Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.mft
File:                     9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.mft (raw, json)
Hash identifier:          IgyAqgmQ85ud9Z6rLODb+uU6cQ9awGcDSUWZDwjJLKc=
Subject key identifier:   56:B9:E9:94:23:50:3D:51:1F:5E:9D:A9:E2:60:BE:F9:02:0C:08:AC
Authority key identifier: 9D:E0:0F:E8:DD:E4:9E:9E:2F:56:E2:61:AA:1C:3E:93:13:EE:B3:FE
Certificate issuer:       /CN=9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE
Certificate serial:       38F315141F599AD16EED9F100807373A7C0CEB8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.mft
Manifest number:          0203
Signing time:             Sun 27 Apr 2025 16:58:24 +0000
Manifest this update:     Sun 27 Apr 2025 16:53:24 +0000
Manifest next update:     Mon 28 Apr 2025 17:29:24 +0000
Files and hashes:         1: 323830343a343738303a3a2f33322d3438203d3e20323637303538.roa (hash: orO/1R0+9lYbIbJddlR5mm0L25AsMFyaS1SmlAkobc4=)
                          2: 9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.crl (hash: sck17dMyjQigcCMM9WFlx4ksA9EdZg56Sob5j6LSBuk=)
                          3: 34352e3232382e39362e302f32322d3234203d3e20323637303538.roa (hash: 5FNu6OiEs92vCxFqtAHez4FJ3a9UuGefadMQFR0f41I=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.crl
                          rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 17:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f3:15:14:1f:59:9a:d1:6e:ed:9f:10:08:07:37:3a:7c:0c:eb:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE
        Validity
            Not Before: Apr 27 16:53:24 2025 GMT
            Not After : Apr 28 17:29:24 2025 GMT
        Subject: CN=56B9E99423503D511F5E9DA9E260BEF9020C08AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:88:74:c9:6a:24:43:72:c2:c3:4f:c1:5a:
                    9b:fb:44:bc:22:af:97:9d:be:a4:19:30:6a:23:5c:
                    c7:d3:ed:82:db:09:db:74:e9:07:8f:8e:af:1a:bb:
                    ef:44:5c:d8:a5:ef:03:79:22:cb:a4:1d:52:b6:7d:
                    6f:1f:0e:c6:23:70:97:b6:ae:73:ae:29:ae:5d:91:
                    f4:58:ae:d4:be:2f:11:de:dd:d3:37:07:28:d1:c9:
                    8c:77:09:1e:82:12:d0:5d:ff:57:ca:e9:5b:a0:bd:
                    ac:2e:2c:7b:bb:7c:72:b8:41:ec:ad:7e:e0:1e:5a:
                    cf:1b:2a:c1:70:5f:e4:06:62:1b:26:5c:0e:1a:b5:
                    35:42:1f:04:02:85:9a:25:09:6d:df:22:c9:e9:63:
                    82:7e:fc:25:c5:f7:2a:1d:64:35:8f:a3:d0:f6:5d:
                    f0:f8:f8:9b:f1:05:7a:68:e1:55:35:36:67:d3:dd:
                    00:8c:55:70:67:67:1e:3b:72:ea:c9:33:ea:2f:43:
                    23:f4:54:1d:fb:1b:18:5e:cc:e3:f6:c0:a3:50:f0:
                    bd:96:64:b9:26:00:25:fe:48:98:7d:56:9d:c5:e7:
                    b8:bb:21:c7:9b:51:af:51:fd:ff:a8:6b:a0:5f:1e:
                    65:63:76:dc:15:9e:1e:6f:60:6d:9a:21:67:e1:fa:
                    20:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B9:E9:94:23:50:3D:51:1F:5E:9D:A9:E2:60:BE:F9:02:0C:08:AC
            X509v3 Authority Key Identifier:
                keyid:9D:E0:0F:E8:DD:E4:9E:9E:2F:56:E2:61:AA:1C:3E:93:13:EE:B3:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:fb:47:97:f8:0a:3a:d2:af:64:1e:47:16:8f:0a:17:dc:f4:
         2b:3e:74:37:2d:4e:0b:64:ef:17:ef:bc:12:47:b0:c7:6d:2a:
         f3:82:e7:28:8b:a4:df:b0:91:f3:f7:b1:a3:e1:ab:a9:b9:4d:
         b1:b9:18:a0:e8:03:75:d6:06:8d:e0:13:b8:21:2e:b0:d5:23:
         54:62:43:03:66:3a:72:ee:d0:a9:b3:6c:a9:88:b1:ee:ab:38:
         b7:22:f5:d7:fe:5e:1f:cb:1c:e5:91:4a:f2:99:7d:b9:f1:8f:
         cd:07:ec:b1:18:c2:c1:76:eb:bc:bb:2d:78:c0:77:ac:22:48:
         75:68:67:92:fd:62:e2:20:28:03:e2:f9:5a:fb:05:63:f8:e9:
         05:bb:d9:72:0a:da:93:b5:85:97:24:9b:72:ed:70:03:48:73:
         45:05:e5:79:33:d2:f0:69:a4:1e:69:45:0d:df:d5:f1:69:01:
         d6:45:3b:32:bc:49:49:fc:a7:03:19:c7:4e:8b:19:61:d0:1b:
         f5:a1:72:bc:95:00:0b:86:72:50:4c:89:39:14:d3:f7:77:10:
         55:a4:7e:a2:47:a0:db:d6:b1:e0:27:0f:3a:a0:97:7c:d8:7a:
         18:f1:e7:aa:b5:2f:1a:b0:31:cd:c2:1d:11:6d:d4:f1:a6:85:
         dd:66:fb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:19 2025 by rpki-client on console.sobornost.net