Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft
File:                     AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft (raw, json)
Hash identifier:          +IjcRuUD8MmoGjh+geG0uFx9K9Gkn9YYMvKb/c1egPM=
Subject key identifier:   A5:F2:24:C1:A4:FA:02:7D:46:8F:57:F4:4D:73:D8:24:1F:DF:7E:64
Authority key identifier: AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A
Certificate issuer:       /CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A
Certificate serial:       3E02AFD7C004C69AFCD45E2D7F1B49BF6843371E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft
Manifest number:          AF
Signing time:             Mon 28 Apr 2025 15:11:14 +0000
Manifest this update:     Mon 28 Apr 2025 15:06:14 +0000
Manifest next update:     Tue 29 Apr 2025 15:57:14 +0000
Files and hashes:         1: 34352e3136352e38302e302f32322d3234203d3e203631353935.roa (hash: P3iRqeK3Yv57QU7Bwadb2mGTtOHbUHSsYSW0mi15khA=)
                          2: 34352e3136352e38302e302f32322d3234203d3e203533343237.roa (hash: W6Il1nJqq5qqLa4TPlQ/OzjTUK08KOF0OrC0Ec1PXjE=)
                          3: 323830343a353463383a3a2f33322d3438203d3e203631353935.roa (hash: Ae2efMgnwM2PCNT7dU75s66Sccj5kzLKU0a/b++2GsQ=)
                          4: AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl (hash: 58lPWxTBiPdePMN+woHg2oZQPgFnB5zDbEl4Bk/ZPwQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl
                          rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:02:af:d7:c0:04:c6:9a:fc:d4:5e:2d:7f:1b:49:bf:68:43:37:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A
        Validity
            Not Before: Apr 28 15:06:14 2025 GMT
            Not After : Apr 29 15:57:14 2025 GMT
        Subject: CN=A5F224C1A4FA027D468F57F44D73D8241FDF7E64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:a3:bf:23:a2:cc:28:66:dd:52:71:8a:9b:b1:
                    0e:03:16:b5:5a:c7:dc:34:3d:b8:f8:5b:c5:71:11:
                    ff:58:62:d3:c9:70:0b:20:f4:52:61:72:36:e1:02:
                    78:db:aa:cd:9d:32:64:61:e9:d7:9f:9d:ea:b4:1f:
                    b7:11:28:d6:fe:48:e0:ea:03:8a:da:f3:b6:3b:8c:
                    8c:79:4a:fc:ea:1d:28:76:bb:26:b9:e9:ec:17:39:
                    7a:7e:b4:a2:1e:2d:db:54:bf:19:ea:61:5b:0c:a5:
                    f0:bc:03:26:82:61:31:55:4d:79:ff:6c:7e:62:19:
                    3a:d8:64:43:5c:5b:1e:00:81:98:b4:d0:04:37:19:
                    9e:78:ec:4e:ec:17:bc:55:14:60:a8:9f:02:31:e9:
                    56:d9:31:70:29:c0:a9:dc:fa:30:19:f9:81:dd:89:
                    ea:f0:5c:f1:16:10:19:ea:33:ad:3d:0e:14:d4:e9:
                    11:12:f6:68:6b:68:01:b9:77:f9:77:16:2c:91:51:
                    c4:38:bd:aa:80:8c:fc:84:5e:8c:18:02:69:26:e2:
                    a0:bd:77:57:2d:9c:85:db:56:91:9d:ed:4e:7f:17:
                    84:ce:b1:ec:cb:ba:bf:9f:19:b4:8a:39:1b:8c:92:
                    c6:a8:c5:09:34:2b:4d:03:5c:48:93:1d:a4:36:87:
                    c5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F2:24:C1:A4:FA:02:7D:46:8F:57:F4:4D:73:D8:24:1F:DF:7E:64
            X509v3 Authority Key Identifier:
                keyid:AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:b6:e0:b5:bf:6d:d1:b0:a9:d4:a0:71:12:cc:29:67:af:77:
         b8:3d:d1:dc:d6:18:c4:8a:1a:1f:e5:b9:dc:a0:96:2f:0c:aa:
         e9:d5:3e:c4:39:65:7f:66:07:2b:ff:53:4b:b0:66:6e:1b:59:
         c6:b7:6e:f8:1b:2b:20:d1:da:e4:b4:52:88:19:63:9a:9d:b5:
         e0:77:2c:65:7b:c1:96:5c:ec:a1:6e:66:33:13:38:0d:1c:e9:
         2b:40:da:17:f9:ea:6e:a0:84:4e:31:fc:b5:67:31:f6:8b:25:
         c0:1b:c3:13:7d:9d:bb:cf:e0:9a:f9:34:91:1c:59:7b:6f:2b:
         e5:d3:d2:42:33:72:23:4a:e7:ba:d1:e1:78:c9:3c:ac:7a:61:
         ad:cc:ee:92:47:49:8b:4f:36:6e:d3:e7:b7:d4:95:93:85:c3:
         29:89:d7:40:ff:6f:fb:64:57:56:95:5c:10:f8:5e:0b:5d:8f:
         94:c4:a2:61:58:fb:ae:bc:40:75:8c:fd:ad:8a:c1:12:52:b5:
         ae:3f:13:8e:21:03:73:82:3b:79:4a:26:f7:34:80:70:77:65:
         f1:e7:eb:52:7f:73:79:a8:df:04:cb:7a:a0:f5:f8:7a:6c:2e:
         f1:eb:88:d2:26:45:2b:96:49:ff:2b:52:63:ac:20:5e:34:92:
         1f:68:ed:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:59 2025 by rpki-client on console.sobornost.net