Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/1/F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.mft
File:                     F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.mft (raw, json)
Hash identifier:          5bFCbKDaB11afW65wCYtbs597VXZtojPy9mfZGzN6Ps=
Subject key identifier:   57:50:14:8C:F0:CA:87:DB:0F:18:21:F5:AB:05:1F:3A:22:40:78:42
Authority key identifier: F2:73:89:56:AE:39:E8:B7:EB:BD:AE:F9:09:D9:96:F1:3E:DA:7B:48
Certificate issuer:       /CN=F2738956AE39E8B7EBBDAEF909D996F13EDA7B48
Certificate serial:       48631A39E201733728AA3D31A180D5424440B877
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/1/F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.mft
Manifest number:          0203
Signing time:             Sat 26 Apr 2025 09:11:20 +0000
Manifest this update:     Sat 26 Apr 2025 09:06:20 +0000
Manifest next update:     Sun 27 Apr 2025 12:04:20 +0000
Files and hashes:         1: 34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa (hash: 46FJg5uCDQ+hqn71BpEUDO3hCqoVjKBJrS7Ilwk5o2g=)
                          2: 323830343a353463303a3a2f33322d313238203d3e20323638363638.roa (hash: SQ7RHL6NgO3glWCCOTqWsm5rw70dFtZnfUwa7OwqhV0=)
                          3: F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.crl (hash: ALvbYo6oAsIU3SGmzjvuVf7nF0VowplxTomyXFc0N68=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/1/F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.crl
                          rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/1/F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:63:1a:39:e2:01:73:37:28:aa:3d:31:a1:80:d5:42:44:40:b8:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2738956AE39E8B7EBBDAEF909D996F13EDA7B48
        Validity
            Not Before: Apr 26 09:06:20 2025 GMT
            Not After : Apr 27 12:04:20 2025 GMT
        Subject: CN=5750148CF0CA87DB0F1821F5AB051F3A22407842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d9:fe:96:69:85:51:83:55:dc:ba:7c:37:a5:
                    b7:cd:fa:85:6a:a5:e5:ef:84:55:97:b8:a2:51:60:
                    64:35:a3:44:40:67:14:90:4d:7f:04:ba:94:b7:dc:
                    c6:7a:42:f1:d3:3d:33:5e:17:95:8a:72:1e:62:78:
                    10:32:2c:e7:51:b0:42:1d:1d:9a:66:19:6b:c6:7c:
                    d3:67:5b:e2:ca:ff:08:67:ca:e6:ce:46:e4:b6:b6:
                    59:70:01:f3:81:1f:ed:a7:46:f1:7f:74:88:8e:d7:
                    df:c6:ea:d8:ef:64:b3:28:8d:5e:09:e0:7a:f0:99:
                    75:4d:d2:55:38:0d:74:3d:00:89:ff:1f:73:3e:e3:
                    bc:01:75:6e:bd:4c:9b:73:d0:a6:cc:43:fd:53:77:
                    83:ec:00:05:07:96:5c:2d:38:94:1c:35:03:65:53:
                    d5:e5:fe:65:28:69:43:fd:50:42:ff:9e:30:65:68:
                    03:99:ab:2d:f8:07:75:f7:e6:4f:67:db:1d:5f:06:
                    03:d8:e5:66:d8:2c:9e:2a:a5:78:82:ac:a0:a0:49:
                    35:f0:43:4a:0a:fd:ae:56:ec:54:68:74:fd:e4:bc:
                    ce:d7:d3:d5:73:7b:f4:1a:8c:de:19:27:dd:23:7f:
                    a1:50:bf:83:a3:00:c6:35:43:b5:87:91:8c:2d:52:
                    68:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:50:14:8C:F0:CA:87:DB:0F:18:21:F5:AB:05:1F:3A:22:40:78:42
            X509v3 Authority Key Identifier:
                keyid:F2:73:89:56:AE:39:E8:B7:EB:BD:AE:F9:09:D9:96:F1:3E:DA:7B:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/1/F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/1/F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:9d:38:17:33:83:b2:0f:d9:f6:58:8e:13:09:c6:4e:c8:b1:
         10:e4:5f:03:4b:da:7a:ac:26:7f:4a:62:92:21:1d:7a:ec:23:
         b7:02:04:c0:4d:a9:99:50:af:02:60:f6:5c:57:8c:55:1f:e2:
         d3:8e:24:6e:25:e6:32:bf:ac:07:aa:82:83:27:1d:dc:5a:f4:
         68:5a:7c:44:fc:82:1b:e5:2e:9d:f5:3f:80:54:ba:0b:71:60:
         03:50:2e:fb:97:72:f7:2d:02:2d:a5:d6:7b:53:54:44:4c:e0:
         4f:71:4e:15:c6:72:5b:26:e1:37:1d:0c:ab:e2:cc:70:da:e3:
         2a:52:d5:35:86:ee:59:8a:e6:33:26:cf:96:42:ac:fe:74:4b:
         a5:20:7c:ef:9d:79:1c:5a:e8:df:f5:2b:0e:b1:3f:e7:75:7c:
         09:40:50:af:d5:c4:ee:7b:52:fa:ea:24:fe:34:1e:e8:f9:f7:
         fe:29:fd:fe:8d:0b:ba:ea:2d:11:1b:f1:14:eb:2c:d4:bf:0c:
         ae:15:8f:5e:8d:28:bc:09:be:29:e4:58:ee:0a:f3:50:a6:bc:
         cc:78:be:91:d7:ea:65:86:83:67:d1:56:f2:d3:2c:ab:a2:0f:
         1a:51:79:f5:89:86:c1:7c:a6:c4:cc:50:53:58:8e:ed:b7:52:
         8b:74:ed:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:51 2025 by rpki-client on console.sobornost.net