Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/BAF64A7AE246E8120826948706145A4757D1146D.mft
File:                     BAF64A7AE246E8120826948706145A4757D1146D.mft (raw, json)
Hash identifier:          wTPPRBLbTDfm/+SCC3wLEOjqolyJf6ud5mNgB3H94LI=
Subject key identifier:   B0:54:4A:2A:AD:C1:AC:C9:71:81:55:F4:C4:35:80:08:F1:B2:C8:87
Authority key identifier: BA:F6:4A:7A:E2:46:E8:12:08:26:94:87:06:14:5A:47:57:D1:14:6D
Certificate issuer:       /CN=BAF64A7AE246E8120826948706145A4757D1146D
Certificate serial:       77ED6EDE0F431761D728A6AB2FE2B28E0D6137B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF64A7AE246E8120826948706145A4757D1146D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/BAF64A7AE246E8120826948706145A4757D1146D.mft
Manifest number:          C1
Signing time:             Fri 25 Apr 2025 06:54:44 +0000
Manifest this update:     Fri 25 Apr 2025 06:49:44 +0000
Manifest next update:     Sat 26 Apr 2025 07:21:44 +0000
Files and hashes:         1: 34352e3138322e3133362e302f32342d3234203d3e20323639323239.roa (hash: MaEE8XXqsTC/ExhUhOOu9GdN2WDBnQ+ylVdYrsEd7rw=)
                          2: 323830343a363135383a633030303a3a2f33342d3334203d3e20323639323239.roa (hash: tFsMv5Cm+MJOrQww9eBu2q3EvYVjsybYZ6BjyWQYBf0=)
                          3: 34352e3138322e3133372e302f32342d3234203d3e20323639323239.roa (hash: FcVffnif0rZv+D32N1s9owEyBEgsX2sFGoWPT4vUBaI=)
                          4: 323830343a363135383a383030303a3a2f33332d3333203d3e20323639323239.roa (hash: TpuPK/WQ8zJwgyFs+gEHS5bJdSbyF2U1MqbW1Tw50DQ=)
                          5: 323830343a363135383a3a2f33322d3332203d3e20323639323239.roa (hash: bffB+moUBhuRPeZ5q3Uwmk9J7fnC6jyJkwO3JJzDFoA=)
                          6: 323830343a363135383a3a2f33332d3333203d3e20323639323239.roa (hash: olwi47tmQdaVSrrkO7b8gDhX38tLdrNykxjkaiyKo/o=)
                          7: BAF64A7AE246E8120826948706145A4757D1146D.crl (hash: isqP5YcfeoAY7MpNXPSnIpgzYBhMn5OsdvD8GaGqsO8=)
                          8: 323830343a363135383a383030303a3a2f33342d3334203d3e20323639323239.roa (hash: jY9eXZCVOZd5egq1D2JL5YnMO2OdHdPeCEf36t/0IJs=)
                          9: 34352e3138322e3133392e302f32342d3234203d3e20323639323239.roa (hash: l3R9R3DE20wHvjTbyUoyY45WtUJLA5IGebpKkCX1IxI=)
                          10: 323830343a363135383a3a2f33342d3334203d3e20323639323239.roa (hash: JOibLpAE1ZAk91iDt4CSHiiGRJMg6b8EuNd4Pckr3nc=)
                          11: 34352e3138322e3133382e302f32342d3234203d3e20323639323239.roa (hash: iXQqwpRSUDY6fYqoWlsaZJy87PyiXBTzUyDZvkpKUFI=)
                          12: 323830343a363135383a343030303a3a2f33342d3334203d3e20323639323239.roa (hash: TwqLk77SgMWqOqnh9a9diwP/YYjudMas01Kv+QuteGY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/BAF64A7AE246E8120826948706145A4757D1146D.crl
                          rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/BAF64A7AE246E8120826948706145A4757D1146D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF64A7AE246E8120826948706145A4757D1146D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 07:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ed:6e:de:0f:43:17:61:d7:28:a6:ab:2f:e2:b2:8e:0d:61:37:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAF64A7AE246E8120826948706145A4757D1146D
        Validity
            Not Before: Apr 25 06:49:44 2025 GMT
            Not After : Apr 26 07:21:44 2025 GMT
        Subject: CN=B0544A2AADC1ACC9718155F4C4358008F1B2C887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6a:32:d7:96:cd:18:fc:7c:b2:db:43:0b:f0:
                    cc:06:1f:40:50:9b:d2:a0:64:45:f1:c5:6a:21:8e:
                    94:b9:80:c7:3d:f5:e0:70:b2:19:d3:9c:1c:7a:c6:
                    77:6f:74:c8:ff:1f:7d:30:33:e7:09:e3:b6:da:a1:
                    46:04:35:cf:7c:ff:c6:08:19:4c:24:f9:06:5d:77:
                    6b:b4:77:fd:1e:9a:ba:07:b8:c1:cc:be:f1:f0:ea:
                    f8:9c:69:cd:94:f7:1a:b8:c9:63:56:36:57:e1:38:
                    3b:81:57:36:5a:1d:d7:57:01:ac:47:be:b5:27:f8:
                    2e:45:10:af:f3:ad:a1:03:af:ff:e8:27:a5:6c:c3:
                    69:a8:2a:7e:76:65:7e:f5:78:64:43:76:6c:07:45:
                    b5:64:a0:43:e6:e6:48:cd:6e:31:4a:26:d2:18:b9:
                    9f:ed:77:e0:18:1b:41:c7:7a:54:76:d9:58:e4:8b:
                    1a:3a:d3:e9:1d:51:a5:15:f7:f8:bf:a6:10:1f:8a:
                    95:9c:3b:ca:6f:14:1a:40:6b:bf:78:14:8f:bb:41:
                    c4:f4:97:57:aa:75:35:aa:47:ed:af:c0:f8:8d:ad:
                    7c:26:ca:6f:48:78:2c:13:5e:1a:58:be:fc:3c:98:
                    44:55:cd:b6:30:2f:4d:2b:88:9d:4b:3e:d3:bb:fd:
                    d8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:54:4A:2A:AD:C1:AC:C9:71:81:55:F4:C4:35:80:08:F1:B2:C8:87
            X509v3 Authority Key Identifier:
                keyid:BA:F6:4A:7A:E2:46:E8:12:08:26:94:87:06:14:5A:47:57:D1:14:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/BAF64A7AE246E8120826948706145A4757D1146D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF64A7AE246E8120826948706145A4757D1146D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/BAF64A7AE246E8120826948706145A4757D1146D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:63:1a:f6:8f:e9:e3:12:9f:80:fa:81:18:33:31:02:89:8c:
         57:cc:19:fb:46:80:98:1f:06:75:3a:20:04:32:a7:44:5a:be:
         83:00:41:15:23:b8:80:99:96:99:84:4e:0a:ba:6a:77:32:05:
         55:f5:91:01:d9:32:40:76:10:a2:33:ef:1f:71:c7:fd:8c:07:
         bd:69:04:fa:0a:9a:09:f3:d4:c4:44:7a:45:bb:8b:0e:55:bf:
         c1:96:bb:24:d5:97:9b:a2:c5:e8:7d:90:25:62:7a:fe:a3:e7:
         61:eb:a3:28:8d:81:df:48:b3:6b:53:2a:5a:2f:d8:a5:17:bc:
         b0:e1:55:62:f1:87:0b:41:88:b0:00:e9:dc:3f:43:b2:41:63:
         9f:ec:07:06:51:2c:13:92:74:18:25:c0:3c:32:9a:a6:17:e1:
         b6:ef:c1:25:75:3b:10:71:2c:95:f0:2d:a0:b7:75:ea:1b:0b:
         b5:8c:71:3c:8b:36:f5:08:d6:d9:ff:67:74:f9:16:09:9e:da:
         4c:f7:7b:8a:86:c0:c2:22:a5:1f:12:1a:32:ee:cd:1c:b0:bb:
         e5:f1:33:7a:c5:b0:c4:1c:b8:5d:fc:6e:0c:be:2c:02:ec:7c:
         1c:1c:21:db:48:32:d5:44:fa:b6:32:09:68:60:05:15:57:03:
         8a:9b:f1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:07 2025 by rpki-client on console.sobornost.net