Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft
File:                     17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft (raw, json)
Hash identifier:          9U0+zjZYM5HgQ6023RWnK35XqLIDIdfPJf9DFbcpXTA=
Subject key identifier:   A5:F3:D2:17:40:87:AB:EA:D9:6E:1E:55:B8:A7:A1:73:28:3D:AD:C2
Authority key identifier: 17:AE:8A:BC:70:3F:A8:58:68:09:D4:D8:7E:B5:C6:45:27:88:A9:EE
Certificate issuer:       /CN=17AE8ABC703FA8586809D4D87EB5C6452788A9EE
Certificate serial:       7AF88C736C1334FBC24696E315CFDB985432BD41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft
Manifest number:          B2
Signing time:             Sun 27 Apr 2025 15:32:22 +0000
Manifest this update:     Sun 27 Apr 2025 15:27:22 +0000
Manifest next update:     Mon 28 Apr 2025 16:54:22 +0000
Files and hashes:         1: 17AE8ABC703FA8586809D4D87EB5C6452788A9EE.crl (hash: UWRKxs06sMIhFB7ukZY5Ruhe2TM01G8yl0aaF8rsDxA=)
                          2: 323830343a393165343a3a2f33322d3438203d3e20323734363733.roa (hash: s21rNeQfq9YTEKaQ6qP+omsM/9QsW3wpcSyzvCuwbG0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.crl
                          rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f8:8c:73:6c:13:34:fb:c2:46:96:e3:15:cf:db:98:54:32:bd:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17AE8ABC703FA8586809D4D87EB5C6452788A9EE
        Validity
            Not Before: Apr 27 15:27:22 2025 GMT
            Not After : Apr 28 16:54:22 2025 GMT
        Subject: CN=A5F3D2174087ABEAD96E1E55B8A7A173283DADC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:de:79:52:9f:2e:93:4a:0e:3f:74:55:0a:34:
                    15:2d:13:f2:70:72:66:c2:ac:2f:18:96:9a:8d:0f:
                    6c:bd:f5:fd:39:b5:b8:6a:38:3d:3f:b8:8a:80:3e:
                    4f:f6:31:a1:28:3e:83:b9:b6:85:f2:12:64:98:68:
                    20:a1:ea:fe:9f:df:04:b5:af:77:bf:ac:fc:ff:36:
                    d8:d3:65:1c:7a:f7:3d:d5:46:8f:95:42:c0:0f:f3:
                    7c:e9:d8:70:b2:03:8d:2d:a8:7d:77:30:16:09:7e:
                    82:d4:30:ca:eb:28:2b:16:e1:93:c9:e9:67:7e:57:
                    ee:05:15:20:f3:ca:48:8d:10:2c:a8:11:19:4c:aa:
                    05:46:f7:9e:ff:97:d6:c9:56:32:7b:a7:3f:1a:e8:
                    b4:0b:32:67:22:e3:93:45:b2:ce:65:9f:0a:04:fc:
                    f7:9e:5f:a0:0c:71:28:2f:87:58:11:0f:42:43:b0:
                    4a:32:d8:90:9c:f6:06:8a:ba:e0:6c:d5:a3:8f:15:
                    9c:d1:d8:97:98:86:da:28:59:7b:f5:cb:4c:cb:d9:
                    00:05:20:66:d5:b6:1b:2c:d9:69:93:ca:86:6a:86:
                    47:9c:a5:c6:8b:95:bf:b3:09:c3:4f:7f:1e:62:46:
                    99:17:87:3f:37:1a:77:44:38:f6:2a:db:78:d5:63:
                    cf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F3:D2:17:40:87:AB:EA:D9:6E:1E:55:B8:A7:A1:73:28:3D:AD:C2
            X509v3 Authority Key Identifier:
                keyid:17:AE:8A:BC:70:3F:A8:58:68:09:D4:D8:7E:B5:C6:45:27:88:A9:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ee:8b:d0:d1:12:5a:57:dc:ea:95:3d:6c:8b:21:1b:db:e6:48:
         42:f4:18:f5:8c:58:8c:d1:a2:66:a7:1b:8e:f7:74:57:bb:ff:
         f3:9d:1a:0b:66:a6:f3:27:77:9a:29:79:26:a4:30:fe:fb:ba:
         b7:83:9c:4f:6b:7f:b9:20:10:69:8d:01:f3:d8:2f:61:f6:f0:
         82:b4:ef:b6:7c:41:b8:be:e2:06:55:59:d0:d6:b9:3d:a2:12:
         cd:8d:e5:05:95:63:4b:68:7c:8e:47:a8:7e:9e:b1:f2:be:d4:
         88:48:3e:4f:78:c3:44:0c:c9:d1:04:cf:fb:1a:53:a8:9d:ad:
         43:a2:14:cf:23:0d:f3:2c:54:9f:36:29:c0:24:03:1e:c2:17:
         a9:15:6f:ab:58:ad:e4:bf:d3:47:25:29:e1:cb:ca:f9:12:62:
         74:ec:ba:bc:1d:a6:d3:9b:af:30:ce:1b:f1:26:19:8d:52:51:
         8c:2e:d3:9e:22:c5:60:66:5b:72:4b:5c:71:98:e4:e9:f4:c6:
         f7:04:05:44:a5:6f:5f:b6:63:cf:d0:cd:3c:7c:88:b0:c2:39:
         6f:56:68:82:24:48:16:e1:f1:0c:74:59:57:a5:13:50:39:ed:
         1e:38:66:a1:9c:45:8e:fe:f1:45:60:8c:cb:d3:b6:85:71:4d:
         53:c5:5c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:15 2025 by rpki-client on console.sobornost.net