Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.mft
File:                     99448BDECD83ABA3D08AD5929B682374FE13BE98.mft (raw, json)
Hash identifier:          sbxs3Kv39HJgORsDU5qhRxp++IUhT/bM2/e5+fmfBSk=
Subject key identifier:   56:22:5F:DD:31:51:27:7A:C1:51:16:F5:A7:28:11:E8:19:1C:A3:B4
Authority key identifier: 99:44:8B:DE:CD:83:AB:A3:D0:8A:D5:92:9B:68:23:74:FE:13:BE:98
Certificate issuer:       /CN=99448BDECD83ABA3D08AD5929B682374FE13BE98
Certificate serial:       46B8C5CBFD7C60AE66D191D3F155CC33199BE773
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.mft
Manifest number:          0209
Signing time:             Sun 27 Apr 2025 07:37:22 +0000
Manifest this update:     Sun 27 Apr 2025 07:32:22 +0000
Manifest next update:     Mon 28 Apr 2025 10:07:22 +0000
Files and hashes:         1: 323830343a316562303a3a2f33322d3438203d3e20323634343434.roa (hash: rbjYgSymgqrMaINQFLjjRvbJHQYNsGQUp9cUYv1uMko=)
                          2: 3133312e3232312e3232342e302f32322d3234203d3e20323634343434.roa (hash: GE+6Mfv78ypvI0QBvVuUpZ/Q526mmTuCMknY3Xmj0Ow=)
                          3: 3136382e3139342e3233362e302f32322d3234203d3e20323634343434.roa (hash: VuUgS33qTOrIsq5wAWpqxn08XlXuIieNDQyftKD9Dp4=)
                          4: 99448BDECD83ABA3D08AD5929B682374FE13BE98.crl (hash: auH/xceHVD8g1YKd+oaYQlRPsXJLWfK5/aSz9P5OyGU=)
                          5: 3136382e3139352e36302e302f32322d3234203d3e20323634343434.roa (hash: XRdaYBIkZInh7q9JRP8lEC+62de2mSsYxYYTcBL2RkY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.crl
                          rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b8:c5:cb:fd:7c:60:ae:66:d1:91:d3:f1:55:cc:33:19:9b:e7:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99448BDECD83ABA3D08AD5929B682374FE13BE98
        Validity
            Not Before: Apr 27 07:32:22 2025 GMT
            Not After : Apr 28 10:07:22 2025 GMT
        Subject: CN=56225FDD3151277AC15116F5A72811E8191CA3B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:51:ca:b5:3d:24:b1:6b:f8:6e:ac:5a:9b:10:
                    27:42:bd:74:65:09:73:1e:e8:ea:49:47:1f:43:af:
                    4d:2e:47:c8:9a:5f:78:a2:24:ea:2f:63:02:90:a4:
                    52:05:0a:71:33:05:77:d1:40:f8:ec:9a:18:37:7a:
                    0f:a7:24:de:c3:37:9f:0b:69:e5:17:f7:5b:f0:3c:
                    95:7a:0e:75:28:00:fd:ff:55:37:68:a5:2b:b2:0a:
                    4a:c4:bc:a5:2b:33:23:28:2e:8d:3a:3e:8e:09:ab:
                    38:9a:74:9c:d6:6f:72:27:29:3a:9b:fb:64:8a:43:
                    3b:1e:43:79:cf:19:fe:f7:5f:31:ef:63:d2:c9:c9:
                    57:d9:d0:48:77:b5:e5:93:b5:25:31:09:df:56:05:
                    bb:f2:00:b4:e9:ae:37:c3:49:bc:69:43:5c:ac:f6:
                    25:f8:ee:ce:04:98:1e:58:60:0d:c2:b4:dd:51:09:
                    54:3f:86:8c:68:7d:f4:24:e0:95:3e:1f:7a:37:94:
                    2b:6c:b0:d2:a6:d7:41:4d:45:39:cb:ad:4e:c6:c3:
                    29:db:44:f5:e8:51:40:7d:98:90:83:95:7d:5f:14:
                    9f:18:bb:ca:a2:bf:f3:98:4d:e0:f0:ae:95:06:f5:
                    d4:84:37:91:86:23:d2:99:e1:50:b1:86:fa:54:42:
                    e9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:22:5F:DD:31:51:27:7A:C1:51:16:F5:A7:28:11:E8:19:1C:A3:B4
            X509v3 Authority Key Identifier:
                keyid:99:44:8B:DE:CD:83:AB:A3:D0:8A:D5:92:9B:68:23:74:FE:13:BE:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:5b:9d:fa:f9:f2:f6:d1:2c:54:00:9d:4b:03:7b:2a:90:b3:
         72:7f:37:7f:48:87:ed:e2:f9:6c:26:80:b4:2d:ca:06:bb:be:
         aa:8a:4a:14:ac:38:65:1c:5b:a1:f0:7d:83:88:27:ac:68:e4:
         8c:b4:d3:80:70:72:d4:bd:c6:aa:27:5a:73:42:4c:10:39:ca:
         c4:14:ba:70:25:83:13:4c:d6:c9:6d:99:92:5d:1f:a8:d2:0c:
         a3:dd:b7:0a:50:15:9f:c7:d3:f7:ee:4b:12:16:70:2f:32:56:
         fc:79:e8:e9:d0:90:d2:b9:4e:64:50:fb:ad:47:22:fa:36:bb:
         56:c0:b6:01:29:a1:dc:06:8a:fb:33:5a:0d:7c:90:e5:89:57:
         ae:9e:b6:98:30:cf:30:d9:b9:dd:f1:e3:17:c0:96:57:24:05:
         f5:fa:ca:f0:e6:de:78:30:ab:59:9d:49:03:24:67:ae:97:06:
         53:53:f5:56:ba:c0:82:d7:85:05:ad:aa:12:c0:22:04:6a:93:
         f0:e9:ec:45:08:90:2e:4b:79:c3:97:37:68:92:38:8d:0f:a5:
         da:df:a3:31:56:3c:a7:89:05:0a:70:7f:d0:5f:d6:b9:7e:e3:
         ca:5c:d1:b7:b1:55:36:46:d7:49:92:ba:84:6c:eb:aa:18:c2:
         20:dc:dd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:56 2025 by rpki-client on console.sobornost.net