Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
File:                     90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft (raw, json)
Hash identifier:          ubwVNXv9ALQAo3uZWZc/fSlJuRJUg7YBu7b9vkKT/o0=
Subject key identifier:   30:9C:5F:55:A6:B4:93:79:65:AF:38:9F:88:EF:A4:E8:F5:E4:4B:E2
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       7520F2DCCB6809F68138955E3AB51CC2821CFAC7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
Manifest number:          020D
Signing time:             Mon 28 Apr 2025 16:22:47 +0000
Manifest this update:     Mon 28 Apr 2025 16:17:47 +0000
Manifest next update:     Tue 29 Apr 2025 19:29:47 +0000
Files and hashes:         1: 323830343a6433633a383134303a3a2f34342d3434203d3e203532363133.roa (hash: PcX/TLbzqtUwY7h4xG1gBqmyx+PscOp5xWKen8zjcwU=)
                          2: 3137302e3233312e3233322e302f32332d3233203d3e203532363133.roa (hash: DXacyEbFVg4IqKK0v4ACGlB3Fum9pT9AizzWdyW9pqg=)
                          3: 3136382e3233322e3136302e302f32322d3234203d3e203532363133.roa (hash: zILjPlCyOAD9ejfw9a24PH0wvqwfkKSvd2cc46+8kJc=)
                          4: 323830343a6433633a303a323a3a2f36342d3634203d3e203532363133.roa (hash: QpCKhn4SRXJIwUts8oBZLrJM47rujHDbXIcCTtFnifI=)
                          5: 3134332e302e35362e302f32322d3234203d3e203532363133.roa (hash: HQjEEp/Z4IkEd2KPMLhlFkm2+grxrSwal2rQ+pc/izA=)
                          6: 323830343a6433633a3a2f36342d3634203d3e203532363133.roa (hash: 0404Oeb289zadGtK/R7jpgt2VkMBD+/fDGNDf1LdAbs=)
                          7: 3137372e3132352e3137352e302f32342d3234203d3e203532363133.roa (hash: ryfdLEfLpus0OFdiG2qGieiFqD4UAR+CSoujdVGZpRw=)
                          8: 90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl (hash: SwTi6/IkkNDEW31Z84SXMZcyYMtbVHmoltK35lgoIw4=)
                          9: 3137372e3132352e3137342e302f32332d3233203d3e203532363133.roa (hash: B0Gleh5icGi4+wPD78+5ue9or5TLisJr50jm5pzdMRo=)
                          10: 3133382e33362e35362e302f32322d3234203d3e203532363133.roa (hash: 8PI1On8EXsUdiAEzt5HAJvwAL9nak0l9RTCepZw2H9c=)
                          11: 323830343a6433633a383130303a3a2f34342d3434203d3e203532363133.roa (hash: hrf0FpTy4UvhyeYhKt3D0MEPScaW8wTToQcMKZpWfg4=)
                          12: 3137372e3132352e3137322e302f32322d3232203d3e203532363133.roa (hash: iKHuXo9Nwd44tabFrPkQc/eAy6n5EtQm9QW8NkSbVF8=)
                          13: 3137372e3132352e3137312e302f32342d3234203d3e203532363133.roa (hash: iacsmD01wp6pGjFcKwAXAA6zVKlA4PB3PHMMJbDWc10=)
                          14: 3137372e3132352e3137302e302f32332d3233203d3e203532363133.roa (hash: FvMNaIxsdQxohhve57nqsQKQcWv5L4XzZTwgSCc4nRk=)
                          15: 3137372e3132352e3136382e302f32312d3231203d3e203532363133.roa (hash: ERiJ3GSGFSC/wTzF5fgdmy9v9+UQltWmirjXHalDINo=)
                          16: 323830343a6433633a633030303a35373a3a2f36342d3634203d3e203532363133.roa (hash: bDlkVmLPLNS3JGgOAvqKVr907iOiC56bVgvcg6oq/Ls=)
                          17: 323830343a6433633a383030303a3a2f34382d3438203d3e203532363133.roa (hash: G7Op6APOqhUTUGnniMVVdeJT8/6Exg0rJ0hEelLwnFk=)
                          18: 3137302e3233312e3233322e302f32322d3232203d3e203532363133.roa (hash: qBdanNuPYXPgYD/cg7S5VDJlasuVX5HGEGOqMJ8FlHQ=)
                          19: 3137372e3132352e3137342e302f32342d3234203d3e203532363133.roa (hash: 9ywF5S/hsEqRfxyJLobZKjy/LlT8VPTZReSCKRajDZY=)
                          20: 3137372e3132352e3137322e302f32342d3234203d3e203532363133.roa (hash: iwPsw5kpRaVg6tORcSEN0Q4cCZ0AVWHeMfW6ebx0v2g=)
                          21: 323830343a6433633a666163653a3a2f36342d3634203d3e203532363133.roa (hash: 2C0/bS6+vDz8LY3am2Nad/jGlsCAvQYrwJH4fdzyFZ4=)
                          22: 323830343a6433633a313a3130303a3a2f36342d3634203d3e203532363133.roa (hash: pc3fRn3xa1QzipfOwGFOlS+vtEu0jHiTwlu8KYVZGKk=)
                          23: 323830343a6433633a313a3a2f36342d3634203d3e203532363133.roa (hash: JSMGhY3BL48lB5FrQ7hZNR25mi/v535lQEzy00+3dJs=)
                          24: 323830343a6433633a3a2f33322d3332203d3e203532363133.roa (hash: lv6xZ8KtBSc91m4WoKZ8YQ8A3sCTOqETGYfAtpkNWFI=)
                          25: 3137302e3233312e3233342e302f32332d3233203d3e203532363133.roa (hash: R7CHeGZN/BBZCSinNS48vnI6hk19UmjtRPn5GE/dWGE=)
                          26: 3137372e3132352e3137322e302f32332d3233203d3e203532363133.roa (hash: mLutMEjW1nChrSZ404keINGT+lGzDHoJst8HhK8ucrE=)
                          27: 323830343a6433633a383030343a3a2f34382d3438203d3e203532363133.roa (hash: SG9gW1e7drVBytHeu41E/4w3RiYZZMfOnyM+Ja15hBQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:20:f2:dc:cb:68:09:f6:81:38:95:5e:3a:b5:1c:c2:82:1c:fa:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Apr 28 16:17:47 2025 GMT
            Not After : Apr 29 19:29:47 2025 GMT
        Subject: CN=309C5F55A6B4937965AF389F88EFA4E8F5E44BE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a3:95:84:ef:43:cf:ee:4e:99:37:76:d9:0b:
                    63:8a:a4:87:20:79:a8:09:83:14:4e:13:a8:6a:25:
                    ea:a9:0b:b1:38:c2:b3:09:a8:a2:82:f1:f8:87:a8:
                    dd:e8:d2:6d:ca:f4:d0:15:24:ff:6c:9d:ab:bf:49:
                    ca:f3:07:2e:bc:6d:36:9e:e3:3c:46:64:a1:b8:c5:
                    7b:05:03:b2:00:57:66:21:7f:ab:0c:b2:cf:22:b0:
                    a5:12:a6:d4:4e:8a:1d:36:25:d3:22:f6:12:98:95:
                    c1:68:e9:66:ca:33:7e:4c:16:65:d4:31:f7:3d:5b:
                    d5:c6:1f:33:c2:14:e8:1e:a6:90:73:dd:18:53:a3:
                    37:48:56:1c:16:55:11:47:85:a7:f6:d3:5a:b2:7c:
                    f5:54:33:49:40:ed:1f:c9:dc:55:71:e8:7b:4c:af:
                    9a:65:78:54:40:32:1c:bc:ad:38:8b:2d:86:7d:59:
                    1c:5f:4b:53:a6:52:c2:9e:2e:94:76:79:7d:ce:9b:
                    a8:f3:f3:53:43:38:9b:1b:f4:08:4c:77:89:83:6d:
                    7e:88:e5:af:57:40:1a:62:bc:71:09:86:d9:61:bc:
                    41:51:14:63:51:1b:b0:37:8c:56:81:56:64:5a:d9:
                    f1:ff:d3:cd:c8:1b:c3:68:34:09:0f:36:be:dd:11:
                    e1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9C:5F:55:A6:B4:93:79:65:AF:38:9F:88:EF:A4:E8:F5:E4:4B:E2
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:97:4b:dc:cc:48:e0:fb:4d:a8:49:85:a4:1b:fc:22:cb:d2:
         f1:12:d5:6f:35:87:54:b0:8b:01:73:e9:9d:ce:21:d0:eb:50:
         e1:1b:df:47:3e:73:ac:34:3c:77:f9:b9:a3:98:0d:a6:be:4a:
         4d:3b:56:97:9f:fb:49:84:61:89:32:49:4e:da:9b:a7:75:f1:
         10:54:bc:45:b6:94:83:ab:ec:70:e4:7a:50:8f:12:14:16:31:
         ae:9a:40:27:c4:8d:d0:ce:92:f6:2e:9d:a0:21:2a:36:ce:34:
         86:66:b3:cc:2f:13:26:6d:d3:a2:19:76:60:21:a9:5a:7f:73:
         f1:e0:24:21:45:bf:25:cf:01:14:e6:fa:d1:84:50:f9:68:8a:
         79:e1:70:92:af:d2:79:5b:35:be:f5:fe:b2:79:36:6a:92:28:
         66:87:3f:2c:08:16:aa:88:da:65:30:ce:95:56:ee:6a:0e:28:
         a1:73:d1:bc:7b:fa:cc:24:4a:db:45:c5:6f:9a:74:fd:b0:8d:
         4c:67:70:ae:d8:8b:41:ad:d4:a1:20:65:e2:25:87:97:0e:9c:
         ad:83:6d:21:9f:6c:64:25:2d:ba:62:e7:7c:48:a3:44:0f:1f:
         ef:6b:bb:f2:f2:8b:1b:47:6f:9b:dc:9e:1d:e0:94:80:8b:7e:
         fe:88:5d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:43 2025 by rpki-client on console.sobornost.net