Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft
File:                     2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft (raw, json)
Hash identifier:          07eQiLgu4456w5shybIRWeHhO5CmgTSgdhmW/PBW8js=
Subject key identifier:   AE:1F:AF:0C:71:BA:3C:4D:C5:A5:58:D8:5D:4A:1A:54:24:DF:3B:42
Authority key identifier: 2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B
Certificate issuer:       /CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B
Certificate serial:       23AE5E334A482C779C682830902C28204A042C0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft
Manifest number:          0209
Signing time:             Mon 28 Apr 2025 09:26:28 +0000
Manifest this update:     Mon 28 Apr 2025 09:21:28 +0000
Manifest next update:     Tue 29 Apr 2025 11:56:28 +0000
Files and hashes:         1: 2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl (hash: JuQQ9mpiUnOAB9wDkNwCiCfzLcCC9JXTioBUaDTnhLA=)
                          2: 3137372e38372e34342e302f32322d3234203d3e203532353839.roa (hash: U1bU2vymA1trGo0kqdj5LljKi5zORYlms1D3T/ome8k=)
                          3: 323830343a316164383a3a2f33322d3438203d3e203532353839.roa (hash: nM9/FgUa0C68sG38T5nV/uNQ86svUq5vsVkQhqR+lIs=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl
                          rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 11:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ae:5e:33:4a:48:2c:77:9c:68:28:30:90:2c:28:20:4a:04:2c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B
        Validity
            Not Before: Apr 28 09:21:28 2025 GMT
            Not After : Apr 29 11:56:28 2025 GMT
        Subject: CN=AE1FAF0C71BA3C4DC5A558D85D4A1A5424DF3B42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:35:6a:9f:38:11:14:25:25:c7:5b:e1:93:07:
                    4b:89:5d:50:94:0f:e3:80:54:a2:10:b5:22:a3:7d:
                    a9:b2:a1:39:f5:2b:c6:8e:35:00:ae:53:d4:08:11:
                    e7:a7:f1:9b:7f:8c:ce:70:bc:b6:2c:89:03:e8:4b:
                    06:ac:f0:0a:a8:7c:99:a5:78:f6:90:df:d2:e0:4c:
                    26:84:4f:bd:11:b6:78:9f:97:ba:2f:28:00:3c:c2:
                    e6:fa:38:70:93:9b:79:68:66:84:35:0b:0e:b1:5e:
                    50:3f:89:d6:1c:28:72:24:a8:69:8c:2e:75:3a:78:
                    02:80:a0:35:31:7c:4b:5d:4f:24:cc:e1:16:40:5f:
                    c0:09:87:52:ef:eb:67:d6:d0:64:c3:f9:c1:a4:60:
                    9c:3d:9c:b1:ef:94:15:69:2d:fd:15:27:fd:b8:74:
                    80:22:04:10:33:3a:99:74:c0:8d:17:ee:d0:ca:27:
                    34:f9:78:4f:29:9c:b9:8f:de:39:ba:54:72:60:e2:
                    97:0c:a0:3e:65:44:44:ad:14:68:2d:21:a7:60:2d:
                    7a:a5:3d:b1:e4:af:c7:6c:fa:d6:d1:99:9d:63:be:
                    e8:f8:ed:8d:a5:0e:46:49:21:08:d6:b9:ec:34:0a:
                    6e:98:68:93:97:d7:a6:13:41:ea:dc:ea:2f:01:63:
                    02:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1F:AF:0C:71:BA:3C:4D:C5:A5:58:D8:5D:4A:1A:54:24:DF:3B:42
            X509v3 Authority Key Identifier:
                keyid:2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:d7:af:b3:b6:8f:32:fd:ac:03:6b:d0:ff:62:c1:39:d0:31:
         33:0d:6f:a1:f3:06:3a:64:ab:ce:b6:9c:58:5f:b1:63:61:70:
         13:ff:b3:cf:3b:11:9f:31:fc:7a:1d:51:b4:90:76:81:01:25:
         b8:66:04:65:7a:d7:7e:87:26:99:36:cb:64:50:bd:04:ef:02:
         a7:0e:34:10:d9:9b:05:2b:37:39:ab:55:d8:10:01:76:d6:fb:
         27:83:c9:83:cf:2b:47:81:ca:11:71:7c:5f:69:d1:0f:ee:cb:
         f2:00:3c:dc:3a:82:90:e4:43:eb:94:93:c1:e0:c9:11:00:0a:
         1b:b2:32:55:99:03:13:99:52:bd:72:67:fd:21:91:77:79:b7:
         ca:bc:1b:38:ea:88:00:df:e8:48:50:7b:25:c1:b0:9d:b8:af:
         61:d3:64:9f:69:ef:c4:75:2e:21:4a:d1:20:32:91:37:8f:da:
         d9:73:85:8f:24:d9:be:ee:6f:9f:63:33:ac:9c:ff:ba:9b:9c:
         42:12:37:20:e3:ab:97:00:f6:9a:5d:d2:16:09:cd:12:6c:6a:
         1f:f5:9d:34:1e:45:04:07:82:66:23:3b:cf:18:c9:f1:14:45:
         b7:d3:89:7f:6e:bf:11:71:6b:4d:d6:bb:1a:54:ea:c4:32:50:
         06:f1:58:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:59 2025 by rpki-client on console.sobornost.net