Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft
File:                     47F932452F6354876C2CDBACA9AD34D90A502586.mft (raw, json)
Hash identifier:          T3KBv2uydlbeNd58nEEsghJFoBwiaG8g4YfyFspY9Ng=
Subject key identifier:   5E:32:FD:B9:31:24:FC:84:17:A1:67:2E:31:C0:0A:F7:FE:BF:B3:BE
Authority key identifier: 47:F9:32:45:2F:63:54:87:6C:2C:DB:AC:A9:AD:34:D9:0A:50:25:86
Certificate issuer:       /CN=47F932452F6354876C2CDBACA9AD34D90A502586
Certificate serial:       27F554AF85FAAF2185B4DE69DF0F18494786447A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft
Manifest number:          01D2
Signing time:             Mon 28 Apr 2025 17:01:11 +0000
Manifest this update:     Mon 28 Apr 2025 16:56:11 +0000
Manifest next update:     Tue 29 Apr 2025 17:23:11 +0000
Files and hashes:         1: 323830343a3832633a3a2f33322d3336203d3e20323632333535.roa (hash: rL94s/lIih8apzD5jSM4GoVdRZpvy5LqwQ0Wo9KyL2o=)
                          2: 3133312e3136312e37322e302f32322d3234203d3e20323632333535.roa (hash: 6JMe7KDo8un7dKz+j7gx0Y7jJrBnCXdm9rkrC6rmfts=)
                          3: 3137372e39312e3137322e302f32322d3234203d3e20323632333535.roa (hash: qLqXLy0B76Jo01L+djXxQH/j9EOmUP1xCJozGccZfFQ=)
                          4: 3137372e3132352e3231362e302f32322d3234203d3e20323632333535.roa (hash: NXwOW7NVGh3xshCp15HvoOs5lQreHUVWOyZNFZbFoPk=)
                          5: 3138362e3233332e3138382e302f32322d3234203d3e20323632333535.roa (hash: mttYoz3DThPN4Y0Tx9h49Jwopxzn+e9I7aY49/+TZr8=)
                          6: 47F932452F6354876C2CDBACA9AD34D90A502586.crl (hash: E4uZ64zFOBji9O6VMuxOYOXzCPZfhZUWWcM4YMvqx9s=)
                          7: 3138362e3139352e3131322e302f32302d3234203d3e20323632333535.roa (hash: j5Wuh+CUJlrv2XRmx6zfB9fB/F4HPmSDT+5IuOJI2eY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.crl
                          rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 17:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f5:54:af:85:fa:af:21:85:b4:de:69:df:0f:18:49:47:86:44:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F932452F6354876C2CDBACA9AD34D90A502586
        Validity
            Not Before: Apr 28 16:56:11 2025 GMT
            Not After : Apr 29 17:23:11 2025 GMT
        Subject: CN=5E32FDB93124FC8417A1672E31C00AF7FEBFB3BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:40:c9:dd:d9:1b:79:41:3f:3e:c0:82:82:a3:
                    d9:40:3e:d2:02:77:33:07:38:be:35:4c:7e:13:51:
                    4c:3e:3e:ee:e0:e8:2a:89:b7:41:a0:5e:03:6a:7b:
                    33:08:d4:f7:1f:fb:47:89:85:aa:f8:c4:cb:b5:11:
                    e9:84:94:31:65:f4:fb:7c:7d:87:63:cc:ac:84:e5:
                    0a:7a:15:8d:0e:10:8f:3b:89:ab:67:e8:b2:4f:0c:
                    bf:21:54:d4:5c:30:48:cb:52:65:f9:f7:e5:43:2e:
                    63:0f:e2:88:ce:d3:65:c4:ce:d2:77:28:bd:04:bb:
                    08:96:49:ec:c1:4c:1b:15:10:26:4c:c3:52:be:3c:
                    a1:cc:26:a3:9c:75:6b:0d:7d:29:24:a0:cf:8a:19:
                    70:99:61:2e:42:f5:fb:ee:0c:57:d6:17:a2:5d:6a:
                    bb:e1:e5:de:de:35:8d:f6:05:6c:35:38:94:61:53:
                    98:47:f1:d9:71:b5:e2:b8:58:20:b3:8e:2a:2e:04:
                    75:72:05:5e:e8:95:87:13:b6:a2:b5:5d:5d:a9:af:
                    b6:b2:f4:72:8d:dd:7a:08:63:0c:8c:1c:db:91:c2:
                    ec:df:b1:8f:65:e5:9a:ee:a9:b0:9f:a8:06:e5:43:
                    88:8f:64:67:d7:70:d8:31:8d:64:41:42:b4:5f:5f:
                    83:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:32:FD:B9:31:24:FC:84:17:A1:67:2E:31:C0:0A:F7:FE:BF:B3:BE
            X509v3 Authority Key Identifier:
                keyid:47:F9:32:45:2F:63:54:87:6C:2C:DB:AC:A9:AD:34:D9:0A:50:25:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:92:0c:b7:76:e0:3a:1c:6e:3c:d3:72:0e:f8:5b:27:81:b9:
         63:da:aa:5c:25:e1:09:94:be:f4:29:8c:cd:94:b8:bb:42:f4:
         f9:f5:96:ba:2b:0f:b1:04:65:7c:83:27:bb:22:0b:38:36:64:
         b8:b9:78:be:db:b7:b9:ff:8c:dc:59:a2:1b:5f:c7:5c:af:87:
         6d:c5:b8:0c:3f:ff:14:87:36:11:91:8a:98:23:7e:19:ec:61:
         e7:a5:a5:aa:5b:7d:b1:16:fc:67:d7:7c:24:23:58:98:f9:05:
         6e:70:a7:48:a5:c5:1a:cb:61:ff:c0:26:b1:22:9c:22:2b:aa:
         34:47:2d:c2:7d:49:ff:b6:b1:a3:9e:de:bf:44:c4:f4:31:c5:
         a8:35:3b:9d:eb:41:a9:dc:dc:ec:ec:59:db:4c:f9:17:c6:8b:
         c0:07:f8:b5:d2:25:e1:9e:59:2b:f3:2a:3e:38:51:0e:69:78:
         70:44:54:ce:17:91:83:e5:66:d3:ed:e7:20:34:72:2a:92:e9:
         90:ca:62:16:7e:44:38:74:0c:7a:62:29:0b:3e:67:5c:65:dc:
         1c:1c:38:bb:e4:a5:9c:6f:ae:2f:d7:1c:4b:eb:90:89:65:f1:
         cf:43:a4:68:7a:96:7b:80:ef:49:3e:56:b6:d3:9d:fc:c5:13:
         09:4d:b7:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJ/VUr4X6ryGFtN5p3w8YSUeGRHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdGOTMyNDUyRjYzNTQ4NzZDMkNEQkFDQTlBRDM0RDkw
QTUwMjU4NjAeFw0yNTA0MjgxNjU2MTFaFw0yNTA0MjkxNzIzMTFaMDMxMTAvBgNV
BAMTKDVFMzJGREI5MzEyNEZDODQxN0ExNjcyRTMxQzAwQUY3RkVCRkIzQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgQMnd2Rt5QT8+wIKCo9lAPtIC
dzMHOL41TH4TUUw+Pu7g6CqJt0GgXgNqezMI1Pcf+0eJhar4xMu1EemElDFl9Pt8
fYdjzKyE5Qp6FY0OEI87iatn6LJPDL8hVNRcMEjLUmX59+VDLmMP4ojO02XEztJ3
KL0EuwiWSezBTBsVECZMw1K+PKHMJqOcdWsNfSkkoM+KGXCZYS5C9fvuDFfWF6Jd
arvh5d7eNY32BWw1OJRhU5hH8dlxteK4WCCzjiouBHVyBV7olYcTtqK1XV2pr7ay
9HKN3XoIYwyMHNuRwuzfsY9l5ZruqbCfqAblQ4iPZGfXcNgxjWRBQrRfX4PTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUXjL9uTEk/IQXoWcuMcAK9/6/s74wHwYDVR0j
BBgwFoAUR/kyRS9jVIdsLNusqa002QpQJYYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZnTG1mMTNrQVBwUGpFMlVlTVIyd1BDZkQzQUVmNW9hbkNGN28xWHBt
dXYvMC80N0Y5MzI0NTJGNjM1NDg3NkMyQ0RCQUNBOUFEMzREOTBBNTAyNTg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3RjkzMjQ1MkY2MzU0ODc2
QzJDREJBQ0E5QUQzNEQ5MEE1MDI1ODYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RUZnTG1mMTNrQVBwUGpFMlVlTVIyd1BDZkQzQUVmNW9hbkNGN28xWHBtdXYvMC80
N0Y5MzI0NTJGNjM1NDg3NkMyQ0RCQUNBOUFEMzREOTBBNTAyNTg2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyZIMt3bgOhxuPNNyDvhbJ4G5Y9qqXCXhCZS+9CmMzZS4u0L0+fWWuisPsQRl
fIMnuyILODZkuLl4vtu3uf+M3FmiG1/HXK+HbcW4DD//FIc2EZGKmCN+Gexh56Wl
qlt9sRb8Z9d8JCNYmPkFbnCnSKXFGsth/8AmsSKcIiuqNEctwn1J/7axo57ev0TE
9DHFqDU7netBqdzc7OxZ20z5F8aLwAf4tdIl4Z5ZK/MqPjhRDml4cERUzheRg+Vm
0+3nIDRyKpLpkMpiFn5EOHQMemIpCz5nXGXcHBw4u+SlnG+uL9ccS+uQiWXxz0Ok
aHqWe4DvST5WttOd/MUTCU23RA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:44 2025 by rpki-client on console.sobornost.net