Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
File:                     D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft (raw, json)
Hash identifier:          CFqagf5n65GrpRbPvTQXCRNHxBC+dZFNphqZ7siR9lg=
Subject key identifier:   B6:68:92:2D:63:BE:80:1B:FA:49:52:28:6F:52:01:8F:92:F8:34:14
Authority key identifier: D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7
Certificate issuer:       /CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
Certificate serial:       4036030571CF91C2E5C060B3FB4C7FE67A29A5DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
Manifest number:          0205
Signing time:             Mon 28 Apr 2025 19:59:05 +0000
Manifest this update:     Mon 28 Apr 2025 19:54:05 +0000
Manifest next update:     Tue 29 Apr 2025 22:53:05 +0000
Files and hashes:         1: 323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa (hash: 4WfY395mZG09TAJBlglrJ2+AGNkxszTkWrOd/jFq97I=)
                          2: 3133382e35392e34302e302f32322d3232203d3e20323634353936.roa (hash: XnVkcTWY1UepTeJFNoHSnfqh5tfoOGO7WDyCyMCDNr0=)
                          3: D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl (hash: RIwPM20YZnwYlS5382XlxGkXMV1l+8ySIsQL5mv9uvU=)
                          4: 3133382e35392e34302e302f32332d3234203d3e20323634353936.roa (hash: IxeH3r/sFEiXVYIAo+TPTL502Cb54lnUrgRZsRd4ZAQ=)
                          5: 3133382e35392e34322e302f32332d3234203d3e20323634353936.roa (hash: 8uH1M0wq02HcEJjgqGHP5ef+LUQ1IxvHjaniOF5wfbk=)
                          6: 323830343a323232633a3330303a3a2f34302d3434203d3e20323634353936.roa (hash: EkD5UCro5wn9CN2PhPsCdrnoNqHq6UEXt74AshpdDUA=)
                          7: 323830343a323232633a3a2f33322d3332203d3e20323634353936.roa (hash: gISfXxqBU/leqiaZdS+4MXquTkxMfgyyZKbU9WY/D4s=)
                          8: 323830343a323232633a3130303a3a2f34302d3434203d3e20323634353936.roa (hash: LlyQfC3AFfR8obryAFvmZaC5+HCwgUNR4DlkF/AN7qE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl
                          rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:36:03:05:71:cf:91:c2:e5:c0:60:b3:fb:4c:7f:e6:7a:29:a5:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
        Validity
            Not Before: Apr 28 19:54:05 2025 GMT
            Not After : Apr 29 22:53:05 2025 GMT
        Subject: CN=B668922D63BE801BFA4952286F52018F92F83414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:db:cb:f2:69:bb:7c:d5:a4:5e:f1:7e:e9:c0:
                    b8:7f:e5:8b:24:da:05:e4:76:f3:92:1a:99:11:6a:
                    fa:64:49:d6:4f:fe:d3:95:04:b1:6b:26:8c:72:00:
                    00:b9:de:af:1a:c5:72:5d:a2:42:77:51:c3:94:bd:
                    98:99:b9:06:0e:20:6b:09:ed:46:93:19:f5:7a:fb:
                    f2:4e:96:1e:2f:96:61:7e:36:61:7b:0a:cf:f3:9c:
                    a9:02:c9:29:5c:5a:4b:f0:fe:ff:68:3f:85:0c:dc:
                    e8:f7:a5:35:50:2b:ee:8f:dc:ba:1f:32:15:4d:3a:
                    ef:80:3c:be:5f:e9:c9:d1:2a:c4:49:3f:84:df:b0:
                    c0:c6:0c:db:2d:3f:84:45:29:3f:62:e1:08:fa:bd:
                    73:1d:5b:bf:28:ef:2b:11:74:68:6c:fa:fc:63:41:
                    c8:e5:96:17:d8:61:3c:52:5d:dd:0f:e8:2c:e6:23:
                    8b:72:6f:09:b6:db:0b:a0:9f:2b:fd:f2:3e:9c:d9:
                    12:28:86:2b:48:76:83:16:93:e7:dc:f8:22:e1:fd:
                    19:22:6e:d2:7b:b8:fe:a2:af:da:02:8a:0e:cb:d8:
                    d3:f5:e8:b4:5b:da:0d:a6:3e:e5:41:08:83:75:d9:
                    79:95:4e:6c:07:c7:a2:d7:18:2a:10:6b:d9:3d:ff:
                    26:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:68:92:2D:63:BE:80:1B:FA:49:52:28:6F:52:01:8F:92:F8:34:14
            X509v3 Authority Key Identifier:
                keyid:D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c0:cb:95:79:79:df:90:d2:02:cd:7f:06:cf:9c:7a:a1:39:
         9f:6c:d1:35:f0:63:ef:4c:25:b3:da:ae:da:4c:2f:41:36:8e:
         48:cc:b6:b3:b0:3f:75:af:2a:c3:ea:8a:30:67:4b:f7:84:44:
         1a:1f:ce:9c:e5:1d:51:ca:aa:b0:db:2b:8d:cb:84:ef:a7:16:
         1c:74:97:6b:78:7f:06:a2:5c:a6:50:4e:20:65:b4:28:f4:12:
         7c:1f:ed:df:40:4c:84:7e:7e:dc:39:be:5e:7c:aa:bb:3f:cb:
         75:10:3b:78:de:fb:0b:c3:43:04:03:86:62:2f:24:7f:5f:56:
         29:e0:af:4e:af:8a:d8:e9:e3:91:9f:85:8e:cf:30:13:0b:fb:
         96:c8:79:d2:5e:81:c6:ae:8e:f4:69:f7:ac:87:80:63:0b:05:
         b0:50:f1:29:73:e1:47:8b:67:78:49:79:06:0e:c4:38:b2:09:
         65:9a:51:88:ea:67:c1:97:1f:f1:73:14:d5:ab:99:98:a5:12:
         e7:4c:f3:f1:b8:b6:78:79:ee:46:55:41:69:31:ef:99:88:00:
         5f:d0:5d:9d:d6:68:b7:29:b4:c2:8e:2d:a9:f5:b3:73:77:94:
         ab:0e:f6:9d:ac:d0:10:06:e3:8f:6a:b2:fc:55:6f:d0:92:cc:
         aa:ba:2c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:03 2025 by rpki-client on console.sobornost.net