Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft
File:                     A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft (raw, json)
Hash identifier:          dashBAuOyKdFj9ogar4X24O28SA0FAkynvlsf0RQ9Bs=
Subject key identifier:   57:F6:32:6E:6C:42:E6:A1:0D:73:E1:AE:43:B5:2C:3B:2D:2A:1A:5E
Authority key identifier: A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76
Certificate issuer:       /CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
Certificate serial:       026D58CFAB20092DC1CD692E91444071947A4025
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft
Manifest number:          01A2
Signing time:             Thu 24 Apr 2025 18:36:59 +0000
Manifest this update:     Thu 24 Apr 2025 18:31:59 +0000
Manifest next update:     Fri 25 Apr 2025 21:44:59 +0000
Files and hashes:         1: 3137372e38342e33342e302f32342d3234203d3e20323632353738.roa (hash: ZZOzzeHReZR1j2Wkx2+gvOFbXoGKpd8+AgX5mzSfp4g=)
                          2: 3137372e38342e33332e302f32342d3234203d3e20323632353738.roa (hash: aPi95oAQ8ALp5Riyr4HgsyyyIhSv+wx1qwtCRKmOegk=)
                          3: 323830343a3635383a3a2f33352d3335203d3e20323632353738.roa (hash: LJXsvQZaTIQG7/0DKHTgsQM8oTzEzlTT4S8Kmx4/5YA=)
                          4: 323830343a3635383a653030303a3a2f33352d3335203d3e20323632353738.roa (hash: mGD+Nz89sdR9UOaavTur2w5nYhoEKDwbP32rvejsktg=)
                          5: 3137372e38342e33382e302f32342d3234203d3e20323632353738.roa (hash: p+EughTf6fgssrXCiu++Kbgelff0YAsmLITJluI2+wA=)
                          6: 3137372e38342e33322e302f32322d3232203d3e20323632353738.roa (hash: HHkCx4wzsdzZeQ+23+HNGN0oU9zUdEaOUbRYmJVXn+Q=)
                          7: A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl (hash: ZGbg78xlcffI71W2Xu3MYoUpInP6d3fu7wS9q+QdOvQ=)
                          8: 3137372e38342e33392e302f32342d3234203d3e20323632353738.roa (hash: Cq9qrsg/RLw7vgtleWVQcOJaPgAstLAzGKwRD00bGnE=)
                          9: 323830343a3635383a613030303a3a2f33352d3335203d3e20323632353738.roa (hash: K97tb9eayzLx4+fWi99NhubcTM/GMXvlXCYWhdke8iI=)
                          10: 3137372e38342e33322e302f32342d3234203d3e20323632353738.roa (hash: t+FRMABsEctbWkl07StQKhTPxun6CDHJI/p5fKHvy1o=)
                          11: 323830343a3635383a633030303a3a2f33352d3335203d3e20323632353738.roa (hash: IJAfcQfmlRu7dOP4dM0gSk4sDVDACNSRhkeaIrQ3W3k=)
                          12: 3137372e38342e33362e302f32342d3234203d3e20323632353738.roa (hash: TUwlurF2l+qtIryrIkmvQL/NUiisKyzc3i3hncr1EfM=)
                          13: 3137372e38342e33352e302f32342d3234203d3e20323632353738.roa (hash: 5DafvExcEywBVIWkiw/ZI1p5lxrMUSdWLBxrDkrGV44=)
                          14: 3137372e38342e33372e302f32342d3234203d3e20323632353738.roa (hash: 28p7ho9zkxBWdXY2hwLxBxbaQrjF7AK4ddQouSMRCYQ=)
                          15: 3137372e38342e33382e302f32332d3233203d3e20323632353738.roa (hash: gXetdJWUp6auI8pN33t44RkM4A8XcVZ2rkvPkvk066Y=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl
                          rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6d:58:cf:ab:20:09:2d:c1:cd:69:2e:91:44:40:71:94:7a:40:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
        Validity
            Not Before: Apr 24 18:31:59 2025 GMT
            Not After : Apr 25 21:44:59 2025 GMT
        Subject: CN=57F6326E6C42E6A10D73E1AE43B52C3B2D2A1A5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:29:46:29:f3:fc:95:6f:d1:69:67:a8:d3:f8:
                    b9:0d:40:09:a6:80:0d:38:7a:d8:ec:38:6c:79:7d:
                    59:90:72:7c:35:06:ae:9f:a2:5d:2b:ff:61:15:ca:
                    8f:a8:48:dd:19:11:26:26:f2:79:33:1f:44:c4:1a:
                    a7:c7:f2:bf:8d:b7:29:71:fa:5b:bf:aa:49:3d:c0:
                    dc:c1:b9:c9:d7:5f:a9:13:55:4a:72:fe:01:1f:52:
                    b0:e6:f2:96:d3:e0:d2:f3:43:84:f3:d5:32:05:64:
                    6f:0f:d1:5a:ce:8c:d9:1d:3d:34:60:ee:de:57:5a:
                    a8:6a:03:ee:63:23:4e:f4:fb:17:53:49:7c:ec:42:
                    13:dd:9d:7b:b1:9b:94:4f:e7:d9:25:c5:e9:7c:c0:
                    e0:4f:f3:24:16:2e:df:30:74:9c:63:54:64:73:59:
                    bb:76:df:b2:aa:cb:72:b0:f0:8a:12:c2:cc:ca:ed:
                    8d:5b:fe:45:59:c1:bd:44:4d:31:ed:3c:e0:3a:5a:
                    af:63:43:6d:05:24:2a:42:78:15:a3:7a:21:d8:93:
                    c3:22:72:66:44:4a:a4:04:e8:f8:92:35:5a:9f:62:
                    d1:bb:97:ab:75:72:cf:3b:9b:bd:92:66:7c:6d:41:
                    0b:06:3d:75:35:b2:e0:5a:30:8d:67:54:64:2f:37:
                    0f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F6:32:6E:6C:42:E6:A1:0D:73:E1:AE:43:B5:2C:3B:2D:2A:1A:5E
            X509v3 Authority Key Identifier:
                keyid:A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:82:5a:b6:a8:c9:5c:4d:2a:55:0e:10:76:04:b0:a1:79:7e:
         79:e9:cd:dd:72:46:74:52:9a:32:a8:61:d1:77:a7:21:34:99:
         4b:a0:80:28:8c:fc:30:61:73:49:b8:f6:98:b4:f4:51:b5:da:
         48:e9:e3:f0:a3:1b:07:57:f7:91:20:a4:42:bb:fe:af:74:c1:
         9d:9d:13:4d:98:07:df:a5:be:b0:0a:8a:dd:ca:53:5b:5c:cb:
         1a:a9:6c:08:f8:7d:e7:75:09:84:01:c5:a0:3a:c1:19:3b:36:
         26:06:c8:9d:e5:80:ed:3d:80:80:49:31:37:8f:02:a3:f9:5d:
         4e:21:bc:a1:2d:14:df:bf:51:23:7b:d5:27:f6:4d:56:36:24:
         06:bf:f6:5a:80:17:ec:2b:71:8d:9c:7e:53:52:95:18:2c:81:
         03:ba:3d:39:63:6d:d6:fd:dc:ec:8a:38:e9:fd:52:70:6d:8d:
         a1:ff:fd:c7:18:14:ca:15:36:eb:fd:bb:27:ad:7f:06:57:ce:
         6b:0f:88:c3:f7:43:63:63:b9:75:fa:0a:67:e7:80:d2:ca:31:
         cd:13:ac:79:54:1d:9b:52:b9:e8:78:21:fe:51:e2:b9:7d:95:
         d1:5c:ec:ad:42:1a:56:a8:70:14:59:2b:b0:b3:e0:8f:49:74:
         e4:ef:19:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:35 2025 by rpki-client on console.sobornost.net