Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/96B1445D3AF168857BE9230D3981B34AD388C6BE.mft
File:                     96B1445D3AF168857BE9230D3981B34AD388C6BE.mft (raw, json)
Hash identifier:          zn+MAUlyOm10p+K2HYcpHLJ/rWiR/YOKzSv0Hi+0f2I=
Subject key identifier:   09:99:33:4F:EE:EA:58:56:04:88:0F:8B:FC:90:4D:80:BC:D4:70:AF
Authority key identifier: 96:B1:44:5D:3A:F1:68:85:7B:E9:23:0D:39:81:B3:4A:D3:88:C6:BE
Certificate issuer:       /CN=96B1445D3AF168857BE9230D3981B34AD388C6BE
Certificate serial:       29D4953B7508CD71AAC434FC5D941FEEC5E1AF94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B1445D3AF168857BE9230D3981B34AD388C6BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/96B1445D3AF168857BE9230D3981B34AD388C6BE.mft
Manifest number:          4D
Signing time:             Fri 25 Apr 2025 02:39:34 +0000
Manifest this update:     Fri 25 Apr 2025 02:34:34 +0000
Manifest next update:     Sat 26 Apr 2025 05:37:34 +0000
Files and hashes:         1: 323830343a376463383a3a2f33322d313238203d3e20323731353832.roa (hash: LsKNXOykccjGClS6nJENSboY3Lm8xr7IFIdbFG5Z1PE=)
                          2: 34352e3136352e3138302e302f32322d3332203d3e20323731353832.roa (hash: 4HM3wZxIGSY5X3lpg1NtAXJNAt86CptL07G8QXjYcAU=)
                          3: 96B1445D3AF168857BE9230D3981B34AD388C6BE.crl (hash: 5X1/SrX0mrAu4dxQkaov+X0y5MYeGM3DrZ5cqIm/N6E=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/96B1445D3AF168857BE9230D3981B34AD388C6BE.crl
                          rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/96B1445D3AF168857BE9230D3981B34AD388C6BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B1445D3AF168857BE9230D3981B34AD388C6BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d4:95:3b:75:08:cd:71:aa:c4:34:fc:5d:94:1f:ee:c5:e1:af:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96B1445D3AF168857BE9230D3981B34AD388C6BE
        Validity
            Not Before: Apr 25 02:34:34 2025 GMT
            Not After : Apr 26 05:37:34 2025 GMT
        Subject: CN=0999334FEEEA585604880F8BFC904D80BCD470AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5d:ba:b8:19:32:53:32:43:c1:d2:fd:97:d1:
                    31:43:71:56:8e:c7:12:36:03:fd:a4:b8:3e:32:d0:
                    1f:87:88:f5:88:4f:51:cf:ae:37:b0:5f:ef:63:93:
                    29:c5:02:e3:bb:3e:4c:58:bb:5e:ef:af:2d:0c:97:
                    c9:20:8a:62:92:a2:40:53:fa:d6:9f:f0:26:71:e8:
                    46:63:4c:87:f7:7d:8f:80:c4:4c:15:db:d4:87:8a:
                    8d:ca:a5:62:21:d5:c4:4a:ae:2f:7c:b6:b5:79:56:
                    78:c3:1f:54:da:bf:5c:de:4b:a5:3d:46:f5:40:1a:
                    30:0e:38:6a:01:70:98:32:d3:0b:cd:c7:12:5f:b2:
                    6a:03:15:a8:a6:b5:11:b2:48:e6:a1:b2:83:9c:6d:
                    ce:17:2d:63:88:1a:1e:6b:7d:5f:db:4b:fb:70:0a:
                    1e:d0:1f:e0:a1:50:c4:37:cf:00:12:b3:23:ab:7f:
                    c8:15:2f:76:f6:37:ca:9a:96:38:b6:14:ee:26:f1:
                    a3:2d:8a:f5:ff:cf:05:f5:3e:29:a4:60:f0:4a:35:
                    cc:12:26:09:66:5a:ec:a6:ea:fc:bf:05:fa:33:f0:
                    d8:cb:f4:d0:23:ae:08:83:99:43:e6:86:96:a8:62:
                    ff:c1:3e:1f:2c:ab:8d:c5:fe:8a:c4:75:2f:78:6c:
                    0b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:99:33:4F:EE:EA:58:56:04:88:0F:8B:FC:90:4D:80:BC:D4:70:AF
            X509v3 Authority Key Identifier:
                keyid:96:B1:44:5D:3A:F1:68:85:7B:E9:23:0D:39:81:B3:4A:D3:88:C6:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/96B1445D3AF168857BE9230D3981B34AD388C6BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B1445D3AF168857BE9230D3981B34AD388C6BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/96B1445D3AF168857BE9230D3981B34AD388C6BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:3a:c8:c6:76:56:fa:6a:b6:ed:8c:95:07:02:77:cb:79:1f:
         f5:31:4b:13:89:84:d8:cc:cd:b1:20:e2:5a:9b:82:a7:4c:6c:
         f4:77:f8:d0:66:45:43:48:0a:b9:7d:5b:32:82:a0:74:48:f9:
         e3:c6:c1:c2:b5:ca:2d:27:8b:f1:fb:f3:0d:f0:c6:91:b9:1f:
         15:ff:4d:83:7c:08:49:ec:bd:2c:7e:82:7a:b3:2a:e9:08:67:
         ca:ef:cb:ef:0c:e0:c8:6d:31:4a:c3:f0:0d:1d:13:55:d2:10:
         77:ce:9c:a6:7d:fd:88:6d:b9:b2:d5:bc:34:61:42:70:33:64:
         30:7c:73:49:75:cc:3a:6e:d5:69:81:7a:0a:d0:15:c1:35:fd:
         f2:a4:69:cd:b1:33:59:e4:0f:22:04:d2:eb:2f:a9:8e:f4:a3:
         16:ae:89:d3:01:63:84:5f:16:65:18:0d:f4:30:11:76:cc:c9:
         86:58:79:67:54:8b:a7:1c:6b:02:d0:16:d3:f7:08:1c:7c:0c:
         73:0b:19:66:56:4d:64:d2:42:b8:8b:b9:5c:fe:c4:3e:13:d2:
         5b:00:61:a5:80:4e:b6:b6:5a:ce:50:17:12:4e:cc:23:f2:cb:
         70:0d:c5:07:a0:9f:7d:ac:f6:52:50:27:a3:f4:28:55:3d:89:
         ba:b8:ac:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:49 2025 by rpki-client on console.sobornost.net