Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft
File:                     D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft (raw, json)
Hash identifier:          rftN8PIHj3jgXSWhcqD5gQ994neRL7Z3jwR6kMp8dH0=
Subject key identifier:   34:F5:5A:D0:1C:B4:70:22:97:EE:38:A4:18:88:7A:CC:D8:CE:34:32
Authority key identifier: D3:F7:10:87:00:F6:9A:B3:C4:60:E0:17:0E:99:E7:05:1E:CB:31:EC
Certificate issuer:       /CN=D3F7108700F69AB3C460E0170E99E7051ECB31EC
Certificate serial:       5F7ED81962693E304126DD846DF6CAACD22664BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft
Manifest number:          0207
Signing time:             Sat 26 Apr 2025 18:45:27 +0000
Manifest this update:     Sat 26 Apr 2025 18:40:27 +0000
Manifest next update:     Sun 27 Apr 2025 21:45:27 +0000
Files and hashes:         1: 323830343a376263633a3a2f33322d3438203d3e20323731343535.roa (hash: XOwtVM5LyoozAIAy6kZOX07UdARTT+Ta3OmCSyAiYcM=)
                          2: 3138372e36332e3134382e302f32322d3234203d3e20323731343535.roa (hash: IhDSHYohc0+Dr9apFyNFCQVRejVX/yjwQA2nWachXec=)
                          3: D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl (hash: 18eemEVH1OL+U9Ll9uOEHgAGRFebq9t7j/NZc1eWLlc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl
                          rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 21:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7e:d8:19:62:69:3e:30:41:26:dd:84:6d:f6:ca:ac:d2:26:64:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3F7108700F69AB3C460E0170E99E7051ECB31EC
        Validity
            Not Before: Apr 26 18:40:27 2025 GMT
            Not After : Apr 27 21:45:27 2025 GMT
        Subject: CN=34F55AD01CB4702297EE38A418887ACCD8CE3432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:66:51:2c:13:c4:f5:7a:9a:8c:b7:81:50:a3:
                    ec:9e:4e:cc:af:1e:be:01:0b:68:ed:1f:e1:3f:69:
                    3b:8d:eb:22:a4:d9:ff:8e:1e:70:5c:ac:13:68:ea:
                    71:e4:75:7e:c7:08:09:1c:c6:fb:83:81:3e:a6:b6:
                    d7:be:5d:43:c9:bc:2c:14:2e:03:0d:c8:a6:d5:df:
                    c1:ce:2e:66:08:de:ba:4c:6d:0e:49:33:6e:3f:83:
                    e7:97:57:91:c2:42:d5:bd:ce:88:b7:4d:f0:b1:b4:
                    d5:22:a7:bb:a0:ee:9a:e5:cb:1f:e9:75:b2:c9:f5:
                    7a:c8:e5:cb:27:56:86:ef:0f:bc:1e:c3:93:80:18:
                    d0:20:65:a1:79:ce:04:e2:a3:08:8e:ee:1d:7d:ac:
                    b9:6b:9e:83:01:a3:17:58:0b:33:68:47:05:0e:99:
                    46:f7:c1:93:bc:bd:8e:42:f8:d9:ec:76:d1:eb:2b:
                    70:79:7c:11:97:0b:3d:84:8a:cd:69:5d:f1:94:31:
                    cb:17:e7:f7:e0:17:ec:bf:39:69:66:52:b4:d9:ff:
                    87:e8:38:8c:c8:44:1d:2c:93:57:db:99:84:e3:1d:
                    61:69:54:45:ce:b4:42:1f:27:b9:70:a0:3d:61:08:
                    40:f3:d6:a6:d8:54:be:b9:62:ac:7f:09:0e:46:65:
                    66:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F5:5A:D0:1C:B4:70:22:97:EE:38:A4:18:88:7A:CC:D8:CE:34:32
            X509v3 Authority Key Identifier:
                keyid:D3:F7:10:87:00:F6:9A:B3:C4:60:E0:17:0E:99:E7:05:1E:CB:31:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:93:b3:15:c4:3b:04:fe:78:4a:51:c3:41:ec:07:3a:87:38:
         85:ab:42:44:32:ea:6e:3b:bd:56:e2:f7:3c:c3:7d:33:4f:cf:
         94:13:d1:38:63:df:59:5f:0b:23:d0:c1:6e:47:80:d7:3e:37:
         af:3e:97:c8:e0:57:91:23:72:97:c3:6b:54:88:16:be:31:1f:
         01:bf:e7:cb:a7:6b:fe:fe:ab:d7:99:12:de:47:ca:82:3a:c7:
         14:16:b9:75:56:c9:69:4b:5d:47:d7:0a:1e:b8:89:bf:8b:39:
         ed:7d:4a:7d:7d:3d:3d:48:ca:62:e7:61:3f:08:6c:8c:40:fd:
         ad:4e:41:32:d4:b6:b1:54:af:05:ee:c0:21:c7:00:d1:c7:1a:
         38:27:67:7f:fb:9a:72:07:1b:d1:f5:f8:9e:10:43:72:f5:ce:
         2b:36:f2:fd:42:57:42:21:93:8b:30:f1:02:36:fe:2d:ee:36:
         45:4a:8e:0c:63:54:50:2a:9e:3c:86:15:e9:fe:8f:59:f4:1c:
         a8:71:c5:3d:be:a8:f4:7c:d0:19:73:75:cf:8a:b2:89:a5:26:
         5d:97:ba:3d:af:66:14:b3:8e:ee:7b:07:2d:7e:04:9c:c8:7c:
         03:7c:ea:c0:8d:9c:95:5b:dd:16:99:8f:61:50:a6:7d:c5:bd:
         a1:ed:11:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUX37YGWJpPjBBJt2EbfbKrNImZL4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNGNzEwODcwMEY2OUFCM0M0NjBFMDE3MEU5OUU3MDUx
RUNCMzFFQzAeFw0yNTA0MjYxODQwMjdaFw0yNTA0MjcyMTQ1MjdaMDMxMTAvBgNV
BAMTKDM0RjU1QUQwMUNCNDcwMjI5N0VFMzhBNDE4ODg3QUNDRDhDRTM0MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxZlEsE8T1epqMt4FQo+yeTsyv
Hr4BC2jtH+E/aTuN6yKk2f+OHnBcrBNo6nHkdX7HCAkcxvuDgT6mtte+XUPJvCwU
LgMNyKbV38HOLmYI3rpMbQ5JM24/g+eXV5HCQtW9zoi3TfCxtNUip7ug7prlyx/p
dbLJ9XrI5csnVobvD7wew5OAGNAgZaF5zgTiowiO7h19rLlrnoMBoxdYCzNoRwUO
mUb3wZO8vY5C+NnsdtHrK3B5fBGXCz2Eis1pXfGUMcsX5/fgF+y/OWlmUrTZ/4fo
OIzIRB0sk1fbmYTjHWFpVEXOtEIfJ7lwoD1hCEDz1qbYVL65Yqx/CQ5GZWbLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNPVa0By0cCKX7jikGIh6zNjONDIwHwYDVR0j
BBgwFoAU0/cQhwD2mrPEYOAXDpnnBR7LMewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHpodzNSWGZkWjVUdnk2cldmU3JRUzdFZFVLc2N6QktrNnhEWVg3ZXVL
MzMvMS9EM0Y3MTA4NzAwRjY5QUIzQzQ2MEUwMTcwRTk5RTcwNTFFQ0IzMUVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzRjcxMDg3MDBGNjlBQjND
NDYwRTAxNzBFOTlFNzA1MUVDQjMxRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RHpodzNSWGZkWjVUdnk2cldmU3JRUzdFZFVLc2N6QktrNnhEWVg3ZXVLMzMvMS9E
M0Y3MTA4NzAwRjY5QUIzQzQ2MEUwMTcwRTk5RTcwNTFFQ0IzMUVDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcJOzFcQ7BP54SlHDQewHOoc4hatCRDLqbju9VuL3PMN9M0/PlBPROGPfWV8L
I9DBbkeA1z43rz6XyOBXkSNyl8NrVIgWvjEfAb/ny6dr/v6r15kS3kfKgjrHFBa5
dVbJaUtdR9cKHriJv4s57X1KfX09PUjKYudhPwhsjED9rU5BMtS2sVSvBe7AIccA
0ccaOCdnf/uacgcb0fX4nhBDcvXOKzby/UJXQiGTizDxAjb+Le42RUqODGNUUCqe
PIYV6f6PWfQcqHHFPb6o9HzQGXN1z4qyiaUmXZe6Pa9mFLOO7nsHLX4EnMh8A3zq
wI2clVvdFpmPYVCmfcW9oe0R0A==
-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:15 2025 by rpki-client on console.sobornost.net