Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/2557D5F7321503E8A12A274EBA57E5064A6659B8.mft
File:                     2557D5F7321503E8A12A274EBA57E5064A6659B8.mft (raw, json)
Hash identifier:          Z6eDSzAS8elkh+91Ky+dgEZLbVamaP0Y8gtqWLgFDtY=
Subject key identifier:   43:06:40:6B:86:6B:A0:CB:9A:A3:FB:73:7B:63:00:79:A1:D6:1F:B2
Authority key identifier: 25:57:D5:F7:32:15:03:E8:A1:2A:27:4E:BA:57:E5:06:4A:66:59:B8
Certificate issuer:       /CN=2557D5F7321503E8A12A274EBA57E5064A6659B8
Certificate serial:       2029957EBF6EAE30D974D502BA6A7E409DC1C14E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2557D5F7321503E8A12A274EBA57E5064A6659B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/2557D5F7321503E8A12A274EBA57E5064A6659B8.mft
Manifest number:          09
Signing time:             Mon 28 Apr 2025 15:14:49 +0000
Manifest this update:     Mon 28 Apr 2025 15:09:49 +0000
Manifest next update:     Tue 29 Apr 2025 15:52:49 +0000
Files and hashes:         1: 323830343a363161633a3a2f33322d313238203d3e20323639323439.roa (hash: WHibLTfnV8c6GNuaXvcXxHY6gCAPxjlE0nDe2V+Tchg=)
                          2: 34352e3138332e302e302f32322d3332203d3e20323639323439.roa (hash: 5r96YMPFiP2kjXBo+cXxhCSWPBYcR+myNCGas8pnzec=)
                          3: 2557D5F7321503E8A12A274EBA57E5064A6659B8.crl (hash: QQ+zZi9KNfHL09AUmeNQAo5gr69TLbgu1zRjFaTZG9M=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/2557D5F7321503E8A12A274EBA57E5064A6659B8.crl
                          rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/2557D5F7321503E8A12A274EBA57E5064A6659B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2557D5F7321503E8A12A274EBA57E5064A6659B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:29:95:7e:bf:6e:ae:30:d9:74:d5:02:ba:6a:7e:40:9d:c1:c1:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2557D5F7321503E8A12A274EBA57E5064A6659B8
        Validity
            Not Before: Apr 28 15:09:49 2025 GMT
            Not After : Apr 29 15:52:49 2025 GMT
        Subject: CN=4306406B866BA0CB9AA3FB737B630079A1D61FB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:48:2a:8f:06:86:1e:02:b0:8a:ae:36:60:8d:
                    7a:60:8e:58:41:5a:a9:25:53:4c:0b:cb:55:75:41:
                    03:93:b0:39:86:da:74:ad:72:13:65:5f:d2:d3:72:
                    9e:9c:96:f4:a2:b8:48:e7:07:58:57:46:62:bf:19:
                    a2:37:49:97:97:e0:79:c0:a6:ed:66:cd:5e:11:6b:
                    05:fb:13:5d:30:0a:82:fc:44:d6:2d:72:60:b9:f2:
                    1d:17:18:da:53:b9:98:7f:fc:c4:18:5c:44:d9:d9:
                    f6:73:57:23:bd:96:d8:7c:7a:f0:a7:e1:46:44:12:
                    5a:be:9f:c4:76:d2:13:55:18:fa:16:27:bf:3a:95:
                    af:91:a9:ff:c3:20:72:b9:be:e9:6e:57:39:4d:a0:
                    2c:c6:72:63:37:21:fe:f0:bb:6d:f4:28:58:04:d8:
                    be:b5:4f:aa:3f:94:93:32:da:de:76:28:e5:2e:f2:
                    b5:26:4f:e5:8f:5d:d7:87:d3:7b:ed:63:fa:e9:49:
                    21:b2:c0:71:ea:2c:c0:fa:95:c5:5d:a2:40:94:31:
                    42:91:c9:e9:d1:30:4d:c3:0d:ce:5c:97:1a:75:f8:
                    3e:02:c4:42:eb:39:79:59:86:05:b7:03:f7:14:01:
                    b5:53:c9:cf:3a:f9:45:38:7e:ed:7c:77:c0:75:9b:
                    01:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:06:40:6B:86:6B:A0:CB:9A:A3:FB:73:7B:63:00:79:A1:D6:1F:B2
            X509v3 Authority Key Identifier:
                keyid:25:57:D5:F7:32:15:03:E8:A1:2A:27:4E:BA:57:E5:06:4A:66:59:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/2557D5F7321503E8A12A274EBA57E5064A6659B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2557D5F7321503E8A12A274EBA57E5064A6659B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/2557D5F7321503E8A12A274EBA57E5064A6659B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:34:85:4a:c5:92:2a:7b:04:04:01:f2:ec:84:32:2f:55:b0:
         2a:45:61:ad:c7:62:6d:e5:86:02:bf:4e:af:3b:19:c1:1b:c2:
         5d:47:ee:04:89:1a:73:95:d9:9d:c2:eb:97:04:aa:73:5e:30:
         47:8f:41:ec:ca:f4:39:8f:ea:40:8a:71:f2:b2:4a:07:74:37:
         6c:be:27:e4:2c:c0:4e:7c:8a:02:2e:08:dc:32:19:02:f9:67:
         17:f9:ff:a7:12:ce:95:1e:e2:9b:c9:2b:51:89:16:34:52:a4:
         cc:dc:c3:54:1d:4c:ba:60:ff:5a:f8:09:81:de:68:2d:fe:5d:
         1d:db:1c:f0:78:c6:99:66:80:48:3f:20:8e:57:3f:4a:f6:58:
         54:2a:2d:7e:41:05:0d:9d:2f:52:2e:35:85:ad:62:f6:48:74:
         a5:38:88:57:47:3a:8a:7f:90:6f:00:1b:0f:51:1d:ab:41:48:
         0e:55:34:15:a3:63:37:99:11:c2:0c:d0:95:aa:2b:42:13:f1:
         b3:98:f7:28:35:58:a8:d2:52:d7:a4:d8:d4:49:3c:d4:a2:d4:
         e1:47:2e:c5:17:4f:da:84:a4:f2:88:2e:86:71:17:df:a3:91:
         ce:6a:db:1f:0d:f3:6d:df:0e:ce:4f:0e:bb:60:51:98:e1:96:
         85:13:2d:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUICmVfr9urjDZdNUCump+QJ3BwU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU1N0Q1RjczMjE1MDNFOEExMkEyNzRFQkE1N0U1MDY0
QTY2NTlCODAeFw0yNTA0MjgxNTA5NDlaFw0yNTA0MjkxNTUyNDlaMDMxMTAvBgNV
BAMTKDQzMDY0MDZCODY2QkEwQ0I5QUEzRkI3MzdCNjMwMDc5QTFENjFGQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfSCqPBoYeArCKrjZgjXpgjlhB
WqklU0wLy1V1QQOTsDmG2nStchNlX9LTcp6clvSiuEjnB1hXRmK/GaI3SZeX4HnA
pu1mzV4RawX7E10wCoL8RNYtcmC58h0XGNpTuZh//MQYXETZ2fZzVyO9lth8evCn
4UZEElq+n8R20hNVGPoWJ786la+Rqf/DIHK5vuluVzlNoCzGcmM3If7wu230KFgE
2L61T6o/lJMy2t52KOUu8rUmT+WPXdeH03vtY/rpSSGywHHqLMD6lcVdokCUMUKR
yenRME3DDc5clxp1+D4CxELrOXlZhgW3A/cUAbVTyc86+UU4fu18d8B1mwHnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQwZAa4ZroMuao/tze2MAeaHWH7IwHwYDVR0j
BBgwFoAUJVfV9zIVA+ihKidOulflBkpmWbgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1E2Z2RlWWFHcWRwUDZTWTlaSHNLYjVxYzJyRG05WlpZN1lMdzNhZW1y
Z1ovMC8yNTU3RDVGNzMyMTUwM0U4QTEyQTI3NEVCQTU3RTUwNjRBNjY1OUI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1NTdENUY3MzIxNTAzRThB
MTJBMjc0RUJBNTdFNTA2NEE2NjU5QjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1E2Z2RlWWFHcWRwUDZTWTlaSHNLYjVxYzJyRG05WlpZN1lMdzNhZW1yZ1ovMC8y
NTU3RDVGNzMyMTUwM0U4QTEyQTI3NEVCQTU3RTUwNjRBNjY1OUI4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApTSFSsWSKnsEBAHy7IQyL1WwKkVhrcdibeWGAr9OrzsZwRvCXUfuBIkac5XZ
ncLrlwSqc14wR49B7Mr0OY/qQIpx8rJKB3Q3bL4n5CzATnyKAi4I3DIZAvlnF/n/
pxLOlR7im8krUYkWNFKkzNzDVB1MumD/WvgJgd5oLf5dHdsc8HjGmWaASD8gjlc/
SvZYVCotfkEFDZ0vUi41ha1i9kh0pTiIV0c6in+QbwAbD1Edq0FIDlU0FaNjN5kR
wgzQlaorQhPxs5j3KDVYqNJS16TY1Ek81KLU4UcuxRdP2oSk8oguhnEX36ORzmrb
Hw3zbd8Ozk8Ou2BRmOGWhRMtjg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:38:00 2025 by rpki-client on console.sobornost.net