Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.mft
File:                     4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.mft (raw, json)
Hash identifier:          7U347G5WTtFrc7bJyPXFSIvRlCLL+dalfqnZWgYGW1U=
Subject key identifier:   EA:E7:A0:FE:D0:4A:C8:EA:8B:12:60:8F:D8:DE:3F:D6:B5:FA:FC:A5
Authority key identifier: 4C:0D:87:E5:1A:B5:4C:98:BF:00:8C:45:7C:F7:E0:1E:22:66:F9:AB
Certificate issuer:       /CN=4C0D87E51AB54C98BF008C457CF7E01E2266F9AB
Certificate serial:       6208C24D2457CA66955F61F43702D955DE135AE2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.mft
Manifest number:          0115
Signing time:             Mon 28 Apr 2025 10:58:02 +0000
Manifest this update:     Mon 28 Apr 2025 10:53:02 +0000
Manifest next update:     Tue 29 Apr 2025 11:41:02 +0000
Files and hashes:         1: 3138392e31342e3234302e302f32302d3332203d3e203134323832.roa (hash: i3kA8mST9ObugRiKbqsN1LRuBV7yCZT9qicHwVmDH0o=)
                          2: 3230302e3138392e35362e302f32312d3332203d3e203134323832.roa (hash: SBocdGOnhVYdeBFMJ/roaS3W9EhJeA2FXhvkhBoxh20=)
                          3: 4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.crl (hash: 3OguQaeo1UkZ9gCk9vtxxOJEx2klpGIPOY88v53cs5s=)
                          4: 323830343a38343a3a2f33322d313238203d3e203134323832.roa (hash: 7mg1LGrDDu/k/S5i1yDSV1en9uy/1nZ2zPC3yyyj6dA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.crl
                          rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 11:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:08:c2:4d:24:57:ca:66:95:5f:61:f4:37:02:d9:55:de:13:5a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C0D87E51AB54C98BF008C457CF7E01E2266F9AB
        Validity
            Not Before: Apr 28 10:53:02 2025 GMT
            Not After : Apr 29 11:41:02 2025 GMT
        Subject: CN=EAE7A0FED04AC8EA8B12608FD8DE3FD6B5FAFCA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:21:e4:9b:72:80:56:ae:5e:5f:10:2a:6b:c4:
                    15:ee:6c:e5:1b:2b:46:0a:3a:23:37:37:28:aa:78:
                    80:38:d2:28:f4:2b:9b:52:56:a6:f9:a5:39:0d:60:
                    2f:7b:21:aa:05:59:bb:9f:95:b2:0c:db:18:75:a9:
                    d3:da:ad:37:a3:9a:46:34:5b:07:a6:50:0c:2a:37:
                    55:0e:80:aa:72:fe:e0:74:80:2b:21:a7:d5:d7:9c:
                    40:fc:8c:08:11:a1:e8:76:d4:fa:4f:b3:0a:d1:c9:
                    e9:ba:a7:39:9c:6a:7d:7a:76:b2:48:67:e9:f5:5c:
                    74:03:e4:5b:5b:ae:b5:36:42:20:70:e7:80:6d:a1:
                    36:31:0d:e0:96:14:fa:ca:93:5d:ee:f1:d7:69:08:
                    10:5f:72:05:d9:6d:0c:65:8c:54:7d:04:3b:f3:f5:
                    38:70:63:d1:c7:a3:34:8a:b3:93:36:e1:43:4a:89:
                    fa:2f:ed:e8:86:3a:c2:79:9c:3f:e7:a5:90:01:f0:
                    a9:99:b5:66:98:7e:b6:7e:4f:f5:b8:56:07:2e:d2:
                    a0:0a:da:46:6e:24:69:bc:d1:a8:fa:bf:38:93:48:
                    62:63:c3:77:aa:aa:d7:28:f1:39:e6:47:c6:c5:d4:
                    bd:01:48:f7:05:f7:ba:1a:0d:31:a9:32:23:25:d2:
                    09:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E7:A0:FE:D0:4A:C8:EA:8B:12:60:8F:D8:DE:3F:D6:B5:FA:FC:A5
            X509v3 Authority Key Identifier:
                keyid:4C:0D:87:E5:1A:B5:4C:98:BF:00:8C:45:7C:F7:E0:1E:22:66:F9:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f5:ce:94:14:23:c4:4d:e5:57:e8:61:35:d5:0f:d7:5e:50:
         f5:7b:13:ee:92:2f:30:d4:f9:54:4a:0a:fb:e6:14:86:b5:94:
         64:06:d2:f5:46:3b:84:ae:3e:13:04:98:a4:0c:7f:bf:de:b3:
         ef:34:37:54:33:14:18:3b:d4:2a:f5:e8:ab:62:2f:51:56:39:
         16:c6:36:7a:a4:15:81:05:22:f0:4c:27:95:27:08:aa:98:1f:
         2c:d6:c8:92:80:b1:e9:fa:ea:d0:57:fe:ee:90:ee:df:2b:67:
         31:8a:8a:14:0d:8b:be:18:e6:a1:e6:58:d3:0a:f9:9e:b1:df:
         70:6e:1e:2b:74:14:c7:b1:57:6d:a9:19:20:7c:67:f0:f5:db:
         c5:ac:a2:bd:82:81:7a:2d:f2:f1:11:50:8d:18:7f:c2:d7:ac:
         49:59:c5:e2:ac:32:25:49:a6:52:c7:ef:4e:b9:ce:a2:30:bf:
         3a:73:6f:88:52:86:49:21:75:b3:f3:83:ef:45:0f:4b:00:6b:
         47:6d:89:a7:2f:45:d7:b5:6c:7c:c0:17:9a:15:06:b2:3c:d1:
         77:19:21:b2:97:91:c2:e2:8e:20:d4:99:a8:0b:85:0a:09:31:
         41:3a:ab:23:1e:dd:55:9e:6b:74:5f:d1:52:3f:c9:40:1e:ed:
         af:e8:7f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:59 2025 by rpki-client on console.sobornost.net