Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/64EE650E05CE4E93FFE2F41550939D5F0A226CA6.mft
File:                     64EE650E05CE4E93FFE2F41550939D5F0A226CA6.mft (raw, json)
Hash identifier:          b+GQ0peASWT61DAGChm5Dv/hUKsn+fxveR51Sx0JG+Q=
Subject key identifier:   E5:F6:0A:08:F7:5C:D8:A7:E5:8E:33:2D:D0:1C:64:FF:E5:4F:C0:4F
Authority key identifier: 64:EE:65:0E:05:CE:4E:93:FF:E2:F4:15:50:93:9D:5F:0A:22:6C:A6
Certificate issuer:       /CN=64EE650E05CE4E93FFE2F41550939D5F0A226CA6
Certificate serial:       71A7A8A7F3EB213C910FC7E79F0D06AD55144167
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EE650E05CE4E93FFE2F41550939D5F0A226CA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/64EE650E05CE4E93FFE2F41550939D5F0A226CA6.mft
Manifest number:          31
Signing time:             Mon 28 Apr 2025 13:19:14 +0000
Manifest this update:     Mon 28 Apr 2025 13:14:14 +0000
Manifest next update:     Tue 29 Apr 2025 16:23:14 +0000
Files and hashes:         1: 64EE650E05CE4E93FFE2F41550939D5F0A226CA6.crl (hash: WVA3l35jPPS1xQ6dYRFfpXqlQv+NuqayCBiIr7m8nMA=)
                          2: 323830343a386431383a3a2f33322d3334203d3e20323733333334.roa (hash: v1l8kykWgyuMR38m7dnDQLL72F3CH1OoLym73QE7Cyk=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/64EE650E05CE4E93FFE2F41550939D5F0A226CA6.crl
                          rsync://rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/64EE650E05CE4E93FFE2F41550939D5F0A226CA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EE650E05CE4E93FFE2F41550939D5F0A226CA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a7:a8:a7:f3:eb:21:3c:91:0f:c7:e7:9f:0d:06:ad:55:14:41:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64EE650E05CE4E93FFE2F41550939D5F0A226CA6
        Validity
            Not Before: Apr 28 13:14:14 2025 GMT
            Not After : Apr 29 16:23:14 2025 GMT
        Subject: CN=E5F60A08F75CD8A7E58E332DD01C64FFE54FC04F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4b:09:22:7f:a0:d7:df:76:e1:d4:ac:ec:35:
                    0f:95:a2:22:b5:d8:dc:72:b2:fd:7d:33:f7:55:5d:
                    9a:97:0c:65:25:7e:b5:f5:59:ae:3f:de:83:8a:15:
                    8c:34:e6:44:5a:b4:d9:f7:67:27:98:06:16:6f:99:
                    6b:a9:a3:eb:57:68:57:f6:01:aa:f8:a3:c7:00:5d:
                    8c:aa:dd:86:ec:12:7b:24:89:7c:25:0f:2d:b4:a4:
                    93:a0:12:bd:33:10:0c:55:5b:9c:fe:6a:81:a8:91:
                    35:c9:71:63:d4:85:a1:99:88:a3:86:ad:6d:51:0d:
                    08:a7:49:89:cc:73:62:7b:f0:75:41:ec:7c:a8:ce:
                    98:66:25:9c:5a:67:07:86:38:8c:46:dd:02:73:29:
                    70:6d:ac:6f:40:af:80:83:5c:c6:5d:99:7d:ae:d8:
                    59:be:32:73:d0:6b:2d:ba:9f:bc:2f:13:01:76:0c:
                    c9:85:42:02:19:4a:4d:6d:33:55:dd:0f:c2:66:37:
                    ed:e4:02:2b:2a:ad:f7:98:89:04:67:e9:82:5f:11:
                    84:e6:a6:19:7d:7d:97:97:7f:7a:c8:f2:9c:70:34:
                    44:a4:42:1f:d5:73:e4:d0:03:90:63:76:ad:51:d1:
                    ad:10:e7:71:13:bc:a0:13:12:4c:69:b7:da:0b:96:
                    5b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F6:0A:08:F7:5C:D8:A7:E5:8E:33:2D:D0:1C:64:FF:E5:4F:C0:4F
            X509v3 Authority Key Identifier:
                keyid:64:EE:65:0E:05:CE:4E:93:FF:E2:F4:15:50:93:9D:5F:0A:22:6C:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/64EE650E05CE4E93FFE2F41550939D5F0A226CA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EE650E05CE4E93FFE2F41550939D5F0A226CA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/64EE650E05CE4E93FFE2F41550939D5F0A226CA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:dd:a5:b7:1d:79:08:6c:ec:de:e4:a7:18:48:c7:f9:fc:61:
         da:ce:8e:10:dc:65:8b:50:42:2a:6e:23:27:67:d0:c9:5c:5b:
         49:2d:d7:9d:45:ee:d0:8b:dc:fa:83:3b:1d:80:e5:66:0f:4a:
         65:5c:63:3d:b1:3e:a7:26:cb:8c:ce:3c:64:01:a6:5c:c6:27:
         e4:66:87:25:7c:58:0e:d9:a8:3f:0a:24:0b:21:b6:aa:ac:7c:
         4f:11:1e:16:ac:0d:fd:73:dd:fe:f1:17:cb:eb:bd:90:b5:33:
         dc:7d:15:25:bd:ee:c3:f9:75:b8:c4:0d:8b:a6:58:de:96:0b:
         9a:c5:57:92:51:ae:31:d3:86:9d:36:88:50:9e:40:9f:f3:18:
         3e:57:c3:bd:6e:85:d7:4b:90:7b:30:87:9f:96:55:d6:65:e4:
         1f:48:66:69:ca:4a:ce:d2:de:34:97:dc:7a:6f:82:06:b1:99:
         86:5a:43:db:5b:8e:29:84:f4:9a:7b:c1:64:bb:41:c7:7a:04:
         55:f1:c3:c9:5c:af:04:9c:68:62:aa:df:92:12:b6:84:67:70:
         8f:54:42:c6:c1:ea:bf:3b:b5:6b:ca:3a:e5:18:b8:26:8e:ec:
         a9:d2:aa:fb:6e:fd:3f:58:32:9c:f4:55:9d:48:ad:c9:81:e4:
         b0:51:c3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:15 2025 by rpki-client on console.sobornost.net