Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GcTS8nxoGdHE23A4FX9hNCdVdnmx6L5SK2kCdetqfX6T/0/129EEDE439F72016FF6D587AF04D37689F26C2E4.mft
File:                     129EEDE439F72016FF6D587AF04D37689F26C2E4.mft (raw, json)
Hash identifier:          sOINgmTUgv7517g8dvpbYTP641/50w+37tHnyZaB6/0=
Subject key identifier:   88:90:57:BD:3B:A3:99:0A:12:7E:BD:BE:62:48:E3:FC:33:EA:2E:FB
Authority key identifier: 12:9E:ED:E4:39:F7:20:16:FF:6D:58:7A:F0:4D:37:68:9F:26:C2:E4
Certificate issuer:       /CN=129EEDE439F72016FF6D587AF04D37689F26C2E4
Certificate serial:       499F3A9E11B69A5EBEEF8E5F0BCA3A4B23158D41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/129EEDE439F72016FF6D587AF04D37689F26C2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GcTS8nxoGdHE23A4FX9hNCdVdnmx6L5SK2kCdetqfX6T/0/129EEDE439F72016FF6D587AF04D37689F26C2E4.mft
Manifest number:          04
Signing time:             Fri 25 Apr 2025 05:13:30 +0000
Manifest this update:     Fri 25 Apr 2025 05:08:30 +0000
Manifest next update:     Sat 26 Apr 2025 07:58:30 +0000
Files and hashes:         1: 129EEDE439F72016FF6D587AF04D37689F26C2E4.crl (hash: 42N8KroINbYrqbBe+ej8rY+iyQD0Y6YvB3uttN+9uZk=)
                          2: 3133312e302e3135322e302f32322d3234203d3e203631383739.roa (hash: a8BLYSbPWz4R+eUJKlAytaeE33WpfG5wzSLIqzrvN8Q=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GcTS8nxoGdHE23A4FX9hNCdVdnmx6L5SK2kCdetqfX6T/0/129EEDE439F72016FF6D587AF04D37689F26C2E4.crl
                          rsync://rpki-repo.registro.br/repo/GcTS8nxoGdHE23A4FX9hNCdVdnmx6L5SK2kCdetqfX6T/0/129EEDE439F72016FF6D587AF04D37689F26C2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/129EEDE439F72016FF6D587AF04D37689F26C2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 07:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:9f:3a:9e:11:b6:9a:5e:be:ef:8e:5f:0b:ca:3a:4b:23:15:8d:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=129EEDE439F72016FF6D587AF04D37689F26C2E4
        Validity
            Not Before: Apr 25 05:08:30 2025 GMT
            Not After : Apr 26 07:58:30 2025 GMT
        Subject: CN=889057BD3BA3990A127EBDBE6248E3FC33EA2EFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a6:95:e1:b1:64:8f:f7:21:a5:ef:40:11:f3:
                    6e:40:cc:ca:94:be:f5:74:22:7d:e6:d2:4d:99:57:
                    27:d5:91:e6:02:f7:f4:7e:3b:46:d8:a3:ca:b1:32:
                    d6:11:ba:7f:ec:7a:1d:99:7b:34:08:47:7c:49:30:
                    18:76:aa:2f:26:72:24:38:c3:c3:92:94:ae:61:b4:
                    3b:e6:72:14:2d:10:24:63:c0:41:0c:a1:5a:54:75:
                    03:83:6a:9b:1e:e2:76:c5:f7:aa:b0:69:d8:f9:d6:
                    d8:58:52:77:e0:43:92:2b:5e:76:09:cc:e4:7c:c3:
                    d2:ea:1a:d7:35:6b:ff:86:8f:f2:d5:e8:5d:e2:c8:
                    cd:7c:bc:b3:7d:1e:38:d8:e1:1e:39:a2:e7:7b:16:
                    ed:d8:bb:ce:65:ee:f4:5c:33:44:98:b4:e2:01:8a:
                    7e:87:0e:79:6f:9d:25:03:14:4e:fc:63:8b:11:19:
                    50:49:17:1a:b2:17:c4:6e:15:c9:e9:6f:b5:0d:f0:
                    5c:47:e9:92:f7:fd:13:c7:6d:e4:29:06:b5:8d:88:
                    64:f5:fc:7a:c3:4d:88:40:31:15:64:be:ed:a2:27:
                    b5:0d:5d:1e:39:d6:62:a6:0a:d2:ec:e0:04:10:07:
                    ea:03:dc:f9:96:bf:3d:ad:fb:24:30:f3:ff:12:18:
                    fa:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:90:57:BD:3B:A3:99:0A:12:7E:BD:BE:62:48:E3:FC:33:EA:2E:FB
            X509v3 Authority Key Identifier:
                keyid:12:9E:ED:E4:39:F7:20:16:FF:6D:58:7A:F0:4D:37:68:9F:26:C2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GcTS8nxoGdHE23A4FX9hNCdVdnmx6L5SK2kCdetqfX6T/0/129EEDE439F72016FF6D587AF04D37689F26C2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/129EEDE439F72016FF6D587AF04D37689F26C2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GcTS8nxoGdHE23A4FX9hNCdVdnmx6L5SK2kCdetqfX6T/0/129EEDE439F72016FF6D587AF04D37689F26C2E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:8d:8b:3a:17:79:13:41:a6:25:4c:9d:8b:12:71:6c:3c:9a:
         41:c1:27:a9:ea:f2:7e:b2:e8:74:fe:9e:43:56:61:26:cb:79:
         b4:4b:1f:2a:5a:f4:c6:c2:c3:59:a0:32:5a:4d:57:ed:65:70:
         e3:e3:ab:41:12:8e:a4:49:10:99:dd:4d:6e:72:4a:01:05:e7:
         d9:a7:12:a0:fd:15:58:65:77:47:62:44:33:88:c3:d4:fa:f7:
         17:99:99:4a:82:80:fe:bf:ff:48:d1:f3:31:43:d1:b5:2c:00:
         4e:2a:60:92:48:56:ae:8c:98:bc:e6:07:7b:1d:55:3a:48:5d:
         d9:b8:dd:50:23:e8:99:ea:89:4e:a2:79:c9:0c:f5:66:10:49:
         2d:ee:54:14:57:da:a9:82:d5:da:1d:b6:ce:01:20:80:98:fd:
         b9:cd:2e:a6:70:2a:4e:62:ce:7c:15:38:db:98:b1:d6:0f:9f:
         e5:1d:71:b9:35:bf:c7:80:48:b2:1f:30:fe:c3:4f:81:8b:df:
         ac:d9:04:ed:00:5a:97:01:4b:00:ca:49:f0:7b:7f:af:8d:03:
         08:2c:fb:83:80:da:a2:2c:9d:95:c2:f4:3f:43:b8:22:92:d7:
         9b:67:be:38:25:12:18:71:63:be:08:2d:ab:e4:3f:70:4b:59:
         f9:0d:32:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSZ86nhG2ml6+745fC8o6SyMVjUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI5RUVERTQzOUY3MjAxNkZGNkQ1ODdBRjA0RDM3Njg5
RjI2QzJFNDAeFw0yNTA0MjUwNTA4MzBaFw0yNTA0MjYwNzU4MzBaMDMxMTAvBgNV
BAMTKDg4OTA1N0JEM0JBMzk5MEExMjdFQkRCRTYyNDhFM0ZDMzNFQTJFRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvppXhsWSP9yGl70AR825AzMqU
vvV0In3m0k2ZVyfVkeYC9/R+O0bYo8qxMtYRun/seh2ZezQIR3xJMBh2qi8mciQ4
w8OSlK5htDvmchQtECRjwEEMoVpUdQODapse4nbF96qwadj51thYUnfgQ5IrXnYJ
zOR8w9LqGtc1a/+Gj/LV6F3iyM18vLN9HjjY4R45oud7Fu3Yu85l7vRcM0SYtOIB
in6HDnlvnSUDFE78Y4sRGVBJFxqyF8RuFcnpb7UN8FxH6ZL3/RPHbeQpBrWNiGT1
/HrDTYhAMRVkvu2iJ7UNXR451mKmCtLs4AQQB+oD3PmWvz2t+yQw8/8SGPoZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUiJBXvTujmQoSfr2+Ykjj/DPqLvswHwYDVR0j
BBgwFoAUEp7t5Dn3IBb/bVh68E03aJ8mwuQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2NUUzhueG9HZEhFMjNBNEZYOWhOQ2RWZG5teDZMNVNLMmtDZGV0cWZY
NlQvMC8xMjlFRURFNDM5RjcyMDE2RkY2RDU4N0FGMDREMzc2ODlGMjZDMkU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyOUVFREU0MzlGNzIwMTZG
RjZENTg3QUYwNEQzNzY4OUYyNkMyRTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R2NUUzhueG9HZEhFMjNBNEZYOWhOQ2RWZG5teDZMNVNLMmtDZGV0cWZYNlQvMC8x
MjlFRURFNDM5RjcyMDE2RkY2RDU4N0FGMDREMzc2ODlGMjZDMkU0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbo2LOhd5E0GmJUydixJxbDyaQcEnqeryfrLodP6eQ1ZhJst5tEsfKlr0xsLD
WaAyWk1X7WVw4+OrQRKOpEkQmd1NbnJKAQXn2acSoP0VWGV3R2JEM4jD1Pr3F5mZ
SoKA/r//SNHzMUPRtSwATipgkkhWroyYvOYHex1VOkhd2bjdUCPomeqJTqJ5yQz1
ZhBJLe5UFFfaqYLV2h22zgEggJj9uc0upnAqTmLOfBU425ix1g+f5R1xuTW/x4BI
sh8w/sNPgYvfrNkE7QBalwFLAMpJ8Ht/r40DCCz7g4DaoiydlcL0P0O4IpLXm2e+
OCUSGHFjvggtq+Q/cEtZ+Q0yCg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:08 2025 by rpki-client on console.sobornost.net