Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft
File:                     30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft (raw, json)
Hash identifier:          V7HW+EXm57rY9+2OWRgptmU0MxTWz7t2MNHWF62k+OQ=
Subject key identifier:   7D:88:87:81:0D:F9:73:6E:C9:57:29:90:45:D2:B3:30:86:CB:82:EC
Authority key identifier: 30:15:7C:EF:EE:BD:0C:7D:8A:29:EC:E4:A2:43:43:27:73:2F:FD:F6
Certificate issuer:       /CN=30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6
Certificate serial:       18C45D3172784A91E0F1299358A580AE25ED86D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft
Manifest number:          CF
Signing time:             Thu 24 Apr 2025 09:50:49 +0000
Manifest this update:     Thu 24 Apr 2025 09:45:49 +0000
Manifest next update:     Fri 25 Apr 2025 12:43:49 +0000
Files and hashes:         1: 3139312e3234322e3234382e302f32312d3234203d3e20323633343836.roa (hash: rL+TkHgeBzF/RxGQbctSGIejhaFIapqJpjb9Ehb1bjU=)
                          2: 323830343a313239383a633030303a3a2f33342d3438203d3e20323633343836.roa (hash: DAqu5vHYMmBzgjKw3m7YZkJtCc2eRZUK716q7SojePk=)
                          3: 30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.crl (hash: CGLkMgclQtDDEdMbasxWLTZLrBB+EgQlqdKsE8i05IY=)
                          4: 323830343a313239383a343030303a3a2f33352d3438203d3e20323633343836.roa (hash: B+W9Frc+XlYM7J/MsTk/HS6qJWiZIbS4YJ+YQvXnnuc=)
                          5: 323830343a313239383a3a2f33352d3438203d3e20323633343836.roa (hash: sljh31mJ0RJTBcb4KweO4CaaM79EEO0P440gQgwgF2U=)
                          6: 3137302e37392e3132382e302f32322d3234203d3e20323633343836.roa (hash: 5v9hnDEi09hRUO2yXK4a7ymdq4lnC5yaazp+8/R5Opo=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.crl
                          rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 10:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c4:5d:31:72:78:4a:91:e0:f1:29:93:58:a5:80:ae:25:ed:86:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6
        Validity
            Not Before: Apr 24 09:45:49 2025 GMT
            Not After : Apr 25 12:43:49 2025 GMT
        Subject: CN=7D8887810DF9736EC957299045D2B33086CB82EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9f:f6:b0:e6:76:01:52:90:e8:89:dc:b0:e2:
                    ed:bb:5f:64:2e:8e:08:e8:99:7d:d2:e2:1a:bb:04:
                    f2:be:6d:f9:35:b1:3e:a2:41:f7:8f:56:c6:a8:96:
                    22:04:73:06:8f:a8:4c:6c:3f:2d:52:4c:a0:e9:28:
                    bf:0f:76:93:26:18:d3:40:c7:6b:a4:6c:51:88:81:
                    fd:1c:d5:64:e3:80:b6:13:2d:6e:41:67:5e:1a:a1:
                    ef:54:d5:44:44:d5:98:11:82:ec:05:fb:17:9f:a6:
                    f1:6b:d7:c6:db:9f:04:8e:36:41:f3:8c:13:0d:e0:
                    ac:28:af:f9:e3:a3:03:ff:17:e6:e5:b7:dd:b5:e6:
                    77:31:81:e7:ae:6c:07:08:9d:e5:94:65:d9:2b:66:
                    91:9a:ad:f7:23:aa:09:72:d7:f5:e8:0f:36:53:fe:
                    9a:a4:a8:17:0f:1e:6b:2c:cf:6f:f4:ea:78:d4:65:
                    10:82:9b:f0:60:80:24:e3:c0:e3:c7:f7:26:2d:b6:
                    7b:10:79:d5:ac:48:a2:62:c5:6c:15:9d:f7:b5:d6:
                    74:02:32:a5:3c:9d:b8:67:43:93:cd:89:0d:65:8e:
                    ff:d6:af:98:f6:e8:c3:c0:b2:83:b0:59:3d:80:7e:
                    bd:38:91:48:9f:6b:0a:fb:e7:af:8f:d2:3b:20:da:
                    d7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:88:87:81:0D:F9:73:6E:C9:57:29:90:45:D2:B3:30:86:CB:82:EC
            X509v3 Authority Key Identifier:
                keyid:30:15:7C:EF:EE:BD:0C:7D:8A:29:EC:E4:A2:43:43:27:73:2F:FD:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:46:ab:a2:3e:e8:07:c2:cf:51:81:6a:11:12:4e:e8:84:33:
         54:f9:36:af:fa:ce:85:30:19:d5:86:d7:83:80:2e:68:ee:9e:
         99:11:93:31:f9:6b:1f:79:c4:10:6c:43:1f:a6:27:5b:7b:6e:
         13:c8:96:44:81:1b:6a:7e:ef:8e:1d:9c:0b:26:0f:f0:e4:b2:
         f3:04:2c:82:a6:a5:26:7c:1b:3a:89:26:9d:33:88:44:42:52:
         84:a3:bd:be:ea:00:3b:61:ec:95:71:b1:3b:67:61:c8:6c:1e:
         06:06:34:95:a6:74:6b:6f:67:98:53:45:bb:83:70:91:1c:96:
         19:9d:d6:1d:06:df:5e:7f:ad:bf:ec:fd:4a:be:17:0b:77:d9:
         d0:7b:18:1f:08:57:76:0b:22:2e:2f:05:d7:1e:23:6b:0c:f2:
         9f:09:c1:8c:f2:f3:df:93:2a:83:db:27:2b:c3:57:3b:a9:19:
         6a:92:16:85:4d:0b:d9:06:64:39:ba:a4:51:8f:29:02:e7:51:
         2b:bf:c6:b0:c2:49:85:43:8e:3f:ce:5c:99:73:49:89:c7:38:
         c5:85:79:a3:19:d2:a7:8f:df:fd:0e:28:98:6d:8b:13:58:4f:
         65:46:6c:c8:9a:21:c1:12:a4:87:4a:8a:85:9e:45:1e:5b:f4:
         4d:3d:10:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 11:25:43 2025 by rpki-client on console.sobornost.net