash: mpZHAAPJTUQXooOaT1oXKL/6OVYZoElxqPmWeW2/+og=)
                          2: 3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.crl (hash: 4I+Rs7DF/oA+btOqjalXckSMPfUGA9FoDW1vgKJN2Uw=)
                          3: 323830343a363534303a3a2f33322d3336203d3e20323639343738.roa (hash: smBh1jOxiL6mXMibovlt7reUW8x0Aoc05Rh0DO5+hfQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.crl
                          rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:de:36:8f:e5:65:c2:b1:1b:f9:d5:b2:48:9d:e8:0d:df:78:27:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91
        Validity
            Not Before: Apr 24 18:55:00 2025 GMT
            Not After : Apr 25 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:18:87:5e:4d:52:56:21:8e:d1:0d:41:f8:8b:
                    ec:65:ca:c5:3c:e0:89:7a:32:be:95:d3:05:21:da:
                    63:c5:23:1a:ea:9a:19:4e:6c:ea:8d:42:af:3a:f4:
                    66:ae:e4:1a:21:96:cc:c6:ee:da:f0:61:51:83:91:
                    5f:d1:d4:65:49:0c:af:90:69:41:cf:e8:e9:6f:2d:
                    39:47:b6:09:65:d1:5d:3d:15:c9:df:00:5d:96:43:
                    dc:55:4a:96:73:8a:08:b2:ba:5e:d4:cf:a0:4e:ed:
                    16:3b:15:b1:fa:3c:ea:11:c4:9d:26:9b:60:b6:f0:
                    40:22:1f:1b:20:de:89:9a:78:fc:4f:50:3c:5a:9a:
                    0c:29:f7:bc:d8:ac:cc:13:d9:52:b5:90:83:26:54:
                    bd:95:6e:fa:10:13:22:de:68:9f:66:dc:13:db:70:
                    ed:44:4a:23:87:b7:f9:52:89:bd:40:d4:df:a1:ea:
                    c1:02:f4:74:8e:43:f6:71:d8:c3:42:97:bb:3c:7c:
                    d5:b4:87:35:80:a5:79:e8:d1:44:a6:5f:fc:c0:81:
                    25:32:13:62:66:49:30:30:a2:47:6a:e7:24:24:dd:
                    91:16:62:8f:5b:a5:94:cd:66:32:20:d9:ba:1a:3f:
                    66:14:45:f8:ca:e1:5a:5a:c6:e8:2e:f0:93:9e:c6:
                    98:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7B:A7:5D:8D:56:F3:37:CD:6E:ED:22:BF:99:D9:85:DC:2A:08:30
            X509v3 Authority Key Identifier:
                keyid:3E:F7:09:C8:F0:D0:D3:C6:A4:EE:47:57:C8:48:2F:4E:6D:52:5E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:0d:cb:6d:58:7b:ca:a7:cf:cf:ba:9e:e7:3e:74:9e:f5:bc:
         f7:ac:3f:85:dd:f1:76:da:1e:18:29:18:c3:95:61:d4:ff:45:
         36:71:60:6a:08:0e:1b:14:9c:e0:f1:c3:f1:e6:be:aa:ef:26:
         dd:2b:98:3f:c3:d8:c5:bb:2c:c8:79:56:91:fd:c0:b5:9a:ee:
         75:22:e1:56:99:9c:a3:48:d4:1a:03:d3:3f:11:0d:73:66:c9:
         03:07:cf:8b:1f:3d:4a:bb:db:19:33:87:a9:cb:b9:b7:1f:9e:
         03:ce:bf:53:0d:a3:c5:bd:f6:ce:7b:ee:bf:8e:fc:08:8b:1f:
         98:2d:6a:fb:f9:b7:92:1b:14:48:f2:2f:a4:ba:09:9d:2b:41:
         51:f9:d3:22:7d:74:9e:14:45:b7:de:6a:30:79:c0:f6:5c:82:
         20:05:67:01:4b:e6:d9:56:b4:d6:8f:c7:f9:85:d2:b2:f7:d6:
         ac:96:92:6c:d5:e2:49:7a:a1:e8:cb:50:97:c3:11:a4:53:fb:
         ae:52:a2:7b:db:22:d1:ee:e9:76:39:d3:05:9e:f2:11:b4:72:
         21:f2:81:ce:03:aa:56:34:ac:ee:14:f0:6d:ea:c8:c9:87:18:
         62:af:c3:34:b9:29:54:8a:e3:0e:eb:27:11:94:ef:3a:a2:2b:
         fe:f6:16:76
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUK942j+VlwrEb+dWySJ3oDd94J9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0VGNzA5QzhGMEQwRDNDNkE0RUU0NzU3Qzg0ODJGNEU2
RDUyNUU5MTAeFw0yNTA0MjQxODU1MDBaFw0yNTA0MjUxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjMxODg3NUU0RDUyNTYyMThF
RDEwRDQxRjg4QkVDNjVDQUM1M0NFMDg5N0EzMkJFOTVEMzA1MjFEQTYzQzUyMzFB
RUE5QTE5NEU2Q0VBOEQ0MkFGM0FGNDY2QUVFNDFBMjE5NkNDQzZFRURBRjA2MTUx
ODM5MTVGRDFENDY1NDkwQ0FGOTA2OTQxQ0ZFOEU5NkYyRDM5NDdCNjA5NjVEMTVE
M0QxNUM5REYwMDVEOTY0M0RDNTU0QTk2NzM4QTA4QjJCQTVFRDRDRkEwNEVFRDE2
M0IxNUIxRkEzQ0VBMTFDNDlEMjY5QjYwQjZGMDQwMjIxRjFCMjBERTg5OUE3OEZD
NEY1MDNDNUE5QTBDMjlGN0JDRDhBQ0NDMTNEOTUyQjU5MDgzMjY1NEJEOTU2RUZB
MTAxMzIyREU2ODlGNjZEQzEzREI3MEVENDQ0QTIzODdCN0Y5NTI4OUJENDBENERG
QTFFQUMxMDJGNDc0OEU0M0Y2NzFEOEMzNDI5N0JCM0M3Q0Q1QjQ4NzM1ODBBNTc5
RThEMTQ0QTY1RkZDQzA4MTI1MzIxMzYyNjY0OTMwMzBBMjQ3NkFFNzI0MjRERDkx
MTY2MjhGNUJBNTk0Q0Q2NjMyMjBEOUJBMUEzRjY2MTQ0NUY4Q0FFMTVBNUFDNkU4
MkVGMDkzOUVDNjk4NkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsxiHXk1SViGO0Q1B+IvsZcrFPOCJejK+ldMFIdpjxSMa6poZTmzq
jUKvOvRmruQaIZbMxu7a8GFRg5Ff0dRlSQyvkGlBz+jpby05R7YJZdFdPRXJ3wBd
lkPcVUqWc4oIsrpe1M+gTu0WOxWx+jzqEcSdJptgtvBAIh8bIN6Jmnj8T1A8WpoM
Kfe82KzME9lStZCDJlS9lW76EBMi3mifZtwT23DtREojh7f5Uom9QNTfoerBAvR0
jkP2cdjDQpe7PHzVtIc1gKV56NFEpl/8wIElMhNiZkkwMKJHauckJN2RFmKPW6WU
zWYyINm6Gj9mFEX4yuFaWsboLvCTnsaYawIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FK97p12NVvM3zW7tIr+Z2YXcKggwMB8GA1UdIwQYMBaAFD73Ccjw0NPGpO5HV8hI
L05tUl6RMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JBQWZqRVBleUt4aGI0
TnpqSG1oMlVBeUxTMU1DZGpQeUZnWkhjb0ZDRDdvLzEvM0VGNzA5QzhGMEQwRDND
NkE0RUU0NzU3Qzg0ODJGNEU2RDUyNUU5MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zRUY3MDlDOEYwRDBEM0M2QTRFRTQ3NTdDODQ4MkY0RTZENTI1
RTkxLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JBQWZqRVBleUt4aGI0TnpqSG1o
MlVBeUxTMU1DZGpQeUZnWkhjb0ZDRDdvLzEvM0VGNzA5QzhGMEQwRDNDNkE0RUU0
NzU3Qzg0ODJGNEU2RDUyNUU5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFYNy21Ye8qnz8+6nuc+dJ71
vPesP4Xd8XbaHhgpGMOVYdT/RTZxYGoIDhsUnODxw/HmvqrvJt0rmD/D2MW7LMh5
VpH9wLWa7nUi4VaZnKNI1BoD0z8RDXNmyQMHz4sfPUq72xkzh6nLubcfngPOv1MN
o8W99s577r+O/AiLH5gtavv5t5IbFEjyL6S6CZ0rQVH50yJ9dJ4URbfeajB5wPZc
giAFZwFL5tlWtNaPx/mF0rL31qyWkmzV4kl6oejLUJfDEaRT+65SonvbItHu6XY5
0wWe8hG0ciHygc4DqlY0rO4U8G3qyMmHGGKvwzS5KVSK4w7rJxGU7zqiK/72FnY=
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:34 2025 by rpki-client on console.sobornost.net