Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft
File:                     DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft (raw, json)
Hash identifier:          xQ6knElEBvDXY19ZcuXBRb/RJRim7vNw0M6djSrEYzM=
Subject key identifier:   A8:79:8A:EF:2E:4A:FC:F5:2E:F0:E6:86:FB:4B:6F:1F:F7:6F:C9:15
Authority key identifier: DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69
Certificate issuer:       /CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69
Certificate serial:       2AF56336AD70A89146F98D4CE79A7C41A140612A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft
Manifest number:          01F9
Signing time:             Sun 27 Apr 2025 03:34:22 +0000
Manifest this update:     Sun 27 Apr 2025 03:29:22 +0000
Manifest next update:     Mon 28 Apr 2025 04:15:22 +0000
Files and hashes:         1: 323830343a346537343a3a2f33322d3438203d3e20323638323632.roa (hash: EHXANbNLT5si3G3vm6gacbwWFVNFxdxqoixkh0vRW2c=)
                          2: DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl (hash: x4nsHzQG1UveE2dqSIbaW7bH4lN/uy4f6r/DTDkrP7I=)
                          3: 34352e3233372e32342e302f32322d3234203d3e20323638323632.roa (hash: WKX3BordzUP6ywWyfmZcKNMoMbf0meJUAxltQijU0Qg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl
                          rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 04:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f5:63:36:ad:70:a8:91:46:f9:8d:4c:e7:9a:7c:41:a1:40:61:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69
        Validity
            Not Before: Apr 27 03:29:22 2025 GMT
            Not After : Apr 28 04:15:22 2025 GMT
        Subject: CN=A8798AEF2E4AFCF52EF0E686FB4B6F1FF76FC915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:02:7b:45:d0:43:5b:92:0e:27:9d:d5:b8:57:
                    bc:28:71:ee:fa:ef:e1:fa:0e:ec:bf:ef:5e:eb:c5:
                    d1:2a:bc:a9:3c:ed:9e:9f:6e:fa:bb:f1:98:c7:f6:
                    5b:db:da:9e:82:8c:bd:2b:c4:4f:47:5e:68:5c:22:
                    c7:d6:b0:24:65:70:f0:66:7c:fd:b8:85:76:35:17:
                    72:40:75:79:1d:26:36:04:6e:17:7f:ba:fc:ea:51:
                    66:b3:b9:e0:0b:19:b1:ea:16:2b:20:4f:b8:f7:3b:
                    51:8d:f3:03:89:9e:f9:71:d0:67:e4:b3:0d:e6:f0:
                    cc:95:7c:ef:3d:8c:fc:60:15:83:f4:22:35:17:2f:
                    44:3e:f1:b6:8e:e8:31:e0:20:c6:3c:e8:3a:8f:7d:
                    fe:8e:ff:6b:d0:b5:e2:72:f3:f7:0e:72:08:1c:bc:
                    d3:45:aa:08:6b:36:11:14:df:8f:f1:95:80:3e:65:
                    db:bb:c0:88:71:fd:1e:6d:69:b8:1b:fe:b6:39:9a:
                    0c:0f:c7:d3:21:bb:6b:80:4d:95:ac:ff:77:3a:ec:
                    76:23:ba:90:90:59:12:33:10:06:ec:3d:c9:04:b8:
                    ad:fe:00:e8:f3:4a:95:c9:ba:1c:31:e3:2a:11:0b:
                    18:d8:d9:bb:ed:12:8c:6b:a7:51:15:75:c3:71:1b:
                    23:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:79:8A:EF:2E:4A:FC:F5:2E:F0:E6:86:FB:4B:6F:1F:F7:6F:C9:15
            X509v3 Authority Key Identifier:
                keyid:DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:7e:46:34:e1:ef:a8:90:f1:1f:a3:97:88:c5:6c:8a:93:9d:
         f8:3f:8a:74:3b:44:34:c9:7c:53:19:98:2e:f7:29:b7:87:2e:
         90:54:d2:58:53:11:a2:b4:a2:e3:ea:4b:a9:1b:ff:b2:a0:2e:
         28:4e:4f:e4:e3:ea:08:81:0a:d3:24:5f:f7:e6:d9:3d:a5:d3:
         56:d3:95:aa:e2:b9:89:7b:67:24:80:90:fb:f0:ec:14:fe:56:
         00:e1:4f:3c:50:f3:22:5e:dc:6d:38:6b:bd:0d:66:b1:0f:97:
         4d:68:8f:92:07:48:6b:d0:7c:ca:67:2d:8c:b8:c1:fe:07:02:
         f5:48:19:d9:4f:c7:e9:3c:e9:26:f4:ff:75:43:47:2d:61:22:
         41:8d:49:29:aa:39:5a:22:72:98:63:2e:b9:c1:5e:8e:d2:4c:
         08:75:5a:37:49:8d:23:82:1d:90:02:b3:69:bb:7a:4a:34:ea:
         b8:8a:9e:45:2e:e8:5c:a6:aa:58:0e:8f:e6:db:a0:e5:6c:38:
         1b:1e:d2:d7:42:9d:14:71:04:32:99:69:ae:a9:17:ca:bb:b9:
         35:80:4b:44:df:e5:f5:07:57:f7:60:02:64:99:83:fa:8b:41:
         1b:1d:8d:c3:45:5e:6a:b6:05:8e:90:b2:05:d0:ad:75:1f:a0:
         9e:89:0c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:05 2025 by rpki-client on console.sobornost.net