Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DfFJfaWdBGgxkWMpiiCezYWtAeB1nSAbLbw7TTaXDevn/0/40B6D8D3576BAFCEF553BD1286D615274F258988.mft
File:                     40B6D8D3576BAFCEF553BD1286D615274F258988.mft (raw, json)
Hash identifier:          zgWM1F+KLD65KAp2g4oMdWeSGWYka0C69v6NRtCReg0=
Subject key identifier:   A3:51:83:4B:56:2A:5D:C8:1B:28:79:81:4B:36:31:92:45:E5:91:8B
Authority key identifier: 40:B6:D8:D3:57:6B:AF:CE:F5:53:BD:12:86:D6:15:27:4F:25:89:88
Certificate issuer:       /CN=40B6D8D3576BAFCEF553BD1286D615274F258988
Certificate serial:       280F437387A2C30851373F3C3B2332DD240E6825
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B6D8D3576BAFCEF553BD1286D615274F258988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfFJfaWdBGgxkWMpiiCezYWtAeB1nSAbLbw7TTaXDevn/0/40B6D8D3576BAFCEF553BD1286D615274F258988.mft
Manifest number:          CE
Signing time:             Mon 28 Apr 2025 05:39:12 +0000
Manifest this update:     Mon 28 Apr 2025 05:34:12 +0000
Manifest next update:     Tue 29 Apr 2025 06:29:12 +0000
Files and hashes:         1: 40B6D8D3576BAFCEF553BD1286D615274F258988.crl (hash: RbjarGZKuBlfdrd4PhlMFzgQS6hd1MmPoyBs/7z1ma4=)
                          2: 323830343a353432303a3a2f33322d313238203d3e20323638363330.roa (hash: Lu3O9xydnIIImn4GUzzk6gfKJrUui2+BfC1DvRK7bhs=)
                          3: 34352e3136342e3130342e302f32322d3332203d3e20323638363330.roa (hash: 07N//A7mEqdmMIvfbqtldtRxnDGIINYpqZvDhq7LEgw=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DfFJfaWdBGgxkWMpiiCezYWtAeB1nSAbLbw7TTaXDevn/0/40B6D8D3576BAFCEF553BD1286D615274F258988.crl
                          rsync://rpki-repo.registro.br/repo/DfFJfaWdBGgxkWMpiiCezYWtAeB1nSAbLbw7TTaXDevn/0/40B6D8D3576BAFCEF553BD1286D615274F258988.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B6D8D3576BAFCEF553BD1286D615274F258988.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0f:43:73:87:a2:c3:08:51:37:3f:3c:3b:23:32:dd:24:0e:68:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40B6D8D3576BAFCEF553BD1286D615274F258988
        Validity
            Not Before: Apr 28 05:34:12 2025 GMT
            Not After : Apr 29 06:29:12 2025 GMT
        Subject: CN=A351834B562A5DC81B2879814B36319245E5918B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:67:b8:e7:c9:e7:52:13:02:52:67:7c:dc:83:
                    30:73:77:a1:e5:d2:87:ff:0b:8f:f9:0b:57:f2:ca:
                    49:61:18:41:90:96:4c:39:b3:97:c4:fc:c7:4b:c7:
                    ea:26:b7:aa:aa:80:80:42:88:88:40:94:fd:cb:6b:
                    4b:e0:77:37:40:34:22:cb:cd:ef:6a:87:57:f3:74:
                    d6:d9:62:1e:bf:fd:d3:ee:59:26:87:c2:03:41:bd:
                    d4:a5:9d:f6:5c:d8:11:e8:27:62:d9:92:1a:73:88:
                    07:ea:5d:fc:57:c1:65:f9:6e:1a:fa:e6:40:9c:c9:
                    c8:f6:75:e5:93:6d:e3:9a:18:06:22:79:70:8b:7a:
                    4d:5c:0c:b7:f9:86:f0:eb:b2:18:e7:d7:d2:0d:4f:
                    fe:c2:12:1b:a6:7d:9b:ba:48:22:66:df:b4:76:48:
                    49:dd:a0:7b:26:23:55:b5:14:b9:e1:cd:af:f9:31:
                    21:8d:aa:c3:bc:8c:ad:78:5a:9e:2e:ca:3c:64:e1:
                    01:5f:03:c4:37:b6:a6:8b:36:fa:61:62:ea:12:71:
                    41:42:0d:4b:e2:36:3c:98:3f:95:0c:93:a9:05:66:
                    c2:40:d1:d1:a3:1b:da:cd:60:f3:d5:dc:be:55:46:
                    fe:0e:c2:c8:c6:29:38:eb:63:f8:da:bf:44:21:ce:
                    e6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:51:83:4B:56:2A:5D:C8:1B:28:79:81:4B:36:31:92:45:E5:91:8B
            X509v3 Authority Key Identifier:
                keyid:40:B6:D8:D3:57:6B:AF:CE:F5:53:BD:12:86:D6:15:27:4F:25:89:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfFJfaWdBGgxkWMpiiCezYWtAeB1nSAbLbw7TTaXDevn/0/40B6D8D3576BAFCEF553BD1286D615274F258988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B6D8D3576BAFCEF553BD1286D615274F258988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfFJfaWdBGgxkWMpiiCezYWtAeB1nSAbLbw7TTaXDevn/0/40B6D8D3576BAFCEF553BD1286D615274F258988.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:80:72:10:e6:4a:3e:01:81:b2:cd:44:9e:c5:e5:43:25:86:
         65:16:6c:27:da:5b:29:9e:94:6a:3c:96:cf:6b:45:25:4d:e5:
         10:60:7e:31:00:39:2b:d4:6b:8d:41:0f:e1:47:d2:f9:e2:d7:
         8e:db:41:44:77:1b:6a:c8:7c:90:1f:40:37:49:0d:34:cb:9c:
         f6:a7:24:55:9b:86:2c:98:0e:b6:38:a4:63:ad:45:1e:76:d4:
         fb:c7:80:4c:50:75:0d:86:08:1c:00:30:64:d2:51:d1:f9:a3:
         ce:9d:fd:85:10:70:cf:23:e7:de:85:3c:d2:7b:57:e1:23:e6:
         7d:6b:e1:2c:c0:38:ba:27:dd:f9:97:ca:b1:80:62:25:39:59:
         59:57:39:7f:ad:83:87:0e:36:a2:a4:fd:da:05:e7:50:72:f6:
         63:bd:10:26:00:a8:e2:62:4a:04:97:ee:88:6e:4f:bf:94:59:
         67:f7:0b:9a:dc:cd:f4:4e:e8:58:41:c7:d4:9b:dc:33:88:4e:
         a6:4f:83:5b:f4:9d:84:6d:75:b5:aa:76:9e:22:80:9a:d8:e4:
         89:16:78:b2:92:de:14:cb:80:fe:ed:e5:3e:c8:86:74:fe:54:
         ae:a9:65:9c:da:bc:86:fe:c1:5e:d6:b3:33:55:38:43:ee:91:
         b1:e3:af:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:38 2025 by rpki-client on console.sobornost.net