Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft
File:                     28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft (raw, json)
Hash identifier:          /J3cL74uaD4l3iiWmmM9ODmVJj+12k61qx7KkOmxML8=
Subject key identifier:   40:70:CB:8E:28:05:31:1B:70:6E:0D:F5:D0:98:20:6C:9E:44:63:22
Authority key identifier: 28:F9:F9:FB:DF:48:9E:86:A2:CB:92:9A:47:E8:BC:0A:BC:2A:1B:1C
Certificate issuer:       /CN=28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C
Certificate serial:       2044B8AF3F4F5EAAEF10FC8EC406B24B3BC0F722
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft
Manifest number:          0116
Signing time:             Sun 27 Apr 2025 03:06:35 +0000
Manifest this update:     Sun 27 Apr 2025 03:01:35 +0000
Manifest next update:     Mon 28 Apr 2025 05:26:35 +0000
Files and hashes:         1: 34352e3233392e37322e302f32332d3233203d3e20323638333535.roa (hash: YZpBE85fhiEWpT9hgqTEKnve1qKRjDiQqERw4Ns7DgE=)
                          2: 323830343a346665303a3a2f33322d3332203d3e20323638333535.roa (hash: /HF2q+WAJf2rEC5Q3l5gYnv2VlmZNRUWMSBC46flQGw=)
                          3: 323830343a346665303a383030303a3a2f33332d3333203d3e20323638333535.roa (hash: mMl7wlYuzGSlDQ2nHjYdGu//3PyUaH2Xt2k5g7X2vaE=)
                          4: 28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl (hash: gr6lkZA2zwUFRnS8Bi4ticRcXk3bSHygp77GTs18N3I=)
                          5: 34352e3233392e37352e302f32342d3234203d3e20323638333535.roa (hash: RgnoKFClmNRtewnKCRwSqAa5h1gEHZxmH5aWSuKAkeQ=)
                          6: 34352e3233392e37322e302f32342d3234203d3e20323638333535.roa (hash: 78wfBpVDSOFC/4ZthELtkna9z5TaZbutDlVWiZjBxEY=)
                          7: 34352e3233392e37342e302f32332d3233203d3e20323638333535.roa (hash: tx4vYFia5s9x8ZTS1vI+1dUl9XQjT+LaffJGWLFdUgE=)
                          8: 323830343a346665303a3a2f33332d3333203d3e20323638333535.roa (hash: g7m9AQh54t2L2ZMjySnubrKB2J4cpKd2etOHhoDIevE=)
                          9: 34352e3233392e37332e302f32342d3234203d3e20323638333535.roa (hash: pj2rkzXC5heyicoXDJqmGclxsIH5pfRf3YRsHWEeYsM=)
                          10: 34352e3233392e37322e302f32322d3232203d3e20323638333535.roa (hash: 15C4dlRSUsfUV3XEhTov22tZeeDT5wLsZzUnb57iSgE=)
                          11: 34352e3233392e37342e302f32342d3234203d3e20323638333535.roa (hash: JjIenFO2WhvOy+hdCWl/7+s2ilfmMUmcvdW7J8aNHL8=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl
                          rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 05:26:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:44:b8:af:3f:4f:5e:aa:ef:10:fc:8e:c4:06:b2:4b:3b:c0:f7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C
        Validity
            Not Before: Apr 27 03:01:35 2025 GMT
            Not After : Apr 28 05:26:35 2025 GMT
        Subject: CN=4070CB8E2805311B706E0DF5D098206C9E446322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:80:e9:05:05:c7:a9:fb:f5:58:34:1e:12:30:
                    7f:03:33:cd:72:00:b9:04:78:59:c1:a0:42:cb:cc:
                    1c:27:2f:e6:d9:46:f3:74:bc:86:20:14:c2:50:53:
                    83:a2:02:e6:3c:84:9c:91:26:23:d5:9a:49:7d:08:
                    47:ca:44:cc:33:a2:9b:1c:28:7f:9a:ce:6a:c7:c6:
                    da:19:d3:fc:71:42:99:ec:32:e2:57:f9:e4:23:eb:
                    d7:d9:69:a6:97:a1:37:cc:35:3a:79:4c:a8:66:e7:
                    a7:3a:3f:dc:6e:91:05:a0:1f:aa:43:ed:6c:00:8c:
                    e8:22:bc:07:63:66:d3:00:95:56:55:1a:99:22:5e:
                    0e:3d:61:c0:3d:d5:2b:f0:76:f0:3a:b9:87:80:e9:
                    9f:93:83:ec:13:5f:5d:d1:a7:22:fe:f0:6e:fd:b3:
                    e0:da:b6:08:0d:da:e4:00:f7:eb:2b:98:da:df:1e:
                    c8:f3:4d:96:5a:2e:b8:f2:d2:c6:be:94:b6:e7:a0:
                    17:33:4f:9a:d2:5a:c0:20:a0:cd:59:20:d8:09:b2:
                    70:8e:50:21:d6:79:7e:23:e2:e6:ac:65:a0:ae:58:
                    1a:0b:c5:a2:db:24:d3:49:4d:9c:ec:90:bb:e0:9d:
                    e9:48:a6:2b:e7:c9:af:da:0c:4a:e4:8e:21:54:90:
                    8a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:70:CB:8E:28:05:31:1B:70:6E:0D:F5:D0:98:20:6C:9E:44:63:22
            X509v3 Authority Key Identifier:
                keyid:28:F9:F9:FB:DF:48:9E:86:A2:CB:92:9A:47:E8:BC:0A:BC:2A:1B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ae:97:ab:f4:72:ad:76:81:b4:33:1c:b3:9f:48:54:1a:ee:
         62:91:a8:ce:ad:d3:01:0f:4e:72:b6:99:e9:6f:96:d3:6f:a1:
         25:a4:2a:93:0a:5d:4e:ce:88:9c:ce:1d:4f:2a:23:8c:6c:e0:
         b5:e0:74:5e:9e:0a:03:41:33:80:05:24:fd:d3:85:89:58:2b:
         b7:20:d4:90:aa:96:18:2b:42:dc:30:62:05:ba:9e:ed:14:4f:
         3a:3e:a7:d1:40:cc:ce:14:82:ed:dd:8e:a6:9f:d0:6a:39:65:
         27:46:3d:49:7b:79:21:f8:ab:67:51:8d:0c:41:11:2a:a1:4a:
         55:e4:ba:21:0e:95:bc:27:35:c0:82:64:77:97:34:7d:8d:91:
         58:75:8d:2a:e7:90:9c:d2:ff:06:84:31:ee:66:00:fb:54:dc:
         b6:cc:e0:74:9c:ca:46:13:aa:34:c3:f1:f7:4e:12:29:33:12:
         db:be:e5:2d:7b:24:e8:3a:cd:b7:86:0c:c2:68:69:7c:68:e9:
         cf:ed:7e:04:17:2f:43:97:6c:31:99:08:70:11:31:06:bd:28:
         86:fc:2b:7b:5b:f5:14:23:64:af:27:ef:77:fe:5e:a2:eb:e7:
         50:57:91:24:25:6e:ba:ed:05:4f:54:7c:2f:d0:58:cf:48:31:
         30:f5:cc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:21 2025 by rpki-client on console.sobornost.net