Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/D968B6511EF07778C01FA7FFE031522476B79B01.mft
File:                     D968B6511EF07778C01FA7FFE031522476B79B01.mft (raw, json)
Hash identifier:          1Cq24DuS3eicA/QIw3dQc8lWEjE0TKpcdKf6A5oP4gM=
Subject key identifier:   63:6A:C8:4F:B8:AC:D8:10:E3:71:A4:E0:B6:24:AB:3F:EB:08:33:AD
Authority key identifier: D9:68:B6:51:1E:F0:77:78:C0:1F:A7:FF:E0:31:52:24:76:B7:9B:01
Certificate issuer:       /CN=D968B6511EF07778C01FA7FFE031522476B79B01
Certificate serial:       34F71C624190F4B08A2E812E12B872F595E912B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D968B6511EF07778C01FA7FFE031522476B79B01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/D968B6511EF07778C01FA7FFE031522476B79B01.mft
Manifest number:          B4
Signing time:             Mon 28 Apr 2025 09:20:32 +0000
Manifest this update:     Mon 28 Apr 2025 09:15:32 +0000
Manifest next update:     Tue 29 Apr 2025 12:11:32 +0000
Files and hashes:         1: D968B6511EF07778C01FA7FFE031522476B79B01.crl (hash: a2jJ4RP7rkQR+rHSRu3xZeZQd4CvuuvxlFH59k0PVmM=)
                          2: 3138362e3232342e36342e302f32302d3234203d3e203238313432.roa (hash: s1bish16GUITfrg14wggTBPCqTEjnEqqg4bEoGxSHLA=)
                          3: 3137372e33392e3133382e302f32342d3234203d3e20323632343330.roa (hash: Als/7Mh8bNibakh3eLi2jwPgshDdg8AAeramgxjF7NI=)
                          4: 323830343a66633a3a2f33322d3434203d3e203238313432.roa (hash: 1f9wdSXWLrHq1vQh7K1Q83yr9H2uocoOEKtzoCeEC84=)
                          5: 3138372e34392e38302e302f32302d3234203d3e203238313432.roa (hash: cOC6wpDgwlK785HxZmNdjkArXLVALB58elsD/EktsBQ=)
                          6: 3137372e33392e3133392e302f32342d3234203d3e20323632343330.roa (hash: Vpt2lSSGQZ+zqcZFwvwSQntN1abmi/oLWyJMDj5FYY0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/D968B6511EF07778C01FA7FFE031522476B79B01.crl
                          rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/D968B6511EF07778C01FA7FFE031522476B79B01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D968B6511EF07778C01FA7FFE031522476B79B01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f7:1c:62:41:90:f4:b0:8a:2e:81:2e:12:b8:72:f5:95:e9:12:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D968B6511EF07778C01FA7FFE031522476B79B01
        Validity
            Not Before: Apr 28 09:15:32 2025 GMT
            Not After : Apr 29 12:11:32 2025 GMT
        Subject: CN=636AC84FB8ACD810E371A4E0B624AB3FEB0833AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c9:01:df:b1:4f:9a:1a:df:dd:a5:02:46:aa:
                    d5:ac:5c:df:f4:39:08:6d:0b:44:8c:9d:28:98:4a:
                    b8:8a:57:16:4d:bd:c9:3c:cc:74:26:91:1c:50:21:
                    c0:c9:5d:83:16:9a:e9:b8:1c:7b:ee:57:ea:12:b9:
                    3d:77:91:b7:0a:3d:db:6b:5e:50:e5:21:79:db:9c:
                    3d:6c:f0:4e:bc:de:8a:89:6a:6a:6b:ef:39:1c:9a:
                    33:ca:e2:fe:8d:39:95:aa:d3:4f:ae:69:08:43:fe:
                    42:8e:e5:2b:1c:17:ea:22:fe:80:8c:5a:b1:ee:04:
                    70:60:f4:69:ca:52:2a:dd:ee:2d:3b:2c:95:88:71:
                    bc:01:a3:c3:ad:a2:c1:f6:04:bb:66:a1:13:86:70:
                    29:d7:82:60:c5:61:d1:95:ef:6a:35:26:db:61:59:
                    5f:fc:f4:68:6b:83:01:69:a4:2c:3d:80:ed:24:98:
                    5a:e6:d9:09:19:33:34:b8:09:95:16:49:1c:a5:f7:
                    d8:8b:34:0d:22:66:07:10:eb:c5:60:63:9e:4e:2e:
                    80:f5:6b:87:70:8f:19:94:14:ca:e5:59:0c:f5:9d:
                    51:bb:7e:86:37:6c:be:75:e0:20:9f:18:5d:07:dc:
                    98:3d:17:be:a9:3f:be:df:1d:93:0e:d7:b9:98:74:
                    21:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6A:C8:4F:B8:AC:D8:10:E3:71:A4:E0:B6:24:AB:3F:EB:08:33:AD
            X509v3 Authority Key Identifier:
                keyid:D9:68:B6:51:1E:F0:77:78:C0:1F:A7:FF:E0:31:52:24:76:B7:9B:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/D968B6511EF07778C01FA7FFE031522476B79B01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D968B6511EF07778C01FA7FFE031522476B79B01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/D968B6511EF07778C01FA7FFE031522476B79B01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:8f:b7:1c:c8:0b:16:db:14:ac:92:92:fd:a7:b7:9b:6c:28:
         39:13:fb:73:be:ea:47:d9:d5:ac:9f:75:7d:6d:a9:df:38:77:
         22:2e:37:94:b8:0e:1a:4e:bb:8b:43:51:df:95:11:cc:e5:d8:
         50:06:49:c8:b1:fb:4e:c6:5d:19:de:ea:9f:36:4e:0e:1f:53:
         71:00:29:79:43:d1:0b:88:54:4c:e2:d1:3a:e5:19:18:41:42:
         15:48:f4:c1:39:3d:d4:e5:b2:7f:f8:d4:96:70:2d:f6:e1:99:
         a5:bc:07:41:5d:ee:c4:48:34:02:bf:b0:5b:55:f0:83:d7:b1:
         d2:14:b7:13:f6:c3:84:f1:52:2e:73:fb:2e:10:0c:d7:52:7c:
         18:3f:07:49:43:b8:87:50:15:46:b2:ac:c5:03:96:77:1d:82:
         b4:09:23:cc:4e:70:59:43:f5:53:4f:c2:eb:67:a1:7d:b3:57:
         eb:a4:9b:a2:24:b9:02:fc:bd:65:c4:9f:47:30:d6:af:1c:28:
         15:21:33:d0:13:bb:a6:1c:13:93:3a:e0:9f:56:02:5b:6a:ba:
         2d:1e:94:c2:e8:a0:4b:8f:8d:6c:f5:3d:ad:b5:15:5e:4f:52:
         79:33:fe:60:12:77:95:b1:64:23:f9:6e:a7:87:f0:e5:04:4b:
         68:ac:da:86
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNPccYkGQ9LCKLoEuErhy9ZXpErEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk2OEI2NTExRUYwNzc3OEMwMUZBN0ZGRTAzMTUyMjQ3
NkI3OUIwMTAeFw0yNTA0MjgwOTE1MzJaFw0yNTA0MjkxMjExMzJaMDMxMTAvBgNV
BAMTKDYzNkFDODRGQjhBQ0Q4MTBFMzcxQTRFMEI2MjRBQjNGRUIwODMzQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5yQHfsU+aGt/dpQJGqtWsXN/0
OQhtC0SMnSiYSriKVxZNvck8zHQmkRxQIcDJXYMWmum4HHvuV+oSuT13kbcKPdtr
XlDlIXnbnD1s8E683oqJampr7zkcmjPK4v6NOZWq00+uaQhD/kKO5SscF+oi/oCM
WrHuBHBg9GnKUird7i07LJWIcbwBo8OtosH2BLtmoROGcCnXgmDFYdGV72o1Jtth
WV/89GhrgwFppCw9gO0kmFrm2QkZMzS4CZUWSRyl99iLNA0iZgcQ68VgY55OLoD1
a4dwjxmUFMrlWQz1nVG7foY3bL514CCfGF0H3Jg9F76pP77fHZMO17mYdCH7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUY2rIT7is2BDjcaTgtiSrP+sIM60wHwYDVR0j
BBgwFoAU2Wi2UR7wd3jAH6f/4DFSJHa3mwEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXZYaGkyZ2JGODI2d2phUmJQZ2FHNkRiWW5NTmtUNmdYenRZSzM2alZW
c2ovMS9EOTY4QjY1MTFFRjA3Nzc4QzAxRkE3RkZFMDMxNTIyNDc2Qjc5QjAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NjhCNjUxMUVGMDc3NzhD
MDFGQTdGRkUwMzE1MjI0NzZCNzlCMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RXZYaGkyZ2JGODI2d2phUmJQZ2FHNkRiWW5NTmtUNmdYenRZSzM2alZWc2ovMS9E
OTY4QjY1MTFFRjA3Nzc4QzAxRkE3RkZFMDMxNTIyNDc2Qjc5QjAxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdI+3HMgLFtsUrJKS/ae3m2woORP7c77qR9nVrJ91fW2p3zh3Ii43lLgOGk67
i0NR35URzOXYUAZJyLH7TsZdGd7qnzZODh9TcQApeUPRC4hUTOLROuUZGEFCFUj0
wTk91OWyf/jUlnAt9uGZpbwHQV3uxEg0Ar+wW1Xwg9ex0hS3E/bDhPFSLnP7LhAM
11J8GD8HSUO4h1AVRrKsxQOWdx2CtAkjzE5wWUP1U0/C62ehfbNX66SboiS5Avy9
ZcSfRzDWrxwoFSEz0BO7phwTkzrgn1YCW2q6LR6UwuigS4+NbPU9rbUVXk9SeTP+
YBJ3lbFkI/lup4fw5QRLaKzahg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:30 2025 by rpki-client on console.sobornost.net