Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft
File:                     1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft (raw, json)
Hash identifier:          iTTKK9KMFLBOpYn1ntjMIKOoM6bRcP5XI7Q5fEgaR0w=
Subject key identifier:   90:37:56:C5:4C:3F:7A:F5:28:28:EE:47:09:D5:C5:BC:89:D9:61:1F
Authority key identifier: 1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22
Certificate issuer:       /CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
Certificate serial:       26A173C9899548EDDE97B52E334909624A53D716
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft
Manifest number:          0161
Signing time:             Thu 24 Apr 2025 16:53:51 +0000
Manifest this update:     Thu 24 Apr 2025 16:48:51 +0000
Manifest next update:     Fri 25 Apr 2025 17:44:51 +0000
Files and hashes:         1: 323830343a3936633a383930303a3a2f34302d3430203d3e20323633303835.roa (hash: QcLBn2FW6MS06pj928K1BAwy2EGURY5KlgXU3hN1hmI=)
                          2: 3134332e3230322e3138382e302f32322d3332203d3e20323633303835.roa (hash: rfuLdgMvv0HDJvfNzKp1BkSRrExLo8kMHJmGjgClIHQ=)
                          3: 323830343a3936633a3a2f33322d3332203d3e20323633303835.roa (hash: fIcSU5Nj5GaUIL8yma9QszHx5QrEL/vnDBk6PqSgXVY=)
                          4: 3230302e3233332e33362e302f32322d3332203d3e20323633303835.roa (hash: OaBqNKojikmJPtORza2BT6bwUtoaHkvHJGDrJ6TT0Jk=)
                          5: 1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl (hash: lonZ0TE1Iq5qS9GbQbrbt2cmGYEVtPnj8eX97CcBVbk=)
                          6: 3138362e3233332e3231362e302f32322d3332203d3e20323633303835.roa (hash: dUKJbgwSBEnhqYt7sRu5Q8zzxeZ2QKEPAxSb/41Rrzw=)
                          7: 323830343a3936633a383830303a3a2f34302d3430203d3e20323633303835.roa (hash: lB9qjGVhNhF5lJJzZDhsXssryZPQSWcU0WlF69K5CGw=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl
                          rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 17:44:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a1:73:c9:89:95:48:ed:de:97:b5:2e:33:49:09:62:4a:53:d7:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
        Validity
            Not Before: Apr 24 16:48:51 2025 GMT
            Not After : Apr 25 17:44:51 2025 GMT
        Subject: CN=903756C54C3F7AF52828EE4709D5C5BC89D9611F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6c:e5:16:34:7f:c3:75:c6:49:4e:7a:a5:43:
                    71:41:1b:0d:63:8b:f9:0f:58:ed:b6:3a:0b:a2:7b:
                    67:6a:59:1e:69:d3:89:ab:f9:3f:fa:68:d3:3c:ed:
                    4b:9a:32:58:73:e7:5c:f6:91:15:df:c3:53:c1:c1:
                    08:be:6c:a0:fa:44:4d:f5:66:f8:56:3a:52:cd:01:
                    0c:0a:ee:0d:7b:57:70:53:ee:7e:b4:da:14:fe:0f:
                    51:d5:61:3f:e9:41:31:b3:3e:52:24:e9:5e:81:65:
                    2e:4b:7d:8d:80:1f:8b:21:1f:d0:51:0b:30:81:d3:
                    78:9a:af:fa:2d:86:33:ac:83:10:f8:7e:aa:f2:f6:
                    ba:ce:f5:78:44:3b:63:39:b5:5e:7d:be:d7:44:40:
                    07:b9:4e:a1:3e:23:f2:7b:2b:3e:92:95:b0:d3:e8:
                    2e:d8:24:85:3b:25:f9:b4:d1:ec:ca:6c:e4:ab:e3:
                    d0:15:6a:e4:cf:27:bc:9d:44:dc:cb:82:07:78:13:
                    a7:1d:15:e3:22:b6:a6:10:a7:38:09:b6:5a:72:92:
                    71:02:42:e9:fc:ce:0b:cb:f2:d5:f0:d7:7f:e2:fb:
                    10:71:68:32:57:1d:a9:c1:98:3f:e3:a9:38:0c:73:
                    b7:7a:67:26:9a:91:10:8a:87:05:71:ef:b4:2e:c8:
                    d8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:37:56:C5:4C:3F:7A:F5:28:28:EE:47:09:D5:C5:BC:89:D9:61:1F
            X509v3 Authority Key Identifier:
                keyid:1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:63:14:9c:42:a1:0a:76:55:84:c9:da:10:28:86:ba:c1:d7:
         51:e8:c1:3c:2f:79:29:85:b0:da:d1:f0:82:f1:50:c3:74:6d:
         aa:16:ed:1a:a5:cf:40:a3:1b:56:3c:7b:e7:6d:65:78:54:66:
         a9:1b:cf:37:74:6a:59:af:8a:7b:c3:75:85:d1:19:ff:93:69:
         1f:20:48:f5:bb:76:69:37:03:0d:ff:20:71:60:bf:3f:c6:5a:
         6b:73:9c:bc:e7:27:39:fb:79:26:ec:b1:a8:ae:ab:d8:e3:b6:
         3e:c4:c3:66:94:14:72:71:19:35:17:78:b3:90:9b:73:6e:68:
         9a:95:75:da:61:1e:36:78:f0:e5:7d:eb:df:96:9a:89:0b:ad:
         ef:04:83:67:b4:b8:ec:8d:fa:68:e8:e6:5e:d2:6c:ee:ce:de:
         7c:c0:e8:64:c7:62:70:94:ee:2f:0b:dc:ed:ec:06:7c:ce:d1:
         8e:79:83:46:fb:09:d0:74:2b:6d:12:f8:85:9d:aa:66:d4:fd:
         72:65:09:46:1a:c8:67:69:6e:36:56:e7:bb:54:7b:23:a3:2e:
         bc:10:59:b5:77:cc:43:bf:78:cf:07:82:77:03:25:7b:c5:df:
         8f:24:cb:70:5d:fb:23:d0:31:84:54:da:d8:ba:79:95:0d:3c:
         c5:7c:9c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:46 2025 by rpki-client on console.sobornost.net