Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
File:                     633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft (raw, json)
Hash identifier:          0PPh3DfVv2Hz93Qzw0C8QckCMiZflGKz3CD1lhD20kc=
Subject key identifier:   9F:6D:86:51:17:49:FB:45:0E:83:A9:4D:DD:68:EC:4D:D6:8A:7E:68
Authority key identifier: 63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0
Certificate issuer:       /CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
Certificate serial:       3787B85D8A7345C039903FF218AF72D3585DA196
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
Manifest number:          017C
Signing time:             Fri 25 Apr 2025 11:30:11 +0000
Manifest this update:     Fri 25 Apr 2025 11:25:11 +0000
Manifest next update:     Sat 26 Apr 2025 13:32:11 +0000
Files and hashes:         1: 323830343a356562633a3a2f33332d3333203d3e20323639303533.roa (hash: ikb/eeov6bRBVVWN56xhzBR63CMjpkK522BDfSEzQU4=)
                          2: 34352e3137392e35322e302f32332d3233203d3e20323639303533.roa (hash: 4ExtZvI8MqUvFVTsDf2h2l9l2Z/3J8appcSPENQekV4=)
                          3: 323830343a356562633a3a2f33322d3332203d3e20323639303533.roa (hash: bBA4YJnUAawjGiuamZaJBjW4CIb/F/ARVaXg+y15IiE=)
                          4: 323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa (hash: NyhFyeCKsyzw9N/AuH1BDhS76oUWXd9+od5LyOG1qmk=)
                          5: 633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl (hash: ei0cYKmA9fbC+Sg1+oKWPXgjTx4PD1ZBHBV3x7a5sB0=)
                          6: 34352e3137392e35332e302f32342d3234203d3e20323639303533.roa (hash: ESPKyBn9k2Tj8mx8/vctfD0aZVU4OT6BupSSD8qOqhg=)
                          7: 34352e3137392e35322e302f32342d3234203d3e20323639303533.roa (hash: znoCnr6e93GYcQiATLXvvDwtHsiWt69jotK53/EWZEc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl
                          rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:32:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:87:b8:5d:8a:73:45:c0:39:90:3f:f2:18:af:72:d3:58:5d:a1:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
        Validity
            Not Before: Apr 25 11:25:11 2025 GMT
            Not After : Apr 26 13:32:11 2025 GMT
        Subject: CN=9F6D86511749FB450E83A94DDD68EC4DD68A7E68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c9:dc:47:1a:c6:6a:13:d8:a3:9c:86:6d:47:
                    83:42:00:23:5f:48:33:33:fb:d4:5a:5e:a8:13:aa:
                    43:7f:74:fb:3f:11:5f:6b:ba:ad:b5:3f:0d:78:d7:
                    1f:2a:10:1b:e6:36:9c:61:d2:79:a2:e2:18:67:3c:
                    1f:9c:a0:a8:fc:2d:d4:8c:8c:b2:7e:e0:af:72:bc:
                    04:81:36:e1:13:42:42:ca:01:bd:49:13:48:b0:6c:
                    d7:fa:39:73:7f:7b:01:2e:a7:e3:c0:0c:d1:73:32:
                    5c:5e:fd:c4:7a:1c:d3:61:65:c0:a7:9b:07:eb:a3:
                    69:85:37:90:8c:b3:1e:96:6a:9b:a1:ec:96:cd:ea:
                    4c:16:01:e7:f6:7a:94:29:9a:b5:0d:ac:13:9e:86:
                    8d:72:a4:32:76:80:6f:3b:3b:66:1d:d5:ff:68:cc:
                    5a:a6:b4:f0:13:11:b4:b7:33:cc:ba:94:57:b3:73:
                    04:a8:b4:21:c2:5e:70:a0:c4:38:7c:0d:c8:c1:e5:
                    14:23:ef:5c:2b:27:55:0a:80:59:16:6d:a1:7e:a2:
                    c7:3d:15:ce:43:27:cc:b7:7c:41:95:b7:96:40:4b:
                    51:a8:e3:c0:33:8e:b9:a9:c2:8f:0e:7a:1c:12:c4:
                    4a:4c:b8:52:57:7d:7e:b3:97:a2:e4:93:63:ee:63:
                    ac:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6D:86:51:17:49:FB:45:0E:83:A9:4D:DD:68:EC:4D:D6:8A:7E:68
            X509v3 Authority Key Identifier:
                keyid:63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:59:c1:1d:f2:71:cd:bc:92:5c:90:6c:95:3b:3b:ff:6f:08:
         46:5a:dd:5c:e8:fb:31:f7:2b:23:d3:75:5e:0b:ca:63:d6:69:
         e9:e9:84:ce:09:b0:22:7e:76:48:44:41:a5:09:45:6b:48:a0:
         f3:39:aa:2d:17:7b:85:26:43:da:47:97:dd:c1:f1:60:53:73:
         7b:ec:88:0d:be:85:45:8e:35:fd:88:28:22:6e:2c:7d:27:64:
         b4:a7:5d:2d:cd:fb:87:32:63:3e:ba:97:a3:ce:63:03:e8:c3:
         04:11:d9:60:4e:fb:83:ae:c3:41:d9:73:d4:93:bd:81:09:03:
         87:45:ad:a1:24:01:88:3d:dc:24:c9:57:7c:ad:ec:e2:0c:89:
         cc:78:d3:f7:00:0e:9b:ff:66:14:86:af:2c:8c:2d:15:b1:07:
         3c:8e:59:65:7d:65:ba:42:c5:55:57:be:0a:0e:6b:7f:69:76:
         9b:97:29:3a:a8:1e:a1:d6:a8:db:2d:8c:b8:bf:3b:66:7f:56:
         52:4f:77:b4:92:5e:fd:30:60:bb:f7:88:71:b7:a0:d4:c3:66:
         8a:00:22:df:13:a7:95:9c:c4:3a:24:8a:7e:02:06:b5:2a:39:
         1a:22:f4:37:4b:9b:e8:b4:e8:ba:a0:7c:4f:f3:8a:8b:1d:3c:
         c4:7e:b8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:30 2025 by rpki-client on console.sobornost.net