Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/020B6025D315CBAEB1AA6B20873494F4BD2ED003.mft
File:                     020B6025D315CBAEB1AA6B20873494F4BD2ED003.mft (raw, json)
Hash identifier:          nc9bSj0oThEFXYmckiA8wrJY2CSf+uv4c+ngO4f9xPA=
Subject key identifier:   9F:02:9A:B8:8E:E1:2F:0F:46:5D:DE:1E:27:D8:7C:08:0B:48:9A:FC
Authority key identifier: 02:0B:60:25:D3:15:CB:AE:B1:AA:6B:20:87:34:94:F4:BD:2E:D0:03
Certificate issuer:       /CN=020B6025D315CBAEB1AA6B20873494F4BD2ED003
Certificate serial:       4025096A381CBE68A0F13E01C5A5E04B7770194D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020B6025D315CBAEB1AA6B20873494F4BD2ED003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/020B6025D315CBAEB1AA6B20873494F4BD2ED003.mft
Manifest number:          14
Signing time:             Fri 25 Apr 2025 09:29:39 +0000
Manifest this update:     Fri 25 Apr 2025 09:24:39 +0000
Manifest next update:     Sat 26 Apr 2025 10:32:39 +0000
Files and hashes:         1: 020B6025D315CBAEB1AA6B20873494F4BD2ED003.crl (hash: OynsPc6gycMKvPdzBDUWE5GvF8GySu+1C0Wyv1zMp50=)
                          2: 323830343a376462383a3a2f33322d313238203d3e20323731353738.roa (hash: QV4bak4yJbutgIlmji9b6+UXVDaNSeP7XojS+orZIb4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/020B6025D315CBAEB1AA6B20873494F4BD2ED003.crl
                          rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/020B6025D315CBAEB1AA6B20873494F4BD2ED003.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020B6025D315CBAEB1AA6B20873494F4BD2ED003.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 10:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:25:09:6a:38:1c:be:68:a0:f1:3e:01:c5:a5:e0:4b:77:70:19:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=020B6025D315CBAEB1AA6B20873494F4BD2ED003
        Validity
            Not Before: Apr 25 09:24:39 2025 GMT
            Not After : Apr 26 10:32:39 2025 GMT
        Subject: CN=9F029AB88EE12F0F465DDE1E27D87C080B489AFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:07:92:c7:0c:67:d6:1c:29:d1:05:e2:42:f4:
                    14:4d:71:37:fa:bf:70:1f:8e:b3:ff:7a:e1:2b:a6:
                    05:16:cd:15:b1:c1:59:ee:01:3f:05:e6:15:e0:bf:
                    c5:7b:23:39:f1:82:84:2e:aa:38:c8:75:20:3f:d5:
                    c7:30:57:43:6b:ad:cb:94:6c:11:73:6f:d5:2e:13:
                    1b:fd:0e:fe:90:91:1e:63:a4:37:e3:8f:da:cf:c6:
                    e0:84:42:b1:08:c6:77:c9:a9:fd:20:af:b2:5d:4b:
                    7a:bd:90:ab:f1:57:ab:93:0a:37:f5:f8:ae:30:e0:
                    21:fe:3f:6b:8f:e5:ac:5d:15:cb:ea:76:51:bb:d7:
                    e4:49:32:73:51:6a:43:09:45:cd:99:53:c1:f6:79:
                    07:91:88:24:62:c0:36:bc:e4:52:e6:ad:2e:3a:45:
                    a5:7c:ab:98:94:40:ed:3b:16:39:b5:23:91:35:65:
                    a9:fa:18:72:79:bd:31:2d:61:30:f3:0a:76:46:a1:
                    40:f9:06:21:43:81:7d:f2:1d:1a:e6:12:1a:3f:08:
                    9d:8c:9d:3a:da:d3:84:bc:f2:ff:48:de:3f:d9:cb:
                    52:25:57:b7:3d:d7:c3:52:07:62:89:d1:29:38:81:
                    f4:2c:ca:4d:e4:f0:eb:7b:e9:46:67:35:60:e9:24:
                    37:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:02:9A:B8:8E:E1:2F:0F:46:5D:DE:1E:27:D8:7C:08:0B:48:9A:FC
            X509v3 Authority Key Identifier:
                keyid:02:0B:60:25:D3:15:CB:AE:B1:AA:6B:20:87:34:94:F4:BD:2E:D0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/020B6025D315CBAEB1AA6B20873494F4BD2ED003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020B6025D315CBAEB1AA6B20873494F4BD2ED003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/020B6025D315CBAEB1AA6B20873494F4BD2ED003.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a5:a6:89:5c:27:a8:30:8b:b5:83:3b:db:7d:8a:ff:a0:39:
         08:80:61:15:f9:6c:ad:18:c1:d1:31:09:60:2f:bf:d3:0d:bd:
         1e:f3:c3:79:ca:02:0d:bb:87:40:f7:eb:29:96:ec:18:60:fd:
         7f:3e:e3:9e:59:5d:22:ec:97:63:38:f0:5d:0f:f2:96:db:6d:
         2e:d2:c0:27:17:00:e6:5e:90:49:b8:83:47:9d:db:38:bf:62:
         46:bb:b3:1b:35:ee:47:54:31:4a:e1:ed:e1:89:c2:1c:dd:4f:
         c7:49:7e:51:7e:73:e8:92:e1:82:f8:76:f6:97:32:bf:1f:6e:
         65:81:2e:77:3f:0d:a1:dc:04:eb:b2:44:5c:ac:05:29:4a:8a:
         1f:0f:5d:74:eb:aa:66:0f:f4:be:65:94:a2:14:ae:02:f6:be:
         d5:e1:d5:e8:fc:e3:6f:20:34:2a:2f:91:09:4b:9e:b1:6c:ac:
         6e:69:46:c1:db:23:ec:8b:bc:f9:04:6d:e0:e8:0b:b1:45:5a:
         a7:25:5d:fe:e2:93:d1:b0:35:96:6e:72:d5:45:99:29:94:77:
         d9:08:77:8e:86:86:01:d4:b9:ac:c0:a9:5f:86:2d:90:9d:31:
         2f:f2:7e:2e:13:02:5b:a7:32:69:f6:b4:5e:80:eb:2a:46:e5:
         e2:61:01:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:28 2025 by rpki-client on console.sobornost.net