Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/FE39B00057FECCE0AC6B48381399AE27C177533F.mft
File:                     FE39B00057FECCE0AC6B48381399AE27C177533F.mft (raw, json)
Hash identifier:          E3Bcs/xRQ9lAdi4WAjcMBpTyI0UUK1I10n9v94Q4ZZg=
Subject key identifier:   83:72:E0:40:C0:3D:B7:CF:E7:CE:18:EC:0D:DB:EF:E1:BA:17:B5:16
Authority key identifier: FE:39:B0:00:57:FE:CC:E0:AC:6B:48:38:13:99:AE:27:C1:77:53:3F
Certificate issuer:       /CN=FE39B00057FECCE0AC6B48381399AE27C177533F
Certificate serial:       310DCF3339D84F0D045F2DE919B448E966DB9295
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE39B00057FECCE0AC6B48381399AE27C177533F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/FE39B00057FECCE0AC6B48381399AE27C177533F.mft
Manifest number:          34
Signing time:             Sun 27 Apr 2025 04:34:45 +0000
Manifest this update:     Sun 27 Apr 2025 04:29:45 +0000
Manifest next update:     Mon 28 Apr 2025 06:56:45 +0000
Files and hashes:         1: 323830343a393138383a3a2f33322d3332203d3e20323734363437.roa (hash: WGLHtQ2O8hTbWh2Qj8iJZ0HmwSz1hSc3TQF5WpmRU40=)
                          2: 323830343a393138383a3a2f33342d3334203d3e20323734363437.roa (hash: TXwwnylPcr8PUwdoqlQuEEB6pHEkevLCxaBS9KWKXn0=)
                          3: 323830343a393138383a343030303a3a2f33342d3334203d3e20323734363437.roa (hash: /ZSOVxXDPC+71OwX88IPsetBt6MXXoem3zI8G8cTe6E=)
                          4: 323830343a393138383a633030303a3a2f33342d3334203d3e20323734363437.roa (hash: HkotqfIYsNq2XGB1fQE9TbptU7ehMp76SvfmNXP8el0=)
                          5: 323830343a393138383a383030303a3a2f33342d3334203d3e20323734363437.roa (hash: YDiRAVkjVmIVwJw1v86ilVS7mLiXPDbft6aPcKX33Bg=)
                          6: FE39B00057FECCE0AC6B48381399AE27C177533F.crl (hash: NzGE7JbapL095UT4FWMTEUyW7rz+kugzL6YA5lh+5wU=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/FE39B00057FECCE0AC6B48381399AE27C177533F.crl
                          rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/FE39B00057FECCE0AC6B48381399AE27C177533F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE39B00057FECCE0AC6B48381399AE27C177533F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0d:cf:33:39:d8:4f:0d:04:5f:2d:e9:19:b4:48:e9:66:db:92:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE39B00057FECCE0AC6B48381399AE27C177533F
        Validity
            Not Before: Apr 27 04:29:45 2025 GMT
            Not After : Apr 28 06:56:45 2025 GMT
        Subject: CN=8372E040C03DB7CFE7CE18EC0DDBEFE1BA17B516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cb:14:70:ba:04:e1:fc:7b:65:57:35:25:dd:
                    dc:49:76:e7:01:34:b9:83:13:51:d9:f2:a7:c4:ee:
                    bd:22:fa:b0:a4:af:cc:6f:71:fe:4a:47:94:99:46:
                    12:bd:4c:cb:d3:0c:94:18:1c:d3:98:a4:4a:d7:21:
                    66:1e:a4:0c:e1:af:dd:4c:2d:00:68:08:52:af:8b:
                    6a:b4:79:20:0a:bf:0b:2a:f5:e3:be:df:1b:42:d7:
                    a1:6c:04:3b:d0:59:e7:43:bc:8f:bf:f4:c8:56:ef:
                    d1:22:c8:1f:64:54:d4:d1:87:89:7a:9d:02:e0:31:
                    77:5c:c7:97:d1:7d:7c:53:5b:12:b4:ba:d5:3c:5e:
                    bc:ab:79:f6:db:01:f3:35:38:1a:9a:78:ce:b3:b9:
                    1a:83:c0:a5:bb:ae:11:72:68:48:a2:31:72:11:98:
                    8d:00:4f:03:6e:be:e5:93:13:70:04:7b:ef:dd:ec:
                    95:5c:aa:fe:17:8a:5f:e6:f0:15:38:df:45:e6:43:
                    7e:1c:4e:c8:90:fc:83:bb:3f:df:c8:e5:95:6d:32:
                    81:7a:3a:6d:a0:78:03:1f:19:29:e7:fd:3f:35:6f:
                    7d:95:1d:8e:6e:ed:f7:4f:cb:fb:04:b1:5f:c7:2d:
                    5e:77:7b:f5:53:75:3d:fc:e4:a8:dd:5d:2d:5a:d3:
                    5c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:72:E0:40:C0:3D:B7:CF:E7:CE:18:EC:0D:DB:EF:E1:BA:17:B5:16
            X509v3 Authority Key Identifier:
                keyid:FE:39:B0:00:57:FE:CC:E0:AC:6B:48:38:13:99:AE:27:C1:77:53:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/FE39B00057FECCE0AC6B48381399AE27C177533F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE39B00057FECCE0AC6B48381399AE27C177533F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/FE39B00057FECCE0AC6B48381399AE27C177533F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:41:5c:42:a3:52:18:ad:60:06:88:2b:f7:9f:f0:7b:e4:c2:
         21:63:58:e3:87:f7:e9:74:5d:77:b4:00:fe:25:48:36:03:87:
         aa:bc:fc:15:4b:27:13:44:9c:d2:f9:f7:b6:97:c4:68:57:3f:
         aa:28:94:06:cc:12:67:fa:ae:0e:5f:7c:83:a6:45:dd:e6:36:
         f3:3a:f8:a0:9d:b5:c8:e4:ec:bb:75:89:d0:ca:75:6d:94:b4:
         ae:6b:dc:77:cf:27:f8:15:f8:48:e9:22:9a:9b:2f:7f:26:c5:
         04:5f:aa:76:0b:b6:0c:0d:5d:7c:39:9b:4b:4d:ce:fb:8b:4e:
         9e:96:cb:89:19:7b:f2:b5:06:30:57:eb:2c:ac:8a:1a:e7:cf:
         f1:8d:e9:82:1e:cc:82:64:47:69:ba:e8:8e:f9:75:88:30:15:
         31:fb:a6:58:31:a6:59:a2:fa:ac:39:74:f2:cb:0f:0f:bd:b0:
         7a:68:3b:b7:68:ea:d4:d3:84:2e:10:0e:7f:af:6a:cb:87:9b:
         9f:71:6c:55:76:1f:07:4d:f5:4b:31:7a:a1:4c:ab:24:71:4a:
         00:45:a2:17:b3:ba:de:ed:6c:42:13:b0:4f:68:b6:bc:5e:9a:
         8b:27:e1:00:e7:06:cf:a5:ea:9d:15:fe:6b:85:87:1c:c1:34:
         99:2a:aa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:15 2025 by rpki-client on console.sobornost.net