Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
File:                     3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft (raw, json)
Hash identifier:          cPpssPcxuJeSzQdACqINJpA4kM0LNR2RaAsHxWJqfoU=
Subject key identifier:   AB:13:EA:B1:A8:EA:C9:7A:0D:B0:27:B3:61:18:D3:E7:79:C2:0B:98
Authority key identifier: 36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21
Certificate issuer:       /CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21
Certificate serial:       648BC1A6299822C635A234D32046E64E5178ECD7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
Manifest number:          0207
Signing time:             Sat 26 Apr 2025 12:56:27 +0000
Manifest this update:     Sat 26 Apr 2025 12:51:27 +0000
Manifest next update:     Sun 27 Apr 2025 14:07:27 +0000
Files and hashes:         1: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl (hash: rBjMRVwOnLtTfPrDWitTQb2oOUhIhl8MzbUcCuKuYsU=)
                          2: 323830343a386563383a3a2f33322d3438203d3e203631363136.roa (hash: lyXwR8szxK6wAklIFmsSWrdvlecUEfLPCwBeu/gOa+0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl
                          rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 14:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:8b:c1:a6:29:98:22:c6:35:a2:34:d3:20:46:e6:4e:51:78:ec:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21
        Validity
            Not Before: Apr 26 12:51:27 2025 GMT
            Not After : Apr 27 14:07:27 2025 GMT
        Subject: CN=AB13EAB1A8EAC97A0DB027B36118D3E779C20B98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:af:da:05:ee:1d:8c:73:6d:6e:b6:75:34:87:
                    fe:83:45:02:e0:a1:8e:fd:f2:81:81:f6:dc:fa:0c:
                    7f:01:6e:16:ad:da:bc:09:dc:e7:d4:e0:70:dd:c4:
                    cd:c4:b7:c2:72:23:82:4a:0f:4d:b7:f8:6f:26:70:
                    d0:21:61:40:3e:b3:5c:6a:6b:ca:5e:f9:df:4c:73:
                    c4:fe:ae:14:2c:d2:7d:14:a9:37:fb:12:d5:5b:44:
                    19:e2:a0:70:99:90:4a:d8:3e:b9:f9:10:05:4e:67:
                    dc:ab:16:2c:dc:3e:6e:b2:34:ee:d5:b8:74:99:21:
                    2d:8b:2f:92:09:30:35:30:bf:7a:44:9b:4a:66:54:
                    c7:f2:02:67:aa:03:8b:8e:25:04:b8:e0:b0:61:df:
                    ec:6d:88:16:ff:9b:8a:ec:5b:b2:90:ef:1f:0d:c2:
                    43:9c:36:9a:e4:f0:56:bb:e2:52:10:c2:40:47:3a:
                    13:34:b4:44:bd:4e:f3:ef:74:af:61:be:02:f7:1d:
                    f4:0c:d6:59:2c:a0:f7:25:a1:63:07:b7:dd:0b:e3:
                    37:46:e8:b6:b6:d9:40:ab:91:2c:84:5a:62:bf:c1:
                    6c:0f:b7:0b:41:39:e8:c8:10:22:11:0e:f9:d1:26:
                    a0:cb:ee:33:ed:62:c0:4c:3a:ee:0f:35:ed:e1:c3:
                    1c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:13:EA:B1:A8:EA:C9:7A:0D:B0:27:B3:61:18:D3:E7:79:C2:0B:98
            X509v3 Authority Key Identifier:
                keyid:36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ac:dd:64:d1:a1:f3:91:5f:f1:79:d4:5e:db:20:df:41:fa:
         e5:71:ca:20:6a:d8:f7:13:e8:1e:0f:0f:57:19:d9:be:34:ba:
         a3:36:a4:20:d6:ac:02:5e:f5:f1:c7:90:d4:c1:7b:4a:d0:be:
         92:44:7f:56:36:43:37:40:16:a6:d4:09:ce:96:1f:61:db:f5:
         e0:67:4e:a2:aa:3d:e5:0b:a9:b6:7f:7c:ff:a3:9f:c0:79:4f:
         d6:d9:19:d3:24:f7:da:fe:33:7e:47:5a:80:85:96:d7:13:72:
         36:56:83:15:c8:bf:a2:84:38:79:0a:ea:91:4c:b3:fd:d4:a0:
         61:a1:5a:e3:04:fd:9b:1b:b1:de:76:4f:10:59:84:6c:de:c0:
         36:3f:28:a3:59:c2:51:6b:9e:1c:24:47:89:5f:67:19:ff:fd:
         3a:59:dd:67:b1:42:fd:c5:1c:b1:d1:8d:a3:e9:4f:a0:9f:9b:
         9c:b2:96:73:73:5d:07:a2:bd:7c:ae:14:42:69:f1:c7:b0:d9:
         9e:f9:ab:d3:01:e4:e8:94:ff:50:af:56:3c:da:3f:36:41:92:
         05:27:03:bb:1f:da:c9:6e:f0:b1:82:27:03:2c:fa:c8:16:33:
         ea:07:af:7b:11:81:0b:55:91:0b:5a:45:30:15:1a:51:52:f9:
         8c:2f:7b:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZIvBpimYIsY1ojTTIEbmTlF47NcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYyNUE1RTE2NThFRTRCMzc5M0FCQUMwMTkyNEEzM0U1
N0MzRkMyMTAeFw0yNTA0MjYxMjUxMjdaFw0yNTA0MjcxNDA3MjdaMDMxMTAvBgNV
BAMTKEFCMTNFQUIxQThFQUM5N0EwREIwMjdCMzYxMThEM0U3NzlDMjBCOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxr9oF7h2Mc21utnU0h/6DRQLg
oY798oGB9tz6DH8Bbhat2rwJ3OfU4HDdxM3Et8JyI4JKD023+G8mcNAhYUA+s1xq
a8pe+d9Mc8T+rhQs0n0UqTf7EtVbRBnioHCZkErYPrn5EAVOZ9yrFizcPm6yNO7V
uHSZIS2LL5IJMDUwv3pEm0pmVMfyAmeqA4uOJQS44LBh3+xtiBb/m4rsW7KQ7x8N
wkOcNprk8Fa74lIQwkBHOhM0tES9TvPvdK9hvgL3HfQM1lksoPcloWMHt90L4zdG
6La22UCrkSyEWmK/wWwPtwtBOejIECIRDvnRJqDL7jPtYsBMOu4PNe3hwxz1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUqxPqsajqyXoNsCezYRjT53nCC5gwHwYDVR0j
BBgwFoAUNiWl4WWO5LN5OrrAGSSjPlfD/CEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkFCZmZiQVJ1bWpUMVNFM0M4c2tqU0pSZkpQVXdReEJBbVlwUjRGZDFO
UFcvMS8zNjI1QTVFMTY1OEVFNEIzNzkzQUJBQzAxOTI0QTMzRTU3QzNGQzIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2MjVBNUUxNjU4RUU0QjM3
OTNBQkFDMDE5MjRBMzNFNTdDM0ZDMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QkFCZmZiQVJ1bWpUMVNFM0M4c2tqU0pSZkpQVXdReEJBbVlwUjRGZDFOUFcvMS8z
NjI1QTVFMTY1OEVFNEIzNzkzQUJBQzAxOTI0QTMzRTU3QzNGQzIxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALqzdZNGh85Ff8XnUXtsg30H65XHKIGrY9xPoHg8PVxnZvjS6ozakINasAl71
8ceQ1MF7StC+kkR/VjZDN0AWptQJzpYfYdv14GdOoqo95Quptn98/6OfwHlP1tkZ
0yT32v4zfkdagIWW1xNyNlaDFci/ooQ4eQrqkUyz/dSgYaFa4wT9mxux3nZPEFmE
bN7ANj8oo1nCUWueHCRHiV9nGf/9OlndZ7FC/cUcsdGNo+lPoJ+bnLKWc3NdB6K9
fK4UQmnxx7DZnvmr0wHk6JT/UK9WPNo/NkGSBScDux/ayW7wsYInAyz6yBYz6gev
exGBC1WRC1pFMBUaUVL5jC97kw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:17 2025 by rpki-client on console.sobornost.net