Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.mft
File:                     1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.mft (raw, json)
Hash identifier:          H0jpcmNkH29WIVGm4U0nGdDLHt1r+JLS4jF5+a77Axs=
Subject key identifier:   C4:ED:0C:2E:10:3F:9E:AB:6C:6E:2C:32:97:61:4C:DD:15:E3:55:2D
Authority key identifier: 10:33:FD:76:52:BC:4E:50:27:EF:F9:C0:EA:46:34:A9:7B:32:A7:CA
Certificate issuer:       /CN=1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA
Certificate serial:       4679BFFB232F2B223711EC8F249B174E3BD97C6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.mft
Manifest number:          54
Signing time:             Thu 24 Apr 2025 19:20:40 +0000
Manifest this update:     Thu 24 Apr 2025 19:15:40 +0000
Manifest next update:     Fri 25 Apr 2025 20:58:40 +0000
Files and hashes:         1: 1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.crl (hash: HwX6G2yp5az+xq4ALWdFl4Z5cRytQd6nxduEIW1qQGA=)
                          2: 323830343a386532633a3a2f33322d3332203d3e20323632333433.roa (hash: RszVe3EkU3zkYePH3CtR4SG3a27/BRmju8ujVD3calc=)
                          3: 323830343a386532633a3a2f33322d3332203d3e203236313632.roa (hash: ghov5FQ2/Zw81NpUwBJyZ9lv0tuh1yLgP0BM14bZ0xY=)
                          4: 323830343a386532633a3a2f33322d3332203d3e20323733343038.roa (hash: TjL3QIhlmwMUKANzVUvY5FMIsc8Y38WpOg1RmfVYWm0=)
                          5: 323830343a386532633a3a2f33322d3332203d3e203230343733.roa (hash: hOzIcJdNd/RxgEaXvXyg9e9Qetc0Ol9pDgV2OH3wozI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.crl
                          rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:58:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:79:bf:fb:23:2f:2b:22:37:11:ec:8f:24:9b:17:4e:3b:d9:7c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA
        Validity
            Not Before: Apr 24 19:15:40 2025 GMT
            Not After : Apr 25 20:58:40 2025 GMT
        Subject: CN=C4ED0C2E103F9EAB6C6E2C3297614CDD15E3552D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2e:2f:9b:54:51:48:23:43:a5:c1:4b:a3:31:
                    23:f5:34:36:87:03:91:c9:0e:22:5b:1a:c2:21:45:
                    ec:54:2c:d0:ba:2c:0f:3d:0f:63:99:a8:a6:8d:fc:
                    0c:7f:bc:cb:be:8d:a5:cb:12:97:70:f8:73:c9:d2:
                    e4:37:37:64:9a:57:ac:7e:dc:b3:f6:ba:6b:72:4e:
                    f5:0c:e0:06:68:ed:f4:3e:bc:ae:4b:fa:00:8a:a3:
                    f0:07:d2:50:9b:e4:9c:82:1a:8b:10:1d:fb:31:e1:
                    be:56:4c:60:89:29:e2:10:9e:29:f3:c3:15:b2:a2:
                    04:d8:2a:bb:f8:61:de:44:ad:69:0e:63:c8:b7:39:
                    ab:d2:dd:c7:ff:2d:e5:d6:18:2e:85:bf:45:f2:8f:
                    ae:b0:c3:da:9f:3a:94:be:88:09:85:7a:ad:f7:69:
                    1b:5e:37:03:78:99:c0:ec:bb:8b:d9:7f:22:e0:37:
                    2b:67:64:d0:29:5d:99:dd:54:ec:f9:2a:0b:06:90:
                    60:f8:9f:c8:ee:37:62:43:c5:a7:14:70:81:72:d4:
                    c6:20:0e:cb:48:ab:e5:43:84:16:5c:f1:23:ca:dc:
                    d8:62:18:02:2f:a2:37:71:92:20:1f:1d:a9:13:21:
                    8a:69:c6:16:22:ba:ce:b5:ea:1e:0d:98:a7:ca:e0:
                    6d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:ED:0C:2E:10:3F:9E:AB:6C:6E:2C:32:97:61:4C:DD:15:E3:55:2D
            X509v3 Authority Key Identifier:
                keyid:10:33:FD:76:52:BC:4E:50:27:EF:F9:C0:EA:46:34:A9:7B:32:A7:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:cd:9a:70:a3:34:0e:88:5f:d8:78:3c:bc:07:98:60:0a:e4:
         6a:ff:d9:60:6e:d4:9d:e4:62:29:4c:af:e6:f8:03:13:6c:c7:
         f6:96:b7:0b:ad:35:50:00:e3:31:59:d1:63:87:a2:52:a8:f3:
         0f:97:a5:c6:09:6a:5f:8d:f1:ce:5c:57:4c:04:41:1c:e7:7e:
         f6:cc:ce:de:a3:8a:3c:ed:b6:a8:9e:aa:8d:7f:f4:c1:2e:cf:
         fd:71:c7:eb:56:ee:54:91:46:48:60:d9:5c:2a:12:20:ea:54:
         e8:c2:7e:ac:fd:06:59:69:67:9f:fb:67:c6:c8:82:20:88:5b:
         a8:9e:e3:e3:86:e0:bc:b5:7b:c8:20:5a:c3:e1:b8:6e:ff:03:
         f0:41:9f:03:1c:db:2c:d5:4e:e2:65:cb:f1:87:4f:b0:aa:e6:
         11:ac:eb:ce:eb:b9:9e:cc:6e:c4:a7:d3:a7:f1:92:bb:00:38:
         06:bf:07:a8:bf:cc:28:5d:94:76:24:05:75:4c:e9:d8:7d:b6:
         44:3f:57:bb:0f:e6:55:61:af:87:da:85:60:fa:0e:d4:f4:fe:
         3a:29:f6:cc:dd:55:97:a6:94:4d:3b:3e:a0:cb:3b:a9:6a:ef:
         63:86:2e:dc:ad:41:e4:96:f7:5d:db:76:95:c6:a1:8a:b2:56:
         f1:a9:03:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURnm/+yMvKyI3EeyPJJsXTjvZfG4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAzM0ZENzY1MkJDNEU1MDI3RUZGOUMwRUE0NjM0QTk3
QjMyQTdDQTAeFw0yNTA0MjQxOTE1NDBaFw0yNTA0MjUyMDU4NDBaMDMxMTAvBgNV
BAMTKEM0RUQwQzJFMTAzRjlFQUI2QzZFMkMzMjk3NjE0Q0REMTVFMzU1MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnLi+bVFFII0OlwUujMSP1NDaH
A5HJDiJbGsIhRexULNC6LA89D2OZqKaN/Ax/vMu+jaXLEpdw+HPJ0uQ3N2SaV6x+
3LP2umtyTvUM4AZo7fQ+vK5L+gCKo/AH0lCb5JyCGosQHfsx4b5WTGCJKeIQninz
wxWyogTYKrv4Yd5ErWkOY8i3OavS3cf/LeXWGC6Fv0Xyj66ww9qfOpS+iAmFeq33
aRteNwN4mcDsu4vZfyLgNytnZNApXZndVOz5KgsGkGD4n8juN2JDxacUcIFy1MYg
DstIq+VDhBZc8SPK3NhiGAIvojdxkiAfHakTIYppxhYius616h4NmKfK4G1VAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxO0MLhA/nqtsbiwyl2FM3RXjVS0wHwYDVR0j
BBgwFoAUEDP9dlK8TlAn7/nA6kY0qXsyp8owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1RSdlNaUFRweTNmaGVXcG1jUG15VUZhYkNuZldvZ1JNZnBWTGhZY2h0
SlovMC8xMDMzRkQ3NjUyQkM0RTUwMjdFRkY5QzBFQTQ2MzRBOTdCMzJBN0NBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwMzNGRDc2NTJCQzRFNTAy
N0VGRjlDMEVBNDYzNEE5N0IzMkE3Q0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1RSdlNaUFRweTNmaGVXcG1jUG15VUZhYkNuZldvZ1JNZnBWTGhZY2h0SlovMC8x
MDMzRkQ3NjUyQkM0RTUwMjdFRkY5QzBFQTQ2MzRBOTdCMzJBN0NBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHs2acKM0Dohf2Hg8vAeYYArkav/ZYG7UneRiKUyv5vgDE2zH9pa3C601UADj
MVnRY4eiUqjzD5elxglqX43xzlxXTARBHOd+9szO3qOKPO22qJ6qjX/0wS7P/XHH
61buVJFGSGDZXCoSIOpU6MJ+rP0GWWlnn/tnxsiCIIhbqJ7j44bgvLV7yCBaw+G4
bv8D8EGfAxzbLNVO4mXL8YdPsKrmEazrzuu5nsxuxKfTp/GSuwA4Br8HqL/MKF2U
diQFdUzp2H22RD9Xuw/mVWGvh9qFYPoO1PT+Oin2zN1Vl6aUTTs+oMs7qWrvY4Yu
3K1B5Jb3Xdt2lcahirJW8akDrw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:53 2025 by rpki-client on console.sobornost.net