Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
File:                     4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft (raw, json)
Hash identifier:          UVtrMZYDq3XKwmknLt3arGFZJmc1AX0dF5lmxqzRy7U=
Subject key identifier:   7A:FA:1A:18:E0:95:B5:C2:AE:84:C9:CF:A4:31:D3:CB:31:1B:AC:00
Authority key identifier: 4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7
Certificate issuer:       /CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
Certificate serial:       0B5FB45A15E3BFFA0005639FA7E6CC615CD7B2B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
Manifest number:          01B2
Signing time:             Thu 24 Apr 2025 22:16:19 +0000
Manifest this update:     Thu 24 Apr 2025 22:11:19 +0000
Manifest next update:     Sat 26 Apr 2025 01:18:19 +0000
Files and hashes:         1: 323830343a6533343a3a2f33322d313238203d3e203631383839.roa (hash: OzX5IHOlyBKbpRBAH/RiuoBYJO1lVDjI2j6PLg2Jvtk=)
                          2: 3230302e3134332e36342e302f31382d3332203d3e203134383430.roa (hash: ZuO3760agCW6ki2IUMCtyhYJ6ZjbnFPlmjd4mvq3Lt8=)
                          3: 3230302e3231352e3230382e302f32302d3332203d3e203134383430.roa (hash: krSzHLioVYLr4kbLbIswotFQEIGxmwRu7qzr5tCanBw=)
                          4: 3137372e3135322e3138342e302f32322d3332203d3e203631383839.roa (hash: CNrc2CMT9gGIDdU+PspWyupaLeF4mHfI0RnOLwk8fqc=)
                          5: 3138362e3231312e3132382e302f31372d3332203d3e203134383430.roa (hash: il+qgVUwyIL8etwV4bR91jtFEHAWZP6Wt41hrMYV8+M=)
                          6: 3230312e31362e36342e302f31382d3332203d3e203134383430.roa (hash: p7nHpqDwPVMlOxuB18aTwBi5cY5ihmBxAYHdAWED2Q8=)
                          7: 3230302e3139352e3232342e302f31392d3332203d3e203631383839.roa (hash: 50NQDQOpt2HbD4K5uxmWv4jkLs7gPGjfZ02DsrEWY+o=)
                          8: 3230302e302e33322e302f32302d3332203d3e203631383839.roa (hash: bbgPAEyLCDOGc2W4J5pLkHQG6N6rjVF0AjWKU9noISw=)
                          9: 3138372e3130332e39362e302f31392d3332203d3e203134383430.roa (hash: KD8MQH2YqX12Q2gXaC+3Sqlp1nZHTc+8eRBIztod7wY=)
                          10: 3230312e31362e302e302f31382d3332203d3e203134383430.roa (hash: 593M5TF/lcU5PcCGQ9+lS3SsRDOB6eZwXky2yAnpXuw=)
                          11: 4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl (hash: x+52lid3ZMVar+6vp5adcg6+0OdOjuTJIpBso8iRnLc=)
                          12: 323830343a383a3a2f33302d313238203d3e203134383430.roa (hash: jfpdgnYNlw9gu8ewZdAvy9xYK5y8VRrmTCp+u0o+AGQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl
                          rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5f:b4:5a:15:e3:bf:fa:00:05:63:9f:a7:e6:cc:61:5c:d7:b2:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
        Validity
            Not Before: Apr 24 22:11:19 2025 GMT
            Not After : Apr 26 01:18:19 2025 GMT
        Subject: CN=7AFA1A18E095B5C2AE84C9CFA431D3CB311BAC00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:90:f7:1c:76:1f:df:b8:17:58:9f:80:b2:c5:
                    96:4b:cf:50:d5:d0:ab:ab:af:91:3f:41:bf:b6:b4:
                    fa:c3:f2:d3:c1:1b:3a:57:5c:b9:6a:ff:b8:fe:04:
                    5e:93:95:55:1f:ad:4a:8d:71:32:94:29:57:e4:31:
                    d1:f9:b9:a6:3c:79:d2:dd:92:d5:b0:c3:f3:55:87:
                    5f:dd:55:24:54:5c:aa:3a:d9:a5:af:6d:e1:1b:47:
                    a3:04:81:32:7f:ca:60:11:35:ea:84:9c:10:ef:21:
                    2b:ca:2b:d8:3e:57:b0:55:41:2d:5e:7d:a9:33:54:
                    0f:5f:d5:b8:4b:0d:e9:52:52:46:44:93:d4:ff:1b:
                    a4:59:44:a7:41:42:c9:a2:fc:9c:01:0b:92:ca:6c:
                    f5:d6:20:f4:50:49:ae:b7:83:dd:3d:fc:ab:7a:cd:
                    aa:e9:b1:2e:3b:c0:c8:3f:e8:c9:79:3c:d1:85:1a:
                    70:f5:f1:fd:fe:2a:b3:0b:a9:8c:a6:54:69:e1:e8:
                    f4:81:86:cd:34:e7:08:c7:9b:91:4e:a8:b5:96:fb:
                    ac:48:e8:d3:ee:cd:42:c6:b8:9a:41:a9:cb:e7:8d:
                    d0:45:40:50:ac:30:a5:f5:94:ca:09:30:70:bb:a8:
                    30:4c:3c:1e:4b:0e:c1:8e:33:79:07:65:55:52:e4:
                    0b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FA:1A:18:E0:95:B5:C2:AE:84:C9:CF:A4:31:D3:CB:31:1B:AC:00
            X509v3 Authority Key Identifier:
                keyid:4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:61:91:e3:2f:0c:20:ba:16:17:35:4b:53:6c:b9:6c:75:91:
         d8:29:b2:90:3a:10:6d:1f:b1:70:20:3c:ed:7f:78:9f:f1:77:
         14:e7:31:4f:2b:fb:34:79:19:33:53:26:8d:b5:52:f9:ba:d8:
         6f:98:cc:a9:ce:7b:11:ba:a7:8f:96:86:32:6d:7b:13:c4:4c:
         53:ed:22:62:fc:78:37:2e:51:ca:d5:4e:31:97:b4:af:2a:bc:
         83:9f:f6:a3:90:e5:b4:3e:67:24:b9:6c:eb:1f:b6:1c:f3:5b:
         bc:75:dd:8a:19:b3:1f:8c:3c:f0:53:eb:c4:c4:5e:4e:61:b8:
         c8:99:5f:66:94:75:81:e2:50:5d:35:58:07:5c:2a:b7:ec:69:
         62:9b:85:0e:af:87:72:c7:fe:56:16:02:94:53:fe:13:cb:fc:
         11:8a:25:33:8a:e2:e0:36:40:44:fc:6b:e2:4a:34:72:2c:19:
         ad:28:9a:8e:7f:9b:23:18:64:d8:db:0f:50:c1:11:bd:23:87:
         b5:9f:17:5f:8e:e1:74:1f:75:07:48:90:a6:31:68:b1:fd:e0:
         fc:ac:ad:bd:81:33:14:41:f5:bc:2f:64:80:dc:66:6d:96:27:
         72:46:12:b8:3c:eb:85:57:af:71:43:34:45:d5:53:71:60:71:
         57:eb:ec:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:30 2025 by rpki-client on console.sobornost.net