Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.mft
File:                     D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.mft (raw, json)
Hash identifier:          AMAw+hwDwALVuCSVdrDOvq2MkjC3nXXohw6Iwrehirs=
Subject key identifier:   00:0B:72:3D:6E:71:2C:51:B3:B4:25:1D:49:63:11:C4:8C:8F:E2:A0
Authority key identifier: D2:AE:FA:F2:B7:60:F9:72:62:D0:C9:4D:C2:7C:0D:3B:1B:7D:B5:C9
Certificate issuer:       /CN=D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9
Certificate serial:       58B82CE6F9557EFDC531937BEC61499852A47769
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.mft
Manifest number:          03
Signing time:             Thu 24 Apr 2025 16:27:59 +0000
Manifest this update:     Thu 24 Apr 2025 16:22:59 +0000
Manifest next update:     Fri 25 Apr 2025 17:28:59 +0000
Files and hashes:         1: 323830343a353564633a613030303a3a2f33352d3335203d3e20323637393631.roa (hash: hkqBv3210qV6pCEk/nJEnlZ98REa6TLWJsMj1Vi7go4=)
                          2: 323830343a353564633a3a2f33352d3335203d3e20323637393631.roa (hash: 3crBFa6P90NHMtldS9jNh0lwXB6CMIoHVZTrwsYuPLw=)
                          3: 323830343a353564633a383030303a3a2f33352d3335203d3e20323637393631.roa (hash: jsrf2sCSc6+v0JaQHhgyTSSQzGyfXt8L59DUCCDaEuA=)
                          4: 323830343a353564633a633030303a3a2f33352d3335203d3e20323637393631.roa (hash: ZmwnOMLhd+Jaeo16L7Fpf0drcWlJ99jv/TlD/TJd/0g=)
                          5: 323830343a353564633a343030303a3a2f33352d3335203d3e20323637393631.roa (hash: bkaj0RwKDwRh1Zie7SkeEu+86AVYTfCcyblAQLFbK3A=)
                          6: 323830343a353564633a363030303a3a2f33352d3335203d3e20323637393631.roa (hash: Uz9IlosHV+7Kr3pOc3jzVI06MmFbvtknLe7vi0fu6oA=)
                          7: 34352e3136352e3136302e302f32342d3234203d3e20323637393631.roa (hash: glY5avmtaczh644B8sTSQdzC5CEnmx4hImgp5JNM7RU=)
                          8: D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.crl (hash: LefHZBWugeWB1k9D3rWxmruZSm60PB7kN5bSWozyfR4=)
                          9: 34352e3136352e3136312e302f32342d3234203d3e20323637393631.roa (hash: Xz2m8plqdlDjvjxmsIv9D4BNLud3baqK19H+T5GtHi4=)
                          10: 323830343a353564633a653030303a3a2f33352d3335203d3e20323637393631.roa (hash: QGF7+RrfuQ2BpKqPQ9wYDQYHpwyLI65qm204RPmWcdA=)
                          11: 323830343a353564633a323030303a3a2f33352d3335203d3e20323637393631.roa (hash: jdUjAtisss+hEA48WITvuQMO2sCMXTkj4zen6QDqfcg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 17:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b8:2c:e6:f9:55:7e:fd:c5:31:93:7b:ec:61:49:98:52:a4:77:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9
        Validity
            Not Before: Apr 24 16:22:59 2025 GMT
            Not After : Apr 25 17:28:59 2025 GMT
        Subject: CN=000B723D6E712C51B3B4251D496311C48C8FE2A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9c:44:75:98:04:92:6f:22:40:22:44:24:6a:
                    a3:4e:4a:82:9d:22:85:3c:f0:fa:f2:d1:c4:f6:c6:
                    a0:e4:9d:6f:e9:f3:47:20:d9:ba:e1:a4:ca:9e:5a:
                    a0:e3:17:af:fb:a8:ba:8e:aa:f6:4d:3c:bf:f4:5d:
                    68:88:42:30:d0:4f:e9:e6:fc:99:d0:a3:76:73:9a:
                    cf:d9:53:8e:21:de:0f:d2:e9:15:7f:ba:7c:d8:50:
                    2c:bb:b4:63:b1:fe:36:82:50:3c:eb:e2:29:be:a2:
                    c5:d0:48:b0:bb:be:37:18:c6:9e:c2:f5:b5:04:53:
                    e5:4d:5f:1f:b3:0a:1a:14:f3:81:c5:fb:e6:89:ae:
                    3c:d3:49:01:fd:f7:a9:12:3c:bc:f7:07:4b:d9:25:
                    8e:c4:67:51:46:22:e1:0e:3b:9d:24:cf:ad:e6:4b:
                    d4:ef:7d:ba:61:84:c8:34:24:31:98:c5:00:a0:f5:
                    51:38:3f:57:d9:26:0c:0c:2d:e3:1b:5c:4a:00:35:
                    e1:56:f7:a3:fc:ea:c5:c0:05:4b:46:0d:73:1b:e9:
                    53:94:77:3c:66:d6:65:10:b1:25:5e:eb:18:13:00:
                    a7:9f:cb:5c:fa:c8:01:0a:0c:1f:0f:fa:d9:e5:fa:
                    1d:3f:20:62:81:30:95:3e:1d:bd:ce:b4:a6:4d:6b:
                    3f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0B:72:3D:6E:71:2C:51:B3:B4:25:1D:49:63:11:C4:8C:8F:E2:A0
            X509v3 Authority Key Identifier:
                keyid:D2:AE:FA:F2:B7:60:F9:72:62:D0:C9:4D:C2:7C:0D:3B:1B:7D:B5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/D2AEFAF2B760F97262D0C94DC27C0D3B1B7DB5C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:24:60:77:ce:ea:16:62:20:23:5b:e8:83:49:29:d3:36:a8:
         11:a7:65:1f:7e:25:48:28:4c:a6:40:2d:73:59:6c:82:af:c4:
         7b:8d:5c:f8:ae:e4:38:e3:50:4c:e1:f9:fd:9e:3e:f3:22:c6:
         25:ed:81:1e:d5:c7:e9:fc:f3:06:39:f7:cd:9a:5d:0b:67:43:
         dc:dd:33:a6:e9:53:a6:b4:8b:a3:c6:cc:c7:a7:23:cc:5a:40:
         d5:fa:73:f3:61:9e:6e:80:28:6b:03:3a:7d:af:b9:81:96:f2:
         e1:01:c8:da:e2:3c:f7:ef:f8:a0:e2:d9:55:0e:00:e2:9c:75:
         8d:1d:ee:af:8e:b2:13:99:e5:a0:95:ee:5c:ee:bc:43:8a:aa:
         a9:25:97:2b:ff:75:f1:b4:c3:d3:91:7e:0a:b3:38:93:f6:db:
         db:84:ab:2f:66:d6:72:f3:2a:e7:27:02:69:a5:f5:ab:89:a5:
         17:2b:a1:4b:d8:18:27:30:47:db:e6:9c:7f:75:3e:af:d1:53:
         b1:61:2d:39:f3:99:e7:0e:8b:dd:23:ca:d2:f0:1d:6f:b8:77:
         df:96:fa:39:15:1d:69:8b:ba:d4:72:b4:54:18:2e:55:38:a8:
         05:d1:e8:6e:b9:3b:08:d3:44:23:f0:90:05:36:c9:03:30:29:
         e4:6e:44:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:57 2025 by rpki-client on console.sobornost.net