Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FzzYFYVWz1P1u8BY27AVB31byypKTiUqkmj5ibnYp7Tn/0/407FE8F64D6C43891C2392984607FD3486512D91.mft
File:                     407FE8F64D6C43891C2392984607FD3486512D91.mft (raw, json)
Hash identifier:          8gwLnCIhOp1tvHvor9jLtwF8XU8I3TqNcteHdsjGF+0=
Subject key identifier:   38:B5:CB:29:57:C7:AB:9D:46:60:CB:B0:DF:3F:B1:5A:2C:7B:D4:AD
Authority key identifier: 40:7F:E8:F6:4D:6C:43:89:1C:23:92:98:46:07:FD:34:86:51:2D:91
Certificate issuer:       /CN=407FE8F64D6C43891C2392984607FD3486512D91
Certificate serial:       5DD40CE54A914FBBCDC0E05FBF95BDCF3F96DFA8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/407FE8F64D6C43891C2392984607FD3486512D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzzYFYVWz1P1u8BY27AVB31byypKTiUqkmj5ibnYp7Tn/0/407FE8F64D6C43891C2392984607FD3486512D91.mft
Manifest number:          66
Signing time:             Mon 28 Apr 2025 01:48:35 +0000
Manifest this update:     Mon 28 Apr 2025 01:43:35 +0000
Manifest next update:     Tue 29 Apr 2025 05:25:35 +0000
Files and hashes:         1: 323830343a363663633a3a2f33322d3438203d3e20323639353833.roa (hash: hCk2mW7x8M8XOpYPPvJccBruAtwJmVklEmJbPXpmEUQ=)
                          2: 34352e3138392e3132342e302f32322d3234203d3e20323639353833.roa (hash: sftakH9ZnsIVRPsWYUWf8BOQG10fuqn/HObsx88HgmM=)
                          3: 407FE8F64D6C43891C2392984607FD3486512D91.crl (hash: 5je3Cg4efz9l4miS379F8T9a4Rx3isICPerxbXojyHI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FzzYFYVWz1P1u8BY27AVB31byypKTiUqkmj5ibnYp7Tn/0/407FE8F64D6C43891C2392984607FD3486512D91.crl
                          rsync://rpki-repo.registro.br/repo/FzzYFYVWz1P1u8BY27AVB31byypKTiUqkmj5ibnYp7Tn/0/407FE8F64D6C43891C2392984607FD3486512D91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/407FE8F64D6C43891C2392984607FD3486512D91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d4:0c:e5:4a:91:4f:bb:cd:c0:e0:5f:bf:95:bd:cf:3f:96:df:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=407FE8F64D6C43891C2392984607FD3486512D91
        Validity
            Not Before: Apr 28 01:43:35 2025 GMT
            Not After : Apr 29 05:25:35 2025 GMT
        Subject: CN=38B5CB2957C7AB9D4660CBB0DF3FB15A2C7BD4AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:74:92:10:f8:74:62:b7:ef:d7:d8:e1:d5:c0:
                    09:f7:e4:a5:23:b8:ee:93:e3:2c:dd:69:a4:cd:0d:
                    73:fb:1b:6e:02:78:ae:ef:93:1c:5f:58:ce:61:96:
                    eb:12:af:d3:1d:e6:30:ad:c6:88:d0:2e:e7:25:90:
                    48:af:bf:2e:7e:f7:57:6c:38:4e:34:31:46:f8:a5:
                    12:b7:7e:4d:70:5b:e4:58:8a:ee:c3:e6:26:72:94:
                    32:6a:9a:a1:83:d4:d8:bf:ed:35:e2:1b:6b:6e:45:
                    05:8f:6d:0a:46:45:ee:6b:11:89:52:48:81:f9:38:
                    15:93:9a:6b:b3:b8:de:31:66:7a:6b:5d:70:d5:b4:
                    eb:a3:95:4e:67:c1:f8:20:94:f1:33:a9:d6:f4:d5:
                    63:51:68:a4:4a:84:03:a0:96:1c:32:80:66:19:f4:
                    85:4c:dc:db:c3:bd:3e:94:6b:93:d4:92:67:b6:f7:
                    0c:4f:40:6c:94:dd:d1:30:ab:cd:07:35:e9:88:32:
                    c6:d5:ed:76:d2:c7:26:33:bb:e4:69:ea:83:2c:ea:
                    24:99:76:d9:14:fd:bf:cb:18:f6:7e:5f:b9:98:85:
                    1c:69:5e:6b:fc:bc:3e:5c:81:1c:ac:df:9f:e9:21:
                    c3:ff:69:a8:11:03:b1:74:3f:ef:54:6e:38:90:04:
                    e6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B5:CB:29:57:C7:AB:9D:46:60:CB:B0:DF:3F:B1:5A:2C:7B:D4:AD
            X509v3 Authority Key Identifier:
                keyid:40:7F:E8:F6:4D:6C:43:89:1C:23:92:98:46:07:FD:34:86:51:2D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzzYFYVWz1P1u8BY27AVB31byypKTiUqkmj5ibnYp7Tn/0/407FE8F64D6C43891C2392984607FD3486512D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/407FE8F64D6C43891C2392984607FD3486512D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzzYFYVWz1P1u8BY27AVB31byypKTiUqkmj5ibnYp7Tn/0/407FE8F64D6C43891C2392984607FD3486512D91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:58:ed:36:7e:59:de:a3:b9:1d:cf:eb:9d:18:bb:0e:8e:81:
         85:ee:73:43:f1:c1:47:1f:6d:89:45:e8:9d:84:29:33:9b:11:
         88:ab:b0:a5:f2:fd:d7:80:d8:1e:f1:b5:4f:d5:a9:04:78:1d:
         a3:6d:87:3d:56:9e:74:aa:87:68:fc:61:cf:97:a5:56:57:51:
         1c:71:63:3d:52:78:85:51:dd:8a:fb:2e:6f:17:ca:1e:ab:e5:
         f7:db:3c:41:35:c2:b3:f8:fd:2e:bf:41:4f:57:19:bd:e9:3d:
         02:5b:59:56:03:da:ae:da:97:93:5a:be:6a:78:91:78:6d:22:
         64:25:04:1f:ed:7d:56:e0:f4:5b:dd:57:15:2c:ac:3e:3c:d2:
         f1:ba:f9:b5:b3:1d:ba:ff:e5:60:67:de:e9:56:38:fd:9d:d0:
         fc:2e:0d:c5:7b:a9:71:79:ec:6d:52:53:0b:b8:e9:b4:cb:ab:
         5b:29:91:1f:0a:00:67:e3:52:e1:a1:b5:33:5a:60:44:9d:31:
         c6:da:88:1e:20:98:2e:19:62:a2:c8:d2:0e:84:f1:b9:a7:5c:
         29:4a:67:1e:86:56:47:2d:f8:09:76:60:0c:c5:61:d0:05:8b:
         ff:73:d6:80:f6:c0:39:a5:44:d0:bb:cb:16:c4:f4:25:c4:60:
         04:d2:d8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:39 2025 by rpki-client on console.sobornost.net