Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
File:                     A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft (raw, json)
Hash identifier:          CMRjgQdKrfvYufgp7yXejEYSWOljBzA/iCR/FspbZKE=
Subject key identifier:   72:81:49:4F:45:0F:50:FB:A7:D0:01:6F:17:07:7E:80:65:9D:A9:08
Authority key identifier: A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E
Certificate issuer:       /CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
Certificate serial:       73CC8AB8898137546947685D4F73415954F7FC39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
Manifest number:          024C
Signing time:             Mon 28 Apr 2025 19:00:00 +0000
Manifest this update:     Mon 28 Apr 2025 18:55:00 +0000
Manifest next update:     Tue 29 Apr 2025 19:00:00 +0000
Files and hashes:         1: 323830343a383038303a3a2f33342d3334203d3e20323731373534.roa (hash: 3ovTN9AIasCdTWBoskIU4oqlsI0dbT3aXe4z4ef17zk=)
                          2: 323830343a383038303a343030303a3a2f33342d3334203d3e20323731373534.roa (hash: Z76ovSANgHJGP+sM/lxSiStmUvcI+SG3aC8iOHrSWnM=)
                          3: A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl (hash: U676JXXoAH0fGxv13a6VUtxaER69FaDcu6xGAZkVmEY=)
                          4: 323830343a383038303a383030303a3a2f33332d3333203d3e20323731373534.roa (hash: s5l4q/3P2UU9UAG1MqM+KP+HHM7XZY6H/k7vZsXdtCo=)
                          5: 323830343a383038303a383030303a3a2f33342d3334203d3e20323731373534.roa (hash: 10wEGWQJjodShwtbNjfwSGtxzRRG6xY5FPd7dmvALjU=)
                          6: 323830343a383038303a3a2f33332d3333203d3e20323731373534.roa (hash: vp7GIr1AuxnLNDmVxonw4f1fVMYDa+c0mmvcWA0dXNE=)
                          7: 323830343a383038303a633030303a3a2f33342d3334203d3e20323731373534.roa (hash: SvqXoKeVyxMGMkyRqTX7O8wrkticDCUMEabiWX+eXY0=)
                          8: 323830343a383038303a3a2f33322d3332203d3e20323731373534.roa (hash: SDdJtxWMH6VIkQnfvEmAoo4GCxbrBmE2je5LpBEZHbY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl
                          rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:cc:8a:b8:89:81:37:54:69:47:68:5d:4f:73:41:59:54:f7:fc:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
        Validity
            Not Before: Apr 28 18:55:00 2025 GMT
            Not After : Apr 29 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:08:b4:1f:dc:8a:68:ab:c9:97:2e:b0:d5:cd:
                    1d:c0:64:36:35:d0:95:13:64:5f:bc:7f:47:1a:ad:
                    47:29:a2:ff:ae:9b:b8:30:b6:17:00:8b:f9:45:8c:
                    41:62:53:c6:34:ac:1d:2f:3a:3c:ef:aa:1c:66:80:
                    d3:5d:2a:0f:2a:ec:6d:33:ae:b8:8e:ef:87:cd:eb:
                    b6:46:24:5d:d1:7b:8f:37:3c:8b:64:76:cf:c4:3a:
                    7c:c0:d8:32:cd:9b:7d:91:61:95:13:b4:b5:ab:61:
                    72:62:71:7e:d2:9d:f0:fd:5e:29:c9:ec:95:0e:ec:
                    b1:38:57:b3:03:42:f2:2a:68:a4:8f:01:87:1d:b9:
                    38:af:3c:06:c2:a6:24:48:17:43:d3:fe:75:a6:9f:
                    b2:a6:cf:20:ce:26:05:80:61:10:f2:22:44:4d:68:
                    cf:32:5b:df:97:94:94:44:8c:21:5d:ff:87:fd:a5:
                    45:16:97:24:ce:db:9c:ea:24:65:04:aa:c2:32:a9:
                    7f:5b:36:1b:3a:22:9f:9f:3a:6f:f9:4b:a8:e5:00:
                    ee:3c:50:4f:c9:4a:29:c7:54:68:7c:41:fd:f0:c9:
                    5f:5c:13:69:7b:9b:92:03:4f:b7:03:07:32:73:91:
                    4d:ee:28:e1:89:6b:48:2e:b1:96:39:f8:c2:52:64:
                    bb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:81:49:4F:45:0F:50:FB:A7:D0:01:6F:17:07:7E:80:65:9D:A9:08
            X509v3 Authority Key Identifier:
                keyid:A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0a:f5:7c:4b:16:f0:19:c2:96:36:91:4d:6c:5b:a1:63:9b:
         25:73:04:41:92:98:d4:da:ca:ad:9a:43:0e:34:2d:a6:b3:d2:
         db:59:ce:84:61:32:57:fa:5d:06:10:7b:bd:4c:16:35:78:cc:
         55:e6:c0:93:d8:a2:e5:ed:98:0e:7d:1a:49:76:24:95:09:16:
         03:e6:20:8b:57:ee:aa:a5:cc:71:a6:af:92:07:6f:df:50:8e:
         4f:a6:ac:b6:e0:89:0e:41:71:84:49:de:05:bf:56:6b:22:4b:
         75:10:f8:b1:cb:c8:62:59:15:4a:84:91:10:d3:a4:f1:9e:84:
         ad:b5:66:9a:b5:e1:44:6b:71:30:23:2c:23:8d:6b:41:a9:61:
         96:9e:db:ed:8b:e7:aa:65:4c:85:8f:ef:31:f1:b8:e9:1d:ab:
         39:95:9a:fd:60:51:08:66:4f:df:42:61:39:16:06:a1:a2:f6:
         dc:63:6c:61:dd:e9:70:a1:0f:8a:f3:4b:0e:31:36:08:9a:04:
         d5:48:de:cc:48:d7:b0:1e:cb:d2:d3:3e:28:13:e1:c3:1e:4a:
         dc:b3:d1:80:fd:8e:c1:73:56:98:1d:1c:ed:d5:39:95:3b:46:
         cc:ef:2d:68:22:c3:b3:c8:ce:78:e2:41:ad:b0:0a:e1:c5:4d:
         8f:d4:58:28
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:04 2025 by rpki-client on console.sobornost.net