Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/AD3AEE6D0F6670021EECC39215F89978080B77E0.mft
File:                     AD3AEE6D0F6670021EECC39215F89978080B77E0.mft (raw, json)
Hash identifier:          KW4iMUMWB4DHawEy6emv0LVKukDoRi4lgs6tszdmIco=
Subject key identifier:   CF:D9:04:89:D2:17:A1:BF:1E:07:C0:0D:3D:2A:1A:95:B2:FB:6C:BF
Authority key identifier: AD:3A:EE:6D:0F:66:70:02:1E:EC:C3:92:15:F8:99:78:08:0B:77:E0
Certificate issuer:       /CN=AD3AEE6D0F6670021EECC39215F89978080B77E0
Certificate serial:       50F1AF5A9C0F0A5158EB18BD68BB6857CC7E1B57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD3AEE6D0F6670021EECC39215F89978080B77E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/AD3AEE6D0F6670021EECC39215F89978080B77E0.mft
Manifest number:          3A
Signing time:             Fri 25 Apr 2025 00:09:34 +0000
Manifest this update:     Fri 25 Apr 2025 00:04:34 +0000
Manifest next update:     Sat 26 Apr 2025 04:06:34 +0000
Files and hashes:         1: 34352e3233362e3234382e302f32322d3332203d3e20323638323533.roa (hash: wp5Y2CmdENpkZ5QXlfX5AW7S10wq9FjUCST++Umi+2U=)
                          2: AD3AEE6D0F6670021EECC39215F89978080B77E0.crl (hash: l6R4h/4KfjX4wXss+woRWgt2EQtcSY3yMrxeuhNIZi4=)
                          3: 323830343a346535303a3a2f33322d313238203d3e20323638323533.roa (hash: DzE0ZAZBUWM763YBPqqyH4iqUz+TMT1RExljjIFhOAM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/AD3AEE6D0F6670021EECC39215F89978080B77E0.crl
                          rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/AD3AEE6D0F6670021EECC39215F89978080B77E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD3AEE6D0F6670021EECC39215F89978080B77E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f1:af:5a:9c:0f:0a:51:58:eb:18:bd:68:bb:68:57:cc:7e:1b:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD3AEE6D0F6670021EECC39215F89978080B77E0
        Validity
            Not Before: Apr 25 00:04:34 2025 GMT
            Not After : Apr 26 04:06:34 2025 GMT
        Subject: CN=CFD90489D217A1BF1E07C00D3D2A1A95B2FB6CBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e7:63:a2:0c:76:c7:2e:ee:39:10:a7:47:34:
                    be:0c:56:fa:bd:b0:1e:20:c1:e6:d4:0c:1f:f3:6a:
                    41:5a:a4:0d:a2:64:16:29:ef:32:9f:93:15:68:ec:
                    54:88:fd:1e:ae:44:b4:be:39:7a:2d:f3:fe:b0:60:
                    6a:7a:98:7e:ec:5d:5a:cf:bb:86:e1:18:fd:4a:34:
                    88:de:85:2c:8f:22:9b:88:88:5c:f3:30:d1:5a:0a:
                    bd:6b:59:bf:7c:86:dc:41:6a:1f:68:1b:b6:cd:68:
                    83:f6:e6:89:6e:59:ad:92:5f:fb:74:d6:40:52:38:
                    79:54:9e:da:22:63:a5:43:ac:6e:6a:d3:10:55:6e:
                    c4:4e:fe:be:24:86:12:61:bf:a6:55:e2:d4:59:20:
                    cc:c7:a3:c2:5f:49:e2:9d:4c:c1:7a:43:34:80:3a:
                    ef:e3:1b:be:51:a6:be:75:0c:12:26:16:b6:fc:c7:
                    be:6d:f7:44:c3:b9:5f:06:68:ae:71:51:ab:d1:ed:
                    61:c5:74:43:58:82:a8:0c:c6:0e:9b:a5:7f:29:17:
                    43:1e:10:c7:f0:c5:09:54:a7:3a:46:46:52:83:d6:
                    eb:a2:af:30:6b:5b:08:2e:e5:9e:a0:3b:63:f2:58:
                    26:12:3a:4f:09:3e:b7:63:1f:f6:de:8b:a9:ee:a8:
                    70:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D9:04:89:D2:17:A1:BF:1E:07:C0:0D:3D:2A:1A:95:B2:FB:6C:BF
            X509v3 Authority Key Identifier:
                keyid:AD:3A:EE:6D:0F:66:70:02:1E:EC:C3:92:15:F8:99:78:08:0B:77:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/AD3AEE6D0F6670021EECC39215F89978080B77E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD3AEE6D0F6670021EECC39215F89978080B77E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/AD3AEE6D0F6670021EECC39215F89978080B77E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d9:27:ef:7f:37:d7:1d:05:59:40:ae:cc:44:52:8f:d8:da:
         cf:43:a7:23:8b:db:5f:96:83:40:ad:97:2a:84:6d:00:87:0d:
         36:63:27:77:4a:71:8f:76:6b:b4:1b:b1:5e:f6:76:cb:86:25:
         16:2d:34:26:33:58:15:63:66:ec:2c:88:37:72:c1:aa:44:f9:
         bb:26:7f:a8:a4:e0:7b:8e:e5:d8:ef:22:0b:b0:f5:b7:39:14:
         34:96:01:a3:37:e6:aa:af:f4:5b:7e:90:0c:88:0e:60:43:c3:
         f1:e0:fe:2a:64:8a:e4:b6:ad:12:bc:90:e6:0e:e1:d2:aa:0f:
         04:78:da:34:1f:b4:53:ec:5e:3a:f6:5f:3a:e3:f6:aa:cf:37:
         30:cd:49:f2:dc:27:b6:9a:dc:e8:37:bb:30:6d:06:c9:ee:b4:
         9d:ff:14:ff:5c:40:be:3d:59:8c:54:43:b3:f6:1b:b8:4c:19:
         3b:fb:c2:b6:af:1c:46:97:a2:e2:fb:69:92:f1:a9:cd:55:86:
         bf:28:e2:64:fa:43:f1:78:f6:c2:fd:5e:ae:f4:ce:78:df:fb:
         94:30:bd:ab:da:fd:96:c2:c8:61:76:b4:6c:f8:68:8c:1f:58:
         86:de:f7:d9:91:0d:aa:ba:ac:d3:fc:77:b2:45:b7:57:98:48:
         b3:97:e5:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUUPGvWpwPClFY6xi9aLtoV8x+G1cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQzQUVFNkQwRjY2NzAwMjFFRUNDMzkyMTVGODk5Nzgw
ODBCNzdFMDAeFw0yNTA0MjUwMDA0MzRaFw0yNTA0MjYwNDA2MzRaMDMxMTAvBgNV
BAMTKENGRDkwNDg5RDIxN0ExQkYxRTA3QzAwRDNEMkExQTk1QjJGQjZDQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU52OiDHbHLu45EKdHNL4MVvq9
sB4gwebUDB/zakFapA2iZBYp7zKfkxVo7FSI/R6uRLS+OXot8/6wYGp6mH7sXVrP
u4bhGP1KNIjehSyPIpuIiFzzMNFaCr1rWb98htxBah9oG7bNaIP25oluWa2SX/t0
1kBSOHlUntoiY6VDrG5q0xBVbsRO/r4khhJhv6ZV4tRZIMzHo8JfSeKdTMF6QzSA
Ou/jG75Rpr51DBImFrb8x75t90TDuV8GaK5xUavR7WHFdENYgqgMxg6bpX8pF0Me
EMfwxQlUpzpGRlKD1uuirzBrWwgu5Z6gO2PyWCYSOk8JPrdjH/bei6nuqHDvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUz9kEidIXob8eB8ANPSoalbL7bL8wHwYDVR0j
BBgwFoAUrTrubQ9mcAIe7MOSFfiZeAgLd+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUJIcmp6QXhIb0ZySFlEVnhZcGV6dkJmallnSFM0V0ZTcGtmRGY4M1lH
cG8vMC9BRDNBRUU2RDBGNjY3MDAyMUVFQ0MzOTIxNUY4OTk3ODA4MEI3N0UwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FEM0FFRTZEMEY2NjcwMDIx
RUVDQzM5MjE1Rjg5OTc4MDgwQjc3RTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RUJIcmp6QXhIb0ZySFlEVnhZcGV6dkJmallnSFM0V0ZTcGtmRGY4M1lHcG8vMC9B
RDNBRUU2RDBGNjY3MDAyMUVFQ0MzOTIxNUY4OTk3ODA4MEI3N0UwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC9kn73831x0FWUCuzERSj9jaz0OnI4vbX5aDQK2XKoRtAIcNNmMnd0pxj3Zr
tBuxXvZ2y4YlFi00JjNYFWNm7CyIN3LBqkT5uyZ/qKTge47l2O8iC7D1tzkUNJYB
ozfmqq/0W36QDIgOYEPD8eD+KmSK5LatEryQ5g7h0qoPBHjaNB+0U+xeOvZfOuP2
qs83MM1J8twntprc6De7MG0Gye60nf8U/1xAvj1ZjFRDs/YbuEwZO/vCtq8cRpei
4vtpkvGpzVWGvyjiZPpD8Xj2wv1ervTOeN/7lDC9q9r9lsLIYXa0bPhojB9Yht73
2ZENqrqs0/x3skW3V5hIs5flVg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:32 2025 by rpki-client on console.sobornost.net