Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft
File:                     D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft (raw, json)
Hash identifier:          Cp8FxCe/Io9vTlVWNJlgl5/bljIvs5ODh9Ao/PosauM=
Subject key identifier:   12:12:AD:C3:F7:FF:6E:65:29:71:EB:7E:4E:54:70:A5:00:A6:9B:71
Authority key identifier: D9:C9:4E:0B:7C:90:50:30:F4:DB:01:C3:3B:F8:C1:68:2B:2E:04:2F
Certificate issuer:       /CN=D9C94E0B7C905030F4DB01C33BF8C1682B2E042F
Certificate serial:       273DC58602B2B1779F39C1FA7B66467ADBD095A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft
Manifest number:          0209
Signing time:             Mon 28 Apr 2025 09:42:30 +0000
Manifest this update:     Mon 28 Apr 2025 09:37:30 +0000
Manifest next update:     Tue 29 Apr 2025 11:58:30 +0000
Files and hashes:         1: D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.crl (hash: iuERwLmBBGzwwzsS+mMUNB3YeFkBwvnF6YEwvFKxsgQ=)
                          2: 323830343a316338343a3a2f33322d3438203d3e203631363539.roa (hash: nZ1gopaqkmRR4chzafMFQB8Y4M4MiBNQU4L++aKleIU=)
                          3: 3133312e3130382e32382e302f32322d3234203d3e203631363539.roa (hash: LpLs+i3g/uLpn4OYQy4EM5R0tGf85XQBkDf3K9t6dhk=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.crl
                          rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 11:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:3d:c5:86:02:b2:b1:77:9f:39:c1:fa:7b:66:46:7a:db:d0:95:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9C94E0B7C905030F4DB01C33BF8C1682B2E042F
        Validity
            Not Before: Apr 28 09:37:30 2025 GMT
            Not After : Apr 29 11:58:30 2025 GMT
        Subject: CN=1212ADC3F7FF6E652971EB7E4E5470A500A69B71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3b:fa:b2:4a:1a:cd:dd:05:01:49:56:ca:c8:
                    0c:2d:4a:3a:ce:93:52:4a:99:35:dc:ac:7d:70:1e:
                    c2:49:56:6d:b4:1a:c9:73:06:a2:8b:76:b2:7c:2e:
                    36:4f:b0:4a:3e:07:60:d0:df:08:03:0b:2a:7e:d5:
                    7f:a0:f1:2c:2e:4d:ea:26:92:ad:47:14:b6:6f:eb:
                    62:1f:f4:9e:a2:95:87:4c:1a:4c:fd:3d:c7:85:8e:
                    8d:ce:c8:1e:67:24:ac:92:70:dd:e3:ab:20:7b:f0:
                    54:eb:13:8e:2c:fc:a0:68:32:62:0c:2b:6a:0c:c3:
                    9f:03:f1:5f:b2:61:f4:43:a2:e3:3f:05:c7:24:9e:
                    0c:3e:b5:59:31:82:7a:23:25:58:f8:24:3c:94:c5:
                    40:52:9b:10:04:32:8e:73:02:0c:27:a4:d6:c1:66:
                    08:e6:cc:00:cd:66:6d:80:f2:15:94:d7:eb:0c:70:
                    2b:89:eb:67:68:e2:2f:c1:12:c5:a3:7a:42:d5:3b:
                    f5:51:bc:b0:b7:9f:6a:7c:db:9c:58:10:2a:4c:31:
                    4e:eb:df:61:e9:ec:5c:20:3b:df:c3:da:ac:a6:34:
                    0c:aa:cb:05:dd:62:6f:9c:03:81:e7:a0:8b:a0:75:
                    62:02:dd:c9:28:5e:cb:b0:b1:ba:85:2b:ec:3d:7d:
                    6d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:12:AD:C3:F7:FF:6E:65:29:71:EB:7E:4E:54:70:A5:00:A6:9B:71
            X509v3 Authority Key Identifier:
                keyid:D9:C9:4E:0B:7C:90:50:30:F4:DB:01:C3:3B:F8:C1:68:2B:2E:04:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:e6:56:36:8f:20:b5:27:1d:1c:43:4e:ab:5b:4c:9c:21:49:
         57:1c:c3:6d:8b:80:76:a5:79:90:5e:ef:5c:c3:0a:82:db:2e:
         04:ce:41:e2:5e:32:7e:ec:0d:90:99:0d:af:c0:f4:5a:9a:bc:
         db:ec:e4:f9:7e:0d:76:f5:d6:fd:2d:61:88:c5:7b:9c:9c:ee:
         8f:f4:a3:b0:b8:0e:fd:f4:91:93:58:95:50:76:92:25:3f:ec:
         7a:b5:11:1e:ac:77:da:2f:ee:f2:71:14:9e:32:7d:77:23:b2:
         8f:f7:af:da:97:a7:0e:68:49:14:92:d9:f3:27:7e:ea:bc:a6:
         0c:d3:bc:4a:b6:5a:a4:2c:5d:a2:35:ed:3d:5e:11:bc:09:4b:
         6f:86:63:a6:e6:91:13:53:93:13:9c:54:a4:f9:79:bb:20:d9:
         ee:28:92:d4:1a:ab:27:6d:4b:16:89:76:2c:e8:a3:95:d7:3f:
         d5:4a:fa:48:e9:d6:6a:50:68:12:f8:f0:99:9a:e4:24:3f:8b:
         04:23:d7:4d:8c:22:2b:a9:4f:91:ce:54:6a:08:3e:6a:5a:44:
         9e:4b:08:08:5c:1b:56:c1:5c:c3:3d:db:5a:21:67:1d:d7:ee:
         60:0d:3d:66:6f:6e:8a:57:fc:40:a4:32:06:6d:e3:fe:af:37:
         44:eb:63:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJz3FhgKysXefOcH6e2ZGetvQlacwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlDOTRFMEI3QzkwNTAzMEY0REIwMUMzM0JGOEMxNjgy
QjJFMDQyRjAeFw0yNTA0MjgwOTM3MzBaFw0yNTA0MjkxMTU4MzBaMDMxMTAvBgNV
BAMTKDEyMTJBREMzRjdGRjZFNjUyOTcxRUI3RTRFNTQ3MEE1MDBBNjlCNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQO/qyShrN3QUBSVbKyAwtSjrO
k1JKmTXcrH1wHsJJVm20GslzBqKLdrJ8LjZPsEo+B2DQ3wgDCyp+1X+g8SwuTeom
kq1HFLZv62If9J6ilYdMGkz9PceFjo3OyB5nJKyScN3jqyB78FTrE44s/KBoMmIM
K2oMw58D8V+yYfRDouM/Bcckngw+tVkxgnojJVj4JDyUxUBSmxAEMo5zAgwnpNbB
ZgjmzADNZm2A8hWU1+sMcCuJ62do4i/BEsWjekLVO/VRvLC3n2p825xYECpMMU7r
32Hp7FwgO9/D2qymNAyqywXdYm+cA4HnoIugdWIC3ckoXsuwsbqFK+w9fW3FAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUEhKtw/f/bmUpcet+TlRwpQCmm3EwHwYDVR0j
BBgwFoAU2clOC3yQUDD02wHDO/jBaCsuBC8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVA4WW52WWVyOGlrNk0zUExodDNxWFdjdVloUTViWllnVzVhTHN3UVhk
ZVkvMS9EOUM5NEUwQjdDOTA1MDMwRjREQjAxQzMzQkY4QzE2ODJCMkUwNDJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5Qzk0RTBCN0M5MDUwMzBG
NERCMDFDMzNCRjhDMTY4MkIyRTA0MkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RVA4WW52WWVyOGlrNk0zUExodDNxWFdjdVloUTViWllnVzVhTHN3UVhkZVkvMS9E
OUM5NEUwQjdDOTA1MDMwRjREQjAxQzMzQkY4QzE2ODJCMkUwNDJGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ+ZWNo8gtScdHENOq1tMnCFJVxzDbYuAdqV5kF7vXMMKgtsuBM5B4l4yfuwN
kJkNr8D0Wpq82+zk+X4NdvXW/S1hiMV7nJzuj/SjsLgO/fSRk1iVUHaSJT/serUR
Hqx32i/u8nEUnjJ9dyOyj/ev2penDmhJFJLZ8yd+6rymDNO8SrZapCxdojXtPV4R
vAlLb4ZjpuaRE1OTE5xUpPl5uyDZ7iiS1BqrJ21LFol2LOijldc/1Ur6SOnWalBo
EvjwmZrkJD+LBCPXTYwiK6lPkc5Uagg+alpEnksICFwbVsFcwz3bWiFnHdfuYA09
Zm9uilf8QKQyBm3j/q83ROtjlA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:01 2025 by rpki-client on console.sobornost.net