Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft
File:                     3DFAB11D75C819D05773554EBACF15CD75341EF8.mft (raw, json)
Hash identifier:          yK6+wSelMG7Ae/Oq/znyOaCthDsZ9XEt3tj7acR+NVE=
Subject key identifier:   20:13:59:D7:3E:B5:10:F5:63:C2:92:4B:84:D5:F8:FA:E9:04:B5:96
Authority key identifier: 3D:FA:B1:1D:75:C8:19:D0:57:73:55:4E:BA:CF:15:CD:75:34:1E:F8
Certificate issuer:       /CN=3DFAB11D75C819D05773554EBACF15CD75341EF8
Certificate serial:       2916652C9CC03E21B8D3B7042CEC6228C6C0248E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft
Manifest number:          024B
Signing time:             Mon 28 Apr 2025 03:00:00 +0000
Manifest this update:     Mon 28 Apr 2025 02:55:00 +0000
Manifest next update:     Tue 29 Apr 2025 03:00:00 +0000
Files and hashes:         1: 323830343a373963633a3a2f33322d3334203d3e20323731333238.roa (hash: ioQjGfieQHF3yV2fgI8Chw4pCzVaqcleon3vtaTviRw=)
                          2: 3DFAB11D75C819D05773554EBACF15CD75341EF8.crl (hash: xB05nUIL1amsi0GqImiG2lEa2JSGt7Zk+YDc4VEcbs4=)
                          3: 3230302e392e3131362e302f32322d3234203d3e20323731333238.roa (hash: oltG1noOnbrRoM0sS15kDu8e6YFzCzXI+kuYiuRIpNo=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.crl
                          rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:16:65:2c:9c:c0:3e:21:b8:d3:b7:04:2c:ec:62:28:c6:c0:24:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DFAB11D75C819D05773554EBACF15CD75341EF8
        Validity
            Not Before: Apr 28 02:55:00 2025 GMT
            Not After : Apr 29 03:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:44:12:63:78:6a:f1:26:7b:d3:98:27:e7:e2:
                    65:0d:c6:6d:5d:2a:52:f5:40:d6:c8:33:3c:d7:31:
                    bd:86:ca:e0:40:0e:9a:49:2e:a6:60:54:74:20:e1:
                    55:44:ed:f7:3e:16:09:07:97:52:f5:9b:d3:18:d2:
                    2d:0d:81:9a:55:02:51:ac:cd:10:b7:e9:c9:1e:2c:
                    4c:39:0f:82:8b:3c:4f:57:46:9b:12:41:01:94:73:
                    b2:b2:19:80:32:a5:29:f8:6d:d1:3c:4d:0c:47:55:
                    a1:a5:c4:2f:f9:bf:4d:13:1c:af:6b:36:9f:ec:1e:
                    6f:ea:03:cb:80:13:b2:1e:a4:c7:d1:c6:52:d8:d7:
                    49:01:3f:b2:0e:a8:ba:7b:4e:9a:df:25:5a:fc:25:
                    68:0d:0e:b1:8d:f6:69:21:4c:57:ae:18:90:4a:1a:
                    92:d4:c8:4d:75:46:f5:a7:d7:25:f5:e2:e5:05:39:
                    be:5d:c6:82:20:c3:c2:a0:2f:6c:66:20:b8:26:e8:
                    07:a1:b9:e2:14:da:a0:ed:ca:c2:4f:3d:d5:28:99:
                    fc:08:43:dd:af:41:f6:02:3b:07:90:d3:d4:8e:c9:
                    29:df:38:c0:c7:a2:f9:2f:cb:51:ff:14:fb:74:b0:
                    4d:19:75:44:7e:e8:c9:d2:56:dc:68:f5:8d:7f:63:
                    90:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:13:59:D7:3E:B5:10:F5:63:C2:92:4B:84:D5:F8:FA:E9:04:B5:96
            X509v3 Authority Key Identifier:
                keyid:3D:FA:B1:1D:75:C8:19:D0:57:73:55:4E:BA:CF:15:CD:75:34:1E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ac:8c:d9:3c:cb:77:4b:33:94:1d:47:87:fd:0f:c7:47:e3:
         79:69:51:11:5b:7a:52:58:5b:5c:78:f4:f9:38:50:31:70:5a:
         c7:4f:a0:3e:8c:2c:b3:e1:c1:cb:a2:14:b9:17:8a:18:f4:95:
         af:16:ce:fe:71:ef:ef:9f:4a:1d:15:c4:72:90:c8:db:bf:c7:
         c7:0c:86:e7:cc:04:38:fe:c0:77:82:73:57:3e:51:30:73:3f:
         07:0f:d3:c6:3e:54:73:9e:ac:7c:ff:40:45:6d:c4:e4:e8:5c:
         8a:bf:2a:e0:c3:a8:7e:20:cb:d4:eb:7f:eb:2a:bd:7a:95:f6:
         94:10:53:db:9d:b5:43:6c:8a:7c:89:dd:b7:f9:18:66:17:04:
         4b:b6:bf:df:ba:50:b4:80:00:62:54:d0:08:f0:67:c6:7b:26:
         f0:3b:50:b7:06:23:b6:68:e4:6b:a9:82:6c:b1:d6:d4:79:9f:
         32:1e:2c:09:cf:45:7a:ef:3a:54:ec:8e:a4:9a:19:5a:e4:ec:
         5e:ab:65:64:83:9f:71:eb:23:d5:e2:43:b0:d2:4d:92:0f:27:
         a6:83:f7:3e:02:5d:58:0f:99:4c:49:b5:93:a1:85:0c:3a:82:
         52:9e:d6:79:ef:26:6c:63:76:d4:ea:0a:9b:dc:04:75:b0:72:
         a0:cb:78:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:51 2025 by rpki-client on console.sobornost.net