Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.mft
File:                     5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.mft (raw, json)
Hash identifier:          /IivFjzINqmLAlkO9/ygzQSCWjn8AhK1+bMwEkI4gr8=
Subject key identifier:   4D:70:44:E3:29:E9:AE:43:FD:20:B2:8B:55:C1:11:58:8F:D5:C1:31
Authority key identifier: 5F:A9:2D:08:2A:D8:BD:E2:E6:BF:B7:90:DA:3F:33:25:9A:D5:3F:0C
Certificate issuer:       /CN=5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C
Certificate serial:       68F4342C8195D751C451EA793CF2593414804C49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.mft
Manifest number:          0209
Signing time:             Sun 27 Apr 2025 07:45:13 +0000
Manifest this update:     Sun 27 Apr 2025 07:40:13 +0000
Manifest next update:     Mon 28 Apr 2025 08:05:13 +0000
Files and hashes:         1: 3139312e3234312e3136302e302f32312d3332203d3e203532393034.roa (hash: CkGv2W1wQmwIX6WxUgizF8ZQ1ADx3LtR8oN2aj7dYos=)
                          2: 323830343a313136383a3a2f33322d313238203d3e203532393034.roa (hash: noKRj1Eb47X30XeivmJwMyI/NGeWMDCIBPtcYmudZ0k=)
                          3: 5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.crl (hash: 4O7V5Rj7+t+Yv14j8j7L7SX7+HKKJqSAR5urH7pWUBM=)
                          4: 3137372e31312e3138342e302f32312d3332203d3e203532393034.roa (hash: APqqRMUHA7oyqYSRxpcztfLH2YJTNOmX/bbMAPZg6Ls=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.crl
                          rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f4:34:2c:81:95:d7:51:c4:51:ea:79:3c:f2:59:34:14:80:4c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C
        Validity
            Not Before: Apr 27 07:40:13 2025 GMT
            Not After : Apr 28 08:05:13 2025 GMT
        Subject: CN=4D7044E329E9AE43FD20B28B55C111588FD5C131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:06:c0:d8:9f:cc:d0:31:cd:3e:8f:66:b3:71:
                    6b:bd:8f:3f:38:82:27:ca:2c:1a:e8:95:7c:a4:e1:
                    d0:f6:73:4e:2c:db:f3:e8:a8:ef:4a:c1:61:d7:0e:
                    ca:5a:33:00:84:e4:74:1b:3e:29:a2:a8:63:8d:1b:
                    a5:fb:c3:9b:14:f9:35:fe:e2:96:04:e6:8e:64:84:
                    eb:75:8d:3d:c4:3c:4e:a5:8b:b0:a9:6d:dd:61:c9:
                    57:2f:1d:14:7b:4b:13:14:91:4c:78:81:c7:92:a6:
                    25:28:54:f9:c2:22:73:ee:0f:c4:8d:5d:d7:71:ec:
                    e4:6a:97:d3:80:17:45:ab:e6:4a:de:c9:1f:f7:9f:
                    ed:4a:5f:8f:5d:68:76:e3:13:44:ae:ba:3d:fa:1b:
                    f3:c6:b9:f0:e6:0b:b4:71:49:58:cf:31:03:03:4e:
                    62:54:ee:77:26:4a:f1:0b:7c:22:0a:f5:92:42:82:
                    ad:30:0a:25:50:61:34:df:aa:3b:f2:a2:e0:90:a6:
                    26:39:80:ce:16:3c:3b:8c:7d:62:00:a3:a9:06:8a:
                    0b:b2:86:79:02:47:bb:44:ae:27:bf:b3:4a:52:40:
                    95:70:6e:92:07:74:da:bf:80:54:ef:24:c0:2b:8c:
                    1e:7b:68:bc:e6:87:7c:44:f3:75:ee:9f:a5:02:ee:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:70:44:E3:29:E9:AE:43:FD:20:B2:8B:55:C1:11:58:8F:D5:C1:31
            X509v3 Authority Key Identifier:
                keyid:5F:A9:2D:08:2A:D8:BD:E2:E6:BF:B7:90:DA:3F:33:25:9A:D5:3F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:c8:90:dc:09:3c:8b:94:ed:b0:e6:b0:ab:c3:24:cd:27:67:
         eb:67:db:c5:b1:1a:3d:6b:76:b0:43:b1:ac:bf:6f:75:12:3c:
         9c:f3:05:be:6f:8e:86:fd:f2:c0:7a:89:a5:03:61:4d:07:7c:
         90:b5:46:e9:07:86:62:4b:71:77:7f:58:f9:b4:cc:9e:a9:9e:
         52:92:35:f8:3f:1a:81:cf:06:75:ca:81:95:fa:e9:01:a7:c4:
         39:1c:b1:42:6e:da:c4:7d:c5:fa:2f:a8:da:86:d5:9e:7d:bd:
         99:29:4e:11:53:ac:a4:4c:d9:ba:8e:12:6c:ed:68:7c:a8:a0:
         b7:c8:5a:ee:59:ac:49:94:b3:5b:09:58:5b:ae:b9:eb:3f:28:
         05:3e:42:f6:f5:26:70:91:cb:fd:39:b0:56:88:d4:3f:05:c8:
         e5:07:46:60:87:94:db:48:57:07:11:a3:a5:55:0f:d5:01:fe:
         5f:f6:1f:34:06:3f:d4:47:3c:d6:b4:67:54:77:25:19:d6:62:
         8e:33:ba:4d:d1:39:2d:7d:13:43:0a:6f:4b:cc:79:a0:c5:f0:
         74:78:71:f5:3b:81:a0:69:0f:b0:4b:d3:5b:19:6e:98:5e:77:
         dc:27:64:ab:ca:a7:4d:a6:21:c2:18:59:d5:58:6e:61:30:e8:
         ff:79:d9:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaPQ0LIGV11HEUep5PPJZNBSATEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBOTJEMDgyQUQ4QkRFMkU2QkZCNzkwREEzRjMzMjU5
QUQ1M0YwQzAeFw0yNTA0MjcwNzQwMTNaFw0yNTA0MjgwODA1MTNaMDMxMTAvBgNV
BAMTKDRENzA0NEUzMjlFOUFFNDNGRDIwQjI4QjU1QzExMTU4OEZENUMxMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNBsDYn8zQMc0+j2azcWu9jz84
gifKLBrolXyk4dD2c04s2/PoqO9KwWHXDspaMwCE5HQbPimiqGONG6X7w5sU+TX+
4pYE5o5khOt1jT3EPE6li7Cpbd1hyVcvHRR7SxMUkUx4gceSpiUoVPnCInPuD8SN
Xddx7ORql9OAF0Wr5kreyR/3n+1KX49daHbjE0Suuj36G/PGufDmC7RxSVjPMQMD
TmJU7ncmSvELfCIK9ZJCgq0wCiVQYTTfqjvyouCQpiY5gM4WPDuMfWIAo6kGiguy
hnkCR7tErie/s0pSQJVwbpIHdNq/gFTvJMArjB57aLzmh3xE83Xun6UC7v7PAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUTXBE4ynprkP9ILKLVcERWI/VwTEwHwYDVR0j
BBgwFoAUX6ktCCrYveLmv7eQ2j8zJZrVPwwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3ZjTWszV3c2SmMyTHFoYk5mbmpuVjFad1piRHltZzNGeXhVb0pOUVJI
QXQvMS81RkE5MkQwODJBRDhCREUyRTZCRkI3OTBEQTNGMzMyNTlBRDUzRjBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGQTkyRDA4MkFEOEJERTJF
NkJGQjc5MERBM0YzMzI1OUFENTNGMEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R3ZjTWszV3c2SmMyTHFoYk5mbmpuVjFad1piRHltZzNGeXhVb0pOUVJIQXQvMS81
RkE5MkQwODJBRDhCREUyRTZCRkI3OTBEQTNGMzMyNTlBRDUzRjBDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFsiQ3Ak8i5TtsOawq8MkzSdn62fbxbEaPWt2sEOxrL9vdRI8nPMFvm+Ohv3y
wHqJpQNhTQd8kLVG6QeGYktxd39Y+bTMnqmeUpI1+D8agc8GdcqBlfrpAafEORyx
Qm7axH3F+i+o2obVnn29mSlOEVOspEzZuo4SbO1ofKigt8ha7lmsSZSzWwlYW665
6z8oBT5C9vUmcJHL/TmwVojUPwXI5QdGYIeU20hXBxGjpVUP1QH+X/YfNAY/1Ec8
1rRnVHclGdZijjO6TdE5LX0TQwpvS8x5oMXwdHhx9TuBoGkPsEvTWxlumF533Cdk
q8qnTaYhwhhZ1VhuYTDo/3nZxQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:55 2025 by rpki-client on console.sobornost.net