Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft
File:                     4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft (raw, json)
Hash identifier:          IoN1129zYSOgGal160Q865cQxa6mk8ckUg9irEsLSlk=
Subject key identifier:   1F:6B:71:7D:0A:16:70:C3:DA:5D:E3:69:21:83:B3:63:F2:B7:C8:27
Authority key identifier: 4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19
Certificate issuer:       /CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519
Certificate serial:       2F3A4DB71C8704A396EA29D566A4CF0307C068AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft
Manifest number:          020C
Signing time:             Sun 27 Apr 2025 01:14:02 +0000
Manifest this update:     Sun 27 Apr 2025 01:09:02 +0000
Manifest next update:     Mon 28 Apr 2025 02:21:02 +0000
Files and hashes:         1: 323830343a366262303a3a2f33322d3332203d3e20323730343137.roa (hash: XIEZ0TBtKLGObW5+/uqFn043VpWOnT8A2ZaIZKKg2pc=)
                          2: 3139302e3131312e3131302e302f32342d3234203d3e20323730343137.roa (hash: stsfif/euC8toTrFLKRfbJr/G4KlNzd4eTOoccFcTB8=)
                          3: 4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl (hash: +L8p4xw/2TyjluZD8C9TNtuO2qIlynLFA4Ki3E9JwrU=)
                          4: 3139302e3131312e3130382e302f32322d3232203d3e20323730343137.roa (hash: eC6W0BxXXvmXJ5iOfDiNQnWejYE5v41RediEeNtd5WE=)
                          5: 34352e3232352e3234342e302f32322d3232203d3e20323730343137.roa (hash: NXs4MWfelzsjLtNF9IO/sATbcRe/9eAbM9W9wu80v/8=)
                          6: 323830343a366262303a383030303a3a2f33342d3334203d3e20323730343137.roa (hash: NbkMQ6wLhjnqJhZg/Cgul52AvlT38EWwLkUGMs6qOwY=)
                          7: 323830343a366262303a343030303a3a2f33342d3334203d3e20323730343137.roa (hash: WST0V0FmELutSPMHcfYU4jZIvVxLwZ0x+0gRgLv+Kh0=)
                          8: 34352e3232352e3234342e302f32332d3234203d3e20323730343137.roa (hash: 5L8U7VKx9GvXYoL54qiPMHUajywwtuJxTa23QSBebTc=)
                          9: 323830343a366262303a633030303a3a2f33342d3334203d3e20323730343137.roa (hash: wgWlj34ODKflMzkkgmjJhJmHO8S3zhGXQCB8ped4p8M=)
                          10: 323830343a366262303a3a2f33332d3333203d3e20323730343137.roa (hash: 4210K9mOQWYb2+Kb+pUkoJoVYTK5GFn4u5TenQFTIxI=)
                          11: 34352e3232352e3234362e302f32332d3234203d3e20323730343137.roa (hash: LgCihLjaa6TkI74pcr9VCc3frgxhRfMycC0xhrSeMy8=)
                          12: 3139302e3131312e3130382e302f32332d3234203d3e20323730343137.roa (hash: 2EYnHnVhjiZXCnI44SwO8bYc1WkvGfizvdbp/Wrb4jk=)
                          13: 323830343a366262303a3a2f33342d3334203d3e20323730343137.roa (hash: Ykik++PSMUQQDu4dz/lZ/h1CKQ84Aq92J7J2VLLJqpQ=)
                          14: 323830343a366262303a383030303a3a2f33332d3333203d3e20323730343137.roa (hash: sbCSDgeTvgq2cwo7rRVIxdAD5E6yedg9gQ2vz9mEOFg=)
                          15: 3139302e3131312e3131302e302f32332d3233203d3e20323730343137.roa (hash: JCn5xP4XMxZeZSud6HxzlLMZkCQIhUsr7raoIHJB0gU=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl
                          rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 02:21:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3a:4d:b7:1c:87:04:a3:96:ea:29:d5:66:a4:cf:03:07:c0:68:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519
        Validity
            Not Before: Apr 27 01:09:02 2025 GMT
            Not After : Apr 28 02:21:02 2025 GMT
        Subject: CN=1F6B717D0A1670C3DA5DE3692183B363F2B7C827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:e6:c4:b6:fc:3f:85:38:c2:ba:62:7e:bd:
                    1e:ec:a2:87:cd:78:fd:35:9b:53:fa:f9:15:50:f9:
                    e7:0c:3f:37:6b:a6:b1:3b:2a:07:66:0f:55:47:ea:
                    1b:d8:30:23:ed:47:24:56:48:01:60:f3:7b:4f:52:
                    26:5d:9f:37:d3:26:85:8e:b5:2f:6f:0e:7f:14:68:
                    35:55:8b:95:81:0a:6c:b6:af:ce:d6:97:28:b6:f5:
                    b8:7f:e5:22:4e:74:5b:c2:d2:a4:93:68:17:80:ed:
                    f8:5f:a7:7b:07:d4:8c:6c:1c:d5:b9:5a:c3:40:08:
                    09:01:36:4a:f3:50:1e:f0:ec:b8:33:d1:7b:cd:8c:
                    b7:73:43:f1:c5:27:5e:1e:4b:64:a4:dc:bc:72:b7:
                    41:22:02:6e:9a:50:9a:41:b1:fc:2e:ee:bb:76:d3:
                    46:11:af:15:6a:49:e2:35:01:ac:b5:87:f6:a2:80:
                    43:d7:2f:c5:0b:c4:8f:7b:c7:43:da:49:0d:d0:1f:
                    26:c7:e8:5d:27:89:2f:d7:82:0e:eb:b1:1a:3c:7d:
                    12:27:97:98:d1:54:a2:59:95:6d:69:72:fa:3a:a5:
                    92:18:8d:a0:e4:ed:35:22:c6:79:0f:0a:24:22:45:
                    03:13:e8:21:99:2a:e2:7e:5f:2a:dd:74:60:01:1f:
                    23:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6B:71:7D:0A:16:70:C3:DA:5D:E3:69:21:83:B3:63:F2:B7:C8:27
            X509v3 Authority Key Identifier:
                keyid:4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:eb:55:22:a6:72:8a:d3:4c:d9:cd:a8:98:1e:07:e0:54:78:
         4c:4a:5a:c1:d0:ea:85:e0:d9:1b:13:fc:cb:7f:6a:37:5f:3d:
         a4:1c:a1:2e:b6:e0:1c:56:0a:db:3b:b2:eb:a4:13:14:45:2a:
         1c:e3:e2:77:53:5a:33:64:c3:43:87:77:53:1f:24:1a:8a:7d:
         01:ee:02:86:f1:8c:8d:aa:e8:80:58:6a:f9:e4:f5:b6:87:cb:
         d2:f8:33:3a:09:9f:ce:0d:d0:96:cb:19:24:87:09:e8:7e:9e:
         38:76:52:80:b5:ea:eb:df:7e:0c:7a:2a:0f:82:1e:93:59:d4:
         a1:cf:fd:e0:f8:9f:73:bd:f6:f3:20:d7:42:5e:f8:7b:90:cf:
         91:37:37:e2:2d:75:88:54:40:af:ec:fc:d7:58:e0:71:90:ea:
         50:f5:b5:87:a5:6c:8d:2e:51:d7:3e:1e:5e:2e:58:a9:79:b8:
         b0:50:21:85:6b:b3:fd:59:aa:6c:62:3b:55:32:fc:c3:3b:b0:
         a6:3e:7d:b0:c2:e5:1a:a9:c9:54:12:e1:a2:38:42:86:a0:eb:
         53:a4:52:54:23:07:63:da:98:3f:58:72:60:42:b8:28:b9:83:
         73:fe:63:d5:c4:b8:84:c2:53:9b:4b:d2:36:a1:66:05:93:20:
         8d:b4:eb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:02 2025 by rpki-client on console.sobornost.net