Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft
File:                     4D2990768E393F68FA14BF3F1F2B973208903FBC.mft (raw, json)
Hash identifier:          yLNvNL5pCA3rEtvKrqj5YEuLH0FjiXdonHyC93qiuk0=
Subject key identifier:   B1:30:E3:2B:BE:4B:A5:92:A2:99:39:6D:40:AF:EA:38:04:AE:AD:F3
Authority key identifier: 4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC
Certificate issuer:       /CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
Certificate serial:       47A0B9C985BD602201B9750BF83137531E1AE0EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft
Manifest number:          D9
Signing time:             Sun 27 Apr 2025 00:34:24 +0000
Manifest this update:     Sun 27 Apr 2025 00:29:24 +0000
Manifest next update:     Mon 28 Apr 2025 04:33:24 +0000
Files and hashes:         1: 3138362e3231392e3234302e302f32312d3332203d3e203631373435.roa (hash: Aulf2a9wygKS41lUZettmlaapWqTlD3AxwpFjZ12yBU=)
                          2: 4D2990768E393F68FA14BF3F1F2B973208903FBC.crl (hash: dKW5YCn1ZclCQ9DGUN5mfleTJXKwPB59s5l1BKbNp1c=)
                          3: 3133312e37322e3135322e302f32322d3332203d3e203631373435.roa (hash: aaX0evGI+LGTHR5P0i5qo8nlo7eCrPGc7oIK0Znz8is=)
                          4: 3138362e3231392e3234382e302f32322d3332203d3e203631373435.roa (hash: /4kndRTLPJ7z6o8eMCZNO62enqlcrNH71OhR/rdSbZ4=)
                          5: 323830343a316262383a3a2f33322d313238203d3e203631373435.roa (hash: dpARCrJGTbLpg4On6cAirQCdXCQ94JOs1o9PPF+Mus8=)
                          6: 3138362e3231392e3235322e302f32332d3332203d3e203631373435.roa (hash: V2aqog16FJYFlZorlWvK3dBz+3plH62MXPrM2Tg2udM=)
                          7: 3138362e3231392e3235342e302f32342d3332203d3e203631373435.roa (hash: 4ial0zG0Hlh0wQryAzFWfdM1DwjPagTJxoQv7hSVoFs=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.crl
                          rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 04:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a0:b9:c9:85:bd:60:22:01:b9:75:0b:f8:31:37:53:1e:1a:e0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
        Validity
            Not Before: Apr 27 00:29:24 2025 GMT
            Not After : Apr 28 04:33:24 2025 GMT
        Subject: CN=B130E32BBE4BA592A299396D40AFEA3804AEADF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:02:e1:f7:30:f9:87:ce:34:1b:65:da:df:83:
                    32:f4:9a:f3:01:ba:42:c0:e6:8a:3b:7c:7e:0c:7a:
                    74:94:03:18:b9:9d:f5:21:42:07:46:86:fc:d2:ea:
                    cb:7c:f7:7c:17:68:2a:f4:06:0c:3c:31:81:64:77:
                    06:b1:7c:e3:d4:7a:fb:22:e1:36:d8:cc:1f:34:2a:
                    44:5d:1f:df:60:0a:9f:cd:16:9a:f9:94:79:d4:4f:
                    fb:c7:63:c4:ae:e0:0b:47:39:5b:81:1b:17:a2:d8:
                    13:1f:f9:b4:f6:6d:dd:91:76:93:15:95:16:32:8f:
                    8c:bb:f5:73:c3:fc:3e:c6:44:f2:f4:12:87:3c:26:
                    71:5b:5d:e2:05:f7:a6:3f:6c:bc:64:99:13:a8:b3:
                    ec:d6:90:6c:10:30:5c:b4:2f:07:9b:46:d8:16:a5:
                    ed:4e:7b:1e:b2:2b:5f:8b:98:65:33:17:7d:46:dc:
                    ae:fe:fa:3a:30:5d:45:d1:4d:4a:b3:b3:b4:c2:3f:
                    79:f4:da:d9:bb:f3:32:f7:2c:f4:65:5e:b9:1f:0e:
                    c5:31:a1:40:b1:57:99:50:61:7c:b6:9f:01:9b:5a:
                    97:58:9a:5c:5a:d5:fa:44:03:d2:d8:b0:72:0c:d1:
                    4d:22:1a:df:b0:19:0f:be:41:4b:a3:c3:bc:4d:5d:
                    a0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:30:E3:2B:BE:4B:A5:92:A2:99:39:6D:40:AF:EA:38:04:AE:AD:F3
            X509v3 Authority Key Identifier:
                keyid:4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:cd:1c:79:28:e5:ab:f2:58:f4:15:6b:7f:5b:55:1a:5d:34:
         44:3c:aa:9e:e7:d6:32:4a:ea:96:b9:67:17:81:93:df:64:0b:
         b8:a0:9e:7f:8a:ed:63:ff:51:5b:61:6d:c4:71:69:2d:e0:35:
         6d:81:ea:73:a2:37:cb:1f:6e:0e:1b:8c:ad:86:5e:6c:ac:f1:
         9b:70:e6:f4:d4:bc:2e:a6:70:db:90:46:24:30:4d:1a:1d:9a:
         b9:0e:fb:6d:1f:46:4a:7c:6d:f0:d4:4c:30:9b:fe:88:ca:75:
         f9:5f:85:f4:b7:38:64:16:55:37:ad:6b:5c:65:8a:f7:1b:59:
         55:6b:02:16:9c:bb:29:80:9a:bd:a9:ad:8a:ae:48:9f:98:98:
         bb:da:f9:07:8c:09:22:3d:a7:b2:37:b0:e2:93:71:14:49:25:
         09:17:dd:35:be:bd:ee:30:0c:e3:12:37:fd:e8:cd:6e:da:c3:
         3f:bb:93:fd:e3:a8:02:18:92:f3:d7:e3:1a:0f:71:c6:7a:15:
         01:37:08:a0:ed:4b:fb:ca:c6:46:81:b0:c1:9e:7a:63:71:69:
         75:03:e7:bb:88:2b:30:5f:53:f1:16:fb:52:a5:34:87:ef:e4:
         45:50:da:d9:f1:ab:9c:59:7a:4b:ee:6e:f6:6f:2e:d8:06:cd:
         7f:21:6d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:16 2025 by rpki-client on console.sobornost.net