Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.mft
File:                     ACEF8FA1F536657A209246B168B346C65044943D.mft (raw, json)
Hash identifier:          CN9TKh38LK3g5U4BzLcbVzXCQR+SBlm4q4xVrQR45/s=
Subject key identifier:   29:30:1D:FE:BA:E9:D7:B6:BD:FF:61:F1:05:47:A0:68:02:BF:B0:F6
Authority key identifier: AC:EF:8F:A1:F5:36:65:7A:20:92:46:B1:68:B3:46:C6:50:44:94:3D
Certificate issuer:       /CN=ACEF8FA1F536657A209246B168B346C65044943D
Certificate serial:       71D19DC8E4657EE1B640BB793C1E46A0B47A1A95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACEF8FA1F536657A209246B168B346C65044943D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.mft
Manifest number:          B5
Signing time:             Mon 28 Apr 2025 12:06:13 +0000
Manifest this update:     Mon 28 Apr 2025 12:01:13 +0000
Manifest next update:     Tue 29 Apr 2025 12:20:13 +0000
Files and hashes:         1: 3136302e3233382e3134342e302f32322d3234203d3e20323636353334.roa (hash: TBwSy73qtrScmk/PP7f06F3Y4Xu4YlC+LHiWpwlAcPk=)
                          2: ACEF8FA1F536657A209246B168B346C65044943D.crl (hash: Jer1rwgCWrzfuzsd+WnDSDDIuGhBshvS+XbhsMCxuNw=)
                          3: 323830343a336437633a3a2f33322d3438203d3e20323636353334.roa (hash: pEdY0WORsMoto3D0l6iQyl4uwPycDlwz4UUbyVDxv74=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.crl
                          rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACEF8FA1F536657A209246B168B346C65044943D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:20:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d1:9d:c8:e4:65:7e:e1:b6:40:bb:79:3c:1e:46:a0:b4:7a:1a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACEF8FA1F536657A209246B168B346C65044943D
        Validity
            Not Before: Apr 28 12:01:13 2025 GMT
            Not After : Apr 29 12:20:13 2025 GMT
        Subject: CN=29301DFEBAE9D7B6BDFF61F10547A06802BFB0F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b1:be:68:ec:4f:5b:ab:8d:b4:d8:21:60:48:
                    47:82:1b:b5:e5:e9:34:49:4f:14:e0:e7:a0:88:41:
                    38:14:aa:ec:12:b5:9b:4e:3d:a1:ae:77:0f:1c:2a:
                    c9:b0:eb:41:cc:8f:fd:3c:2f:79:9f:df:90:92:db:
                    6d:f0:7c:cd:4f:f5:be:7d:cf:e1:b5:54:5c:29:d5:
                    64:8b:b4:44:3c:2f:4a:65:00:71:91:7c:30:ec:fb:
                    69:e9:b5:55:12:a4:c4:2f:7d:43:46:7b:74:f3:93:
                    19:34:2e:89:62:3f:df:43:05:92:d3:2d:81:5c:b6:
                    95:46:b9:d7:fe:9d:3a:2e:6d:64:0b:5b:ae:e6:ad:
                    81:db:5f:50:5f:37:b6:b2:d5:56:cb:d8:82:cd:b8:
                    ad:e5:b4:d1:50:6b:ce:29:c6:54:6c:22:09:9f:81:
                    d6:2b:07:7a:77:88:21:fd:b8:0b:4c:f8:0d:84:e8:
                    86:a1:9a:34:2a:d0:8a:70:4d:1e:fe:de:6a:65:bb:
                    84:a7:20:77:83:e8:87:d5:33:1c:69:5a:57:95:fd:
                    b7:cf:a8:4b:69:23:54:54:f6:79:22:a5:48:f1:36:
                    96:7e:ec:06:46:0c:15:6b:c4:c6:10:de:01:52:7f:
                    cf:63:b8:e4:95:9a:15:8f:a2:a8:db:68:42:2f:db:
                    06:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:30:1D:FE:BA:E9:D7:B6:BD:FF:61:F1:05:47:A0:68:02:BF:B0:F6
            X509v3 Authority Key Identifier:
                keyid:AC:EF:8F:A1:F5:36:65:7A:20:92:46:B1:68:B3:46:C6:50:44:94:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACEF8FA1F536657A209246B168B346C65044943D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e2:5a:c2:e6:91:43:48:a3:47:1c:e6:eb:66:86:79:4d:4a:
         1c:b0:fe:c5:bb:e1:ca:c8:05:e2:2a:1c:5c:46:09:98:ca:5e:
         ec:04:9c:67:cc:68:5f:74:ed:77:9d:c7:f4:a4:ca:d0:9f:bf:
         ac:bf:7d:ce:fa:af:f6:b2:e7:3b:4c:5d:1e:09:d4:f6:88:9e:
         bb:6a:77:9a:91:c4:5c:e1:a9:80:a9:4d:2b:ca:d7:a6:ea:b7:
         15:55:72:71:3a:1f:a6:b3:3f:cf:1f:4f:d8:1c:31:d6:0d:78:
         d2:4d:f9:87:06:cf:36:9f:f7:1b:96:39:65:4d:0d:05:14:a0:
         d1:75:1e:b7:68:2c:f0:0e:b2:16:dc:8e:2b:29:15:ab:c9:a2:
         0d:9b:52:a1:c9:61:bc:22:2f:9a:b6:b7:53:aa:d8:4c:39:71:
         ed:a5:29:09:28:d6:91:8b:1e:05:c3:04:59:2c:82:dc:af:76:
         d5:31:de:10:f3:2f:54:17:3b:3c:58:3f:c6:6c:56:9f:72:5f:
         6d:58:09:3a:cd:2c:ff:31:aa:da:45:60:a0:97:9d:f0:04:ca:
         b0:df:24:ec:d1:73:02:7d:9a:ee:ee:7b:7a:25:60:d2:87:97:
         fc:88:f7:b7:2c:c4:99:5b:b8:31:cc:78:8f:0a:2f:01:4d:22:
         0e:e5:4c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:15 2025 by rpki-client on console.sobornost.net