Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.mft
File:                     5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.mft (raw, json)
Hash identifier:          3qQ2mZ4xud7pZLVIfUeQKapruGVrHNsYRUovd+R5gdA=
Subject key identifier:   96:1A:01:D2:F0:C8:4C:E6:E0:52:CA:5E:99:17:AF:48:46:77:15:CD
Authority key identifier: 51:80:CE:95:C6:FF:8C:21:A0:A7:A1:35:DC:FA:98:01:E2:E7:29:59
Certificate issuer:       /CN=5180CE95C6FF8C21A0A7A135DCFA9801E2E72959
Certificate serial:       67437CFB20C1C44D15FA30CF4FCDBE723DD1CFFF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.mft
Manifest number:          0209
Signing time:             Sun 27 Apr 2025 15:41:30 +0000
Manifest this update:     Sun 27 Apr 2025 15:36:30 +0000
Manifest next update:     Mon 28 Apr 2025 16:33:30 +0000
Files and hashes:         1: 34352e3137342e3138342e302f32322d3234203d3e20323638383730.roa (hash: qOyDuBLZPViaSVFtZaZuQnAi6KvZGC+3k8vUFG2KNuw=)
                          2: 5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.crl (hash: K5Uzt8QcdcRqlKsodnLr8dMyynmdaji2JxnTQnkVoMs=)
                          3: 323830343a356264303a3a2f33322d3334203d3e20323638383730.roa (hash: CSZmFZrJM+6w1mr2v189zxuCFW4TSQ7Vol4F22eTEbE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.crl
                          rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:43:7c:fb:20:c1:c4:4d:15:fa:30:cf:4f:cd:be:72:3d:d1:cf:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5180CE95C6FF8C21A0A7A135DCFA9801E2E72959
        Validity
            Not Before: Apr 27 15:36:30 2025 GMT
            Not After : Apr 28 16:33:30 2025 GMT
        Subject: CN=961A01D2F0C84CE6E052CA5E9917AF48467715CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:89:af:fa:4a:06:67:a7:50:77:9b:bb:a8:a5:
                    f7:0c:2d:4e:4a:ef:52:77:45:48:ff:ab:a9:33:27:
                    9b:94:64:e5:f7:da:f5:0c:24:25:d6:4d:f2:f5:af:
                    39:e0:d5:7c:27:3b:06:21:67:10:d9:b8:0d:dc:58:
                    dd:93:85:ec:42:a3:99:92:a6:5c:ee:4d:3c:b2:54:
                    cc:81:f2:55:f6:85:76:8c:b3:4d:dc:1e:3a:79:2f:
                    6c:d2:42:e2:2b:1e:d5:f3:bb:f3:28:c4:34:5f:1f:
                    b4:d9:cc:22:df:c8:b4:c5:89:71:eb:ea:c6:f2:94:
                    cd:3c:41:9e:09:00:e6:c2:51:d5:f2:60:3d:e3:51:
                    12:c9:9e:8c:92:a1:e3:3c:a7:42:0b:a8:51:3c:ba:
                    92:da:5b:97:1b:16:ec:81:ec:76:fe:94:08:2f:e2:
                    8d:5c:0c:bf:dd:d6:2c:6f:04:ba:42:d0:2d:e7:eb:
                    74:bb:24:95:b1:d4:56:19:50:db:79:8e:c9:f1:da:
                    13:57:1d:b6:0b:95:d9:0d:cd:1b:fe:cb:e6:e6:e9:
                    75:fc:13:89:65:c1:c3:f6:b3:fa:55:f8:89:0b:9c:
                    e2:94:11:95:5b:c4:bf:7b:c4:ae:15:a2:e5:cb:c3:
                    02:53:5f:44:97:1d:92:33:57:2f:c5:90:63:7d:c3:
                    30:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1A:01:D2:F0:C8:4C:E6:E0:52:CA:5E:99:17:AF:48:46:77:15:CD
            X509v3 Authority Key Identifier:
                keyid:51:80:CE:95:C6:FF:8C:21:A0:A7:A1:35:DC:FA:98:01:E2:E7:29:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c6:0e:da:32:6f:67:c3:c3:7e:b7:0f:1f:f6:16:67:62:aa:
         5b:47:16:d4:b5:cb:e7:bb:98:9d:58:48:93:4c:ab:30:93:dd:
         2e:98:c8:f9:31:f9:ff:40:70:c5:49:86:52:63:5d:ea:05:28:
         db:38:48:a3:f5:a1:bf:c3:70:fa:e9:77:eb:f8:c8:63:a7:26:
         c2:5a:b8:7c:e4:6d:2a:8f:b6:10:d4:b2:70:2b:cb:70:14:18:
         87:5e:65:29:5b:e6:f1:ac:49:4e:c2:21:7d:7a:cf:86:ee:22:
         b4:4d:c3:84:8e:13:71:8c:dc:52:99:cd:49:da:56:84:52:ea:
         b8:fb:9d:cf:03:f9:a9:c9:b6:2d:36:1a:59:18:d2:0f:4d:8e:
         0e:27:37:07:95:e7:f7:67:cc:3d:1d:4e:f3:2c:c8:f9:65:08:
         c2:52:0b:30:3a:c6:a6:e5:f0:78:fe:43:a7:23:b5:a8:b5:c7:
         20:1b:f1:97:bc:c1:58:b9:de:ab:ff:13:80:fa:37:3e:bf:68:
         85:9c:09:25:19:16:d9:82:f9:9f:d1:f4:62:61:c2:6d:a1:6c:
         69:a6:92:66:81:6e:3f:f6:d1:96:35:90:c9:e3:18:10:b0:3d:
         55:33:4b:0d:1a:c5:c2:7d:83:3b:52:7a:45:db:f4:5d:73:5d:
         91:40:19:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:12 2025 by rpki-client on console.sobornost.net