Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.mft
File:                     F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.mft (raw, json)
Hash identifier:          JKP6Lba8iM+ty0FoeSYf8IoB8BsjypJKIgViNfHnQkA=
Subject key identifier:   86:7F:29:B9:D0:FA:66:B9:47:65:C9:BB:83:A9:F4:FB:F0:AF:90:F8
Authority key identifier: F4:C4:14:A2:9F:49:C8:07:B0:E5:02:CA:24:9F:B7:E2:3D:9F:2E:D7
Certificate issuer:       /CN=F4C414A29F49C807B0E502CA249FB7E23D9F2ED7
Certificate serial:       34720FC2985F523CC8A1E535982280AE789CCC4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.mft
Manifest number:          01D0
Signing time:             Mon 28 Apr 2025 03:45:15 +0000
Manifest this update:     Mon 28 Apr 2025 03:40:15 +0000
Manifest next update:     Tue 29 Apr 2025 06:46:15 +0000
Files and hashes:         1: 34352e3137332e33322e302f32322d3232203d3e20323638383038.roa (hash: MEPxMVpBO3VLYov6iVhYFlWFh6O9nVi5+waxilgLnSQ=)
                          2: F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.crl (hash: r9yUfvH14bk187uGgkp9VeE9eCA6TZ1HlQaOWyufS+E=)
                          3: 323830343a356166303a3a2f33322d313238203d3e20323638383038.roa (hash: OwrapX32h/ywz4sUg3mSeaJJwWwwsVhb3Y/lGdEvg1U=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.crl
                          rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:72:0f:c2:98:5f:52:3c:c8:a1:e5:35:98:22:80:ae:78:9c:cc:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C414A29F49C807B0E502CA249FB7E23D9F2ED7
        Validity
            Not Before: Apr 28 03:40:15 2025 GMT
            Not After : Apr 29 06:46:15 2025 GMT
        Subject: CN=867F29B9D0FA66B94765C9BB83A9F4FBF0AF90F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c1:6e:09:52:81:40:fb:af:b0:b9:48:b6:c8:
                    15:d6:f0:39:23:69:cb:63:89:48:15:a3:0c:79:2f:
                    59:42:7d:d8:6d:93:d3:96:e0:8d:77:f4:78:42:f2:
                    4c:65:9a:4c:5d:27:e7:35:2f:12:95:73:54:2d:f4:
                    c3:ff:23:06:9e:be:34:a1:0a:99:f1:b1:a8:18:5f:
                    0e:3d:82:52:ee:8e:c0:48:ee:b8:42:e8:bf:b0:16:
                    1a:1f:43:6a:18:27:88:d7:fc:63:ab:6a:4f:cd:2a:
                    63:ec:d0:3c:ed:b0:3a:b3:2d:7a:76:61:96:17:9e:
                    89:06:68:37:24:d5:0a:dc:87:67:bd:ee:c6:1c:6a:
                    96:4b:d7:fa:af:20:55:38:d6:98:ab:de:5a:c5:96:
                    e8:e5:2e:e8:85:6e:b4:30:8d:17:26:5f:c5:95:94:
                    a6:a8:aa:e8:06:3d:ce:34:82:aa:f0:2d:97:b2:7f:
                    23:2e:31:a7:1d:c4:42:69:29:80:05:ed:86:60:ff:
                    28:45:54:c1:f8:0d:68:92:79:63:ef:b4:e4:32:1e:
                    82:17:50:6f:ba:fd:82:e7:27:d4:aa:e5:49:bd:2a:
                    93:b7:a6:4f:80:23:5d:24:ea:57:6a:c3:f4:bd:95:
                    2b:18:3b:04:aa:2b:b5:2d:ad:b5:93:a1:c0:75:43:
                    bc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7F:29:B9:D0:FA:66:B9:47:65:C9:BB:83:A9:F4:FB:F0:AF:90:F8
            X509v3 Authority Key Identifier:
                keyid:F4:C4:14:A2:9F:49:C8:07:B0:E5:02:CA:24:9F:B7:E2:3D:9F:2E:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:fa:1b:56:b8:51:4f:b8:b8:84:fc:be:5d:75:2f:82:33:cc:
         6e:ea:c4:f7:2f:4b:1e:8d:45:52:8f:58:da:5a:a3:71:3b:5c:
         63:d0:e3:11:31:0c:f3:fd:33:69:4d:a2:d3:6c:0d:dc:a9:be:
         1e:16:49:bc:2b:83:4f:e0:cf:78:97:76:c3:44:d3:61:36:c9:
         eb:f7:46:00:cb:38:56:d0:f1:38:6a:7c:09:8b:79:28:5f:d4:
         7d:b4:a6:c2:8e:eb:fc:58:3c:ed:76:ae:21:f8:10:2c:f6:a9:
         e6:d6:02:52:6c:3c:a8:e7:b1:71:42:f5:12:3a:e6:04:16:dc:
         84:c2:8f:73:63:83:eb:b7:15:54:f4:ce:c9:fc:73:f1:c6:81:
         a8:f8:4a:c6:77:32:b1:13:35:2d:72:e6:ea:6b:99:3e:05:9e:
         02:5d:1f:d2:26:3e:3b:6f:21:79:2f:72:a6:f8:d1:1e:43:33:
         e8:19:95:cd:55:21:52:79:ea:1b:ef:be:8e:e7:15:63:6a:1e:
         13:a3:e2:a2:70:c0:0b:80:02:53:49:1b:3c:0c:fd:b0:28:9f:
         4f:55:e1:ab:6c:8a:d4:2d:d4:77:8f:bf:ba:2a:c1:24:18:72:
         fe:47:74:fb:1f:a3:33:7a:c2:16:c8:95:2e:de:1e:62:03:48:
         a2:c4:bc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:28 2025 by rpki-client on console.sobornost.net