Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
File:                     89B059C223BA0AD41E99D2508292698CA59D4D51.mft (raw, json)
Hash identifier:          eFl0bFGncLFxHqYLq/VRua+d6mwtUeaBGFBrdvMFlww=
Subject key identifier:   CD:31:C4:99:D5:6D:4F:D2:DA:50:35:1A:68:C3:1B:05:40:9F:FC:15
Authority key identifier: 89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51
Certificate issuer:       /CN=89B059C223BA0AD41E99D2508292698CA59D4D51
Certificate serial:       435C9DF6D3C993827CA98AD6A3B7B65EA3F7DE04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
Manifest number:          0202
Signing time:             Thu 24 Apr 2025 14:50:00 +0000
Manifest this update:     Thu 24 Apr 2025 14:45:00 +0000
Manifest next update:     Fri 25 Apr 2025 18:02:00 +0000
Files and hashes:         1: 3138362e3139332e302e302f32302d3234203d3e203533313334.roa (hash: /70Xr3zykjbquC5V98sp30trWq/8fdvVv+jPi4H5f5s=)
                          2: 89B059C223BA0AD41E99D2508292698CA59D4D51.crl (hash: l24alU3tv3dHTFa9rqnL4duwCEC7RBaya/+Qwts2OyI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl
                          rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 18:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:5c:9d:f6:d3:c9:93:82:7c:a9:8a:d6:a3:b7:b6:5e:a3:f7:de:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89B059C223BA0AD41E99D2508292698CA59D4D51
        Validity
            Not Before: Apr 24 14:45:00 2025 GMT
            Not After : Apr 25 18:02:00 2025 GMT
        Subject: CN=CD31C499D56D4FD2DA50351A68C31B05409FFC15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bf:35:f7:ae:07:dc:87:26:eb:96:b3:b3:98:
                    cd:09:b9:50:6e:72:df:5c:2f:0f:26:25:06:76:7f:
                    d9:8e:6b:c9:dd:68:72:66:f9:8f:0b:d3:41:d1:36:
                    c2:70:95:c6:33:61:12:03:b8:9c:02:63:e1:37:4c:
                    a5:5e:95:35:bd:94:00:fa:8a:49:37:9b:90:97:8b:
                    bc:3d:12:2d:fe:ed:13:f8:f7:c7:7a:8e:bb:8e:1e:
                    50:af:e8:73:6d:94:b4:4e:5c:6f:0d:2e:c7:48:cd:
                    6d:82:1d:85:1b:b0:b2:d1:9e:c8:18:45:18:4a:43:
                    f1:38:a9:98:04:f9:47:db:57:cc:9e:00:9c:dc:5b:
                    59:27:25:f3:b8:4a:d0:bf:4d:f0:5d:ab:51:2d:cb:
                    57:0f:f4:a7:61:c4:31:98:19:fc:1d:6e:0f:f3:a6:
                    f8:e9:1c:32:98:fb:1e:ff:59:4b:7b:ba:34:93:e2:
                    aa:b7:09:88:e3:be:1e:f5:b5:46:a0:9c:e0:64:13:
                    eb:96:93:fe:6d:33:95:a8:9f:b8:fa:b0:38:e3:ea:
                    8a:d8:f9:5d:29:52:9f:a0:91:ab:28:f1:29:ef:54:
                    af:3a:46:dd:44:05:c4:e0:7d:86:53:72:fd:9e:7a:
                    1c:0c:bb:2e:3c:00:ad:42:de:20:0f:3e:e3:84:41:
                    90:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:31:C4:99:D5:6D:4F:D2:DA:50:35:1A:68:C3:1B:05:40:9F:FC:15
            X509v3 Authority Key Identifier:
                keyid:89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:48:49:bb:40:fb:97:b0:85:7d:8e:9a:d5:32:71:53:30:cf:
         d1:0f:99:a1:e6:40:fc:c6:67:ea:a0:6c:a3:53:3a:b7:e0:20:
         9d:2e:17:64:80:99:3c:f9:8b:e1:e0:cb:1b:af:98:3e:c2:53:
         7f:69:84:ea:72:b9:a0:0b:07:c5:28:67:4b:ab:09:ea:0f:19:
         7f:f8:95:8a:da:f6:d7:40:35:46:5a:4c:87:85:26:21:80:80:
         64:9b:c4:1f:ac:65:9c:9f:02:af:d7:d4:d7:25:5d:dc:85:6e:
         45:fb:73:e3:f8:fe:08:37:55:db:68:d3:c1:ad:4f:a5:dd:e5:
         ba:0e:a7:41:51:af:f5:10:da:e4:3b:3a:79:53:b6:89:56:d8:
         4f:07:68:7e:6f:15:b4:30:ba:da:a1:6a:49:32:de:cd:4a:38:
         8e:ba:36:cc:7f:d1:e8:64:b8:e6:2a:bc:1e:69:87:cd:f7:ea:
         a7:64:34:d0:b6:d6:c7:70:70:3d:d2:4b:22:6a:32:7b:7a:a5:
         63:bf:1a:6b:c9:2a:da:f8:34:ab:4d:3f:2e:69:23:21:b9:a5:
         e2:f9:8c:cc:79:14:63:68:76:13:d8:20:92:5f:bf:0e:82:ca:
         29:a4:f4:ad:02:c1:a8:b3:c3:42:16:fd:e0:31:f3:6b:9a:ac:
         fd:d3:30:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:55 2025 by rpki-client on console.sobornost.net