Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.mft
File:                     14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.mft (raw, json)
Hash identifier:          Izs2lOv5w/+/JRfnF4DWfDCTHZZfaWa8oqb0riS7V/w=
Subject key identifier:   7C:A4:5D:17:46:D0:94:C5:B9:03:D2:4D:D7:56:38:41:84:18:F8:DD
Authority key identifier: 14:DA:F3:CA:35:6C:52:B0:3F:2B:DD:7F:43:D3:D5:BC:B2:4D:25:C1
Certificate issuer:       /CN=14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1
Certificate serial:       0AF42956E7B86C3712E90744244B97486536BA0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.mft
Manifest number:          01EC
Signing time:             Mon 28 Apr 2025 09:40:28 +0000
Manifest this update:     Mon 28 Apr 2025 09:35:28 +0000
Manifest next update:     Tue 29 Apr 2025 12:40:28 +0000
Files and hashes:         1: 14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.crl (hash: agX3uzEsFB7kxfDaYQg6XBuTPtq+86TsrZflB2sZbq8=)
                          2: 3139312e3234322e3232342e302f32322d3332203d3e20323633343833.roa (hash: mbcktOJZCLHdqszA/t9rTKFJsSPBbT8Uk0pSZNNglgc=)
                          3: 323830343a313238633a3a2f33322d313238203d3e20323633343833.roa (hash: EYG6br5zwgHoi8f54PxnvldTAV0I+mIDlTjJJ5D3lHM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.crl
                          rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f4:29:56:e7:b8:6c:37:12:e9:07:44:24:4b:97:48:65:36:ba:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1
        Validity
            Not Before: Apr 28 09:35:28 2025 GMT
            Not After : Apr 29 12:40:28 2025 GMT
        Subject: CN=7CA45D1746D094C5B903D24DD75638418418F8DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:31:a9:5d:b2:38:51:f6:aa:12:8f:45:1d:4d:
                    58:6f:fe:85:2f:7e:12:3e:c3:e4:7f:d8:9e:31:72:
                    50:e8:b3:85:a0:b5:11:b7:f1:71:c9:bb:60:b6:5c:
                    fd:61:90:0e:73:ad:b2:29:e9:fd:2b:b8:c6:62:ad:
                    57:e9:f1:0f:ae:45:35:39:1a:c6:61:c0:fa:24:1b:
                    7f:b2:02:96:a6:70:06:2a:b5:9b:42:ca:5b:fe:40:
                    20:11:0b:7b:ba:88:bb:2d:df:65:de:7f:84:07:cc:
                    b1:2f:8b:5a:50:11:97:fb:b6:48:a9:6a:5b:43:78:
                    41:28:63:42:3f:f5:d4:59:b7:01:11:65:6b:3a:a9:
                    ba:b0:80:94:45:1f:db:68:cf:38:28:97:fd:0f:57:
                    80:43:3b:97:bb:ac:4a:7d:e2:48:6e:32:0e:50:e4:
                    02:b8:d4:89:bf:c9:14:00:2f:77:43:42:b5:b3:1a:
                    95:81:00:0b:2a:8b:fe:55:ac:15:32:8b:05:71:93:
                    66:b3:f5:d6:ac:aa:7c:00:0b:c5:58:86:81:d9:c3:
                    5b:57:50:5b:58:45:f8:16:f6:56:9d:77:cb:8a:af:
                    8d:6b:6e:2b:7b:a3:23:94:b9:a4:e5:53:ab:e0:85:
                    fb:71:73:f1:95:51:0c:39:7f:bd:1d:bb:43:d8:ee:
                    09:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A4:5D:17:46:D0:94:C5:B9:03:D2:4D:D7:56:38:41:84:18:F8:DD
            X509v3 Authority Key Identifier:
                keyid:14:DA:F3:CA:35:6C:52:B0:3F:2B:DD:7F:43:D3:D5:BC:B2:4D:25:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:b7:dd:75:f3:d9:57:57:45:07:09:b5:c4:a8:d3:16:2e:33:
         a4:76:6c:09:05:00:62:19:e6:81:62:9e:df:fb:f1:ba:9b:7a:
         0a:44:db:65:cb:92:c6:23:35:c7:02:7a:78:16:b2:60:3b:8a:
         f7:60:12:bb:07:b7:d2:f2:e2:62:ee:4a:57:4a:12:80:fa:b1:
         1b:6b:97:f6:17:af:18:6e:c9:28:2e:c9:a2:b4:81:01:84:de:
         da:fc:07:01:dd:6a:6f:9e:14:20:22:6c:2e:50:d8:ed:87:71:
         2d:61:42:24:49:09:d3:9e:85:0c:30:73:61:5e:92:8b:fa:fa:
         3c:47:ed:30:b9:da:3a:7c:49:52:17:af:04:7e:19:34:da:42:
         1f:76:5c:59:d2:e7:b8:90:07:78:71:45:cf:cc:5f:0a:ac:76:
         16:4f:b3:d9:be:b5:8e:4a:09:10:f5:18:a8:49:2c:42:2b:46:
         fd:58:0f:38:da:c0:95:f4:19:c0:26:88:aa:78:07:e4:b7:cc:
         e2:7a:0a:e5:64:93:2c:ca:9c:db:81:74:59:53:42:89:12:dd:
         01:ca:14:ea:b2:c4:05:27:b2:8c:2a:7b:8a:da:79:73:4b:86:
         15:8c:7f:84:91:06:91:e3:cc:b3:fd:bd:c8:9b:c6:23:21:da:
         7f:cf:0e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:03 2025 by rpki-client on console.sobornost.net