Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft
File:                     7A509BA48E79904F69690722D65AADB9AD3A47AB.mft (raw, json)
Hash identifier:          FmKAot2vVvzrIPceA8lSkitx+/shg3IBmWInzTro2fQ=
Subject key identifier:   96:DF:41:A5:20:AA:01:BB:DD:29:B0:B5:9F:88:51:F7:62:63:DB:20
Authority key identifier: 7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB
Certificate issuer:       /CN=7A509BA48E79904F69690722D65AADB9AD3A47AB
Certificate serial:       14D7A262402FB43A727B6741758FE2429A776B1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft
Manifest number:          0207
Signing time:             Thu 24 Apr 2025 17:40:00 +0000
Manifest this update:     Thu 24 Apr 2025 17:35:00 +0000
Manifest next update:     Fri 25 Apr 2025 21:07:00 +0000
Files and hashes:         1: 3133382e3138352e32302e302f32322d3332203d3e20323634333332.roa (hash: rx5Zu0sL+XVwDW8gwYzOP+H4x5J1EEfuLondo22zp8Y=)
                          2: 323830343a323633343a3a2f33322d3438203d3e20323634333332.roa (hash: Ka+OlyvDYWNhX7z9FvJAz94zf3Wqeaw7Eay01YWxeq4=)
                          3: 7A509BA48E79904F69690722D65AADB9AD3A47AB.crl (hash: WgQrIFGiHO+TZY6FcmM6WaIlClM4CCG+ReoMaTQaRAA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl
                          rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d7:a2:62:40:2f:b4:3a:72:7b:67:41:75:8f:e2:42:9a:77:6b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A509BA48E79904F69690722D65AADB9AD3A47AB
        Validity
            Not Before: Apr 24 17:35:00 2025 GMT
            Not After : Apr 25 21:07:00 2025 GMT
        Subject: CN=96DF41A520AA01BBDD29B0B59F8851F76263DB20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3c:c2:0b:53:72:63:88:f4:34:9a:af:73:a2:
                    51:b2:3d:9f:f6:5a:ca:29:3a:33:ac:7e:8c:42:0f:
                    bd:2c:28:81:3a:71:d8:64:ac:95:f7:29:56:ef:44:
                    73:59:89:7d:ff:b2:de:d7:c2:2f:11:e1:3b:79:14:
                    37:22:05:7e:88:75:d9:6e:45:82:5a:d0:de:03:0b:
                    c3:75:43:b9:ce:c6:1f:e9:b6:ea:11:3d:d8:8a:8b:
                    3d:72:40:8c:9f:0d:dc:27:63:f5:f8:c4:16:23:22:
                    94:50:d5:db:d1:3a:bf:9b:25:cb:ca:85:fd:14:1b:
                    10:d2:fb:2b:10:8e:ef:dc:14:b2:d9:05:a6:fd:c2:
                    fe:be:ad:fb:74:47:e6:5e:26:36:3b:39:66:b0:58:
                    26:5f:92:52:fc:9c:f1:1b:12:d1:fa:55:1c:81:7d:
                    42:f6:5f:f9:f7:94:57:38:7a:5d:ee:93:f8:af:84:
                    6d:23:df:2d:e8:5a:59:73:88:b2:2f:a7:1e:15:55:
                    90:2a:63:bd:af:43:a4:64:d6:c9:ca:21:ef:4e:fa:
                    4e:72:45:c0:61:10:92:c6:a6:6a:4b:c5:56:24:25:
                    f8:1b:73:dd:cf:90:17:79:3a:0f:54:8d:8f:35:6d:
                    a6:fb:09:52:58:35:ff:0b:65:dc:e0:bd:2c:35:8b:
                    7f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DF:41:A5:20:AA:01:BB:DD:29:B0:B5:9F:88:51:F7:62:63:DB:20
            X509v3 Authority Key Identifier:
                keyid:7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ae:56:82:fc:7c:cf:69:d4:ac:bb:a4:0e:6d:d7:63:f2:62:
         d5:ba:cb:e4:aa:31:9a:5a:0a:06:96:c0:47:a9:31:9b:45:82:
         76:17:42:cc:0f:7e:82:f5:f7:3a:55:19:12:86:63:24:fc:70:
         8a:4c:14:34:5e:b3:24:bb:3f:6e:a9:16:4f:fa:12:40:df:6a:
         a4:c5:5f:85:33:da:db:d4:21:a8:50:92:74:16:09:93:a0:5e:
         32:c0:2c:d8:85:16:eb:ac:79:eb:18:35:61:bf:37:3e:89:d3:
         f7:f5:14:67:38:e3:87:d0:7e:cf:64:21:00:f9:49:9e:a8:14:
         61:9e:ae:c9:8a:f2:61:bf:ad:c9:da:ff:91:47:28:07:4f:7e:
         81:c8:0e:03:c9:ba:ee:2d:ae:cc:1d:6a:31:da:29:a0:ae:bb:
         2c:d0:a1:eb:d4:be:27:78:0a:70:f8:50:39:ac:5e:fb:48:b4:
         92:09:04:c4:70:6f:85:7e:32:7e:ed:28:5a:6a:a4:76:7e:13:
         f1:b8:f0:01:4b:5e:de:43:e8:43:1a:6d:ab:44:40:23:c7:85:
         55:3a:58:cf:cc:f6:d2:14:a7:b0:81:83:8f:ea:48:25:88:14:
         40:f4:a0:5a:3b:fc:13:d2:05:c2:6c:04:8f:2f:0f:33:e3:47:
         99:56:43:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:44 2025 by rpki-client on console.sobornost.net