Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BXy4Asq7odjvWx5kB85Hj5ZZjqsu5y2RPKgeF3rRoP3f/1/36E2592A4F09731FA90CEA56F7F8D410522525DE.mft
File:                     36E2592A4F09731FA90CEA56F7F8D410522525DE.mft (raw, json)
Hash identifier:          KDQZxnQmAEdjYjRx5vi7eJcuicvGaJJPVF/ZZsQ6zbY=
Subject key identifier:   F6:04:73:A6:D8:F6:EF:E2:CF:A8:6B:DC:33:3E:06:E8:5C:0A:68:FA
Authority key identifier: 36:E2:59:2A:4F:09:73:1F:A9:0C:EA:56:F7:F8:D4:10:52:25:25:DE
Certificate issuer:       /CN=36E2592A4F09731FA90CEA56F7F8D410522525DE
Certificate serial:       085949E2DD5C1CCDAB0E003C042E82AAA0055D7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36E2592A4F09731FA90CEA56F7F8D410522525DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BXy4Asq7odjvWx5kB85Hj5ZZjqsu5y2RPKgeF3rRoP3f/1/36E2592A4F09731FA90CEA56F7F8D410522525DE.mft
Manifest number:          0204
Signing time:             Sat 26 Apr 2025 07:07:02 +0000
Manifest this update:     Sat 26 Apr 2025 07:02:02 +0000
Manifest next update:     Sun 27 Apr 2025 10:35:02 +0000
Files and hashes:         1: 323830343a383136343a3a2f33322d3438203d3e20323732343531.roa (hash: PIb1AFjKsTG5y3uOzt5RREgcFTzCOpgsKV8/8VMRWio=)
                          2: 36E2592A4F09731FA90CEA56F7F8D410522525DE.crl (hash: 3BoRyf3sFigk2yOOzlzf/EbP8tCM3UeZkHCkVupY78g=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BXy4Asq7odjvWx5kB85Hj5ZZjqsu5y2RPKgeF3rRoP3f/1/36E2592A4F09731FA90CEA56F7F8D410522525DE.crl
                          rsync://rpki-repo.registro.br/repo/BXy4Asq7odjvWx5kB85Hj5ZZjqsu5y2RPKgeF3rRoP3f/1/36E2592A4F09731FA90CEA56F7F8D410522525DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36E2592A4F09731FA90CEA56F7F8D410522525DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:59:49:e2:dd:5c:1c:cd:ab:0e:00:3c:04:2e:82:aa:a0:05:5d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E2592A4F09731FA90CEA56F7F8D410522525DE
        Validity
            Not Before: Apr 26 07:02:02 2025 GMT
            Not After : Apr 27 10:35:02 2025 GMT
        Subject: CN=F60473A6D8F6EFE2CFA86BDC333E06E85C0A68FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:74:59:5b:7e:b3:61:97:b8:71:4b:7c:4e:
                    07:98:0d:c0:dc:a8:90:48:3d:c0:f6:49:56:e5:bf:
                    5d:21:00:82:54:3f:43:f8:f1:d0:6f:7c:44:f4:7c:
                    d3:66:96:c4:ba:12:db:85:d4:16:19:32:8b:15:e3:
                    9a:e1:ba:28:61:f6:b7:51:17:66:c8:e4:6b:6a:c7:
                    68:73:c8:84:a2:da:26:22:98:5d:e4:e1:02:51:bd:
                    e4:95:a4:c5:1e:f4:61:d9:88:68:18:71:24:c2:aa:
                    c4:36:33:c5:2e:f6:23:a8:9a:54:b6:92:28:7a:f2:
                    4b:b2:20:2b:bc:23:94:f5:bd:3c:54:de:90:38:d2:
                    a5:3a:bc:fa:11:7d:fa:2c:d2:d0:69:e1:f6:c9:84:
                    23:8f:f5:5d:67:f6:ca:6a:b4:34:74:c2:36:6a:13:
                    94:65:6b:e0:96:2b:e1:c6:c1:a2:e0:29:57:d0:80:
                    c9:64:57:b0:63:b4:a1:85:56:f0:6c:db:74:8c:92:
                    f8:1e:ac:1c:31:60:6c:4f:63:fd:ba:09:79:32:64:
                    3b:25:14:b9:03:2e:f1:10:3c:4b:e1:d9:7a:e7:08:
                    e1:11:be:1d:0c:68:dc:e2:dc:f8:e8:02:4e:d2:aa:
                    fc:32:c3:c0:4c:5a:e1:9f:20:cf:bf:99:5c:f8:ca:
                    ea:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:04:73:A6:D8:F6:EF:E2:CF:A8:6B:DC:33:3E:06:E8:5C:0A:68:FA
            X509v3 Authority Key Identifier:
                keyid:36:E2:59:2A:4F:09:73:1F:A9:0C:EA:56:F7:F8:D4:10:52:25:25:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BXy4Asq7odjvWx5kB85Hj5ZZjqsu5y2RPKgeF3rRoP3f/1/36E2592A4F09731FA90CEA56F7F8D410522525DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36E2592A4F09731FA90CEA56F7F8D410522525DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BXy4Asq7odjvWx5kB85Hj5ZZjqsu5y2RPKgeF3rRoP3f/1/36E2592A4F09731FA90CEA56F7F8D410522525DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:19:25:53:4d:05:6d:be:42:08:0d:93:a0:d9:db:82:14:ba:
         c8:b4:c2:bf:8b:15:2d:87:8c:aa:e6:79:a0:51:14:f5:8a:03:
         85:54:ad:7d:56:8d:7f:3c:45:dd:ac:14:4f:48:89:e7:fa:b1:
         9f:b1:16:75:67:7b:5e:4b:0b:78:16:9f:4f:87:7f:c7:45:94:
         6d:96:90:78:9b:43:96:06:d6:ef:64:f4:62:2f:23:ff:fe:ce:
         16:1d:b6:0d:92:24:96:ef:85:28:94:0b:29:8f:61:9d:7f:c7:
         ee:ec:b0:29:67:96:19:1a:4b:6d:52:fe:70:99:d1:76:c2:ea:
         7c:c3:2b:79:8d:0c:c9:b8:6c:52:c1:56:7a:8f:44:f2:dc:8e:
         88:bc:ae:b3:c9:72:c7:fc:fd:7a:6b:b8:c3:02:dc:25:3f:08:
         b9:61:0e:19:9a:11:8e:ad:90:c3:89:19:8f:92:d8:b3:8d:17:
         a5:58:95:ad:dd:2f:ff:95:b7:09:7b:c8:34:c1:59:c8:a5:4e:
         64:b4:d4:05:a6:05:5c:f1:09:e1:cc:b3:0f:9e:cc:05:20:ab:
         ed:6c:02:ef:e7:67:b2:1a:cd:7a:5c:f5:2b:bf:f2:a1:87:30:
         b5:c9:c0:50:d4:e3:b2:2a:ed:0a:e6:4a:9c:b1:8d:01:be:a6:
         ac:59:e0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:25 2025 by rpki-client on console.sobornost.net