Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft
File:                     CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft (raw, json)
Hash identifier:          HTiZfxHOY6uXtSbrLMnNQKDYYoN6vb5fvCWoKBxyrxQ=
Subject key identifier:   53:0D:94:45:00:0F:65:50:BE:6E:49:B6:23:00:43:61:53:4F:B8:54
Authority key identifier: CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4
Certificate issuer:       /CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4
Certificate serial:       6C8A44EDBB5CDC4F3F281D656507EAA78326F18D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft
Manifest number:          0204
Signing time:             Fri 25 Apr 2025 07:57:09 +0000
Manifest this update:     Fri 25 Apr 2025 07:52:09 +0000
Manifest next update:     Sat 26 Apr 2025 08:12:09 +0000
Files and hashes:         1: 34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa (hash: Bhu/eGNOOWFc2ep8aUehLXvNs4ymREZ2pdLGTh+BKL4=)
                          2: CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl (hash: AVyMMQLXvKqmsHmWAJabNRxCWqS968+kiH2FQaer8wY=)
                          3: 323830343a346262303a3a2f33322d3438203d3e20323637333234.roa (hash: VJdH/xHpD6ecg3kwn9yL7bslKKlhAKJoZBYlUI+LMxk=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl
                          rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 08:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:8a:44:ed:bb:5c:dc:4f:3f:28:1d:65:65:07:ea:a7:83:26:f1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4
        Validity
            Not Before: Apr 25 07:52:09 2025 GMT
            Not After : Apr 26 08:12:09 2025 GMT
        Subject: CN=530D9445000F6550BE6E49B623004361534FB854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cc:e6:27:f1:66:4a:af:e3:15:91:80:ff:12:
                    75:ab:39:01:a9:6c:15:15:3a:7b:07:ec:e1:6c:5c:
                    de:de:e9:3a:f4:8c:a7:f9:94:05:b6:18:a4:8b:44:
                    b2:58:2f:80:61:32:37:d1:a5:10:8c:f9:4f:76:10:
                    e3:1d:10:b4:bb:7c:b1:01:9b:21:9e:a8:96:fc:71:
                    07:8c:91:e7:95:36:19:d8:26:c7:69:e8:0b:82:16:
                    7b:8e:82:04:02:2c:e2:c4:99:9e:8d:b4:03:54:c6:
                    ee:a6:44:4b:1d:93:9f:e4:f4:bb:af:73:85:cf:47:
                    68:89:3f:ca:9a:f9:c8:b1:a3:8d:95:b9:f6:ab:11:
                    b5:38:dc:9e:3a:b8:12:7d:e3:1d:0a:6c:e7:ed:07:
                    8a:51:e0:64:d6:c5:08:68:41:ce:c6:5a:f1:c7:d1:
                    43:28:71:93:a0:6d:79:dd:35:fa:f5:82:96:80:c9:
                    d5:e0:58:db:45:58:a7:48:83:8a:9c:2d:06:50:15:
                    1f:d2:e0:12:83:e0:37:5f:e0:cb:e2:c1:6e:b7:95:
                    0f:01:21:2c:1c:dc:40:ca:de:9c:fc:83:83:2e:4e:
                    9c:36:35:6c:5f:5e:9e:c5:a0:36:6d:6e:e5:2a:5f:
                    35:da:86:56:f8:36:41:6d:42:0b:6d:7b:18:a1:9a:
                    62:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0D:94:45:00:0F:65:50:BE:6E:49:B6:23:00:43:61:53:4F:B8:54
            X509v3 Authority Key Identifier:
                keyid:CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a0:5b:32:0b:66:ca:7b:a0:ab:88:ab:f1:82:84:fa:98:85:
         ee:a1:1d:21:6f:df:71:1c:aa:71:8e:f3:b9:9c:25:1b:a8:90:
         67:a4:58:ae:5e:42:48:72:e2:c8:9e:7a:d1:8a:6c:9b:e3:e8:
         b5:82:73:d5:99:be:38:b9:29:08:a3:89:d5:f5:89:67:04:5e:
         67:83:63:d0:23:c7:72:4e:1b:86:54:fd:96:eb:7d:c4:52:93:
         04:d3:34:86:eb:33:71:1c:62:fa:7a:52:cf:87:3a:af:6c:23:
         ca:73:40:40:4e:92:9d:b0:0a:c7:67:12:cd:88:21:d7:aa:3b:
         4c:d9:ee:48:aa:66:3b:66:b6:ce:45:db:fb:0b:a8:a0:09:31:
         41:12:88:c6:a9:b6:8f:bc:5e:6d:8e:82:aa:db:11:18:da:b8:
         fe:50:32:3b:39:90:af:54:85:16:8f:f2:50:91:5f:82:7d:b8:
         8c:30:b3:50:8a:89:b7:55:4e:c9:75:4f:09:18:6b:6d:d3:9e:
         f8:bb:52:b7:92:7c:65:96:49:4f:f3:0f:3e:e9:32:3a:ec:82:
         2b:59:17:4c:3e:a3:fd:2e:8c:87:98:a2:72:27:61:8c:d7:1e:
         bc:d3:e1:5e:f2:b9:1e:71:26:4b:a6:0b:bb:37:43:8b:dc:32:
         5b:22:52:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:11 2025 by rpki-client on console.sobornost.net