Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
File:                     2D59905C3FCA5BDA34D7101B088D80451D026C47.mft (raw, json)
Hash identifier:          m/ARI8QMv2IQhO9e3VwFBxAXc4cOpLeUzneeJdvgwPY=
Subject key identifier:   9A:91:B4:B0:71:F9:A2:7B:3A:D1:58:CC:1E:E4:CA:39:10:E8:38:F0
Authority key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47
Certificate issuer:       /CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
Certificate serial:       3322CB815E02F8F472302E0E88842E1FC6FE45C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
Manifest number:          0207
Signing time:             Mon 28 Apr 2025 03:24:02 +0000
Manifest this update:     Mon 28 Apr 2025 03:19:02 +0000
Manifest next update:     Tue 29 Apr 2025 04:46:02 +0000
Files and hashes:         1: 323830343a323439633a3a2f33322d3438203d3e20323634323333.roa (hash: NawnnPEHbMCtTiXRZuqs51ycbe695zSEZpiIfj2SEO8=)
                          2: 3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa (hash: zTSSMFG/lgVqOaFeXf9pCktuzCsj0jIoIIi1uaEYa0I=)
                          3: 3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa (hash: GZELRNfuplahvPNzTKoCXKCGe7m/TvcDFJFlJBobK9k=)
                          4: 2D59905C3FCA5BDA34D7101B088D80451D026C47.crl (hash: JIBvqkYpYEHXIKVRcNaWKh6Cppxa5s5H0cIXqQQ7r5E=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl
                          rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:22:cb:81:5e:02:f8:f4:72:30:2e:0e:88:84:2e:1f:c6:fe:45:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
        Validity
            Not Before: Apr 28 03:19:02 2025 GMT
            Not After : Apr 29 04:46:02 2025 GMT
        Subject: CN=9A91B4B071F9A27B3AD158CC1EE4CA3910E838F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:42:df:39:64:0d:c7:94:76:52:7e:21:d9:db:
                    a3:8a:2e:12:d2:97:b2:9e:a0:f1:8c:51:ad:a4:07:
                    1d:94:59:69:ee:39:69:76:65:cd:53:0c:30:64:4b:
                    a9:49:ac:0e:34:a5:e3:f4:65:ec:5b:24:b7:d7:4c:
                    0a:60:0d:1a:e1:dc:1f:24:fd:10:1a:55:ba:7a:a7:
                    8b:39:1f:e1:f1:4b:4d:f4:97:4c:0d:73:7a:36:cc:
                    70:6d:39:f0:6b:03:b7:ec:d4:86:d2:ff:d7:d2:70:
                    7c:63:f5:4a:c4:fa:63:53:82:82:f3:c3:16:10:90:
                    0b:81:36:3d:2a:34:71:1c:36:4e:51:78:ca:a0:22:
                    55:45:8e:e0:6e:b8:fd:c9:54:59:a9:c5:2a:c7:67:
                    6e:7a:bf:b1:ef:e2:15:1b:ff:3b:dd:25:0b:20:63:
                    4c:f2:52:48:ae:7a:1a:5f:5d:46:4f:b5:64:68:83:
                    dc:ba:14:a8:a8:9a:8b:53:8a:c2:11:4a:7c:b7:33:
                    12:1a:e2:66:71:cf:48:22:89:c6:c1:1c:d7:00:86:
                    99:6a:11:f8:bb:8c:b6:42:4f:3f:4c:51:cb:38:ae:
                    42:54:2e:a2:00:98:6a:05:ae:2e:df:3b:f5:18:ce:
                    1c:17:77:7b:ea:16:07:50:56:ba:93:20:6f:80:f3:
                    2f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:91:B4:B0:71:F9:A2:7B:3A:D1:58:CC:1E:E4:CA:39:10:E8:38:F0
            X509v3 Authority Key Identifier:
                keyid:2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:5a:27:a8:b3:47:68:37:01:8e:34:9b:97:35:27:38:aa:c3:
         c3:c7:46:7c:46:33:25:70:71:1d:26:36:2e:96:0c:d9:49:bb:
         8a:57:2d:d9:84:d1:d1:06:92:00:a2:11:fd:56:5b:8a:93:26:
         4a:a3:5b:76:d8:bb:03:cd:3f:0f:5f:ee:67:15:a3:31:58:ba:
         f9:f0:64:6b:1a:aa:e7:4a:ff:46:43:81:d4:dd:55:b4:1b:17:
         39:6b:cc:fc:74:46:bc:05:8f:9d:ac:38:f2:d4:bb:42:b8:b8:
         c1:cf:f3:98:29:3c:23:94:44:75:29:7f:1a:97:0a:80:93:29:
         94:38:99:fd:f2:22:13:b3:c7:ee:de:82:da:ec:76:7a:96:4c:
         6e:d9:54:78:d3:a7:61:09:61:6d:5d:a7:e9:8a:13:57:96:32:
         83:d0:6a:ce:b2:6f:c0:f4:04:2c:7a:27:e3:43:6c:15:78:73:
         ea:81:ba:d3:e3:f5:65:51:a3:fd:53:bb:f9:fb:e8:1a:af:02:
         c0:f2:29:51:9d:f1:61:43:59:ba:a5:e7:59:da:a3:d5:a1:13:
         f6:1e:52:5e:9c:cb:1a:16:b5:2e:81:a7:94:f6:3e:80:13:8e:
         b2:46:28:1c:ea:a8:b1:5b:e3:c7:23:ff:5b:49:eb:3f:c8:fe:
         e1:23:b8:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMyLLgV4C+PRyMC4OiIQuH8b+RcgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ1OTkwNUMzRkNBNUJEQTM0RDcxMDFCMDg4RDgwNDUx
RDAyNkM0NzAeFw0yNTA0MjgwMzE5MDJaFw0yNTA0MjkwNDQ2MDJaMDMxMTAvBgNV
BAMTKDlBOTFCNEIwNzFGOUEyN0IzQUQxNThDQzFFRTRDQTM5MTBFODM4RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGQt85ZA3HlHZSfiHZ26OKLhLS
l7KeoPGMUa2kBx2UWWnuOWl2Zc1TDDBkS6lJrA40peP0ZexbJLfXTApgDRrh3B8k
/RAaVbp6p4s5H+HxS030l0wNc3o2zHBtOfBrA7fs1IbS/9fScHxj9UrE+mNTgoLz
wxYQkAuBNj0qNHEcNk5ReMqgIlVFjuBuuP3JVFmpxSrHZ256v7Hv4hUb/zvdJQsg
Y0zyUkiuehpfXUZPtWRog9y6FKiomotTisIRSny3MxIa4mZxz0giicbBHNcAhplq
Efi7jLZCTz9MUcs4rkJULqIAmGoFri7fO/UYzhwXd3vqFgdQVrqTIG+A8y9vAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUmpG0sHH5ons60VjMHuTKORDoOPAwHwYDVR0j
BBgwFoAULVmQXD/KW9o01xAbCI2ARR0CbEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5
QUgvMS8yRDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJENTk5MDVDM0ZDQTVCREEz
NEQ3MTAxQjA4OEQ4MDQ1MUQwMjZDNDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5QUgvMS8y
RDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxVonqLNHaDcBjjSblzUnOKrDw8dGfEYzJXBxHSY2LpYM2Um7ilct2YTR0QaS
AKIR/VZbipMmSqNbdti7A80/D1/uZxWjMVi6+fBkaxqq50r/RkOB1N1VtBsXOWvM
/HRGvAWPnaw48tS7Qri4wc/zmCk8I5REdSl/GpcKgJMplDiZ/fIiE7PH7t6C2ux2
epZMbtlUeNOnYQlhbV2n6YoTV5Yyg9BqzrJvwPQELHon40NsFXhz6oG60+P1ZVGj
/VO7+fvoGq8CwPIpUZ3xYUNZuqXnWdqj1aET9h5SXpzLGha1LoGnlPY+gBOOskYo
HOqosVvjxyP/W0nrP8j+4SO46g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:32 2025 by rpki-client on console.sobornost.net