Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.mft
File:                     F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.mft (raw, json)
Hash identifier:          c3ScTZB5t8fTyjEjkvjOEdPwZ6Ge0GL+wz4No67Xnek=
Subject key identifier:   1A:5E:DE:5A:0C:F1:61:41:84:F7:E5:42:6D:FC:F6:0B:A0:FC:39:91
Authority key identifier: F7:FD:F8:A9:EE:07:1B:04:75:D8:90:E4:E6:3D:FD:C5:21:96:15:DB
Certificate issuer:       /CN=F7FDF8A9EE071B0475D890E4E63DFDC5219615DB
Certificate serial:       552E72DF32B3D9A6F3E6864A9D78A584B7F36976
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.mft
Manifest number:          2B
Signing time:             Fri 25 Apr 2025 18:29:48 +0000
Manifest this update:     Fri 25 Apr 2025 18:24:48 +0000
Manifest next update:     Sat 26 Apr 2025 20:41:48 +0000
Files and hashes:         1: 323830343a366566383a323a3a2f34382d3438203d3e20323730363330.roa (hash: dfTsry2/cjvj+YGWrrgiopzY2X9uEloTkwHIrstPX8I=)
                          2: 3137372e37302e3234352e302f32342d3234203d3e20323730363330.roa (hash: eb2CoPJU5IJ77ScDmtxkVQLfgGIh4WubuvH3UAxkLkQ=)
                          3: 3137372e37302e3234342e302f32342d3234203d3e20323730363330.roa (hash: 3FOLHM8wY9q37qzX6OHO3koCOuajtlK9F3IDUduI7b4=)
                          4: 323830343a366566383a343a3a2f34382d3438203d3e20323730363330.roa (hash: MEPkPk/6gt8DcWzmLEUPLG28WwnB27G4CFbuoZ9gKyw=)
                          5: F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.crl (hash: dHQUE/i7mBUucBsIht/sc//HIR2BQexdPFdmvVZPA+A=)
                          6: 3137372e37302e3234342e302f32332d3233203d3e20323730363330.roa (hash: Z/FI1CZeOATsrA3oDxDpt9yezVcqhpgL7b2aFMrgqqg=)
                          7: 323830343a366566383a333a3a2f34382d3438203d3e20323730363330.roa (hash: vVoUu1sd7Pfau3vSalaM9r9zP3hYjBDZctyQgcq1ZkI=)
                          8: 323830343a366566383a313030303a3a2f33372d3337203d3e20323730363330.roa (hash: zZPcjbuAHvIh/b30vN7qYjIYBAEbs49mkUfsgRazmfk=)
                          9: 323830343a366566383a313a3a2f34382d3438203d3e20323730363330.roa (hash: eI5APIjIOW3bdofxuwPMpF7MEF552gSBa5PfwNnBg/w=)
                          10: 323830343a366566383a3a2f33352d3335203d3e20323730363330.roa (hash: pGU7ufvwTAppqpXVeA6dHfklDhmaMD8fRa6aQhqMlwA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.crl
                          rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 20:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:2e:72:df:32:b3:d9:a6:f3:e6:86:4a:9d:78:a5:84:b7:f3:69:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7FDF8A9EE071B0475D890E4E63DFDC5219615DB
        Validity
            Not Before: Apr 25 18:24:48 2025 GMT
            Not After : Apr 26 20:41:48 2025 GMT
        Subject: CN=1A5EDE5A0CF1614184F7E5426DFCF60BA0FC3991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:97:85:9e:c0:c8:66:23:2b:05:a4:d8:47:4e:
                    f7:1c:aa:9b:5c:57:5f:aa:3a:9e:78:bb:6b:38:f5:
                    6b:21:ab:4d:ae:61:f6:af:de:85:23:ee:59:d6:8f:
                    47:42:4f:a8:ce:f5:53:34:d8:69:ce:b6:2c:f1:ae:
                    4d:40:a4:84:46:77:7e:1f:5e:6c:ef:b0:d1:e2:81:
                    4a:c0:54:d6:36:3c:c3:7e:fa:8d:11:9c:e0:7a:c0:
                    96:79:34:be:28:c6:86:58:5c:e8:fd:0b:cc:44:78:
                    be:78:31:1a:b2:4c:1d:2a:cf:90:d1:12:07:bf:01:
                    f4:55:5c:4d:09:a8:8b:cf:0a:73:40:48:69:fb:ca:
                    3b:26:45:a1:2b:65:9a:33:ce:37:f7:ee:14:6d:cf:
                    88:ef:f7:18:97:8b:a0:ac:73:c4:47:1a:a4:6b:07:
                    79:b9:e0:68:ff:29:ed:95:23:3b:d7:74:38:7a:97:
                    0f:6b:c0:56:76:72:81:c4:1c:cb:49:ad:07:7c:3d:
                    90:8b:b8:66:27:28:fa:c1:0c:bc:6b:b2:45:d7:2d:
                    a2:b8:8e:f2:8d:68:c9:3e:27:3b:16:f8:af:3a:61:
                    11:de:bb:f7:ac:98:4c:8a:98:bc:ab:cf:11:aa:11:
                    59:f9:58:24:83:df:1c:d4:d9:26:58:2e:46:ec:2a:
                    af:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5E:DE:5A:0C:F1:61:41:84:F7:E5:42:6D:FC:F6:0B:A0:FC:39:91
            X509v3 Authority Key Identifier:
                keyid:F7:FD:F8:A9:EE:07:1B:04:75:D8:90:E4:E6:3D:FD:C5:21:96:15:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:8e:a7:99:25:7a:ed:78:f6:a3:40:c9:b3:05:f1:77:5e:63:
         fb:d9:01:04:42:45:46:66:dd:41:96:8c:f9:81:7b:c4:36:ab:
         73:ea:f2:1d:9d:c0:79:c6:44:14:26:15:c3:fa:e9:fd:3b:ec:
         a5:76:47:38:17:e5:9b:4b:43:63:66:06:d0:87:65:35:90:05:
         e5:18:fd:12:6d:84:65:e3:6a:f5:3c:72:25:0c:75:a6:a0:d4:
         fd:2c:a7:cc:ef:e3:0c:88:41:a3:15:3a:09:19:a8:ce:e6:5e:
         6e:42:80:c3:c7:10:fd:5c:2f:ef:8f:ba:cd:2c:55:a3:43:fd:
         d9:4f:26:01:77:df:e5:a8:0a:e6:66:78:43:08:77:a7:85:eb:
         95:00:4f:45:6e:46:7c:4a:4a:b0:1d:1e:05:6e:0d:ac:d5:13:
         06:72:07:cd:db:da:20:45:e6:80:33:66:07:ea:27:7b:02:42:
         56:09:29:b0:c6:7a:e1:96:f7:7c:e2:25:4d:73:d7:af:15:eb:
         7b:c8:26:9e:4d:41:70:c1:f9:35:c8:a7:c3:f5:f7:c0:e4:c2:
         92:1e:83:99:3a:17:15:73:c0:fe:96:ae:ba:f8:8f:ce:01:34:
         df:6a:0b:57:6d:3c:2e:a3:cc:e2:42:54:7f:48:8c:e6:d1:ae:
         b9:66:58:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:40 2025 by rpki-client on console.sobornost.net