Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.mft
File:                     D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.mft (raw, json)
Hash identifier:          mw7OU3OylQbTKxd/nAtzWlNbOqsGxrgxC5B9/VQW1gk=
Subject key identifier:   8F:45:E7:9C:74:11:12:34:ED:19:10:87:C4:52:FF:9E:C0:C2:7D:78
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Certificate issuer:       /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial:       19EA040BC29B732F8B1087116FFB30455931E557
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.mft
Manifest number:          98
Signing time:             Mon 28 Apr 2025 12:55:48 +0000
Manifest this update:     Mon 28 Apr 2025 12:50:48 +0000
Manifest next update:     Tue 29 Apr 2025 16:50:48 +0000
Files and hashes:         1: 323830343a3961343a3a2f33322d3332203d3e203233303734.roa (hash: ltehQ2B5GRNL3tRDKpzufOQSr7J7BbaB2xr8NU1hryY=)
                          2: 3136342e38352e34362e302f32332d3234203d3e203233303734.roa (hash: Ob8J4TtRfUi+4TaldZD17cx0E2OaMEcYBIDQyZrGlCQ=)
                          3: 3136342e38352e31322e302f32342d3234203d3e203233303734.roa (hash: CUnIzzaSh/tkR/ZGaQyfmF44TO0pHGiWyq/JfXd9Z+I=)
                          4: 3136342e38352e38322e302f32332d3234203d3e203233303734.roa (hash: FcrFya/98haZVszVpQOaFifJKfSe4LHYXzj/pmu0PLE=)
                          5: 3136342e38352e37382e302f32332d3234203d3e203233303734.roa (hash: 0+6han4wszbgdpaYs91FU4hM4rW5/QUHJUGoATGBX2k=)
                          6: 3136342e38352e36322e302f32332d3234203d3e203233303734.roa (hash: ciCfUcybCK1ppYGnNtyk8ZH/QC322ra4ok9luxePJX4=)
                          7: D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl (hash: 89cKxC4gq09qwXUU/hic84JKCveEWSvmnuIF1fkfIDk=)
                          8: 3136342e38352e352e302f32342d3234203d3e203233303734.roa (hash: gk71brSExzaafBsFo5l6nWD19xIS5s0agq086Exy7/A=)
                          9: 3136342e38352e362e302f32342d3234203d3e203233303734.roa (hash: GNpGDsuuUxnD0gl4ZFhgTFBh2yMFabIGE0WepQ8KQ6k=)
                          10: 3136342e38352e38362e302f32332d3234203d3e203233303734.roa (hash: ECAE3SphFAToc5/QMr0W980ymWh8oB4hSlXUyN4MOTI=)
                          11: 3136342e38352e38382e302f32332d3234203d3e203233303734.roa (hash: i5lyEL3Lk/hrmHcEGiNBz+cKJsLeNldR23daPjQWPFE=)
                          12: 3136342e38352e39382e302f32332d3234203d3e203233303734.roa (hash: DdS/tV291E0s9Vdks+9uVSkIbk9c09ZLIxkXVQhpks8=)
                          13: 3136342e38352e38302e302f32332d3234203d3e203233303734.roa (hash: MsMuaZR6JOv7BD996SkifesrDp96T7IjhJoGI5z90x8=)
                          14: 3136342e38352e39302e302f32332d3234203d3e203233303734.roa (hash: ttnC7X2k/DbDZ8pkfaHzpaAVrv98PYzStjZ8TJYoK20=)
                          15: 3136342e38352e33322e302f32332d3234203d3e203233303734.roa (hash: XqfrHnXOklAsALqzU8bWfmw8XRVc4z0YPFq7m34azAg=)
                          16: 3136342e38352e36362e302f32342d3234203d3e203233303734.roa (hash: TJaXCT2zFzVvsHflb7YIYrctNiU4TxNsP6rkBiOd4As=)
                          17: 3136342e38352e38342e302f32332d3234203d3e203233303734.roa (hash: /iLWgq2jLqtm8HWcfwXTyrcs6LKIuWKY76ZYp3SZbi8=)
                          18: 3136342e38352e36352e302f32342d3234203d3e203233303734.roa (hash: bnlcBZ31EkB/LfCNJtRieBAgBo2+cgx3j6temeTBeQs=)
                          19: 3136342e38352e342e302f32342d3234203d3e203233303734.roa (hash: dykFU/22Tx6p5iqsmq9LYhXeLp+cnbh3Z7Os8Sv9uSA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ea:04:0b:c2:9b:73:2f:8b:10:87:11:6f:fb:30:45:59:31:e5:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
        Validity
            Not Before: Apr 28 12:50:48 2025 GMT
            Not After : Apr 29 16:50:48 2025 GMT
        Subject: CN=8F45E79C74111234ED191087C452FF9EC0C27D78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1f:5a:5e:6a:87:06:3d:0a:a0:79:48:b4:81:
                    81:9c:8f:f1:0a:6e:7b:e4:27:57:7a:7b:d3:5a:9c:
                    21:88:8c:cf:15:db:ce:c9:54:2d:0c:2d:1d:fa:96:
                    a0:32:9e:3c:88:92:1b:95:5b:73:56:99:b8:95:b9:
                    c0:fc:28:e9:06:0d:f4:ee:a3:b9:ec:65:3b:04:30:
                    bb:d3:11:56:b8:8d:5a:5a:ec:95:85:77:dd:a6:46:
                    7f:72:61:6d:06:5f:65:81:5f:b9:c6:b9:b6:0e:f0:
                    3d:73:67:15:ff:52:30:8d:4a:0a:63:e5:4b:3e:7b:
                    8d:05:fc:98:8e:ef:77:c5:a5:33:b1:fc:1e:03:c6:
                    d4:e4:ce:16:6f:a4:45:5d:0c:97:bd:3a:a9:5b:42:
                    9c:54:aa:2c:3b:00:83:9e:8b:43:02:96:ec:38:d3:
                    a8:0b:96:d2:b0:6d:24:74:1d:16:52:94:dc:76:eb:
                    a3:a3:b7:d5:35:5f:21:6f:ad:4d:df:b7:55:f4:76:
                    99:88:41:3e:5f:c4:71:fd:4a:a6:88:0e:6f:3b:f8:
                    f9:97:d9:0e:9d:e7:a9:88:f0:a5:47:d4:72:38:5e:
                    1d:cd:bb:71:eb:78:be:bf:0e:6e:c4:fa:e3:10:73:
                    46:5c:48:a6:96:d4:29:9c:11:68:7a:68:a9:bf:ec:
                    28:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:45:E7:9C:74:11:12:34:ED:19:10:87:C4:52:FF:9E:C0:C2:7D:78
            X509v3 Authority Key Identifier:
                keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:6b:e7:16:63:88:15:0e:d4:77:66:ac:76:43:4e:a7:68:f1:
         6f:9e:b9:9d:f6:f3:20:52:3a:c7:82:e3:16:9e:11:55:48:37:
         63:84:24:47:e2:15:d4:28:29:a8:9b:f6:5b:23:d0:b4:e5:28:
         5e:7e:27:f2:ed:3e:6e:61:b7:52:9f:5b:d1:e8:be:95:9a:69:
         35:19:59:2c:60:ad:ed:d5:97:dd:3b:9e:a7:55:b7:95:24:85:
         62:cd:35:79:a1:a0:ba:1d:0d:b0:a8:91:93:39:04:ed:cc:7e:
         79:e0:58:2f:58:cf:23:ea:45:2f:82:18:50:49:d0:54:04:8c:
         b2:08:ce:61:4a:fb:0e:d4:b1:62:6b:02:3a:ac:0e:86:9a:b2:
         da:8a:ec:93:66:c7:f0:d6:cb:89:ff:4a:27:e9:ed:f9:fd:5e:
         39:d3:91:11:b8:f9:c0:4b:64:13:f5:2f:a5:9e:22:a9:7b:c4:
         94:ac:d8:cb:e9:cc:e2:15:4d:14:7f:25:cb:e7:50:ab:91:76:
         6f:7c:c2:75:b7:f3:84:06:aa:86:97:2a:58:c6:f7:58:d8:cf:
         f3:bd:ce:18:57:0a:f1:ff:99:e3:6c:13:ec:75:a1:06:1c:4c:
         ea:ee:31:50:05:2c:5c:cd:dc:1e:53:fa:61:4a:27:6f:2d:1f:
         66:47:04:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:15 2025 by rpki-client on console.sobornost.net