Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
File:                     4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft (raw, json)
Hash identifier:          S2KHIkn+VAZaXFlkMYv3BI2u9ia+mTZxA+ZxpBYk/pI=
Subject key identifier:   C5:B9:CC:6A:40:8F:B2:14:20:3F:90:74:C7:B5:70:A7:28:13:20:2B
Authority key identifier: 43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
Certificate issuer:       /CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Certificate serial:       76DB4069CB66864BF47339590812F0148036D0DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
Manifest number:          0201
Signing time:             Sat 26 Apr 2025 07:30:00 +0000
Manifest this update:     Sat 26 Apr 2025 07:25:00 +0000
Manifest next update:     Sun 27 Apr 2025 08:37:00 +0000
Files and hashes:         1: 3133382e302e36342e302f32322d3234203d3e20323632353935.roa (hash: 16TbMKZdTZfIkFgwAstb/ibbX/bvn7/DJ8wvTNDWTQU=)
                          2: 4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl (hash: kUd49GYJjGWJ//FSjWZ3RrHLeA6Ls+jO34I1fNpcZUU=)
                          3: 34352e3136322e3138382e302f32322d3234203d3e20323632353935.roa (hash: U2eH9NqttfTafC3EBRQM8TEtkvvFsyjejY/7ctga6eE=)
                          4: 3136372e3235302e32302e302f32322d3234203d3e20323632353935.roa (hash: Pcjq5j9L01oqldGDpHJ1/0Fhghry022+OEJwmG3qykg=)
                          5: 3139312e372e382e302f32312d3234203d3e20323632353935.roa (hash: G0SWK+jmKHTG0ctDczQrKf6TxfRS64Q9op8j2QG1tjc=)
                          6: 3137302e37392e3232342e302f32322d3234203d3e20323632353935.roa (hash: sXeIiddgIsbS+sATicLgnnXS6mGcpy75xY5FDmKS1hQ=)
                          7: 3137392e3130362e31362e302f32302d3234203d3e20323632353935.roa (hash: IvMpdw39E7yHBfdNRqRjqhm3M4HxFQsnyvqHbu0ZRt4=)
                          8: 323830343a3639303a3a2f33322d3430203d3e20323632353935.roa (hash: TO6Eb49up/wmLJo6dXO2I0VlV7zMLlLB/b9vOIm4NVc=)
                          9: 3137372e38352e302e302f32312d3234203d3e20323632353935.roa (hash: sBpa4s503VeZUYCOt+l0MWz+VMtYiBSEsylwD1QPHFw=)
                          10: 3133382e3132312e31362e302f32322d3234203d3e20323632353935.roa (hash: r+oC/tP9cVlGYdiKnaYO/EjxupaEl0ebrhGSL23ifBg=)
                          11: 34352e3137392e3138302e302f32322d3234203d3e20323632353935.roa (hash: noH/6wQklcBAaxEAf8opJx4ehieMk2GZ8QTzCrekJZE=)
                          12: 3137302e38332e34342e302f32322d3234203d3e20323632353935.roa (hash: WisQ1JL2FAAn8kaZqf230Nksj1G0DtPacu/DRaDBIZA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl
                          rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:db:40:69:cb:66:86:4b:f4:73:39:59:08:12:f0:14:80:36:d0:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
        Validity
            Not Before: Apr 26 07:25:00 2025 GMT
            Not After : Apr 27 08:37:00 2025 GMT
        Subject: CN=C5B9CC6A408FB214203F9074C7B570A72813202B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d6:2d:db:80:3d:a0:a2:4a:46:0e:f3:d6:c1:
                    f6:14:12:88:7a:66:25:4a:0a:10:10:74:f0:1a:61:
                    14:a6:5f:65:5d:40:4d:e3:25:7c:b6:c2:0a:19:35:
                    7a:8c:88:3b:09:ff:ba:9e:0f:81:e3:8f:89:6e:d3:
                    dc:6f:aa:27:53:72:fc:a4:47:3c:91:b6:a2:62:ec:
                    6c:77:55:a6:b9:bf:d5:59:09:5a:d4:6a:0d:80:2e:
                    96:03:19:e5:54:75:03:a6:f1:b5:03:38:83:ad:34:
                    9c:61:d3:50:34:db:48:16:ac:ff:1b:ac:23:b0:34:
                    4a:4f:98:54:22:bd:c7:d3:a4:2d:31:ad:f6:18:66:
                    ab:fc:6f:5d:66:c6:ef:ee:03:32:bf:4d:ab:da:5b:
                    11:78:90:f1:e4:1b:85:da:0e:39:ae:3a:09:45:10:
                    e5:cb:8d:5c:79:d2:f2:3d:ff:10:90:4a:90:db:92:
                    41:51:df:88:02:a4:e2:af:cd:9a:9b:6c:98:92:cc:
                    e5:87:b6:f4:05:2d:59:a4:95:65:2b:18:a6:0a:28:
                    9d:4f:40:12:62:aa:86:2a:e1:e9:4c:b0:0e:c0:b5:
                    d8:01:55:50:38:86:74:87:7e:b9:d2:b9:16:f7:dd:
                    f3:52:e7:5d:af:32:cb:d7:d4:56:37:c4:15:f7:86:
                    19:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B9:CC:6A:40:8F:B2:14:20:3F:90:74:C7:B5:70:A7:28:13:20:2B
            X509v3 Authority Key Identifier:
                keyid:43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:08:1c:2f:25:75:33:f8:88:1d:ec:15:55:d6:3c:8c:11:1e:
         13:2b:26:f6:fc:d8:af:1d:8a:da:fa:0c:48:48:35:d8:d9:a9:
         ed:f8:71:87:50:eb:9c:49:7f:1f:2d:5d:34:76:10:28:56:c1:
         9f:a4:94:87:fe:2c:b1:cd:6e:93:fd:a4:bf:fd:12:94:3c:71:
         b8:1d:dd:22:76:55:e0:9a:53:cb:04:e7:d7:23:21:c7:3f:00:
         e9:af:9f:cf:b4:d4:7a:56:d9:32:0a:a9:3c:bb:f8:13:73:8e:
         ed:0d:68:a8:bf:db:06:88:96:3e:0e:ed:35:ca:f3:01:3f:f8:
         15:d0:a4:8d:33:f0:e6:f5:a1:47:16:ec:c2:e5:47:db:f9:71:
         05:73:e7:8f:d5:a8:ea:ef:5f:1e:81:f0:9d:04:ec:40:3c:5b:
         dd:76:3d:cb:3e:71:b1:2c:9f:2a:8c:6f:b5:0f:08:a6:90:92:
         3a:d9:5e:3a:22:e8:fb:2d:f2:89:71:6c:90:97:dc:99:e5:92:
         c0:bd:45:80:29:15:11:c3:fd:58:95:9e:58:b7:08:5e:30:6c:
         00:63:d9:af:51:25:fc:0e:13:02:60:82:50:a4:f2:37:42:f7:
         f3:ad:ef:58:5f:23:7c:9f:dd:42:e3:32:03:ba:da:6b:8f:db:
         13:59:94:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:50 2025 by rpki-client on console.sobornost.net