Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
File:                     B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft (raw, json)
Hash identifier:          kCC2TC5FGrD4FtQzcJBvxw9FdxJGjlzKlBfyX/yeK+c=
Subject key identifier:   3F:9D:EB:33:3B:5E:CD:CB:17:10:5A:24:E3:CA:A7:0F:E5:45:C6:FC
Authority key identifier: B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66
Certificate issuer:       /CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
Certificate serial:       62209B6CF4045930BF1D4526DE5F560A56BF72C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
Manifest number:          01FB
Signing time:             Thu 24 Apr 2025 16:12:18 +0000
Manifest this update:     Thu 24 Apr 2025 16:07:18 +0000
Manifest next update:     Fri 25 Apr 2025 19:37:18 +0000
Files and hashes:         1: 3137372e38352e3136362e302f32332d3233203d3e203532373433.roa (hash: 9Em0FD++Jb7iPbuHi9g4Eapqpd4aKkp2CQyjnM/Ml0k=)
                          2: 3137372e38352e3136352e302f32342d3234203d3e203532373433.roa (hash: 79YrqQF0IndROrk+cfePatBDpYvG+DokRE6q0LebRRs=)
                          3: B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl (hash: Qv9rkPGfKtYUWDXSuJUjPIl2/ASoxFEeWFO37hvw4iI=)
                          4: 323830343a363566343a3a2f33322d3332203d3e203532373433.roa (hash: ipYqZy2Bw5WltHHZykTTJnZ3JhG9BblnpE6LKfOMyUY=)
                          5: 3137372e38352e3136372e302f32342d3234203d3e203532373433.roa (hash: xZZjbro5zLk1oyGqVK7m76LBNIEgAirpjrwgFYj51So=)
                          6: 3137372e38352e3136342e302f32332d3233203d3e203532373433.roa (hash: DkwtmlkNsx8L7Qk3qD/RgaLiNh7K+HBzbj0ah7JvCj8=)
                          7: 3137372e38352e3136362e302f32342d3234203d3e203532373433.roa (hash: LoNT6rAzouHElCAxQfq7lbXt6avk0AfPnw2zLK+lX6c=)
                          8: 3137372e38352e3136342e302f32322d3232203d3e203532373433.roa (hash: 2IFKTZTlJCa+APi4DHL5ZGrLP6V7wvRKfC3Pbw7u3gs=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl
                          rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 19:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:20:9b:6c:f4:04:59:30:bf:1d:45:26:de:5f:56:0a:56:bf:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
        Validity
            Not Before: Apr 24 16:07:18 2025 GMT
            Not After : Apr 25 19:37:18 2025 GMT
        Subject: CN=3F9DEB333B5ECDCB17105A24E3CAA70FE545C6FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:40:33:88:59:da:f2:78:8e:ea:69:ed:ff:
                    f6:43:ec:54:c9:e5:f1:bf:92:42:45:66:36:7c:d9:
                    d7:60:e8:1d:38:18:18:3b:e9:15:34:70:34:cb:79:
                    fc:ea:c7:1e:9f:6c:45:c6:c8:ec:98:1d:79:9f:6c:
                    0c:e6:51:d3:39:fe:7b:be:c6:65:f3:88:81:34:ba:
                    f4:25:95:53:d1:9a:b9:55:92:70:16:bd:b6:73:51:
                    0f:2a:2d:a0:12:ec:f4:5d:34:cb:f0:39:95:70:48:
                    c9:78:c5:aa:9f:ad:b5:5f:ea:04:0b:ce:ba:51:88:
                    b2:c6:42:49:26:be:fc:c5:fd:1b:f8:73:61:d2:a8:
                    39:e1:4a:45:e3:79:47:8c:9b:25:ef:f4:df:9c:da:
                    ba:01:48:a9:90:eb:21:89:4c:90:00:aa:9e:6c:48:
                    0c:98:22:2a:e3:00:e4:e7:d9:54:cc:d1:32:e5:ff:
                    8e:06:06:30:ed:94:e9:38:6a:a3:b0:d5:0a:f9:be:
                    24:2c:5d:4a:6d:8e:d4:eb:6e:f2:ea:1c:21:75:e6:
                    2d:ca:36:7b:b5:5e:a5:be:d5:c2:e3:4f:e5:3c:25:
                    f4:4c:4b:bb:64:02:e1:03:ae:9d:b1:fe:f6:cc:f1:
                    7f:e1:d2:69:7a:c6:b5:84:e8:a8:ef:d6:4a:e3:12:
                    bf:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9D:EB:33:3B:5E:CD:CB:17:10:5A:24:E3:CA:A7:0F:E5:45:C6:FC
            X509v3 Authority Key Identifier:
                keyid:B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b3:fc:0c:45:c1:f4:eb:e6:1e:cb:d9:b3:96:c8:68:86:94:
         f4:d1:c7:b2:81:7d:6d:e0:c9:f1:84:b0:18:6b:90:a5:9d:04:
         10:09:c6:72:32:e3:05:52:2b:e3:0b:32:b9:65:6e:71:44:54:
         65:30:cb:3d:b4:0c:0e:bc:4f:20:fb:fb:78:b6:aa:1c:88:87:
         7b:12:e7:91:46:7b:2a:69:04:34:e7:9c:25:d6:3c:f3:88:79:
         95:c2:70:d2:d6:bc:66:1a:5e:71:4c:45:dd:31:84:2b:c4:2b:
         35:66:8a:34:6e:22:a4:72:de:e8:1e:dd:ad:c3:27:cc:ab:a0:
         fc:19:95:47:ed:25:3c:d3:74:9a:82:76:de:65:95:0f:e9:66:
         1d:b5:bf:20:70:ce:44:e9:1c:d4:12:ec:e9:51:62:b2:a3:77:
         37:1b:09:3c:18:23:3e:a8:fb:18:01:ee:3e:31:cb:2d:23:f9:
         cc:c9:3f:b5:b5:b3:b6:25:c3:69:82:f3:22:2e:7d:ba:8c:3b:
         4f:28:b9:e9:6c:10:33:15:cf:d5:65:f1:36:9e:e0:34:eb:8d:
         6d:0e:b7:2e:f5:34:8a:b3:be:39:b7:27:2e:bc:24:be:a9:84:
         b2:46:39:8e:a0:a0:ed:2c:2c:f4:5a:ee:17:10:b7:95:bb:56:
         65:2f:04:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:54 2025 by rpki-client on console.sobornost.net