Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/C0DA5845CF951A8ECD8332855BC18916639F81DF.mft
File:                     C0DA5845CF951A8ECD8332855BC18916639F81DF.mft (raw, json)
Hash identifier:          hqSGD1wv2ygsgK/VTjvkPLwaRVT5Qiszkw3sISZRE5c=
Subject key identifier:   AB:A7:33:10:FF:E7:F0:42:DE:29:4A:B9:E8:CE:DE:C3:EE:91:02:FB
Authority key identifier: C0:DA:58:45:CF:95:1A:8E:CD:83:32:85:5B:C1:89:16:63:9F:81:DF
Certificate issuer:       /CN=C0DA5845CF951A8ECD8332855BC18916639F81DF
Certificate serial:       6277C24BEB7B72649D7998A641EE83113D7642B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DA5845CF951A8ECD8332855BC18916639F81DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/C0DA5845CF951A8ECD8332855BC18916639F81DF.mft
Manifest number:          4A
Signing time:             Thu 24 Apr 2025 21:05:00 +0000
Manifest this update:     Thu 24 Apr 2025 21:00:00 +0000
Manifest next update:     Fri 25 Apr 2025 22:30:00 +0000
Files and hashes:         1: 323830343a373663383a3a2f33342d3334203d3e20323731313334.roa (hash: cy1ZdL8ROYurQYkKzg4Il+11Cczg3oYvqaJZUISWTpo=)
                          2: 3136372e3234392e39302e302f32342d3234203d3e20323731313334.roa (hash: A5DotxbFKTXV30FMcOiXArfceC9aQW4MC7vixrhDNn4=)
                          3: C0DA5845CF951A8ECD8332855BC18916639F81DF.crl (hash: lRwROZW4NVP/Lu/tarlgqqVKX8UZNRKg4D/1PfyVoBc=)
                          4: 3136372e3234392e38382e302f32332d3233203d3e20323731313334.roa (hash: pNZSAOMkBakIYY3S4ibgQqhnTPqlVDtL12N/DqwkOYU=)
                          5: 3136372e3234392e39312e302f32342d3234203d3e20323731313334.roa (hash: 4IeRpGA06N3A+Z3d+RGi0tAsm1KQ7o9QxMpUSEJw4jI=)
                          6: 323830343a373663383a3a2f33322d3332203d3e20323731313334.roa (hash: mM9Q6hIL3LPMCWezzh0BQAqakyUWDhchYrVfVwoqsfc=)
                          7: 323830343a373663383a383030303a3a2f33342d3334203d3e20323731313334.roa (hash: qTM2j4u8FS600DwwJc3JHhVce7+f0yzRHRln7+gYMZM=)
                          8: 323830343a373663383a383030303a3a2f33332d3333203d3e20323731313334.roa (hash: PnjJR2pOfaGiB3XiQa2ApOJvboxr+DDkCpOZ9TUO54k=)
                          9: 3136372e3234392e38382e302f32322d3232203d3e20323731313334.roa (hash: 9GJ1BV0cyrUC3iEB5uNqXeZwcaRdMX1j1jzPV3qjJIU=)
                          10: 323830343a373663383a3a2f33332d3333203d3e20323731313334.roa (hash: HAZOuZGSVJPLjCFOBsAiIzJxP28F9kQVH02cxgYKR2M=)
                          11: 323830343a373663383a343030303a3a2f33342d3334203d3e20323731313334.roa (hash: R7JFSd9/qrnKVZbrPwWUfpBO/zxSD5ojJRs/Ac/f/LE=)
                          12: 3136372e3234392e38392e302f32342d3234203d3e20323731313334.roa (hash: 4PAcp3xHepWz+3jtI9ZXWkqCNHsOQ1FvAUk4SVVZqzU=)
                          13: 3136372e3234392e39302e302f32332d3233203d3e20323731313334.roa (hash: Pn8PatVl27vV+H996BfD3IzvydmBNYGSGpUH/uxFsbo=)
                          14: 3136372e3234392e38382e302f32342d3234203d3e20323731313334.roa (hash: Xcd5nEc4Ex3VPs8C7fhCQMxCWOAFw76UDAg4LsGcCZY=)
                          15: 323830343a373663383a633030303a3a2f33342d3334203d3e20323731313334.roa (hash: 5uIe93GSUALOhODCdXORfoO890Fetdwoipkpihh6h9Q=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/C0DA5845CF951A8ECD8332855BC18916639F81DF.crl
                          rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/C0DA5845CF951A8ECD8332855BC18916639F81DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DA5845CF951A8ECD8332855BC18916639F81DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:77:c2:4b:eb:7b:72:64:9d:79:98:a6:41:ee:83:11:3d:76:42:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0DA5845CF951A8ECD8332855BC18916639F81DF
        Validity
            Not Before: Apr 24 21:00:00 2025 GMT
            Not After : Apr 25 22:30:00 2025 GMT
        Subject: CN=ABA73310FFE7F042DE294AB9E8CEDEC3EE9102FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:31:eb:7a:c2:65:94:c0:af:b8:8a:a4:ff:98:
                    64:68:cd:36:96:95:cd:2a:7a:01:23:41:2c:d8:97:
                    99:df:26:7e:25:28:d9:60:06:5a:23:d8:92:58:df:
                    b6:da:8a:d3:b5:d9:de:41:a2:2c:bd:56:ce:25:eb:
                    b0:29:b1:56:a1:5e:76:a4:12:07:50:b2:85:c6:01:
                    e2:58:40:b2:2a:25:ce:c7:97:68:34:8e:54:78:e5:
                    70:3a:8b:66:6f:1c:47:7a:74:0e:1f:f2:68:bc:24:
                    ba:1a:86:fc:21:03:d7:83:f6:94:7e:06:e7:cb:7d:
                    1e:f0:2c:b5:3e:af:40:7a:00:c1:5f:f4:42:0a:0d:
                    62:e6:d2:13:ec:ad:18:c4:f8:7c:89:fd:90:4b:5e:
                    b0:99:65:a9:91:fd:0b:eb:82:02:d6:f5:84:e8:9b:
                    d0:3d:27:1b:c8:db:f0:b8:8c:ae:40:41:54:48:52:
                    8f:fe:86:49:83:d2:de:0b:2f:91:74:6d:a3:de:10:
                    42:1d:13:dc:fc:67:65:98:02:4a:58:2e:59:4b:70:
                    d1:bc:c5:05:2d:2e:5b:1d:d9:b5:62:6f:b4:15:4d:
                    2c:f8:ef:67:0e:1d:fa:75:00:81:15:67:26:6c:f7:
                    21:ad:7e:e1:0e:6a:bb:3a:81:32:7c:f7:2c:b5:4d:
                    21:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A7:33:10:FF:E7:F0:42:DE:29:4A:B9:E8:CE:DE:C3:EE:91:02:FB
            X509v3 Authority Key Identifier:
                keyid:C0:DA:58:45:CF:95:1A:8E:CD:83:32:85:5B:C1:89:16:63:9F:81:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/C0DA5845CF951A8ECD8332855BC18916639F81DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DA5845CF951A8ECD8332855BC18916639F81DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/C0DA5845CF951A8ECD8332855BC18916639F81DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a9:cd:31:1a:9a:01:30:6c:4a:bd:0c:8d:6c:57:e9:94:33:
         87:29:d1:40:70:8a:51:1d:32:ed:8b:40:20:d8:80:9f:a4:66:
         75:2c:a9:e6:7d:a9:67:db:e1:6c:fe:57:6e:e8:f2:34:9e:6e:
         3e:bb:cc:09:c0:93:9b:01:97:8e:b1:21:3f:83:43:db:4b:6e:
         51:df:9c:7f:d6:09:73:a9:b1:43:fc:2c:8a:04:75:86:39:3e:
         6e:2f:77:b0:5b:6f:dd:0d:d7:22:22:04:72:41:f1:c4:cb:2f:
         4a:c9:d4:bb:f3:14:bf:1e:c4:2c:83:3d:b0:67:22:89:5b:29:
         98:50:f2:d4:9a:4d:ca:a7:68:b6:78:42:53:32:31:60:0d:36:
         fc:20:2a:09:c4:c2:72:c5:ce:0d:d4:66:57:52:56:2b:5b:32:
         25:15:2b:39:b9:bb:75:93:33:47:0a:5f:03:f4:07:90:07:9b:
         f2:e8:77:b0:58:fc:49:4f:8b:ff:1c:25:33:0a:18:9e:9c:81:
         ab:2a:36:1f:d0:b5:44:82:21:6c:f5:e8:b4:39:90:c4:57:c7:
         6d:34:00:23:f9:e8:39:e9:e2:c3:a2:13:23:50:62:02:8f:a9:
         45:6c:34:ae:b1:49:d0:9e:b0:9e:c1:55:c7:8c:9f:da:a4:80:
         3a:e8:fb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:52 2025 by rpki-client on console.sobornost.net