Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft
File:                     2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft (raw, json)
Hash identifier:          opKqqPNkfFhRhysdoe1SXXW074/xJgFTMPvVCS3hI/8=
Subject key identifier:   6E:69:7C:2B:FB:2A:34:D2:1E:DA:4F:AB:0F:46:B3:05:76:44:DD:FA
Authority key identifier: 2A:37:8F:3F:C3:AC:5A:FF:D2:AE:F5:89:39:89:56:7E:2D:C4:0D:B8
Certificate issuer:       /CN=2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8
Certificate serial:       7E7780C6C13AA3FE80F37A8BD842DF8425749056
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft
Manifest number:          0200
Signing time:             Thu 24 Apr 2025 16:00:00 +0000
Manifest this update:     Thu 24 Apr 2025 15:55:00 +0000
Manifest next update:     Fri 25 Apr 2025 16:21:00 +0000
Files and hashes:         1: 323830343a316635343a666630303a3a2f34302d3430203d3e20323732323230.roa (hash: 4i7bGHdxVTMkuS5qYVQ3ZZqO6DS7azDaJ1e2cCNQZQM=)
                          2: 323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa (hash: TrStuRI8tf6D7pJ701olCeb0YQELq0gHQuPH4Ji39gU=)
                          3: 323830343a316635343a633030303a3a2f33352d3335203d3e20323732323230.roa (hash: iYQXb3D7VJdAmtZ75LPUk4nCA8FrcSl0FcHXsYzDgzA=)
                          4: 2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl (hash: U3oy7tO/04At7YKGHstloAf9Epmg1Jw+/s28D1QI2og=)
                          5: 323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa (hash: RDB8qhHDtEJH43hz9XAz3ZX43R7IUeRH/63LhcdomFk=)
                          6: 323830343a316635343a383030303a3a2f33352d3335203d3e20323732323230.roa (hash: iu9KhdvHQ9wBTV5rJlpedJZjb7HAwInZBQdkD2j7ZU0=)
                          7: 323830343a316635343a663030303a3a2f34302d3430203d3e20323732323230.roa (hash: rwqPq3e3cIfTJi1yHcLF7YzVNns2BpAaoaon/GDyOgs=)
                          8: 323830343a316635343a3a2f33322d3332203d3e20323732323230.roa (hash: ETxIJeAD+Mu+7r+AWo3Nm9UhNL8Bg/5nxFe6vkKlSOE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl
                          rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 16:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:77:80:c6:c1:3a:a3:fe:80:f3:7a:8b:d8:42:df:84:25:74:90:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8
        Validity
            Not Before: Apr 24 15:55:00 2025 GMT
            Not After : Apr 25 16:21:00 2025 GMT
        Subject: CN=6E697C2BFB2A34D21EDA4FAB0F46B3057644DDFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:33:51:1c:48:1d:3d:ff:88:81:0b:5d:c2:fc:
                    8b:76:90:c8:70:aa:e4:1c:c8:38:06:14:6d:89:12:
                    67:7c:02:e7:c3:b1:be:a5:ee:f0:be:1d:9c:7f:ea:
                    ef:5b:cd:8d:ea:86:a9:47:3e:97:c9:02:7e:69:c6:
                    09:ba:4b:d5:18:f0:88:34:7e:ab:46:2b:49:ed:d4:
                    57:ed:3a:77:8b:bc:08:94:4c:33:9f:d3:7e:97:49:
                    b5:84:41:80:2a:2c:46:3e:15:cc:28:d7:3d:21:0f:
                    ad:4b:9a:25:44:3f:f2:1a:ff:76:25:76:56:ff:da:
                    e8:28:cb:a8:0d:6b:c6:df:2c:09:ec:28:3d:13:b9:
                    41:d4:09:b5:1e:3f:bf:d3:18:31:d2:d5:cc:fc:89:
                    81:ac:fa:96:35:ba:3a:ab:c8:a9:d6:a0:61:70:fa:
                    db:3c:27:40:0e:50:ea:d9:ff:e9:74:9f:b9:75:9b:
                    ee:d2:02:86:81:65:7c:c9:60:3b:4d:62:9b:fb:ea:
                    f3:7c:05:dd:ee:ce:9b:73:0c:a1:d4:b0:4f:b7:9c:
                    b5:ae:d8:60:85:91:46:da:42:98:85:3f:25:0d:7c:
                    5c:fd:35:b3:d2:3b:55:a6:b2:8b:8c:c7:43:01:d5:
                    42:b8:d1:6f:14:37:27:c8:d0:c1:a8:e0:6b:10:a5:
                    80:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:69:7C:2B:FB:2A:34:D2:1E:DA:4F:AB:0F:46:B3:05:76:44:DD:FA
            X509v3 Authority Key Identifier:
                keyid:2A:37:8F:3F:C3:AC:5A:FF:D2:AE:F5:89:39:89:56:7E:2D:C4:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:65:f3:69:36:15:72:f7:23:04:63:15:d9:f9:29:a3:ed:5f:
         7d:9c:9c:11:b5:bf:e5:4f:90:cb:6c:13:7d:2a:91:32:a4:ee:
         ee:97:0f:af:d1:02:e2:26:89:ed:ae:8a:c1:87:bd:8c:d7:40:
         7d:68:6c:72:02:5f:75:ce:8d:bf:0c:97:bc:15:a8:aa:fb:32:
         28:b3:f0:15:20:9f:88:d3:eb:88:a8:57:c6:47:d3:4e:31:b3:
         5c:92:ed:cc:52:0c:1e:ba:8c:cd:af:73:15:f7:d5:62:39:65:
         e1:be:55:f6:f6:9f:b9:79:5d:d4:9e:9d:af:f3:28:54:4d:32:
         79:aa:2d:2a:22:bf:2d:a9:34:2c:55:4a:62:bf:a2:ac:f8:e7:
         a2:72:7f:dc:d1:cf:69:3d:24:f2:2e:c0:cc:d3:b2:93:0e:42:
         e0:a3:c8:5c:01:6b:c2:10:40:e4:b2:bf:d1:3d:0c:8a:ca:f1:
         7f:26:b0:0c:31:94:19:d4:02:ff:93:96:c6:43:6c:37:53:fd:
         52:10:2f:64:ad:9c:91:37:2d:38:7f:4e:84:d4:eb:d9:4a:64:
         a1:51:06:bb:45:97:2f:07:26:5c:36:a8:6b:88:d2:49:87:3a:
         3b:70:6d:11:0f:1b:2e:c2:c3:dd:19:08:d3:13:2f:7b:1c:75:
         1e:74:5e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:53 2025 by rpki-client on console.sobornost.net