Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft
File:                     2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft (raw, json)
Hash identifier:          VUIQftH8CmOLUihsJPGVtrIGCy4hqu+xI0BF0QtBYbQ=
Subject key identifier:   68:FB:89:F8:8F:44:9B:22:A3:EB:E4:57:3C:93:D9:38:7D:D4:D2:AF
Authority key identifier: 2C:22:7B:E6:DE:FB:4B:9E:B0:05:C0:AC:9F:C2:84:72:7A:42:4D:89
Certificate issuer:       /CN=2C227BE6DEFB4B9EB005C0AC9FC284727A424D89
Certificate serial:       24D1432D78B44E83D7A9C2B515FF34222EDD9EA1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft
Manifest number:          F0
Signing time:             Fri 25 Apr 2025 02:51:17 +0000
Manifest this update:     Fri 25 Apr 2025 02:46:17 +0000
Manifest next update:     Sat 26 Apr 2025 03:40:17 +0000
Files and hashes:         1: 2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl (hash: s7DrNfJA6KgR+nzdhlJyi/E5rKUqcBQg9mo6773xwZo=)
                          2: 323830343a393135343a3a2f33322d3438203d3e20323734363334.roa (hash: 8Lapt3OqhJk+oBbw6CIS81Ly1MNMvSRSp7oM70142VI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl
                          rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d1:43:2d:78:b4:4e:83:d7:a9:c2:b5:15:ff:34:22:2e:dd:9e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C227BE6DEFB4B9EB005C0AC9FC284727A424D89
        Validity
            Not Before: Apr 25 02:46:17 2025 GMT
            Not After : Apr 26 03:40:17 2025 GMT
        Subject: CN=68FB89F88F449B22A3EBE4573C93D9387DD4D2AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:38:25:4c:9b:ef:86:6c:a1:86:aa:bc:6d:2d:
                    3c:20:f3:33:86:87:f1:97:e3:f0:87:2a:27:e4:7c:
                    91:be:2e:e1:fb:e7:7d:be:df:17:6f:31:80:8c:64:
                    9b:15:20:5a:57:5a:5d:b5:d4:ef:88:be:4f:35:c3:
                    5a:be:32:0d:73:d7:7c:d7:08:49:a1:39:b9:a1:a1:
                    0d:62:bd:59:92:37:6a:4f:40:84:22:42:30:d1:f9:
                    28:d9:f4:58:ec:56:0a:3d:68:79:8b:f1:9c:1c:2c:
                    f1:1a:37:51:51:d0:02:54:27:40:56:50:40:f0:6f:
                    cb:19:3d:99:4b:78:69:23:3c:4f:68:71:35:70:e0:
                    03:17:26:55:8c:e2:98:1c:aa:02:57:a3:e4:7b:46:
                    aa:21:6d:57:d7:05:5c:6b:d9:dd:94:99:4b:6e:d6:
                    55:fe:1a:cd:89:8e:b9:8b:c9:cb:40:79:15:ae:38:
                    3b:be:b9:b9:da:37:3d:a2:f8:3d:b0:8e:49:17:22:
                    c2:1c:b3:65:54:3e:af:27:92:42:54:22:02:6e:b4:
                    75:78:22:a4:95:49:74:6c:28:f5:81:8d:3d:5c:37:
                    b7:9e:e4:70:98:ef:7b:59:08:09:f5:7f:eb:f1:11:
                    e9:46:09:84:68:01:2d:4a:3e:af:4e:4e:db:7b:dd:
                    89:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FB:89:F8:8F:44:9B:22:A3:EB:E4:57:3C:93:D9:38:7D:D4:D2:AF
            X509v3 Authority Key Identifier:
                keyid:2C:22:7B:E6:DE:FB:4B:9E:B0:05:C0:AC:9F:C2:84:72:7A:42:4D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:43:9f:c0:36:c4:4c:e6:3f:ad:b2:3f:d8:31:8e:54:87:23:
         11:2d:df:d6:51:8a:9f:2b:19:e9:c4:a3:c7:f2:78:27:e4:e7:
         2e:63:bd:2b:0e:c7:9e:7f:bb:e8:72:4f:a5:bc:1f:32:50:52:
         4e:93:7d:66:46:83:66:18:cf:46:19:da:44:8a:c9:8f:4a:8b:
         2a:dd:1a:a6:f4:aa:5b:a7:64:08:00:96:71:b6:d8:7e:65:0d:
         e4:8d:7b:34:57:00:ae:62:c8:0f:f8:4a:ab:cb:e2:62:ce:09:
         53:93:c8:98:0d:35:0d:2e:a2:47:87:17:56:41:47:02:9e:94:
         3f:10:ac:63:fd:09:20:9d:36:1b:cd:df:eb:be:d9:b6:7f:23:
         b1:bd:ce:75:a4:6a:67:39:7f:a9:b0:d3:aa:6e:65:42:8c:46:
         dd:3a:5f:58:73:b2:de:6f:43:22:b1:84:3a:26:76:82:a3:d0:
         65:bb:d7:2a:d4:d3:54:27:45:8d:45:fe:62:ff:4b:6a:03:f8:
         97:7b:45:51:23:a9:fd:1a:5d:54:07:a8:25:07:1f:fa:6b:ee:
         da:b6:da:40:d2:41:06:5f:cc:c7:46:5a:96:5c:5b:0f:44:0a:
         65:b0:90:a1:be:06:6e:b8:d1:4a:71:ee:ca:61:e6:fd:1a:f7:
         45:3d:57:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:49 2025 by rpki-client on console.sobornost.net