Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/1/14DCE6323F84F3FE671A04D650359F18CDAE5603.mft
File:                     14DCE6323F84F3FE671A04D650359F18CDAE5603.mft (raw, json)
Hash identifier:          7TBUAtdIMmBHd+LrCCpQJGM1Oej/BHGl6HUbLiCFNGM=
Subject key identifier:   29:B2:C4:C5:E4:AD:B0:0E:22:95:7A:B3:B2:3E:A4:7F:4E:2D:24:E2
Authority key identifier: 14:DC:E6:32:3F:84:F3:FE:67:1A:04:D6:50:35:9F:18:CD:AE:56:03
Certificate issuer:       /CN=14DCE6323F84F3FE671A04D650359F18CDAE5603
Certificate serial:       622B726A22C84BECA93964AFFA53DE728D508C53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DCE6323F84F3FE671A04D650359F18CDAE5603.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/1/14DCE6323F84F3FE671A04D650359F18CDAE5603.mft
Manifest number:          01FF
Signing time:             Fri 25 Apr 2025 23:58:42 +0000
Manifest this update:     Fri 25 Apr 2025 23:53:42 +0000
Manifest next update:     Sun 27 Apr 2025 01:09:42 +0000
Files and hashes:         1: 3138362e3233332e32342e302f32322d3234203d3e20323730373830.roa (hash: 4/7nC+DIV8WWxhVYIiuRTB3lixGiCTuLIF6CgZ6ka4g=)
                          2: 323830343a373134633a3a2f33322d3438203d3e20323730373830.roa (hash: j5X+BeyDrNX7uMQE007mAD7ggbcxgud9QbySmYAyMSY=)
                          3: 14DCE6323F84F3FE671A04D650359F18CDAE5603.crl (hash: KCQGL7p7l22Rp1DNsG+kOSB4Rt6dGIp8FGe2fRY38Ck=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/1/14DCE6323F84F3FE671A04D650359F18CDAE5603.crl
                          rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/1/14DCE6323F84F3FE671A04D650359F18CDAE5603.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DCE6323F84F3FE671A04D650359F18CDAE5603.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 01:09:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2b:72:6a:22:c8:4b:ec:a9:39:64:af:fa:53:de:72:8d:50:8c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14DCE6323F84F3FE671A04D650359F18CDAE5603
        Validity
            Not Before: Apr 25 23:53:42 2025 GMT
            Not After : Apr 27 01:09:42 2025 GMT
        Subject: CN=29B2C4C5E4ADB00E22957AB3B23EA47F4E2D24E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:81:8a:e0:42:fe:c1:3b:74:d2:69:5a:ad:38:
                    68:57:75:52:c9:c5:0c:07:8c:0e:10:8d:11:91:99:
                    e6:e5:c7:64:a8:28:27:5a:b9:72:8f:bf:cf:f7:38:
                    ee:f1:6b:3f:78:88:41:ca:0e:c8:9a:0e:28:9c:d2:
                    f6:ec:c2:9f:40:92:92:69:d5:67:90:80:1a:87:eb:
                    f2:10:93:b3:9f:ea:72:9d:c0:42:38:17:80:a2:69:
                    21:94:cf:ae:7b:a8:0a:74:d0:d4:10:86:49:0c:91:
                    91:85:b0:e1:d5:54:9b:4e:f8:92:9c:50:dc:a4:ac:
                    1f:18:9a:b6:31:e8:06:35:ef:7d:c0:fd:a7:77:28:
                    a5:2a:67:53:d8:17:c7:c9:6f:ec:c9:98:b8:e6:70:
                    9b:cb:e8:48:b4:aa:8b:09:9a:cd:48:4e:c0:42:c2:
                    af:a4:35:73:b2:53:57:f4:a0:93:37:ca:1b:ae:f2:
                    e7:4e:09:b5:d0:68:5c:5f:0a:7d:b0:11:66:c0:13:
                    25:eb:9a:58:0f:02:cd:63:0d:7d:7f:e2:f8:ed:7e:
                    1b:29:c8:dd:6a:73:ca:b9:39:85:68:84:91:8c:36:
                    82:f6:0b:12:3c:3a:a8:06:a4:cd:29:27:9b:e4:8d:
                    af:2c:17:55:5e:46:81:1e:31:8f:df:c8:0d:41:ef:
                    96:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B2:C4:C5:E4:AD:B0:0E:22:95:7A:B3:B2:3E:A4:7F:4E:2D:24:E2
            X509v3 Authority Key Identifier:
                keyid:14:DC:E6:32:3F:84:F3:FE:67:1A:04:D6:50:35:9F:18:CD:AE:56:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/1/14DCE6323F84F3FE671A04D650359F18CDAE5603.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DCE6323F84F3FE671A04D650359F18CDAE5603.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/1/14DCE6323F84F3FE671A04D650359F18CDAE5603.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b4:c7:b1:4f:73:d7:44:91:a0:aa:3b:84:b0:71:f3:2c:bc:
         46:93:63:3f:1e:8b:00:11:1e:05:ec:71:1c:00:96:d9:67:d3:
         29:dd:bb:49:aa:03:ca:af:dd:ff:d1:21:f4:9e:fc:18:8e:a0:
         ef:9b:89:ba:d9:0a:8e:89:7a:18:29:37:66:05:68:dd:08:11:
         b6:0a:23:04:15:74:aa:32:b9:9e:64:e6:c3:78:dd:46:42:c8:
         d9:13:01:f7:0d:63:6c:1c:7f:99:8e:61:56:27:9d:c3:cc:36:
         2e:32:36:57:06:8c:85:1c:0d:2a:76:d2:e8:29:f4:fd:4d:a0:
         fd:be:57:7f:84:e3:67:b1:8f:7d:26:46:d3:ef:88:0c:b3:25:
         ea:c2:ef:b9:36:f6:ad:ed:8f:51:f6:47:60:f6:4e:07:5d:1b:
         40:cd:b6:e1:3a:b5:d2:ca:f4:95:66:37:67:5f:ce:9f:c6:00:
         a1:00:68:e9:1b:b1:59:0c:db:5e:45:4d:ca:fb:29:9b:ec:2a:
         c2:0e:b3:18:bb:4a:a3:0c:a1:ce:85:b1:b0:42:f5:cc:23:fd:
         27:93:2b:7f:f5:b4:22:6f:c5:54:b3:0e:d9:e8:8c:f3:9f:3d:
         d5:43:20:1d:e7:ee:d7:3c:96:3c:ea:56:e3:a1:16:a1:93:45:
         43:c8:f5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:11 2025 by rpki-client on console.sobornost.net