Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
File:                     AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft (raw, json)
Hash identifier:          fFaHQYX30CCTTxERw56qlpWpBjrtRIe0XZSxvJ5OjoQ=
Subject key identifier:   7B:69:D4:54:13:66:2C:32:DA:68:76:4D:33:0B:44:D1:B8:89:81:D9
Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA
Certificate issuer:       /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA
Certificate serial:       08AB2A11330560F56CFAFD87A2705A325F82BAFE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
Manifest number:          AE
Signing time:             Sun 27 Apr 2025 14:15:40 +0000
Manifest this update:     Sun 27 Apr 2025 14:10:40 +0000
Manifest next update:     Mon 28 Apr 2025 16:01:40 +0000
Files and hashes:         1: 323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (hash: KBArWlV5vwMsvaplxezo5vYP7odX82xOazE7IspsFqE=)
                          2: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl (hash: jeDW+jWYwXtMLXWr0yjf234cDh1YEtKxDtAhlWIwe2w=)
                          3: 34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (hash: MUps5dYJYbgZlLgJ9zMzZggPufSzKqjyIWh5+12TXKE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl
                          rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ab:2a:11:33:05:60:f5:6c:fa:fd:87:a2:70:5a:32:5f:82:ba:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA
        Validity
            Not Before: Apr 27 14:10:40 2025 GMT
            Not After : Apr 28 16:01:40 2025 GMT
        Subject: CN=7B69D45413662C32DA68764D330B44D1B88981D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:33:33:b2:b6:f7:d7:bb:99:1b:00:b4:88:f7:
                    73:21:3f:6f:28:dc:34:2e:0c:b6:cc:b8:b2:d5:24:
                    8c:27:e1:64:fd:d8:22:59:13:fb:4d:66:5e:f7:eb:
                    47:34:2e:fa:3e:9a:0d:ed:76:0b:38:b0:73:48:fb:
                    ce:ac:68:dc:62:14:71:9a:ac:2a:c2:6c:b6:e8:4c:
                    3d:f3:7a:80:cb:80:16:b7:80:33:bf:80:39:22:6e:
                    b3:d9:aa:e4:ab:c5:fa:31:1e:bd:02:d5:27:f8:3f:
                    91:bd:af:67:b3:5b:3c:63:75:95:6d:67:20:2c:03:
                    61:ae:63:d8:b8:d7:fe:e3:bf:1c:64:d8:01:15:67:
                    68:08:43:e4:18:1c:41:1f:bb:b1:f0:db:9e:0b:e1:
                    03:a2:9a:49:a4:da:ca:dc:46:3f:4b:23:c6:94:f2:
                    2f:c7:ba:6b:89:85:e6:f8:5d:49:37:92:03:5d:90:
                    5b:84:e4:7c:bf:a0:74:6f:44:55:2d:ba:a0:1f:b2:
                    54:e7:f7:d8:b5:eb:70:ab:b7:77:72:64:93:13:33:
                    eb:6f:d0:99:98:58:88:de:8b:43:70:22:10:fc:ca:
                    5f:0c:ab:5d:66:32:42:77:5d:25:61:8c:02:62:55:
                    56:7a:6a:8c:36:7c:7e:d1:73:cb:ec:ad:82:ef:bf:
                    45:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:69:D4:54:13:66:2C:32:DA:68:76:4D:33:0B:44:D1:B8:89:81:D9
            X509v3 Authority Key Identifier:
                keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:74:a5:a3:e7:6c:13:f7:3d:1e:0e:51:fa:36:bf:02:1e:4c:
         de:30:2d:39:6e:08:6c:1c:ef:ed:d2:6c:3c:b6:dd:8c:9e:9d:
         6e:3c:31:22:52:8d:d2:4e:1d:2c:c2:01:3f:70:69:74:f7:67:
         f2:07:eb:1a:d8:b7:dc:cf:94:68:7f:e0:99:7e:04:c9:4d:73:
         06:bf:75:9e:9c:6b:7e:5f:50:81:9b:7c:66:49:f1:2d:56:a7:
         be:d9:66:5a:56:aa:0e:51:79:0c:97:a1:33:b4:31:44:82:36:
         01:70:35:5f:12:66:36:b3:46:8d:8e:52:c1:3d:21:b4:77:78:
         ba:91:53:a7:1d:f9:94:6f:57:05:48:7e:46:59:6c:f9:bc:05:
         28:c4:d6:a7:08:bf:c7:46:ee:b2:c7:3a:dd:05:8f:ef:59:df:
         28:bc:e5:1a:98:11:1a:f2:3f:f9:b3:ac:2a:bb:bf:28:ca:02:
         a9:4f:5e:e4:55:a9:3b:ba:bd:61:b7:df:78:53:d8:f3:6c:1a:
         55:67:45:61:c4:35:b3:91:d2:c6:bf:97:7b:fe:3c:1e:44:85:
         93:46:44:e7:e5:7f:29:31:4b:37:85:0c:4a:38:f6:b4:9a:75:
         8b:15:a9:4a:74:3f:67:3b:d7:1a:98:c3:3f:a0:d9:05:55:87:
         f3:b3:f3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:11 2025 by rpki-client on console.sobornost.net