Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft
File:                     5019A6C324130601793432FC2FAFF3DE1F1210C0.mft (raw, json)
Hash identifier:          XrSM7shhTvsP7/UE9pnU56mKZk8xpcYXIligBB18/uw=
Subject key identifier:   27:88:CA:D5:03:47:DF:08:FC:9B:AE:66:4A:92:71:E2:3D:09:F1:B2
Authority key identifier: 50:19:A6:C3:24:13:06:01:79:34:32:FC:2F:AF:F3:DE:1F:12:10:C0
Certificate issuer:       /CN=5019A6C324130601793432FC2FAFF3DE1F1210C0
Certificate serial:       670190F5FC68EE8FC0E28B10E353F73623F5BCDE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft
Manifest number:          0201
Signing time:             Thu 24 Apr 2025 13:18:58 +0000
Manifest this update:     Thu 24 Apr 2025 13:13:58 +0000
Manifest next update:     Fri 25 Apr 2025 14:34:58 +0000
Files and hashes:         1: 3137372e38342e32302e302f32322d3234203d3e203532373135.roa (hash: RL7RwQcjTKKA++BoYWaVFvGSkS1OFAP/DO2yENM0jCo=)
                          2: 5019A6C324130601793432FC2FAFF3DE1F1210C0.crl (hash: /an8Yu/L+kUPenbAuvl5LwvWHWMr+DaHVkYCJaV2xMM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.crl
                          rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 14:34:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:01:90:f5:fc:68:ee:8f:c0:e2:8b:10:e3:53:f7:36:23:f5:bc:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5019A6C324130601793432FC2FAFF3DE1F1210C0
        Validity
            Not Before: Apr 24 13:13:58 2025 GMT
            Not After : Apr 25 14:34:58 2025 GMT
        Subject: CN=2788CAD50347DF08FC9BAE664A9271E23D09F1B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:95:79:32:2e:c2:ff:14:4a:f6:2a:8c:6f:24:
                    93:d7:58:d2:9f:e6:8e:f5:15:64:16:dd:ca:23:ed:
                    2a:11:56:61:5b:d1:be:16:1b:78:f1:73:35:c1:23:
                    b1:0b:58:05:ee:d1:28:70:05:3e:02:a3:01:3a:08:
                    ae:6c:03:4c:25:9e:f2:c2:e3:88:e6:62:1f:3e:7b:
                    84:27:81:f3:ed:81:3a:c7:70:9d:91:8c:3c:87:48:
                    85:be:02:c2:6a:8f:f6:60:b1:5b:8f:d3:b5:cc:41:
                    bc:cd:d4:c5:6f:e5:9a:7b:b4:d1:5e:32:b4:40:3d:
                    87:20:33:21:ab:b5:1a:db:3f:df:1a:f3:77:fd:f3:
                    7e:c0:70:bc:ed:ca:92:80:ff:02:23:ac:16:a8:ea:
                    40:09:d7:81:f4:05:67:5c:74:28:26:5c:74:76:63:
                    8f:7d:72:e6:de:2e:f4:be:ec:68:c3:d6:4b:51:20:
                    5d:fd:f7:fa:36:f6:df:99:0d:0e:6a:f9:52:f2:8b:
                    58:37:11:f5:b0:f3:e5:6e:ab:3f:92:20:8f:d1:8e:
                    03:60:85:c7:5a:42:89:52:60:cc:a9:5f:b4:6d:5e:
                    df:b5:f3:6d:8f:e0:2b:4b:e0:eb:81:43:6c:a5:08:
                    44:b3:00:4b:e8:38:5d:8a:b2:50:94:e2:22:00:bb:
                    8f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:88:CA:D5:03:47:DF:08:FC:9B:AE:66:4A:92:71:E2:3D:09:F1:B2
            X509v3 Authority Key Identifier:
                keyid:50:19:A6:C3:24:13:06:01:79:34:32:FC:2F:AF:F3:DE:1F:12:10:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:45:9f:af:07:1b:cc:b0:ac:06:ea:1e:d1:c6:94:dc:b5:14:
         f1:df:c1:80:42:83:65:88:c5:6b:31:3d:6a:ad:d8:d1:15:e8:
         48:74:81:cd:e2:59:3d:5e:32:44:61:3a:c5:fa:2d:9a:df:b1:
         40:e6:1c:da:90:37:74:1b:c7:3b:3e:2f:a7:12:eb:d7:a6:8f:
         54:5d:01:e4:f6:24:12:c3:c8:d9:31:fb:b0:e4:ba:47:fe:b4:
         d2:eb:b6:1a:93:f4:5b:49:32:e8:92:0c:de:00:d5:ca:ae:36:
         fd:fb:44:78:67:6c:9f:87:4a:54:bd:2c:d6:55:22:1b:b2:af:
         20:9f:49:6c:14:74:4c:5d:3c:33:1b:fd:13:96:33:0b:a0:53:
         a2:32:fa:01:44:b6:e1:4d:24:9c:a7:cb:cf:81:ba:16:06:95:
         2c:f2:4e:df:6c:c0:58:b6:45:69:5b:93:a0:f5:4a:b6:af:69:
         88:4e:40:14:83:6b:9f:b4:9c:3c:4b:a0:6d:c0:97:30:68:80:
         c6:3c:5f:63:da:e5:18:49:ff:37:58:d1:05:bb:84:d2:fc:e1:
         fd:53:d9:a4:54:22:f9:6e:61:9e:f2:26:9d:8f:01:2c:b0:ab:
         4e:2b:fd:e5:63:41:c7:48:7e:27:d2:18:07:e7:b6:a8:1d:1c:
         d9:aa:f3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 15:50:52 2025 by rpki-client on console.sobornost.net