Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.mft
File:                     B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.mft (raw, json)
Hash identifier:          W/UVp0LPv2PM1femDDfOWiUysNY6HmdWh/NKiUpT4cw=
Subject key identifier:   93:4F:B6:EC:D9:4A:63:66:3E:BA:62:D9:F8:F6:38:55:26:62:F5:4B
Authority key identifier: B0:4E:CA:62:1E:6F:CB:90:F1:46:9D:B6:E8:9A:D4:D2:DE:D7:9C:C3
Certificate issuer:       /CN=B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3
Certificate serial:       136021783C048CB825B7E60E7F8204E13991F0FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.mft
Manifest number:          34
Signing time:             Thu 24 Apr 2025 18:55:53 +0000
Manifest this update:     Thu 24 Apr 2025 18:50:53 +0000
Manifest next update:     Fri 25 Apr 2025 22:01:53 +0000
Files and hashes:         1: 323830343a383237303a633030303a3a2f33342d3334203d3e203631363038.roa (hash: QWMpT15auvi5IqVQCQkkLDo88tzBpoCVWSbjXMc0oYA=)
                          2: 323830343a383237303a383030303a3a2f33342d3334203d3e203631363038.roa (hash: JcWJLpbpMgx/WCcUDdztbuxKF/71Ozn0M8Z1sNNX/k4=)
                          3: 323830343a383237303a383030303a3a2f33332d3333203d3e203631363038.roa (hash: tzqdbTV9/xOI7L3sK81V8YTD8VUcYGJCbAZ27S67e+8=)
                          4: 323830343a383237303a343030303a3a2f33342d3334203d3e203631363038.roa (hash: GPNYtEq23d6WWeNjnxhyON9srNvwLK8FegrRlTLG6nw=)
                          5: 323830343a383237303a3a2f33322d3332203d3e203631363038.roa (hash: H9qowQF/SpXmz3S5/d5U/rTdCgt8/nzkpD2mndzgZdo=)
                          6: B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.crl (hash: JQPIo89pbUbdRjum0wJOne6yxsCqIhr1HDb2fPLc0ZA=)
                          7: 323830343a383237303a3a2f33342d3334203d3e203631363038.roa (hash: IQgcZZ2DHEikM5VHQlrG262INYwomwNFf25WIz8wKKU=)
                          8: 323830343a383237303a3a2f33332d3333203d3e203631363038.roa (hash: BNCGrDkWytMpPM9AhJBlZE9newk1iIjDVUL2IMms0Po=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.crl
                          rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:60:21:78:3c:04:8c:b8:25:b7:e6:0e:7f:82:04:e1:39:91:f0:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3
        Validity
            Not Before: Apr 24 18:50:53 2025 GMT
            Not After : Apr 25 22:01:53 2025 GMT
        Subject: CN=934FB6ECD94A63663EBA62D9F8F638552662F54B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3d:e5:9a:d9:34:d5:d0:f8:07:cd:8e:36:4f:
                    47:f4:44:44:94:cc:73:10:83:b9:35:cd:6e:3c:56:
                    12:b6:54:62:82:f7:7b:1f:92:b0:15:eb:64:76:ae:
                    cb:6d:bf:2f:e8:9d:dc:82:92:24:7e:f6:3b:ff:02:
                    9d:93:68:e0:c3:ba:c3:78:cb:ff:05:0b:46:0e:37:
                    61:51:17:7b:2d:e6:3c:b4:66:b4:41:39:dc:e0:42:
                    dd:1e:99:71:79:66:af:32:01:e9:bd:48:a4:8f:9f:
                    87:1e:7c:e7:90:39:8f:2b:fd:7f:f1:32:b9:02:c8:
                    11:d8:16:0c:2f:97:3d:08:2b:13:f2:d2:24:51:5f:
                    b2:da:28:4c:ec:db:ca:e9:47:64:25:bd:78:f6:ba:
                    eb:fa:b3:47:81:71:e7:99:c9:86:19:e0:22:d5:5f:
                    05:79:de:f1:35:f9:f5:93:eb:8b:52:46:33:84:4e:
                    fa:ca:c7:00:49:84:18:68:92:6f:6d:2c:a4:40:46:
                    9f:0b:48:1f:64:4a:1b:f4:eb:15:83:76:a9:c4:2d:
                    62:d8:63:4b:43:cd:ed:02:cd:30:81:2c:19:f3:61:
                    d9:45:01:28:bf:21:e0:3a:05:95:92:70:d3:a3:ed:
                    fe:53:c1:ab:d2:eb:06:fd:a9:84:e4:5d:07:c1:26:
                    b4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4F:B6:EC:D9:4A:63:66:3E:BA:62:D9:F8:F6:38:55:26:62:F5:4B
            X509v3 Authority Key Identifier:
                keyid:B0:4E:CA:62:1E:6F:CB:90:F1:46:9D:B6:E8:9A:D4:D2:DE:D7:9C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:24:b6:a1:a0:8c:18:63:43:e0:d7:09:b3:30:24:f9:3a:96:
         a1:14:cb:3a:a1:2b:f7:c6:79:59:9d:9f:85:f5:41:d7:27:69:
         42:aa:a8:54:a9:6d:2f:bf:c1:96:c5:e5:57:ff:60:c3:0d:77:
         9b:27:d4:d3:e3:d5:08:7a:40:0e:2d:4b:a7:b6:89:71:24:60:
         40:34:2c:bf:16:71:27:47:c0:9a:36:1f:15:7f:3e:9c:ee:69:
         77:80:c6:00:a6:ab:fe:da:52:58:d4:88:0c:6e:d0:a5:ca:4c:
         2a:10:27:7e:b5:4c:07:2b:94:65:73:59:a0:18:08:f9:8e:c6:
         48:c9:df:30:9b:87:10:a2:7e:6b:84:36:68:68:d7:62:d6:78:
         06:f5:73:a6:ac:08:5d:c8:8c:74:28:e0:91:11:b7:53:6d:5e:
         fe:57:87:75:ce:00:4c:09:97:17:95:2a:79:8e:42:6f:14:85:
         74:99:1a:5a:3b:67:a9:47:4a:38:0a:40:94:bf:4d:30:0a:f2:
         32:32:d4:1b:b5:dc:15:8c:ec:33:63:42:0a:1f:28:ac:cd:3c:
         55:ad:98:eb:7d:db:e1:d8:f9:ea:bf:b2:2f:b7:ba:77:cc:f3:
         3e:a7:cc:48:42:d4:de:40:3f:07:9d:2e:a5:41:67:0e:10:78:
         3f:f9:14:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:39 2025 by rpki-client on console.sobornost.net