Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.mft
File:                     694E467AB1724A6A93118B4CF4A776D05EEBCCE0.mft (raw, json)
Hash identifier:          L6uZWingwdwHblwG4ME/PXTSiSbaL4RJDqnkFgPW+Kg=
Subject key identifier:   53:E8:64:D1:33:70:D6:D6:D9:43:D8:AE:15:9B:FE:91:91:DB:DC:4E
Authority key identifier: 69:4E:46:7A:B1:72:4A:6A:93:11:8B:4C:F4:A7:76:D0:5E:EB:CC:E0
Certificate issuer:       /CN=694E467AB1724A6A93118B4CF4A776D05EEBCCE0
Certificate serial:       5D2FD93773172A45C8887F960604B03B0112378A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.mft
Manifest number:          01EF
Signing time:             Thu 24 Apr 2025 13:34:02 +0000
Manifest this update:     Thu 24 Apr 2025 13:29:02 +0000
Manifest next update:     Fri 25 Apr 2025 16:58:02 +0000
Files and hashes:         1: 323830343a313566303a3a2f33322d3438203d3e20323633343139.roa (hash: xQe03CH3MB5JEPJozQIf40tpYuTWnp/H84/XEw0Yxmc=)
                          2: 3137372e3138352e3135322e302f32312d3234203d3e20323633343139.roa (hash: 8KEvnwVJP1ZG2ho4/ckGeNjzYDt+qTzw/ixBa/gsc7Q=)
                          3: 694E467AB1724A6A93118B4CF4A776D05EEBCCE0.crl (hash: phY/Fx9RaJ32npISCQr+LCFirmT3turJUhlZzUr/kUY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.crl
                          rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 16:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:2f:d9:37:73:17:2a:45:c8:88:7f:96:06:04:b0:3b:01:12:37:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694E467AB1724A6A93118B4CF4A776D05EEBCCE0
        Validity
            Not Before: Apr 24 13:29:02 2025 GMT
            Not After : Apr 25 16:58:02 2025 GMT
        Subject: CN=53E864D13370D6D6D943D8AE159BFE9191DBDC4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f9:7c:42:3f:c8:21:d2:d5:2f:12:37:41:be:
                    0d:98:a8:97:75:0e:c7:d0:5b:34:9e:4c:85:7e:21:
                    3d:a2:19:89:bb:e0:0a:21:ab:4e:99:ba:74:7d:04:
                    31:0b:ff:b6:28:21:c4:15:b5:19:e5:d8:b4:97:7e:
                    01:08:cd:c2:c7:0c:13:61:31:90:6e:07:5a:e7:4b:
                    56:1d:7c:f6:7b:4a:3c:ec:4d:3a:80:b8:ff:21:69:
                    ed:93:d9:a9:6a:30:07:ec:36:4b:a4:f8:06:c5:58:
                    8f:76:d2:51:4d:b4:22:da:4f:21:b0:c8:31:d1:3d:
                    e2:a9:a1:51:69:a3:76:4b:5b:2f:23:8c:4a:cf:e2:
                    3c:e4:28:57:66:d9:a1:07:2d:a8:c4:5b:65:4f:be:
                    1d:c9:85:9d:63:0e:2e:46:b9:a4:8e:2b:ce:c8:da:
                    40:f7:47:62:75:1e:9b:d7:2d:c5:b6:0a:a4:08:7f:
                    71:3c:c1:7a:4a:4f:8c:a2:8f:ad:68:2b:04:ba:4d:
                    04:84:ff:d9:9f:76:ba:fe:f8:21:6a:97:2d:c8:64:
                    e7:c0:de:ef:ec:68:eb:9e:07:da:15:94:13:a9:f2:
                    dc:7f:b3:e9:d2:41:47:a3:ab:08:9d:c7:73:0e:70:
                    5c:c0:bc:f0:ff:a6:0e:c3:c4:13:d2:93:2e:05:49:
                    85:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E8:64:D1:33:70:D6:D6:D9:43:D8:AE:15:9B:FE:91:91:DB:DC:4E
            X509v3 Authority Key Identifier:
                keyid:69:4E:46:7A:B1:72:4A:6A:93:11:8B:4C:F4:A7:76:D0:5E:EB:CC:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c2:78:0e:c1:d1:d6:d5:6d:8e:1f:bb:19:09:c4:63:7c:c1:
         fe:e8:f1:09:6a:82:ac:9b:04:5a:bd:50:83:6f:41:60:03:12:
         95:81:e2:68:af:98:62:11:e9:46:44:59:a5:6f:a3:a2:ce:6e:
         29:93:80:57:b5:7f:e4:04:c2:5a:83:cd:d1:de:2b:01:14:92:
         03:2e:c9:75:94:13:5d:09:e1:88:12:ac:00:82:46:bf:cc:44:
         c7:f6:89:22:ed:3d:4f:95:67:1b:a1:65:0d:89:5c:52:4c:f3:
         f9:c9:03:3b:2d:b0:73:0c:62:1c:28:99:7a:a3:08:e1:62:bd:
         30:f2:05:84:3f:93:15:ba:9f:1b:89:07:25:3a:08:60:eb:ea:
         9e:7c:af:d9:ed:ea:fc:8f:5c:b6:f8:db:25:5a:67:db:33:5a:
         b3:d7:b7:c0:c5:04:13:9d:07:8b:26:ae:1a:1e:40:ac:c1:53:
         4d:84:4c:21:04:51:34:bc:e0:8d:53:90:8a:2a:74:a0:42:d8:
         4e:9a:2a:85:7c:b5:34:b1:a4:55:cd:ad:be:52:19:6f:3d:6b:
         3d:3a:92:04:11:99:9d:ee:05:72:33:61:a3:da:98:6e:63:b0:
         7e:66:87:b8:9c:37:ce:c8:0b:43:4a:bf:d4:09:94:2c:d9:22:
         86:77:16:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXS/ZN3MXKkXIiH+WBgSwOwESN4owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk0RTQ2N0FCMTcyNEE2QTkzMTE4QjRDRjRBNzc2RDA1
RUVCQ0NFMDAeFw0yNTA0MjQxMzI5MDJaFw0yNTA0MjUxNjU4MDJaMDMxMTAvBgNV
BAMTKDUzRTg2NEQxMzM3MEQ2RDZEOTQzRDhBRTE1OUJGRTkxOTFEQkRDNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6+XxCP8gh0tUvEjdBvg2YqJd1
DsfQWzSeTIV+IT2iGYm74Aohq06ZunR9BDEL/7YoIcQVtRnl2LSXfgEIzcLHDBNh
MZBuB1rnS1YdfPZ7SjzsTTqAuP8hae2T2alqMAfsNkuk+AbFWI920lFNtCLaTyGw
yDHRPeKpoVFpo3ZLWy8jjErP4jzkKFdm2aEHLajEW2VPvh3JhZ1jDi5GuaSOK87I
2kD3R2J1HpvXLcW2CqQIf3E8wXpKT4yij61oKwS6TQSE/9mfdrr++CFqly3IZOfA
3u/saOueB9oVlBOp8tx/s+nSQUejqwidx3MOcFzAvPD/pg7DxBPSky4FSYWNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUU+hk0TNw1tbZQ9iuFZv+kZHb3E4wHwYDVR0j
BBgwFoAUaU5GerFySmqTEYtM9Kd20F7rzOAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkNDRHdSOG9CVHB0MVo1Z2NONktKaDRyb1doUUVhYmZHeEg0N1RtZkx2
UlYvMC82OTRFNDY3QUIxNzI0QTZBOTMxMThCNENGNEE3NzZEMDVFRUJDQ0UwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5NEU0NjdBQjE3MjRBNkE5
MzExOEI0Q0Y0QTc3NkQwNUVFQkNDRTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QkNDRHdSOG9CVHB0MVo1Z2NONktKaDRyb1doUUVhYmZHeEg0N1RtZkx2UlYvMC82
OTRFNDY3QUIxNzI0QTZBOTMxMThCNENGNEE3NzZEMDVFRUJDQ0UwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAcJ4DsHR1tVtjh+7GQnEY3zB/ujxCWqCrJsEWr1Qg29BYAMSlYHiaK+YYhHp
RkRZpW+jos5uKZOAV7V/5ATCWoPN0d4rARSSAy7JdZQTXQnhiBKsAIJGv8xEx/aJ
Iu09T5VnG6FlDYlcUkzz+ckDOy2wcwxiHCiZeqMI4WK9MPIFhD+TFbqfG4kHJToI
YOvqnnyv2e3q/I9ctvjbJVpn2zNas9e3wMUEE50HiyauGh5ArMFTTYRMIQRRNLzg
jVOQiip0oELYTpoqhXy1NLGkVc2tvlIZbz1rPTqSBBGZne4FcjNho9qYbmOwfmaH
uJw3zsgLQ0q/1AmULNkihncWWg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 15:50:48 2025 by rpki-client on console.sobornost.net