Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.mft
File:                     0F44F5750AB24A7D6E844281A724F470994C316E.mft (raw, json)
Hash identifier:          ZbbN3Na+r16AkYBSm+JSDJtbCS31dLOQpJtY2GpCHJA=
Subject key identifier:   53:E2:38:7B:01:B6:91:93:10:99:E6:77:93:3F:41:A7:38:FB:E6:EA
Authority key identifier: 0F:44:F5:75:0A:B2:4A:7D:6E:84:42:81:A7:24:F4:70:99:4C:31:6E
Certificate issuer:       /CN=0F44F5750AB24A7D6E844281A724F470994C316E
Certificate serial:       2675B5FEC6FBE64ACCAF912D32B63109F07B6CEE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F44F5750AB24A7D6E844281A724F470994C316E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.mft
Manifest number:          A4
Signing time:             Mon 28 Apr 2025 04:14:18 +0000
Manifest this update:     Mon 28 Apr 2025 04:09:18 +0000
Manifest next update:     Tue 29 Apr 2025 07:02:18 +0000
Files and hashes:         1: 0F44F5750AB24A7D6E844281A724F470994C316E.crl (hash: txKyl4OHOOaTobVu2DzuMhRKUw9oGecfNUfrS1t8L5o=)
                          2: 34352e3232352e3235342e302f32332d3233203d3e20323636393532.roa (hash: VnWIAqSVaHXdTXIZ/wEUsCSR/06CNKfLZWKo2bUcMdI=)
                          3: 323830343a343564343a3a2f33322d3332203d3e20323636393532.roa (hash: /pZDwmBlGh3OPC1uRjGRKj3Aqu/L1N7gb4dp//2Vkao=)
                          4: 34352e3232352e3235322e302f32322d3232203d3e20323636393532.roa (hash: f9thZPJfFNFIPHxk9PWyAydH/izpxxCpFfxJlwqx4tA=)
                          5: 34352e3232352e3235322e302f32332d3233203d3e20323636393532.roa (hash: cpdtxKzb31QgRVzX3RdqYXO3cJnYPB/+INhHUbDsm0M=)
                          6: 323830343a343564343a383030303a3a2f33332d3333203d3e20323636393532.roa (hash: IUqprVX7H/GI7Fsr+IYEzUmfIpRawskUGi+VeKMjgV8=)
                          7: 323830343a343564343a3a2f33332d3333203d3e20323636393532.roa (hash: QlA0i1Xl4NBlUSClBBDFEoF760NQQYM9h1Fhs4dt5e4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.crl
                          rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F44F5750AB24A7D6E844281A724F470994C316E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:75:b5:fe:c6:fb:e6:4a:cc:af:91:2d:32:b6:31:09:f0:7b:6c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F44F5750AB24A7D6E844281A724F470994C316E
        Validity
            Not Before: Apr 28 04:09:18 2025 GMT
            Not After : Apr 29 07:02:18 2025 GMT
        Subject: CN=53E2387B01B691931099E677933F41A738FBE6EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:40:d9:c5:2e:5f:13:cc:80:14:c3:0f:06:a3:
                    d3:31:ec:b2:b1:3a:14:e5:c9:28:27:1c:a9:92:e2:
                    ad:10:4b:f6:97:c9:88:68:33:a7:20:4d:02:ff:e4:
                    0e:12:c3:3e:57:af:18:39:cf:b1:fa:34:67:5e:cb:
                    ab:29:e7:d9:7b:60:12:b7:16:0b:44:2e:4c:1e:a1:
                    09:db:a1:5b:df:ff:6f:a8:81:38:cf:55:2b:70:3d:
                    1e:8f:7c:03:97:bc:f5:9d:62:ef:56:bf:30:2d:12:
                    ce:7b:83:a6:b4:96:f7:aa:77:e2:7c:ac:54:dd:7a:
                    c6:e5:22:54:b6:68:df:42:88:21:75:53:9c:4b:09:
                    e6:54:01:7b:a4:42:7a:bf:2e:ee:ce:ea:ef:70:8e:
                    e2:32:7e:ad:f4:44:a3:bb:67:5d:4b:85:4d:cf:87:
                    ed:97:e0:48:48:b7:c3:3d:8d:2a:ad:36:be:cf:28:
                    8e:78:2f:e1:ac:90:1c:23:aa:e5:3a:d9:96:f7:ed:
                    74:d7:5b:54:1a:66:44:95:4f:96:07:e6:a7:44:e6:
                    5d:cd:d5:5a:0f:ae:d1:48:80:4a:71:e3:d3:d9:ab:
                    f7:89:a2:1a:cf:c7:4d:6d:8a:a0:f6:06:a1:f0:23:
                    89:2a:a1:8c:be:28:1e:10:36:6c:49:74:0e:88:2e:
                    66:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E2:38:7B:01:B6:91:93:10:99:E6:77:93:3F:41:A7:38:FB:E6:EA
            X509v3 Authority Key Identifier:
                keyid:0F:44:F5:75:0A:B2:4A:7D:6E:84:42:81:A7:24:F4:70:99:4C:31:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F44F5750AB24A7D6E844281A724F470994C316E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:d3:73:17:e7:89:70:01:c9:45:ee:38:ca:d4:fd:8b:68:c7:
         d7:9d:14:19:6d:ea:b9:69:5e:36:00:5d:d3:93:9b:80:68:71:
         30:df:12:ff:32:69:3d:43:bb:16:8d:89:3a:23:ee:d5:8c:cf:
         9d:75:43:61:28:e5:a4:23:72:66:b7:a6:d0:10:77:db:9a:9f:
         99:a5:af:62:9c:75:ec:55:27:e6:d7:a2:85:31:18:ec:e9:07:
         17:7a:55:b1:8c:73:a5:71:f0:c7:92:15:26:70:ab:44:d6:d4:
         9a:80:74:b1:89:9a:89:35:c0:50:e5:af:cb:9e:b8:9b:33:a2:
         5c:81:99:53:4d:49:7c:9e:c5:ea:b0:39:d2:60:9b:21:0b:98:
         5b:dc:c4:a5:8c:33:c5:83:d1:68:80:42:5c:75:5d:e5:f0:a1:
         21:17:e9:39:2b:a3:7a:b4:a3:d1:fe:cd:7f:84:b1:e1:46:94:
         a8:05:05:21:0d:a0:72:01:ab:1b:de:b4:8a:f6:19:5c:89:61:
         26:5c:76:2b:7b:7e:a6:46:24:de:a7:db:3e:0d:23:82:05:44:
         8e:50:45:00:3e:bc:b9:cc:1b:ed:35:db:cc:68:e5:44:f8:76:
         89:73:ef:c5:fe:c2:e0:d6:cf:7e:78:1d:73:02:21:fa:d8:df:
         b1:5f:fa:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJnW1/sb75krMr5EtMrYxCfB7bO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY0NEY1NzUwQUIyNEE3RDZFODQ0MjgxQTcyNEY0NzA5
OTRDMzE2RTAeFw0yNTA0MjgwNDA5MThaFw0yNTA0MjkwNzAyMThaMDMxMTAvBgNV
BAMTKDUzRTIzODdCMDFCNjkxOTMxMDk5RTY3NzkzM0Y0MUE3MzhGQkU2RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7QNnFLl8TzIAUww8Go9Mx7LKx
OhTlySgnHKmS4q0QS/aXyYhoM6cgTQL/5A4Swz5Xrxg5z7H6NGdey6sp59l7YBK3
FgtELkweoQnboVvf/2+ogTjPVStwPR6PfAOXvPWdYu9WvzAtEs57g6a0lveqd+J8
rFTdesblIlS2aN9CiCF1U5xLCeZUAXukQnq/Lu7O6u9wjuIyfq30RKO7Z11LhU3P
h+2X4EhIt8M9jSqtNr7PKI54L+GskBwjquU62Zb37XTXW1QaZkSVT5YH5qdE5l3N
1VoPrtFIgEpx49PZq/eJohrPx01tiqD2BqHwI4kqoYy+KB4QNmxJdA6ILmb5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUU+I4ewG2kZMQmeZ3kz9Bpzj75uowHwYDVR0j
BBgwFoAUD0T1dQqySn1uhEKBpyT0cJlMMW4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGcyVFN3dFRuNGdpQ2ZzUThKWldGU0RkNE1ac3E1NjRyVkZDZnRtUEI0
Y1QvMC8wRjQ0RjU3NTBBQjI0QTdENkU4NDQyODFBNzI0RjQ3MDk5NEMzMTZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGNDRGNTc1MEFCMjRBN0Q2
RTg0NDI4MUE3MjRGNDcwOTk0QzMxNkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGcyVFN3dFRuNGdpQ2ZzUThKWldGU0RkNE1ac3E1NjRyVkZDZnRtUEI0Y1QvMC8w
RjQ0RjU3NTBBQjI0QTdENkU4NDQyODFBNzI0RjQ3MDk5NEMzMTZFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAr9NzF+eJcAHJRe44ytT9i2jH150UGW3quWleNgBd05ObgGhxMN8S/zJpPUO7
Fo2JOiPu1YzPnXVDYSjlpCNyZrem0BB325qfmaWvYpx17FUn5teihTEY7OkHF3pV
sYxzpXHwx5IVJnCrRNbUmoB0sYmaiTXAUOWvy564mzOiXIGZU01JfJ7F6rA50mCb
IQuYW9zEpYwzxYPRaIBCXHVd5fChIRfpOSujerSj0f7Nf4Sx4UaUqAUFIQ2gcgGr
G960ivYZXIlhJlx2K3t+pkYk3qfbPg0jggVEjlBFAD68ucwb7TXbzGjlRPh2iXPv
xf7C4NbPfngdcwIh+tjfsV/6IA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:32 2025 by rpki-client on console.sobornost.net