Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft
File:                     AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft (raw, json)
Hash identifier:          XUhx+AguIMSjyfMppeFYDT7AxruZykDsGIHYkHh/M88=
Subject key identifier:   7E:AB:2F:37:82:08:DA:35:5D:E5:95:BF:26:94:D1:A3:37:E0:BF:5D
Authority key identifier: AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A
Certificate issuer:       /CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A
Certificate serial:       2AACD9B97B711AA34F6404F2A302F25183649B9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft
Manifest number:          0207
Signing time:             Sun 27 Apr 2025 16:59:53 +0000
Manifest this update:     Sun 27 Apr 2025 16:54:53 +0000
Manifest next update:     Mon 28 Apr 2025 17:48:53 +0000
Files and hashes:         1: 323830343a346563343a3a2f33322d3438203d3e20323638323831.roa (hash: ee5l23fWTv1/lWAMo2GfCZn3RRz28vPRce7gjAH3vSM=)
                          2: AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl (hash: zFC0Re+04q3W/xZ5vVDR4kZh4lpRhx6cIwZ1LqrG0Kg=)
                          3: 34352e3233372e3134302e302f32322d3234203d3e20323638323831.roa (hash: 741FE6q+LhbUbEXCT3YEJH9sL+8gSKDI67qh5Q3QkQ4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl
                          rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 17:48:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ac:d9:b9:7b:71:1a:a3:4f:64:04:f2:a3:02:f2:51:83:64:9b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A
        Validity
            Not Before: Apr 27 16:54:53 2025 GMT
            Not After : Apr 28 17:48:53 2025 GMT
        Subject: CN=7EAB2F378208DA355DE595BF2694D1A337E0BF5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9f:2b:56:df:e4:23:ef:9f:31:ef:cd:7a:00:
                    3c:70:be:94:a2:f1:a0:c6:a0:ae:36:38:0c:6f:cf:
                    d3:59:ec:48:9c:17:b9:82:4d:9c:ff:b3:98:7c:61:
                    22:5b:4c:2b:8d:d4:bc:bd:30:cd:1a:82:bc:4b:ae:
                    2e:97:7f:ed:a3:b3:48:81:da:a8:b5:da:31:c5:72:
                    98:46:d4:70:e2:92:c9:e3:13:4d:f4:fa:67:29:9d:
                    cf:66:0d:94:58:4e:af:52:52:81:b7:ad:2d:53:cd:
                    13:6e:2f:f3:54:95:51:19:78:c7:c2:50:24:da:aa:
                    52:b5:98:04:af:eb:90:2a:1e:64:ca:25:24:5d:61:
                    bb:83:a0:46:04:8e:57:71:df:8c:96:72:35:fd:73:
                    19:d8:ab:e5:49:b1:b0:62:69:67:7d:64:49:ad:33:
                    09:73:82:42:97:62:a0:57:9d:be:fd:6f:0e:6b:f2:
                    4f:51:f5:51:ed:c2:0c:7f:97:c4:4a:8c:47:26:f7:
                    36:b1:95:da:8e:d0:8b:5d:7d:dd:05:05:e8:3c:78:
                    62:2d:4f:4e:4a:c1:61:22:08:4f:4a:d9:0c:bc:a6:
                    f6:45:03:f2:c8:e7:85:50:3e:39:59:36:ec:17:0f:
                    89:76:33:7e:95:0e:a2:83:9a:e9:b0:bc:b9:a9:16:
                    a0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AB:2F:37:82:08:DA:35:5D:E5:95:BF:26:94:D1:A3:37:E0:BF:5D
            X509v3 Authority Key Identifier:
                keyid:AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f4:e1:8e:06:0c:ba:4d:29:6d:aa:9f:46:03:f4:f2:d6:4b:
         44:77:5b:3d:f1:51:f0:f7:3e:6a:fe:c4:e9:6f:5f:f3:f7:6f:
         93:3f:e7:5e:3c:43:3b:d3:b1:41:c1:36:cc:65:19:eb:c0:2f:
         8f:c0:1a:b4:d0:c1:9f:75:e1:6e:ec:6f:43:c5:3e:80:ae:a6:
         2b:7f:27:a1:b2:21:47:82:eb:01:3a:5d:35:af:0a:78:66:36:
         93:37:fe:b3:8b:84:51:67:90:dc:49:85:da:21:91:5b:78:e9:
         64:0a:21:09:43:a9:b8:74:98:09:4a:2c:c2:20:26:3a:75:9d:
         82:49:c8:ab:c2:50:c3:4f:17:f1:00:b0:02:a5:64:66:c2:a7:
         1f:15:dd:d4:1c:7c:41:79:ed:7b:ed:59:b2:28:bf:cb:38:86:
         e3:f2:47:a0:b3:90:5a:5a:d6:a7:e4:5e:b2:d2:b7:3c:6e:44:
         21:b2:c6:4a:b1:48:35:96:75:80:55:fe:5c:e5:74:b7:2a:3d:
         f1:df:b5:8d:58:17:96:8b:c4:c9:ea:69:84:e1:da:84:fc:16:
         e7:cc:eb:49:0e:70:82:c5:c3:10:0a:00:5e:8c:f4:f2:69:b1:
         35:c1:cd:06:32:11:02:c6:06:9c:bc:78:f9:72:66:66:54:f8:
         88:6a:2d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:18 2025 by rpki-client on console.sobornost.net