Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
File:                     45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft (raw, json)
Hash identifier:          85yDItQSd9ChhP9L9av6s8eG0vkUwijSH27iG6Xw2zo=
Subject key identifier:   20:87:3A:10:D7:5E:70:7D:B9:C0:33:54:3F:29:BB:4D:AA:6C:98:1D
Authority key identifier: 45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6
Certificate issuer:       /CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
Certificate serial:       4DE6919E63AF5691D1E67F6F245118548675FCA8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
Manifest number:          0202
Signing time:             Thu 24 Apr 2025 18:24:38 +0000
Manifest this update:     Thu 24 Apr 2025 18:19:38 +0000
Manifest next update:     Fri 25 Apr 2025 19:52:38 +0000
Files and hashes:         1: 34352e3137312e31362e302f32332d3233203d3e20323638313831.roa (hash: C2Urw1CANF3BYR4oYboPvzubkyeHTC4GKOwLeRX1lQY=)
                          2: 34352e3137312e31382e302f32342d3234203d3e20323638313831.roa (hash: 1GNUZSNPHTUgvUkppz4F7t0eGoRsad2SmjP7A9wBQ4U=)
                          3: 34352e3137312e31372e302f32342d3234203d3e20323638313831.roa (hash: Nn6jD2pUfzWh45ebiPgn3qZcw/WBvZhUPEAdVETzjO8=)
                          4: 45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl (hash: 5+FILP6JtKtOgzEOW0dg8NGg7QreasUeWD/Si3ooCms=)
                          5: 323830343a353934383a3a2f33322d3332203d3e20323638313831.roa (hash: jFOKmZdUzrqB7DuIgqBanfryUkoDH0GXcs2RL/VGiII=)
                          6: 34352e3137312e31362e302f32342d3234203d3e20323638313831.roa (hash: sqv4PJRsVf1fbuPiqi5aE4THOHXbUo9nkuAmPfa1rXE=)
                          7: 34352e3137312e31392e302f32342d3234203d3e20323638313831.roa (hash: ocNiHrf1d9Z7plIcCmYweeZ2niT6wSQyBuY0x2/edlw=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl
                          rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 19:52:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e6:91:9e:63:af:56:91:d1:e6:7f:6f:24:51:18:54:86:75:fc:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
        Validity
            Not Before: Apr 24 18:19:38 2025 GMT
            Not After : Apr 25 19:52:38 2025 GMT
        Subject: CN=20873A10D75E707DB9C033543F29BB4DAA6C981D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:48:51:9f:c8:6b:d3:06:d2:f2:62:98:f5:b0:
                    6a:2f:9a:08:5b:20:c0:d8:df:c2:aa:08:1d:ae:01:
                    6d:66:42:38:4c:59:c3:31:e1:32:9a:2e:3f:af:d9:
                    03:b5:ed:bd:ff:4e:ff:a0:fb:30:31:4e:25:e1:eb:
                    18:29:5f:7e:92:47:b7:7c:5c:8d:f7:1c:0a:4f:65:
                    1d:a9:01:1a:90:81:3d:88:8e:8d:8d:3a:a3:bb:3a:
                    94:d5:ca:57:a6:1a:0c:8a:f4:7c:93:1e:fa:f3:08:
                    30:05:98:9e:0a:84:32:04:55:52:ba:a5:0c:74:b0:
                    41:3a:09:21:f6:7d:0a:b0:b9:75:89:d5:c5:fd:b0:
                    e9:e7:3a:42:6f:05:89:3d:96:35:19:b8:bd:28:c9:
                    3a:60:a5:a7:ca:ac:01:85:23:18:50:b6:96:78:62:
                    87:1e:9e:2c:14:cd:09:86:61:88:7c:a5:42:6c:3d:
                    ed:0a:34:6e:6a:11:e8:40:4d:2d:fa:c8:b3:2d:80:
                    71:d8:8f:15:87:93:81:68:05:7e:c6:49:77:02:f3:
                    2c:cf:c5:5b:de:50:db:e1:1e:da:f8:ee:42:51:4e:
                    47:8d:1c:fa:77:ac:3a:5c:19:22:ff:75:e5:fc:cd:
                    52:f4:59:ac:f5:da:4b:64:e0:3e:3d:74:c8:46:b4:
                    86:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:87:3A:10:D7:5E:70:7D:B9:C0:33:54:3F:29:BB:4D:AA:6C:98:1D
            X509v3 Authority Key Identifier:
                keyid:45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:20:d0:21:f8:1d:46:90:61:81:d3:20:3d:6d:aa:d9:f9:93:
         97:0a:6a:76:15:0b:7b:41:dd:8a:fd:1e:06:93:5e:66:fc:21:
         44:61:f8:6f:f7:ba:9f:a8:16:26:3f:8d:36:2f:a3:96:bf:b8:
         be:cd:15:42:11:9f:33:2c:97:fd:ab:06:2e:cd:38:8e:af:e1:
         0b:61:07:89:ad:08:ae:c2:4a:16:d9:97:9f:07:70:3e:81:37:
         89:07:ac:9b:33:9e:9a:6c:4b:1f:52:23:ea:f1:80:25:7b:1f:
         8d:91:f9:e7:98:a2:8a:9a:ab:92:87:98:b1:d5:34:5f:ed:ba:
         88:b5:a8:05:a9:05:08:04:df:25:84:8d:7e:fd:2a:b8:ab:6c:
         92:8a:88:93:60:e1:2c:63:a1:cf:ae:13:bf:91:5f:04:9d:99:
         47:d1:39:49:9f:94:20:c5:8d:02:c5:bf:e2:45:7e:d1:40:33:
         a1:2e:16:1d:d4:33:b9:69:01:79:20:e2:99:13:ec:2c:b5:af:
         5f:f6:5a:6c:4f:ed:2d:d7:84:4f:ea:b4:8b:1b:73:c5:62:c3:
         8c:2c:10:47:af:ef:be:3f:54:59:45:76:be:8c:8f:f8:9b:1f:
         97:a8:8e:20:44:22:c9:54:0d:d2:d8:d7:90:63:66:9f:90:a6:
         05:6b:f3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:45 2025 by rpki-client on console.sobornost.net