Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft
File:                     B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft (raw, json)
Hash identifier:          Sg/AOpmsWjgBRpz5t/4u9pFE+1/eGZo0/Yu30AgB/Rw=
Subject key identifier:   33:5F:03:55:08:AC:67:4B:28:E2:E3:EE:F3:2F:FE:86:5F:9F:61:E9
Authority key identifier: B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D
Certificate issuer:       /CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
Certificate serial:       16114191A770E2B63386BF4FDB94CFDC73833207
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft
Manifest number:          DB
Signing time:             Sat 26 Apr 2025 05:40:50 +0000
Manifest this update:     Sat 26 Apr 2025 05:35:50 +0000
Manifest next update:     Sun 27 Apr 2025 06:30:50 +0000
Files and hashes:         1: 323830343a333764633a3a2f33322d313238203d3e20323636343430.roa (hash: qNAnNxMLf23lX/Toa0RnHfzZ1GHt/QjrCvGeOjqM+AY=)
                          2: 3137302e38322e32312e302f32342d3332203d3e20323636343430.roa (hash: beeX4B6MyKuGmrciweMX6QiNJiZS0b30i2PbXxCMlEg=)
                          3: 3137302e38322e32322e302f32332d3332203d3e20323636343430.roa (hash: VhhP8rnZ6UCnRJRiCucXMy4ncmyKDFOTf8Wxmj/hPMI=)
                          4: 3137302e38322e32302e302f32322d3332203d3e20323636343430.roa (hash: oSQRk40W0JY8sSyVmz7gA7J13dK7vc4st2hm/+lgUdA=)
                          5: B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl (hash: yxEor/WvuvBjpXen/n2v3LaeNZXFGcvibdkekcsbYiE=)
                          6: 3137302e38322e32332e302f32342d3332203d3e20323636343430.roa (hash: 6PedwyVVFqTEjw2hbT1Tz2heBUwIRq91w7SbTmPftoM=)
                          7: 3137302e38322e32322e302f32342d3332203d3e20323636343430.roa (hash: DJne4kBD+xNmWBwcSI8pOxz3/iDzRXKwxTctYsGvKzY=)
                          8: 3137302e38322e32302e302f32342d3332203d3e20323636343430.roa (hash: 6NEYOLRI6MRrTzbOfEps6WpFR9L/MZ1xNz0hgxoPQ+g=)
                          9: 3137302e38322e32302e302f32332d3332203d3e20323636343430.roa (hash: +nAxPRtHcxrgkfrh1mtsvE/NhFZA9Y3xvxEZni9mbCY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl
                          rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:11:41:91:a7:70:e2:b6:33:86:bf:4f:db:94:cf:dc:73:83:32:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
        Validity
            Not Before: Apr 26 05:35:50 2025 GMT
            Not After : Apr 27 06:30:50 2025 GMT
        Subject: CN=335F035508AC674B28E2E3EEF32FFE865F9F61E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c3:ac:33:ee:2d:15:47:6a:a0:2f:97:9d:60:
                    f8:90:fc:b6:dd:b5:f7:6d:7e:95:a1:1b:1e:93:ae:
                    49:3d:5b:fc:1a:c8:9f:3b:10:13:6f:54:f3:ff:df:
                    90:6e:31:d5:7f:d0:95:5d:94:4f:5c:90:a6:7f:52:
                    7a:b7:ec:83:26:ec:04:55:7d:4a:08:38:61:f9:c5:
                    1c:3a:68:2c:9c:6e:4b:be:03:bc:c4:06:50:23:8e:
                    de:a7:4b:84:c2:c8:0c:65:dc:ef:88:a7:c3:3e:88:
                    4f:fc:8b:7c:9d:93:2d:6b:60:e4:98:1a:ac:6d:c3:
                    5e:22:51:38:f9:0f:32:c2:9c:1c:b8:ae:64:ae:36:
                    13:50:d9:7f:65:69:15:da:f7:0d:e1:cc:05:e4:a9:
                    1d:cd:59:5a:b3:e8:bd:b8:8f:5c:5f:78:2d:2a:5b:
                    b0:41:2e:e7:ee:6f:30:67:37:44:07:f5:ae:b3:54:
                    0b:ec:ea:d0:c0:27:d2:fb:8e:35:37:5c:8d:aa:da:
                    c1:3b:72:dc:d9:3e:43:31:7c:a3:04:7c:30:c6:ac:
                    98:08:97:e7:df:b3:6b:fa:88:eb:9f:14:7c:64:49:
                    6c:dd:0e:cb:2f:b2:52:ab:7c:ee:fe:88:e3:60:1a:
                    5c:46:61:bd:93:a1:b0:58:b1:a4:89:d7:d7:c3:f7:
                    a4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5F:03:55:08:AC:67:4B:28:E2:E3:EE:F3:2F:FE:86:5F:9F:61:E9
            X509v3 Authority Key Identifier:
                keyid:B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:3e:4e:49:8e:f6:2d:a1:4c:5f:a2:f3:2f:6c:cf:fb:60:d5:
         b5:11:ef:c0:1e:11:ab:6d:57:12:33:96:0e:de:05:eb:6b:81:
         af:c1:03:3c:85:54:71:15:2a:77:df:ca:17:c6:11:de:18:10:
         83:d9:0b:e1:84:7a:eb:3c:f1:6d:f6:1b:c4:fd:9a:62:45:9f:
         3f:18:40:7e:1b:25:90:d6:29:d5:4d:e1:af:83:25:4b:40:ab:
         c0:fe:ec:d8:9a:16:31:84:d9:33:39:1b:1c:42:59:85:74:1d:
         e5:35:db:6f:a2:d4:96:45:7c:1f:45:48:92:02:78:78:7b:ff:
         0b:2b:c7:83:d4:dc:07:14:37:53:66:95:84:c9:b6:b3:12:1c:
         91:d0:b7:90:58:f6:da:a5:4e:32:f1:15:ca:9b:91:f5:7a:26:
         d7:4d:d2:95:8f:59:75:63:91:a2:4c:0d:b5:87:34:dc:2f:1c:
         77:96:e1:71:52:b2:ad:49:ee:7d:b9:9f:23:69:50:fd:1a:c3:
         81:49:24:79:7d:df:6f:15:00:f6:ef:d4:94:c3:26:ce:8a:e7:
         c9:4f:37:71:74:97:ed:19:f9:69:b8:de:c5:da:50:10:58:49:
         11:d2:26:74:ec:ce:0b:ac:49:4e:a7:dd:70:cc:de:61:95:2d:
         3f:aa:c5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:34 2025 by rpki-client on console.sobornost.net