Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft
File:                     3C7FA74CDFF1E4752479602672F26A883C7A6052.mft (raw, json)
Hash identifier:          U+KhYtH5SlrIPl7Z6UJ9gvw3RzW/3nBHX4wNsSUluOg=
Subject key identifier:   2B:DF:1E:87:F3:B8:75:79:BE:3D:F5:7A:EE:98:DF:81:70:58:4F:74
Authority key identifier: 3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52
Certificate issuer:       /CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
Certificate serial:       6AF8B73385455A1E65217B9685EC89EE542F757A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft
Manifest number:          01BB
Signing time:             Mon 28 Apr 2025 16:40:40 +0000
Manifest this update:     Mon 28 Apr 2025 16:35:40 +0000
Manifest next update:     Tue 29 Apr 2025 19:04:40 +0000
Files and hashes:         1: 3133312e302e3134332e302f32342d3234203d3e203631383835.roa (hash: pnoCxJhev+KykF4irHTZhxOHPz51XbGGcg5JTT85Aik=)
                          2: 3C7FA74CDFF1E4752479602672F26A883C7A6052.crl (hash: +UWil6HuvKJQkTD0SwZuZVEsKD70aBHDw4mrMJcgDbU=)
                          3: 3133312e302e3134322e302f32342d3234203d3e203631383835.roa (hash: b7PCXsg1RuZItimKfTuvWVCumv5u3kbW9CXSBMe583A=)
                          4: 323830343a316163383a3a2f33322d3334203d3e203631383835.roa (hash: otWaAQ35cSOPfki3jYAn6BHH5zL3qEFKCvIcTLGK0qU=)
                          5: 3133312e302e3134302e302f32342d3234203d3e203631383835.roa (hash: 6p5vnbVVcccEJ9l7GDGjcXQPnMNDaS77FHOheurCgAg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl
                          rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f8:b7:33:85:45:5a:1e:65:21:7b:96:85:ec:89:ee:54:2f:75:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
        Validity
            Not Before: Apr 28 16:35:40 2025 GMT
            Not After : Apr 29 19:04:40 2025 GMT
        Subject: CN=2BDF1E87F3B87579BE3DF57AEE98DF8170584F74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:00:67:1d:27:1b:71:e4:bc:42:cf:9c:de:ae:
                    a5:7c:48:a1:da:ef:8f:c0:7c:28:03:a6:e3:09:5d:
                    2d:67:e0:1b:38:31:00:2c:8d:69:b9:95:53:05:2e:
                    65:92:12:0b:d1:7f:7c:43:d2:32:b6:00:72:af:07:
                    a3:ba:0f:77:66:f7:03:b3:56:3e:3c:fc:a3:96:bf:
                    32:9e:fa:31:67:f1:ef:e1:c2:2e:8a:52:36:ed:cd:
                    07:55:69:89:bd:d4:18:4f:5c:1a:db:83:57:58:01:
                    46:ff:e4:63:0f:55:28:53:43:db:b0:c5:c6:18:ac:
                    b6:75:7c:5d:14:c9:9b:63:68:b2:55:04:ab:0f:0b:
                    c5:c6:19:24:57:06:16:08:d4:ef:24:4d:51:37:30:
                    9e:5f:86:ca:11:b6:73:c7:eb:c8:59:42:6d:80:c8:
                    1e:ab:70:c8:ae:f5:9a:6f:77:e3:2a:1e:56:fa:39:
                    90:38:09:b5:89:ed:87:cc:ad:0c:ce:01:57:66:56:
                    0f:7e:84:f5:07:3e:a8:05:9d:8f:2b:46:03:d5:d1:
                    32:7f:e9:0d:37:b8:df:fb:68:6c:e5:d0:cd:72:e3:
                    09:fd:4a:17:a9:80:64:5f:56:36:16:92:7e:d0:90:
                    a3:8c:fe:59:d3:36:4a:c6:fe:61:03:42:bd:0f:95:
                    e8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DF:1E:87:F3:B8:75:79:BE:3D:F5:7A:EE:98:DF:81:70:58:4F:74
            X509v3 Authority Key Identifier:
                keyid:3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:6c:3e:c1:75:5b:c7:1e:85:82:41:01:de:e2:20:c1:03:b5:
         ad:aa:c2:b9:c9:a9:ee:bb:4b:09:f5:33:d2:58:a2:51:19:2a:
         60:8b:d3:9b:41:ba:af:b3:da:e3:c5:76:61:5d:25:d9:d9:cb:
         9f:99:3a:14:99:8c:4b:80:95:98:49:cd:e1:6b:fe:4b:90:44:
         ef:c8:45:44:40:67:9a:ce:90:68:13:43:d1:f4:bc:7b:d5:e3:
         99:0a:85:44:ff:80:59:49:fa:15:09:7b:26:50:e0:31:0c:a8:
         c4:84:25:0e:01:73:4d:83:cc:5c:f1:3e:64:cb:6b:ad:70:5f:
         08:82:81:08:8f:1a:4a:c6:79:e6:97:13:42:ee:c7:f2:09:9a:
         ed:48:43:0f:c3:6a:a9:43:59:86:3e:fa:16:cb:f1:81:36:6b:
         89:7e:3b:88:7f:5a:4b:0d:1a:7f:1f:39:59:b2:9b:28:a1:e2:
         15:fe:60:ab:1f:a6:f2:1e:20:99:89:d9:cb:5a:7d:09:91:54:
         35:a5:05:b5:63:f7:99:29:9e:98:95:39:f8:35:e2:26:36:fb:
         a9:4c:cf:2f:e9:e1:d8:c3:88:76:fc:b3:b3:e2:dc:47:67:a1:
         09:98:51:01:db:04:e6:9b:e0:55:88:a2:9e:60:1c:d6:cd:0b:
         fa:a0:b7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:47 2025 by rpki-client on console.sobornost.net