Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.mft
File:                     8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.mft (raw, json)
Hash identifier:          R4avi7u92JsVkoeiHp7onCwIfzyqtCY1w/hcOACxYLI=
Subject key identifier:   6D:FD:34:16:68:D8:66:64:3C:D3:6B:4E:44:AD:87:83:4E:FB:09:DC
Authority key identifier: 8A:B2:A3:D9:66:16:CA:30:40:EC:FC:C3:0E:C8:98:EF:F6:8B:CD:C2
Certificate issuer:       /CN=8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2
Certificate serial:       3E4DC98B69B0D3B4103FCCAFFAC13D293EE773A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.mft
Manifest number:          07
Signing time:             Mon 28 Apr 2025 08:09:57 +0000
Manifest this update:     Mon 28 Apr 2025 08:04:57 +0000
Manifest next update:     Tue 29 Apr 2025 10:27:57 +0000
Files and hashes:         1: 323830343a363434303a633030303a3a2f33342d3334203d3e20323639343136.roa (hash: SuOCokOyVd4qy54GILLK0wTq8N2+3dyPm61KDBscTP0=)
                          2: 3137372e38352e3139302e302f32342d3234203d3e20323639343136.roa (hash: N8NGEVHB946x1MgbIiqy89IzxeMOD6XV5d/KzmKIXMM=)
                          3: 8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.crl (hash: uq2B11exIgCXVWXKJPDg0Mv7MfKLu4j87c0kgZVUKfE=)
                          4: 34352e3138362e38302e302f32332d3233203d3e20323639343136.roa (hash: GLLa2NS0SBk/rOHcicj90a8fDimQ028mAVxV47ppOlw=)
                          5: 323830343a363434303a383030303a3a2f33342d3334203d3e20323639343136.roa (hash: KDlkqU107hUXdXYoo35fRepzG5VFjD+NFFxTFVH44S0=)
                          6: 323830343a363434303a343030303a3a2f33342d3334203d3e20323639343136.roa (hash: x4ebov1jOCnwe/u+RbTJnSlD1GmjZTF60iU/ySnndKs=)
                          7: 323830343a363434303a383030303a3a2f33332d3333203d3e20323639343136.roa (hash: 9OrqIBcl9BBF4I+KdG10rmbQ+0iJzlS6L7yglnBBudk=)
                          8: 34352e3138362e38312e302f32342d3234203d3e20323639343136.roa (hash: mJND29x3KzPVQJWZn2t8qDk7n7CZ+sYglsfJBLtoiM4=)
                          9: 323830343a363434303a3a2f33342d3334203d3e20323639343136.roa (hash: dqa60ifaVi945I7jS+gGoiiuOlMDCEST7NOiK1kbkhU=)
                          10: 34352e3138362e38322e302f32332d3233203d3e20323639343136.roa (hash: KEZ+J+fugcym78KxB3PBZrtzf7+dQbZ2E7mwFrDbAg8=)
                          11: 3137372e38352e3139302e302f32332d3233203d3e20323639343136.roa (hash: 8IvOu4bEDn1ZKYBfX7cGtU0CNCRSegFzEqqyLTYGbno=)
                          12: 34352e3138362e38322e302f32342d3234203d3e20323639343136.roa (hash: 5yIKkObxvljSQsgvVM7oUyUgAfpnwY20NlZQZ2fwsQA=)
                          13: 3137372e38352e3139312e302f32342d3234203d3e20323639343136.roa (hash: JGbMdGOe6MaLEkJT7697il984Yx8faF9BDYRI4oqZ4s=)
                          14: 323830343a363434303a3a2f33322d3332203d3e20323639343136.roa (hash: 0kyCuopAtNf7Aw3oMWm6J5opmOGLx/oPs5YJRmBvM6k=)
                          15: 323830343a363434303a3a2f33332d3333203d3e20323639343136.roa (hash: Vc2dC3Eac9xHJwzGjtQogGHcQ5usKXZl+5LU+wgqRSo=)
                          16: 34352e3138362e38332e302f32342d3234203d3e20323639343136.roa (hash: GwWDpf1rZKUh1B9AVJR/AqpPDp5G58lS2ZoCmUcoNSQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.crl
                          rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4d:c9:8b:69:b0:d3:b4:10:3f:cc:af:fa:c1:3d:29:3e:e7:73:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2
        Validity
            Not Before: Apr 28 08:04:57 2025 GMT
            Not After : Apr 29 10:27:57 2025 GMT
        Subject: CN=6DFD341668D866643CD36B4E44AD87834EFB09DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:22:7e:4e:72:fa:55:39:85:6b:cb:a8:1b:f9:
                    4e:6a:62:e1:1a:36:65:2d:ec:d0:69:13:14:7c:ad:
                    68:d9:fa:e1:22:9d:b8:6b:3f:91:82:50:a9:4d:14:
                    d4:df:ff:0a:20:de:6d:a7:26:d8:95:bc:bd:6a:81:
                    e3:80:95:22:92:24:4d:9a:77:48:8d:b9:06:75:d6:
                    b7:89:70:29:f6:7f:61:dc:0e:2e:90:e4:2e:2d:fa:
                    75:e2:56:e9:b8:6d:0f:cf:24:95:69:ea:4a:cb:49:
                    12:b1:33:77:6b:16:71:22:e7:0c:15:e9:f7:42:59:
                    57:39:ff:10:09:4a:9f:13:68:1c:c0:78:16:98:9c:
                    3b:c0:21:23:f7:14:3a:07:1b:9c:8d:fd:08:71:07:
                    ee:96:c2:52:87:6e:51:06:d7:ff:b5:27:ae:f1:34:
                    a0:f2:2e:50:c6:b4:dd:ef:2f:20:bb:a2:fe:04:7c:
                    b1:f0:11:18:8d:1d:1d:99:55:7a:44:0d:69:63:ed:
                    f7:5d:16:30:21:66:22:49:50:30:5b:e4:fd:dd:6d:
                    59:c1:66:45:3b:f5:5e:41:e6:d8:97:50:0d:32:8f:
                    cd:d5:ab:45:dc:c7:94:cf:f5:b5:2f:27:e0:cc:a6:
                    05:4f:5a:9f:15:a1:66:29:d3:4f:95:9d:8f:b2:b9:
                    9a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FD:34:16:68:D8:66:64:3C:D3:6B:4E:44:AD:87:83:4E:FB:09:DC
            X509v3 Authority Key Identifier:
                keyid:8A:B2:A3:D9:66:16:CA:30:40:EC:FC:C3:0E:C8:98:EF:F6:8B:CD:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d9:f9:d3:8d:be:24:d8:40:e7:cd:30:fc:9b:4e:8f:c9:98:
         4b:ab:f6:e7:63:30:0f:b9:5b:ef:c8:b6:fb:9a:60:79:c0:3b:
         bc:51:5b:5d:bd:c0:1e:d5:78:b9:53:11:73:34:cb:e8:9f:f2:
         13:74:5d:e9:a2:bc:e3:ef:a1:2e:f5:0d:a4:ba:98:fe:77:ef:
         84:93:e4:2e:af:32:22:45:9d:94:71:1a:34:bc:77:d5:6e:d5:
         a8:cd:25:f9:01:57:71:8e:48:04:23:08:db:f8:23:37:29:10:
         8c:6e:d8:4c:4d:2d:c6:89:61:ed:39:10:b8:dd:74:39:19:cd:
         34:5c:93:4c:ea:e4:33:00:c7:f8:07:c1:2c:18:70:61:df:94:
         71:31:a7:53:9a:ca:61:fa:31:74:9a:dc:41:e4:6c:da:c4:93:
         13:d5:d4:a0:0e:a3:8c:f5:ef:52:d0:31:b3:c9:b2:b1:ca:a7:
         af:fc:05:70:cc:0f:c2:9c:36:7d:65:29:7a:35:14:4f:f5:75:
         62:8d:92:33:62:b0:fc:a1:4a:3b:50:14:78:26:8f:a4:df:24:
         e9:c0:a0:3b:79:78:0b:c6:e9:e7:1e:d4:4d:3e:f4:e4:a4:51:
         10:42:56:88:3c:75:c1:d0:27:e0:55:c1:0f:1e:c2:00:17:22:
         5a:1d:1f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:29 2025 by rpki-client on console.sobornost.net