Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.mft
File:                     E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.mft (raw, json)
Hash identifier:          c+lK5pSka+UDM0l9uem+JSPcFiUY4RGvUYEJelnyGM0=
Subject key identifier:   CD:E8:41:F4:8E:33:86:7D:84:0D:97:0F:09:92:89:D6:AD:EC:98:E0
Authority key identifier: E1:97:0E:01:B5:16:F8:93:C6:1C:B2:5B:64:A1:FB:0E:8C:F7:DC:F9
Certificate issuer:       /CN=E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9
Certificate serial:       65F18BBD3A619B908AD71CBA83B0E2485265AF47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.mft
Manifest number:          0194
Signing time:             Mon 28 Apr 2025 14:28:51 +0000
Manifest this update:     Mon 28 Apr 2025 14:23:51 +0000
Manifest next update:     Tue 29 Apr 2025 18:15:51 +0000
Files and hashes:         1: 3137372e38372e3136382e302f32312d3332203d3e203532353833.roa (hash: P6rq914T1HddAurTapmwA7u0tmDUTmzlx0JuZrhiSvo=)
                          2: 3139312e352e37362e302f32342d3234203d3e20323638343834.roa (hash: TEJmS+jinMFQHlEre03Shq0+iL0S48QsIL1jZdP+dbI=)
                          3: E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.crl (hash: efwUxZQitE3cmmwjf8yh4tG6V1J1rqWlaKEt0sR0DQ8=)
                          4: 3139312e352e37322e302f32312d3332203d3e203532353833.roa (hash: yAE29ksmNWbuy611Jvbmn1PMGOnZfYpH3WnUp0KX65w=)
                          5: 323830343a6430303a3a2f33322d313238203d3e203532353833.roa (hash: ANaUa4vyoixcr5Neo53gxUm6Ke6+6JB+jQKW/IcTvLM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.crl
                          rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f1:8b:bd:3a:61:9b:90:8a:d7:1c:ba:83:b0:e2:48:52:65:af:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9
        Validity
            Not Before: Apr 28 14:23:51 2025 GMT
            Not After : Apr 29 18:15:51 2025 GMT
        Subject: CN=CDE841F48E33867D840D970F099289D6ADEC98E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8e:7e:93:82:27:fc:7e:40:72:37:e7:ec:e4:
                    d6:92:07:fb:52:8e:87:48:d8:24:1c:eb:3c:d3:b6:
                    0f:56:c0:c3:a9:f4:eb:87:10:ba:ef:95:42:ef:e3:
                    82:4b:af:aa:db:f7:ce:16:ff:01:0d:1d:51:4e:f2:
                    62:b8:75:8c:3c:55:42:a5:64:12:92:ff:45:ff:42:
                    c9:eb:54:ac:ba:f4:c6:9b:c2:fc:32:cc:ff:2d:89:
                    c7:c9:c3:82:a6:f8:3f:51:39:cd:6c:01:12:48:a2:
                    c2:85:1b:47:f1:f0:4d:9b:40:45:3d:60:8b:80:7f:
                    ca:8e:c1:0d:57:bf:39:76:56:9b:da:b5:fd:df:5a:
                    36:46:8f:2e:59:3c:8d:c6:9a:55:38:73:2c:9c:4d:
                    43:06:2f:7b:2a:48:26:46:3c:5d:fa:ce:f8:8f:21:
                    3e:4b:b0:cc:7d:58:b7:87:06:cb:6e:6e:79:92:64:
                    e5:99:93:de:9b:39:7c:e4:ca:6f:dd:d3:81:be:d7:
                    13:90:75:a7:5d:10:f4:a3:ab:7a:1a:45:05:03:17:
                    12:b0:17:e5:7f:8b:ea:bc:e1:9a:93:b7:7e:39:ae:
                    6f:3b:08:4e:29:f1:3b:ea:ce:03:e1:3d:59:5a:8d:
                    94:6e:1d:c4:3e:73:2a:3a:5f:79:7d:48:b1:72:34:
                    db:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E8:41:F4:8E:33:86:7D:84:0D:97:0F:09:92:89:D6:AD:EC:98:E0
            X509v3 Authority Key Identifier:
                keyid:E1:97:0E:01:B5:16:F8:93:C6:1C:B2:5B:64:A1:FB:0E:8C:F7:DC:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:b9:6f:85:39:20:28:cb:7f:88:3d:1c:f6:0d:ac:71:2a:70:
         29:95:58:df:af:e4:fa:8f:17:15:1b:76:b0:a9:c1:62:01:b8:
         8f:9a:e4:f7:4a:e9:28:3f:ac:98:cb:36:0d:8d:25:5e:88:a5:
         9c:1f:b8:0c:83:d5:9e:f3:c3:25:17:d6:40:fd:ae:cf:9a:79:
         d1:af:13:cd:0b:ab:05:a4:66:c6:04:d7:3d:f6:a6:81:1a:62:
         78:34:a4:81:c7:f6:28:ed:59:65:6b:c6:08:b7:d2:ea:c8:e3:
         25:d5:25:04:ae:a4:eb:dd:93:91:98:d3:71:e1:b8:9f:dc:f6:
         61:28:d8:b8:45:39:75:d8:60:68:2d:4e:2e:a7:ee:4b:86:34:
         e7:4b:ce:f0:b3:b4:9a:9d:4a:bb:0c:9d:93:6f:74:e3:fe:1c:
         50:24:4d:ad:5b:87:4f:80:e3:f7:e9:f7:04:35:d8:09:f2:09:
         96:81:62:9c:8c:53:52:f3:86:47:27:69:4d:67:39:16:b0:4a:
         69:1d:7b:85:c2:6b:89:34:86:1c:9f:a4:ae:7b:bd:cd:07:94:
         df:42:93:f9:91:30:1e:7d:16:34:28:17:9e:fe:f7:32:a3:76:
         19:d6:ba:71:c4:0c:06:1b:2d:25:92:57:e3:ea:b8:8c:54:3e:
         6d:71:81:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZfGLvTphm5CK1xy6g7DiSFJlr0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE5NzBFMDFCNTE2Rjg5M0M2MUNCMjVCNjRBMUZCMEU4
Q0Y3RENGOTAeFw0yNTA0MjgxNDIzNTFaFw0yNTA0MjkxODE1NTFaMDMxMTAvBgNV
BAMTKENERTg0MUY0OEUzMzg2N0Q4NDBEOTcwRjA5OTI4OUQ2QURFQzk4RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPjn6Tgif8fkByN+fs5NaSB/tS
jodI2CQc6zzTtg9WwMOp9OuHELrvlULv44JLr6rb984W/wENHVFO8mK4dYw8VUKl
ZBKS/0X/QsnrVKy69MabwvwyzP8ticfJw4Km+D9ROc1sARJIosKFG0fx8E2bQEU9
YIuAf8qOwQ1Xvzl2Vpvatf3fWjZGjy5ZPI3GmlU4cyycTUMGL3sqSCZGPF36zviP
IT5LsMx9WLeHBstubnmSZOWZk96bOXzkym/d04G+1xOQdaddEPSjq3oaRQUDFxKw
F+V/i+q84ZqTt345rm87CE4p8TvqzgPhPVlajZRuHcQ+cyo6X3l9SLFyNNvpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzehB9I4zhn2EDZcPCZKJ1q3smOAwHwYDVR0j
BBgwFoAU4ZcOAbUW+JPGHLJbZKH7Doz33PkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG14NHlqcnNuTHRBM2FuZEZSNVpWY0hRblRFdXBGOW9XVHFvdkdvN21I
a1MvMC9FMTk3MEUwMUI1MTZGODkzQzYxQ0IyNUI2NEExRkIwRThDRjdEQ0Y5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxOTcwRTAxQjUxNkY4OTND
NjFDQjI1QjY0QTFGQjBFOENGN0RDRjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SG14NHlqcnNuTHRBM2FuZEZSNVpWY0hRblRFdXBGOW9XVHFvdkdvN21Ia1MvMC9F
MTk3MEUwMUI1MTZGODkzQzYxQ0IyNUI2NEExRkIwRThDRjdEQ0Y5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmblvhTkgKMt/iD0c9g2scSpwKZVY36/k+o8XFRt2sKnBYgG4j5rk90rpKD+s
mMs2DY0lXoilnB+4DIPVnvPDJRfWQP2uz5p50a8TzQurBaRmxgTXPfamgRpieDSk
gcf2KO1ZZWvGCLfS6sjjJdUlBK6k692TkZjTceG4n9z2YSjYuEU5ddhgaC1OLqfu
S4Y050vO8LO0mp1Kuwydk2904/4cUCRNrVuHT4Dj9+n3BDXYCfIJloFinIxTUvOG
RydpTWc5FrBKaR17hcJriTSGHJ+krnu9zQeU30KT+ZEwHn0WNCgXnv73MqN2Gda6
ccQMBhstJZJX4+q4jFQ+bXGBUw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:38:06 2025 by rpki-client on console.sobornost.net