Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.mft
File:                     0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.mft (raw, json)
Hash identifier:          ZMMEMbI4df7175LyAbOUvHlv+BxrOTTUwBqQRNZLE/c=
Subject key identifier:   2C:30:B7:67:B0:21:21:9B:C0:A6:A4:B5:BF:34:B3:2D:9A:EF:10:E6
Authority key identifier: 0A:7C:DC:9F:83:E2:4F:EB:6F:64:61:92:51:F8:42:42:4F:5C:D0:B3
Certificate issuer:       /CN=0A7CDC9F83E24FEB6F64619251F842424F5CD0B3
Certificate serial:       55B5707CA60EAE41DFF66E8750DC018C191EE91C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.mft
Manifest number:          FE
Signing time:             Mon 28 Apr 2025 16:52:05 +0000
Manifest this update:     Mon 28 Apr 2025 16:47:05 +0000
Manifest next update:     Tue 29 Apr 2025 19:57:05 +0000
Files and hashes:         1: 323830343a343338633a3a2f33322d3334203d3e20323632393131.roa (hash: vBDnzF1suRQaldFwxb4feadg9OaWkxgV32Sgk9NgFI4=)
                          2: 0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.crl (hash: NymbiOLb+Rt8O7BPBrSB9Bsv6jTm/x5+77x/yebK9iU=)
                          3: 3137372e33382e34382e302f32312d3234203d3e20323632393131.roa (hash: nkgDMvZGb4/ql99L5dytUR2I7oVymsTYvPeQiptwxb8=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.crl
                          rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:57:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b5:70:7c:a6:0e:ae:41:df:f6:6e:87:50:dc:01:8c:19:1e:e9:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A7CDC9F83E24FEB6F64619251F842424F5CD0B3
        Validity
            Not Before: Apr 28 16:47:05 2025 GMT
            Not After : Apr 29 19:57:05 2025 GMT
        Subject: CN=2C30B767B021219BC0A6A4B5BF34B32D9AEF10E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:13:2e:5e:38:86:82:62:08:24:e2:40:ab:67:
                    b2:2d:08:ba:99:29:bc:91:a7:dd:e7:91:e9:c8:f1:
                    54:38:27:40:64:fa:ff:85:64:61:eb:fe:2a:d3:d7:
                    c8:07:d0:c0:80:e9:4e:c6:b6:9e:75:bb:2b:b3:51:
                    b3:65:43:4c:32:2a:76:33:62:e0:a7:5b:13:73:04:
                    98:70:7e:f1:16:00:8c:91:95:2a:d7:fe:81:52:31:
                    d1:1f:a5:2a:cc:cb:c8:ce:f2:50:72:e3:39:88:25:
                    fb:68:da:45:ea:ff:7e:4e:7f:e6:71:f6:51:7a:b7:
                    e3:4d:b1:f1:0f:0c:12:ee:49:db:93:84:03:1a:f5:
                    e9:a1:e4:76:2e:7f:10:ee:33:c7:45:96:f5:11:97:
                    1e:b3:e3:84:00:3d:15:39:54:cf:f6:51:78:25:e1:
                    cc:e6:41:c1:42:80:20:a9:97:b4:93:03:70:3b:9b:
                    2e:9e:ba:ca:22:3a:ec:4d:51:4c:ca:ac:5a:39:85:
                    ca:24:ff:57:fd:3a:59:e3:d7:f6:1b:fe:9c:12:2f:
                    a1:c4:c4:25:e6:19:cf:74:3b:79:96:55:93:43:cf:
                    43:6a:2c:94:f3:2c:aa:1c:a2:e1:fd:5f:2f:71:32:
                    06:ee:9b:4c:d2:b5:8d:4a:e4:9e:00:9d:a6:ec:54:
                    2f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:30:B7:67:B0:21:21:9B:C0:A6:A4:B5:BF:34:B3:2D:9A:EF:10:E6
            X509v3 Authority Key Identifier:
                keyid:0A:7C:DC:9F:83:E2:4F:EB:6F:64:61:92:51:F8:42:42:4F:5C:D0:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:49:20:29:f7:82:4b:b9:8d:41:d8:b6:a6:7f:e9:82:7d:b4:
         a3:fe:52:05:e9:42:6d:79:57:73:7b:c3:c3:ca:42:c5:79:11:
         4a:81:6f:e6:3a:3d:b2:88:fe:16:83:99:e0:62:ad:71:f0:9e:
         7c:8f:6d:a4:f9:14:81:cd:cd:09:ca:72:16:6a:6d:32:04:58:
         30:bd:f6:37:95:80:9d:50:28:0f:6a:dc:50:31:7b:1a:9d:a7:
         7e:4f:c6:a8:57:6c:d0:a4:8e:61:c3:c0:7e:d1:5d:0e:cc:9d:
         b5:c0:2a:3a:e5:bb:21:ee:05:d7:78:ec:91:0a:77:21:52:b4:
         67:11:1d:e6:9f:8a:cb:6a:42:27:89:b4:3b:0e:e9:39:0d:75:
         e5:0e:3c:86:1b:84:2d:47:3b:24:2d:d5:60:65:bf:66:bc:61:
         3d:bd:d3:7a:fb:67:76:c4:8c:23:63:e0:28:8b:30:69:ae:02:
         e6:4a:2d:d6:a2:02:a7:9d:22:3f:cd:a2:26:62:09:63:d3:80:
         f6:59:06:b1:07:27:5f:5c:e9:6d:36:4d:68:46:64:d4:c6:8c:
         65:fd:00:5a:88:af:e0:eb:dd:eb:c6:e2:c0:16:cf:1f:ea:bb:
         42:91:e2:a8:f0:bf:b0:9d:0b:09:55:f9:68:73:12:cb:78:6e:
         9c:16:b1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:44 2025 by rpki-client on console.sobornost.net