Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.mft
File:                     7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.mft (raw, json)
Hash identifier:          e/fZHfMKpqneSMHDH0JQrAEC/BfO2Xs3k2mt4OD+4d0=
Subject key identifier:   B0:10:03:E2:96:31:EB:43:43:E4:94:0B:23:70:55:73:24:BB:4A:61
Authority key identifier: 78:94:11:9F:99:DA:D3:90:51:E9:51:6F:AF:4C:2D:AA:5C:D1:BE:70
Certificate issuer:       /CN=7894119F99DAD39051E9516FAF4C2DAA5CD1BE70
Certificate serial:       7EC4AE8015AC0DAA80E920613050711994D68EE0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.mft
Manifest number:          0208
Signing time:             Mon 28 Apr 2025 13:34:04 +0000
Manifest this update:     Mon 28 Apr 2025 13:29:04 +0000
Manifest next update:     Tue 29 Apr 2025 14:32:04 +0000
Files and hashes:         1: 323830343a346137383a3a2f33322d3438203d3e20323637323432.roa (hash: u1jRHd6XPl5NR1zXUvhgK9IHleRZ9pCCbSSFW8l2D+A=)
                          2: 7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.crl (hash: /nz8YLd8eEUzgckTZZ70iXIfvEPzrU7hf957bLzO4VU=)
                          3: 34352e3233322e33362e302f32322d3234203d3e20323637323432.roa (hash: 3jhuvPCfE9NQvEUihWLFsEUj5gJdW5izmTxvxxDBeYY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.crl
                          rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 14:32:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c4:ae:80:15:ac:0d:aa:80:e9:20:61:30:50:71:19:94:d6:8e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7894119F99DAD39051E9516FAF4C2DAA5CD1BE70
        Validity
            Not Before: Apr 28 13:29:04 2025 GMT
            Not After : Apr 29 14:32:04 2025 GMT
        Subject: CN=B01003E29631EB4343E4940B2370557324BB4A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cd:b2:a3:f6:70:ca:14:bb:0c:34:a2:af:84:
                    eb:0f:5b:fc:5c:81:54:ec:de:b9:56:10:c3:be:8e:
                    6c:12:e2:fd:ce:e0:43:37:85:6a:0b:06:0c:a0:f0:
                    fb:a2:b2:8e:ae:d4:7d:bf:9f:c4:91:b0:ec:3a:ce:
                    b3:92:bb:7d:14:85:b0:10:8c:bc:67:da:af:a7:9f:
                    92:c0:55:8d:98:e9:7e:1c:1b:78:77:77:75:a5:62:
                    f7:b0:db:30:b2:d6:6a:4a:8f:0e:c3:b7:e9:a6:7e:
                    db:e7:41:08:cf:f2:6f:e8:df:e9:c0:88:69:6f:2a:
                    d4:69:38:df:8c:ca:50:87:73:b4:7f:c1:1c:e9:03:
                    62:8b:6e:d7:8e:d4:9e:9f:1a:c3:9d:c6:2b:50:b0:
                    27:6f:eb:15:16:1d:4e:10:d7:c2:0c:5e:66:a5:9d:
                    6e:f8:79:37:05:2d:02:ee:eb:f5:f4:1a:a9:84:03:
                    bc:80:eb:64:88:d1:e0:09:39:1d:a8:5b:15:90:01:
                    1d:ca:7c:c3:ab:92:e2:7f:2d:f6:cb:cf:73:f6:9e:
                    9f:15:1c:9a:9c:0a:cf:c8:8d:eb:15:04:95:da:47:
                    80:d1:44:c8:8b:12:94:4b:30:1d:96:aa:33:fc:97:
                    cf:00:d0:a2:54:48:77:b6:bd:ac:33:1e:8c:1b:1c:
                    bf:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:10:03:E2:96:31:EB:43:43:E4:94:0B:23:70:55:73:24:BB:4A:61
            X509v3 Authority Key Identifier:
                keyid:78:94:11:9F:99:DA:D3:90:51:E9:51:6F:AF:4C:2D:AA:5C:D1:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:82:50:b6:77:8b:c9:37:3a:28:e5:5c:4b:50:34:64:52:07:
         5f:1d:35:56:a7:ec:8d:da:ff:d0:df:1f:11:0a:1d:99:12:aa:
         48:d3:2f:7a:c7:21:c8:eb:04:a9:d9:26:56:2a:43:12:32:ab:
         97:d8:46:56:94:d0:ca:e5:b5:f1:be:c3:2d:e8:33:6a:50:67:
         64:b1:40:7f:f6:b6:41:ad:59:ac:cf:c8:c8:8a:a6:65:ff:f7:
         53:6c:86:2e:8e:82:5b:da:83:f6:be:b5:44:30:27:46:4f:25:
         bd:02:9f:25:21:d2:2d:e7:b4:8c:c5:c2:23:13:6b:d4:e2:36:
         f3:02:99:54:bc:7d:80:95:5e:a5:33:4e:4e:a2:c2:13:86:ff:
         24:62:e6:f1:fd:dd:32:85:62:a0:e8:60:03:c7:5c:a4:2b:8b:
         6f:f1:85:cc:ec:d8:d0:a3:ff:bb:ce:c7:cc:2a:1a:35:ff:26:
         38:04:a8:81:de:a2:df:d0:97:19:b1:45:ca:da:d0:ff:fd:87:
         3e:0c:bb:8e:83:34:ab:cd:ae:6b:f8:51:bb:02:32:0e:57:20:
         89:6f:2d:c2:58:21:6b:6d:a5:98:70:05:65:8d:42:1b:31:95:
         de:cf:3a:8f:74:71:6b:e0:c8:c3:a2:bd:d8:57:a1:08:97:38:
         8e:0a:79:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:17 2025 by rpki-client on console.sobornost.net