Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.mft
File:                     89509769EB595BA27FC5B8208CFB0D05C39E2BD3.mft (raw, json)
Hash identifier:          UNLoyt6xP+Qi+NnRFeLlq5L+iudENKEtrp6Wl2Jf6tg=
Subject key identifier:   C8:7D:2E:2A:7C:96:BC:E7:78:D5:AF:46:18:D3:9D:2E:82:AA:EE:42
Authority key identifier: 89:50:97:69:EB:59:5B:A2:7F:C5:B8:20:8C:FB:0D:05:C3:9E:2B:D3
Certificate issuer:       /CN=89509769EB595BA27FC5B8208CFB0D05C39E2BD3
Certificate serial:       5DD85C7D18D83D623282C03B12F8060CB16C0D1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.mft
Manifest number:          015A
Signing time:             Thu 24 Apr 2025 13:08:58 +0000
Manifest this update:     Thu 24 Apr 2025 13:03:58 +0000
Manifest next update:     Fri 25 Apr 2025 15:56:58 +0000
Files and hashes:         1: 323830343a343132303a3a2f33322d3438203d3e20323636303035.roa (hash: 0VVrm/L9Uab2V3SzgjOur5DnfTYxDe4XeAKOXZe4bww=)
                          2: 3138312e3139312e3132302e302f32322d3234203d3e20323636303035.roa (hash: S/LwTatzFBySMkvtTBSXpZBpfXHay36c6eZoK/GOZnE=)
                          3: 89509769EB595BA27FC5B8208CFB0D05C39E2BD3.crl (hash: MMlvq7s6OCtG9g2fq+16AphWQVB37RyGFWQCa7zRKXI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.crl
                          rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 15:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d8:5c:7d:18:d8:3d:62:32:82:c0:3b:12:f8:06:0c:b1:6c:0d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89509769EB595BA27FC5B8208CFB0D05C39E2BD3
        Validity
            Not Before: Apr 24 13:03:58 2025 GMT
            Not After : Apr 25 15:56:58 2025 GMT
        Subject: CN=C87D2E2A7C96BCE778D5AF4618D39D2E82AAEE42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:11:86:75:8f:d6:d2:49:2f:a6:99:5d:df:59:
                    17:7e:5e:19:78:9e:39:8c:87:33:9d:12:22:31:be:
                    4b:06:ed:b1:54:44:5b:43:ef:cf:cd:6f:1c:10:72:
                    6e:2f:a9:75:2b:c6:54:2f:3b:3d:1f:5a:8b:b1:d0:
                    20:67:32:b9:e4:d8:0c:b6:79:95:cc:fc:3a:ce:bc:
                    22:25:54:52:be:7e:d0:cb:b9:ac:47:11:a0:68:57:
                    88:ad:f4:ed:78:57:fb:3a:b3:6d:bf:54:30:09:8a:
                    d7:95:43:8f:3c:d4:6d:59:bf:35:2c:04:8e:c4:ec:
                    65:6f:a6:17:e3:32:cd:c9:d7:05:41:16:0f:a7:91:
                    5f:d3:ac:a3:81:e4:b6:30:ad:fe:3d:dc:a0:23:0b:
                    2a:31:0c:e8:e3:df:6a:fe:d9:86:f7:00:96:a4:62:
                    f1:55:3a:f6:09:7a:e9:ff:d1:9e:57:cb:9e:44:89:
                    e2:0d:12:78:ed:c2:b6:f4:d8:fd:b2:d5:d2:1e:e4:
                    3f:ec:ee:38:32:28:6e:65:0f:3a:bb:e0:06:0e:50:
                    ed:60:3b:00:5a:43:ac:30:43:c3:de:2c:c7:db:bc:
                    86:3e:f9:c1:cc:43:00:ec:41:36:af:71:5f:e8:8c:
                    a6:24:43:f1:37:2e:45:bc:21:3d:38:30:b6:44:0d:
                    3d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7D:2E:2A:7C:96:BC:E7:78:D5:AF:46:18:D3:9D:2E:82:AA:EE:42
            X509v3 Authority Key Identifier:
                keyid:89:50:97:69:EB:59:5B:A2:7F:C5:B8:20:8C:FB:0D:05:C3:9E:2B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:36:91:ba:a0:6b:3e:ae:09:15:ab:a3:7b:ef:9d:25:2d:3e:
         c8:04:20:f3:b4:07:64:00:fe:1e:92:7f:a3:a3:aa:6a:dd:69:
         54:55:c4:39:e3:11:f5:9e:ef:4e:ec:f2:6a:5c:cd:99:f2:ea:
         ff:dd:c6:d4:d2:ad:0a:9b:f8:8d:31:74:b1:10:f2:ad:db:f9:
         5a:02:dc:18:f9:6c:15:12:93:ce:21:b5:84:c6:b9:df:4f:c0:
         e9:f3:2e:93:fb:3e:3e:a5:58:0f:fd:5f:f8:85:45:7c:ac:83:
         a6:f4:ea:bc:95:c1:0a:4a:a4:8c:aa:2a:57:4c:5e:93:d0:20:
         40:f6:9d:0e:29:36:f8:28:d3:59:64:47:32:31:a9:1b:74:2e:
         27:be:18:6c:d7:7b:50:de:61:db:f0:83:9a:4b:74:57:9d:47:
         ff:aa:4d:9d:13:01:93:81:54:db:f6:65:05:89:8b:d7:bb:6b:
         10:cf:b0:d1:10:7a:6c:96:10:98:2f:f3:66:3c:6d:6c:df:d4:
         ab:25:cd:9c:fc:e8:c0:9a:05:39:53:04:7f:f7:fd:c0:57:57:
         99:bf:c3:58:dd:34:06:90:ed:2c:4f:1f:89:c7:72:51:b1:ad:
         3e:7c:9e:78:80:d5:48:b8:7a:3d:a3:44:d9:69:0b:56:e4:16:
         cf:84:f7:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXdhcfRjYPWIygsA7EvgGDLFsDR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODk1MDk3NjlFQjU5NUJBMjdGQzVCODIwOENGQjBEMDVD
MzlFMkJEMzAeFw0yNTA0MjQxMzAzNThaFw0yNTA0MjUxNTU2NThaMDMxMTAvBgNV
BAMTKEM4N0QyRTJBN0M5NkJDRTc3OEQ1QUY0NjE4RDM5RDJFODJBQUVFNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKEYZ1j9bSSS+mmV3fWRd+Xhl4
njmMhzOdEiIxvksG7bFURFtD78/NbxwQcm4vqXUrxlQvOz0fWoux0CBnMrnk2Ay2
eZXM/DrOvCIlVFK+ftDLuaxHEaBoV4it9O14V/s6s22/VDAJiteVQ4881G1ZvzUs
BI7E7GVvphfjMs3J1wVBFg+nkV/TrKOB5LYwrf493KAjCyoxDOjj32r+2Yb3AJak
YvFVOvYJeun/0Z5Xy55EieINEnjtwrb02P2y1dIe5D/s7jgyKG5lDzq74AYOUO1g
OwBaQ6wwQ8PeLMfbvIY++cHMQwDsQTavcV/ojKYkQ/E3LkW8IT04MLZEDT1JAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUyH0uKnyWvOd41a9GGNOdLoKq7kIwHwYDVR0j
BBgwFoAUiVCXaetZW6J/xbggjPsNBcOeK9MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHZjQXg3VWtuTFpZakhkbUFIVlFoTHNBSDdHNmoyYlVkUzltTWF5dWti
NXQvMC84OTUwOTc2OUVCNTk1QkEyN0ZDNUI4MjA4Q0ZCMEQwNUMzOUUyQkQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5NTA5NzY5RUI1OTVCQTI3
RkM1QjgyMDhDRkIwRDA1QzM5RTJCRDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RHZjQXg3VWtuTFpZakhkbUFIVlFoTHNBSDdHNmoyYlVkUzltTWF5dWtiNXQvMC84
OTUwOTc2OUVCNTk1QkEyN0ZDNUI4MjA4Q0ZCMEQwNUMzOUUyQkQzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzTaRuqBrPq4JFauje++dJS0+yAQg87QHZAD+HpJ/o6Oqat1pVFXEOeMR9Z7v
TuzyalzNmfLq/93G1NKtCpv4jTF0sRDyrdv5WgLcGPlsFRKTziG1hMa530/A6fMu
k/s+PqVYD/1f+IVFfKyDpvTqvJXBCkqkjKoqV0xek9AgQPadDik2+CjTWWRHMjGp
G3QuJ74YbNd7UN5h2/CDmkt0V51H/6pNnRMBk4FU2/ZlBYmL17trEM+w0RB6bJYQ
mC/zZjxtbN/UqyXNnPzowJoFOVMEf/f9wFdXmb/DWN00BpDtLE8ficdyUbGtPnye
eIDVSLh6PaNE2WkLVuQWz4T3QQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 15:50:53 2025 by rpki-client on console.sobornost.net