Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft
File:                     686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft (raw, json)
Hash identifier:          Fz+LB3aETypXJdb1PvVjPF8Uzs52JgkoRUw1iLlzbMs=
Subject key identifier:   95:9A:75:15:50:FC:5D:CE:68:3B:5F:58:D2:D3:BD:E3:02:01:51:71
Authority key identifier: 68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7
Certificate issuer:       /CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7
Certificate serial:       202DE433CCADB7AFB15FBA323057257D9CD7693E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft
Manifest number:          0202
Signing time:             Mon 28 Apr 2025 14:50:15 +0000
Manifest this update:     Mon 28 Apr 2025 14:45:15 +0000
Manifest next update:     Tue 29 Apr 2025 15:28:15 +0000
Files and hashes:         1: 686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl (hash: peoCgGsE9kEaMC24FJ0F6JLr+3Vi6Jc7nAb4xsmmW1I=)
                          2: 3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa (hash: nwVIwcLmhDBueq5xt/gc37vwol4yziELmDoL4LzkP7w=)
                          3: 323830343a316432343a3a2f33322d3438203d3e20323634333530.roa (hash: eBr86NdP8UcNjjscNRKlKFP5HRNCnh3UcA1xh8UVip4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl
                          rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2d:e4:33:cc:ad:b7:af:b1:5f:ba:32:30:57:25:7d:9c:d7:69:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7
        Validity
            Not Before: Apr 28 14:45:15 2025 GMT
            Not After : Apr 29 15:28:15 2025 GMT
        Subject: CN=959A751550FC5DCE683B5F58D2D3BDE302015171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:de:ec:ad:39:59:14:30:d2:56:dc:50:7d:9a:
                    3d:84:8a:83:f4:5c:67:32:75:20:ef:f3:53:9a:cc:
                    40:3c:76:f7:6b:58:af:09:21:18:16:06:ea:16:54:
                    24:15:9d:be:f4:30:aa:53:98:81:2e:10:f8:f9:71:
                    79:cf:ea:82:a2:72:e5:34:bd:4b:54:54:76:02:db:
                    db:06:1a:56:9e:87:b5:3d:64:0a:d1:1e:f5:0f:60:
                    4e:79:83:d5:cb:f5:38:3c:f2:fd:dc:9a:2c:f1:bb:
                    47:4b:0c:fe:f2:02:70:25:70:51:3e:6f:74:e8:5a:
                    7b:e6:35:fc:dc:4a:cc:9f:f6:4b:63:80:09:1f:c3:
                    4f:f8:94:ab:04:08:7a:f7:18:0f:a4:82:36:4b:1f:
                    ba:62:a5:8c:58:b2:ef:8d:ad:1e:d9:41:e0:9f:17:
                    f1:46:34:4f:6e:72:79:92:19:2e:fa:c2:98:68:51:
                    3c:f3:d0:b1:d7:c9:73:50:f7:09:f3:81:5f:78:a9:
                    ab:60:cc:e2:8c:ff:c4:88:3e:24:14:e6:e4:f2:29:
                    80:3e:58:eb:9e:d2:df:7d:8c:de:10:ce:bc:bc:08:
                    a5:69:f5:44:e1:b1:fa:c0:68:ed:d8:1c:a1:6f:bd:
                    e5:df:a0:8b:2d:c5:da:e7:65:cb:77:40:16:5d:7d:
                    d5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9A:75:15:50:FC:5D:CE:68:3B:5F:58:D2:D3:BD:E3:02:01:51:71
            X509v3 Authority Key Identifier:
                keyid:68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:63:05:40:7f:c8:67:d1:5b:8d:51:71:5f:b7:de:f2:a2:29:
         d1:11:a1:b5:23:df:47:f9:cb:aa:9f:86:3b:84:5b:f8:4c:b8:
         f8:4f:bf:61:06:4d:fb:96:c9:ba:00:2a:a7:a0:e4:8f:a0:21:
         77:10:8f:43:82:2c:06:4c:d4:07:e9:f5:f8:98:6d:00:9c:63:
         91:2c:f0:7e:36:d7:fb:e0:43:37:82:93:3b:a1:33:5f:a2:6d:
         c7:98:8a:8c:4d:51:77:05:45:f1:4b:79:ee:b3:08:67:fe:86:
         01:6b:fa:59:65:bc:9d:2b:35:9a:5a:82:bd:9e:41:04:97:da:
         99:2b:55:0a:70:8e:5d:3d:6b:a9:c0:96:10:ea:40:05:76:ed:
         fa:70:84:90:95:c2:de:6a:2c:a9:13:56:bb:2c:50:84:be:b4:
         cb:ed:6e:32:8c:74:c4:60:2c:7c:e7:bd:f3:72:cd:b0:fa:39:
         cb:2c:ee:2c:30:9f:7b:73:74:62:ba:47:de:de:47:7f:ef:96:
         f2:de:ef:c8:9f:fd:46:94:a4:82:05:b3:ec:aa:09:a5:c5:6f:
         56:a1:cc:7d:68:9a:6c:5a:d9:d0:3e:bf:ca:f4:8b:f9:ea:9c:
         f9:a9:26:a8:51:86:65:fa:d3:5c:45:ea:1c:2d:ab:2f:ff:24:
         a8:16:86:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:38:06 2025 by rpki-client on console.sobornost.net