Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD.mft
File:                     A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD.mft (raw, json)
Hash identifier:          mAQBwvZtJhRz8nRXdyWs42r3GiCbk0+h/mSGR1Lf5rw=
Subject key identifier:   23:41:00:5A:A4:B6:69:C5:A3:7A:FF:E8:06:58:99:E3:52:39:1C:E7
Authority key identifier: A2:51:AB:5E:09:E5:D3:EE:16:5B:0B:E5:1F:6A:FC:8C:B2:15:04:AD
Certificate issuer:       /CN=A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD
Certificate serial:       622CA872654723B50BF88C4534434D8B5E7A70ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD.mft
Manifest number:          A4
Signing time:             Thu 24 Apr 2025 22:33:55 +0000
Manifest this update:     Thu 24 Apr 2025 22:28:55 +0000
Manifest next update:     Sat 26 Apr 2025 00:19:55 +0000
Files and hashes:         1: 323830343a373735343a3a2f33322d3438203d3e203631363034.roa (hash: 9HhCtQf/FhJjMSIQTTm0/zP5bOk+hCXNZvURg/qoUTE=)
                          2: 3230312e3133312e39382e302f32332d3234203d3e203631363034.roa (hash: Mhqs011CDdtqM8FadqHh9HYAyE5Ts0jgonbpJAZ1CeQ=)
                          3: A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD.crl (hash: ZnIoO2WYOQejjxJad/wLQ6v9LrpuFXg5VUtz6KDk4rE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD.crl
                          rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2c:a8:72:65:47:23:b5:0b:f8:8c:45:34:43:4d:8b:5e:7a:70:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD
        Validity
            Not Before: Apr 24 22:28:55 2025 GMT
            Not After : Apr 26 00:19:55 2025 GMT
        Subject: CN=2341005AA4B669C5A37AFFE8065899E352391CE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a4:e8:69:76:80:6d:c5:46:12:37:14:85:21:
                    02:7b:77:0e:fb:90:74:b8:3a:54:7c:fe:f9:8d:2f:
                    d7:76:1f:11:bf:a1:ab:5f:06:76:bd:83:08:65:19:
                    8d:9e:8d:91:be:f0:94:1d:f6:dc:c2:ae:fe:b6:8f:
                    57:90:94:62:81:e5:38:f3:a9:2e:b4:09:26:e6:d7:
                    ad:28:57:c2:cd:8e:c9:a1:15:31:62:83:6f:7a:67:
                    7d:9d:55:52:21:c8:53:23:fb:07:f7:3a:44:78:47:
                    c3:b1:69:b3:01:c4:55:f4:15:5f:fc:97:36:08:03:
                    3a:e9:38:97:f1:c5:ce:d1:24:78:e3:91:9c:a4:fe:
                    27:57:bb:34:c4:10:48:39:40:02:19:88:a1:3d:0c:
                    15:a3:86:a2:6d:72:19:fb:92:3c:93:77:a3:92:ea:
                    e5:ba:0a:48:63:c7:9d:39:bf:fe:cd:64:48:bb:c0:
                    91:46:33:5e:d7:fd:38:af:15:9c:40:ce:95:9e:2e:
                    c0:78:d0:2d:70:8d:4e:13:fd:f6:86:1f:2c:6d:09:
                    62:fb:42:98:63:fa:9a:db:e6:5f:74:67:eb:a6:ee:
                    e6:40:34:ba:d9:f7:2f:68:38:cf:91:e1:ad:bf:a1:
                    96:2c:ef:e5:8d:c7:7b:28:8c:3b:84:c8:c2:0b:6d:
                    38:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:41:00:5A:A4:B6:69:C5:A3:7A:FF:E8:06:58:99:E3:52:39:1C:E7
            X509v3 Authority Key Identifier:
                keyid:A2:51:AB:5E:09:E5:D3:EE:16:5B:0B:E5:1F:6A:FC:8C:B2:15:04:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:f2:a7:d3:7d:e5:f8:cd:f6:8e:df:8f:3f:71:6a:ca:ad:dd:
         ad:d0:ae:48:a4:59:b3:3e:f1:20:0c:95:4e:71:6c:a2:9f:7d:
         d8:98:a0:13:59:c3:c0:3e:d8:a6:cd:3d:ee:77:d0:c3:d3:08:
         2b:09:37:80:f7:42:e2:1e:7d:57:29:53:39:0a:10:6e:4d:6c:
         68:4d:1f:42:53:6b:64:8a:92:53:39:61:24:02:09:9c:11:e7:
         7b:9a:7a:b1:a7:a4:9a:f9:8b:02:1d:af:8f:f2:df:fa:80:8b:
         48:4b:78:53:8c:f8:9c:55:5d:6d:76:1f:91:e8:4c:f8:cb:23:
         d8:54:c2:7b:f3:d8:19:04:c1:24:27:68:d4:3f:f9:bc:1c:9e:
         e4:93:b5:49:2a:17:32:ee:84:7f:42:96:1a:82:69:8a:b4:09:
         3b:c7:67:60:f6:55:c5:97:69:2f:55:6d:c2:da:51:4b:b2:b4:
         c6:c5:ec:bd:87:21:e3:b8:6c:55:e7:ef:93:df:f8:d7:e4:cc:
         35:68:c0:9c:68:21:b2:aa:61:ee:f7:3b:dd:0c:62:e4:5b:01:
         de:ef:84:b8:ff:c0:39:c4:c1:65:8a:47:1f:cb:84:40:30:64:
         4f:70:1e:c2:74:3e:a3:3f:c5:63:4e:e2:28:28:96:b1:ad:81:
         1b:55:65:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:31 2025 by rpki-client on console.sobornost.net