Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/06EA067E007B9311176981678F208CA96CEFDE1D.mft
File:                     06EA067E007B9311176981678F208CA96CEFDE1D.mft (raw, json)
Hash identifier:          FvfPU9rIsXD+k6pY/O51VHF2IMr7qZsZp4NAN5eUt+o=
Subject key identifier:   81:75:F9:08:8A:83:CD:DB:24:AA:D0:2A:24:27:D2:3F:22:8C:66:E5
Authority key identifier: 06:EA:06:7E:00:7B:93:11:17:69:81:67:8F:20:8C:A9:6C:EF:DE:1D
Certificate issuer:       /CN=06EA067E007B9311176981678F208CA96CEFDE1D
Certificate serial:       5815879AAE7A3CC1E9C25243B4A46C293B1AF0CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06EA067E007B9311176981678F208CA96CEFDE1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/06EA067E007B9311176981678F208CA96CEFDE1D.mft
Manifest number:          70
Signing time:             Sat 26 Apr 2025 06:10:22 +0000
Manifest this update:     Sat 26 Apr 2025 06:05:22 +0000
Manifest next update:     Sun 27 Apr 2025 08:00:22 +0000
Files and hashes:         1: 34352e3233362e35312e302f32342d3234203d3e20323638323035.roa (hash: Vb+0BI2ddEmTu/78Cg1t8TSemi71IJtFs/A48tUuZq0=)
                          2: 06EA067E007B9311176981678F208CA96CEFDE1D.crl (hash: 1owc2tNyI/mp0Ybgbrz3WYKHxZtrTeeiAiFkXcHFFLA=)
                          3: 34352e3233362e34382e302f32342d3234203d3e20323638323035.roa (hash: gc8/kO+eEAm5/bhEGr9HHIXp2Y+t6jGCnTXQNp1ZcwY=)
                          4: 34352e3233362e34382e302f32322d3232203d3e20323638323035.roa (hash: 7j1ml5cMBz2z1yRAnv8vStkDBBj0cFyUMmMjwGlXBEA=)
                          5: 34352e3233362e35302e302f32342d3234203d3e20323638323035.roa (hash: N/Z/0SwUs8Ui+O41tGQKyd2ktNBNDvgX9ka/3Xw5zjY=)
                          6: 323830343a346439303a3a2f33322d3332203d3e20323638323035.roa (hash: yGeTQIWIsmjehPczpJgE//RoRaI5zA3RAdfw2t07Fas=)
                          7: 34352e3233362e34392e302f32342d3234203d3e20323638323035.roa (hash: GEt2qNCqwLNHi+MLyc8GGanebkCprDuXtBjyWS8YrLQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/06EA067E007B9311176981678F208CA96CEFDE1D.crl
                          rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/06EA067E007B9311176981678F208CA96CEFDE1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06EA067E007B9311176981678F208CA96CEFDE1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:15:87:9a:ae:7a:3c:c1:e9:c2:52:43:b4:a4:6c:29:3b:1a:f0:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06EA067E007B9311176981678F208CA96CEFDE1D
        Validity
            Not Before: Apr 26 06:05:22 2025 GMT
            Not After : Apr 27 08:00:22 2025 GMT
        Subject: CN=8175F9088A83CDDB24AAD02A2427D23F228C66E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ca:61:f1:51:59:dd:84:d4:5e:50:15:46:25:
                    34:42:34:06:99:e4:21:d9:ab:ec:86:cb:5a:90:30:
                    e0:b7:95:58:76:9a:2f:00:c8:18:8c:27:4e:cf:e6:
                    37:75:ad:ec:e4:08:29:c3:cc:f1:3a:f7:1d:dd:6f:
                    e4:23:78:12:48:a2:d9:33:e1:ce:7e:89:ae:66:1e:
                    75:df:bd:eb:72:78:d3:19:f3:63:7e:be:ad:e2:e7:
                    5e:e2:fc:15:a8:b6:f4:0b:83:0e:5d:31:01:4d:83:
                    ff:6c:c2:05:72:e4:7f:b3:27:7d:61:64:2c:cf:d0:
                    c1:fd:5d:3c:d8:4e:1f:95:a3:ea:b7:39:66:6e:f3:
                    bb:9a:9d:8c:34:67:32:ab:8d:8f:64:df:85:c2:5e:
                    bc:81:44:34:f8:cb:b3:8f:23:71:13:5d:9f:40:ca:
                    ae:0d:4a:22:d6:e2:5c:3a:f4:0f:25:ca:e6:9b:84:
                    8d:5e:c3:b5:98:03:6a:44:a6:76:c1:7a:f5:cd:f4:
                    23:72:c0:ea:06:0d:f5:14:f0:ab:a5:c1:d3:49:5c:
                    66:63:83:6a:e0:f3:fc:59:26:a5:3d:d1:e5:86:37:
                    7e:0f:9d:fc:0d:23:27:e8:26:0e:04:9e:c3:83:6f:
                    05:86:b2:ae:76:20:63:50:43:e3:5a:69:e6:91:4a:
                    8c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:75:F9:08:8A:83:CD:DB:24:AA:D0:2A:24:27:D2:3F:22:8C:66:E5
            X509v3 Authority Key Identifier:
                keyid:06:EA:06:7E:00:7B:93:11:17:69:81:67:8F:20:8C:A9:6C:EF:DE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/06EA067E007B9311176981678F208CA96CEFDE1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06EA067E007B9311176981678F208CA96CEFDE1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/06EA067E007B9311176981678F208CA96CEFDE1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:a9:66:37:49:31:68:b5:68:1c:0d:d2:f0:db:bc:81:3e:55:
         1b:79:28:d6:eb:d8:6c:56:a7:9e:52:f4:d6:fb:0e:9e:25:61:
         26:c9:e9:fa:9c:99:c3:ad:ca:10:62:f7:0b:08:b4:e2:56:2b:
         05:e6:f1:3d:35:50:95:88:1d:b9:53:1b:a4:d3:3c:b0:d6:75:
         c0:0e:72:22:16:c3:43:d6:75:ed:d6:5e:76:4c:84:64:76:00:
         f4:14:4e:34:01:21:17:83:69:3c:6b:e0:9e:12:49:f9:37:2d:
         05:f6:c8:6e:3a:fe:88:7b:a4:ac:db:29:2e:f9:6b:68:1b:b7:
         4f:91:d5:ab:07:ff:4e:c1:b2:66:7f:6d:a7:c4:44:2a:1a:30:
         77:6b:59:8d:93:b4:00:66:7e:ad:19:1a:4e:e4:12:6e:d9:a8:
         94:44:6b:a2:31:d1:25:bf:43:58:f2:a5:78:0a:58:08:97:ef:
         06:75:2c:14:17:8f:b3:41:25:e9:f1:55:b5:86:0e:b0:eb:76:
         e1:d0:a0:e9:45:77:7f:6a:60:5e:c3:78:a0:75:67:81:0b:e0:
         96:2e:de:09:81:fd:d8:27:10:62:9a:3a:c4:50:38:b5:ed:73:
         f4:45:f2:ab:71:08:fe:7c:ba:ec:18:99:b1:c8:d0:49:9f:3d:
         67:6a:33:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:33 2025 by rpki-client on console.sobornost.net