Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
File:                     4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft (raw, json)
Hash identifier:          1clEdK80hcGm96+FJdlK+6H0edXcTtWtlk0MpVSima0=
Subject key identifier:   A4:F2:34:57:A1:8A:FE:AE:70:A3:E6:CC:0B:3D:C5:54:69:7E:75:A7
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       5554741451196CB97B586F9B9B0A64CED95F7285
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
Manifest number:          0204
Signing time:             Sat 26 Apr 2025 10:37:16 +0000
Manifest this update:     Sat 26 Apr 2025 10:32:16 +0000
Manifest next update:     Sun 27 Apr 2025 14:22:16 +0000
Files and hashes:         1: 3138372e31392e39362e302f32302d3234203d3e203238313330.roa (hash: hYJKiYdiFG1bbXS2RPhu3e6mc0U2abXL5vHaZmQMmCI=)
                          2: 3133382e39392e3234382e302f32322d3234203d3e203238313330.roa (hash: l3povcAz9XVd1PMqDFL5tIDTayHGtM/q1o8EZqMj1wg=)
                          3: 3138362e3235312e3134382e302f32322d3234203d3e20313938393439.roa (hash: C20itxJ4DTD7IOico22t2Q5Dvtz1NIhvSEH11LBPj6s=)
                          4: 3137302e3135302e3136342e302f32322d3234203d3e20313938393439.roa (hash: P6SWfUEDEOicu/ThJIKlS3i7QKxb9vdCrj94vmvEAhk=)
                          5: 4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl (hash: nX65qLPOyc4sLaxXlNxOS0R0npFTE9aHGBfYk93SNtY=)
                          6: 3138372e31392e39362e302f32302d3234203d3e20313938393439.roa (hash: s0XQ5cBXXSL2f/2QJcexrzksmoQy6uAfeMCGqzy8uKQ=)
                          7: 3138362e3232372e39362e302f32302d3234203d3e203238313330.roa (hash: MDPUgUYSfdJiWKEt+cbVYiP4K2zgNepc9HVMAH7+QYk=)
                          8: 3134332e3230382e34302e302f32322d3234203d3e20313938393439.roa (hash: iUIlj8bU3D1YQi71akmv8N6JOC3/Xm/VMYK71LX7wYs=)
                          9: 323830343a3262383a3a2f33322d3438203d3e203238313330.roa (hash: 0J7Ac0n1Bq8fufSDdrSHC8XPwJUKaBqN+pfWYh8Epmo=)
                          10: 3138362e3232372e39362e302f32302d3234203d3e20313938393439.roa (hash: 7pF+J+djX5+jWkVin/T3LCK6bs9RTrurUrAtxMJI8R0=)
                          11: 3138362e3235312e3134342e302f32322d3234203d3e203238313330.roa (hash: NUCcgTm6CQCpYaJ+Q2SGGo4K5pvws+aseML9l7II4Uc=)
                          12: 3138362e3235312e3134382e302f32322d3234203d3e203238313330.roa (hash: HQA4VHNeDvlzZ0FpXC7b5HlrZmh4T75PBg+MFy1R9dM=)
                          13: 3138362e3235312e3134342e302f32322d3234203d3e20313938393439.roa (hash: LxMMnzvb3MU5AwskvJ2vhzJKMPcEnPpmSsbF4wuhS5s=)
                          14: 3134332e3230382e34302e302f32322d3234203d3e203238313330.roa (hash: V7JVCFnxEVgzrvrEtD4MgqjAc1VMeVN0mUu++RS9r80=)
                          15: 3137302e3135302e3136342e302f32322d3234203d3e203238313330.roa (hash: alVtSNHx14XtzkxqRCajfAxCGOdONGl8TCrIbYetgGo=)
                          16: 323830343a3163633a3a2f33322d3438203d3e203238313330.roa (hash: a9RI90c0MpGfozFMB91778PgiVXQnMTgsTIxPsg8Z60=)
                          17: 3133382e39392e3234382e302f32322d3234203d3e20313938393439.roa (hash: jqKjLV7pjenHVLaMRKXdC6mfWl48w5DovZV07lhn8Sc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 13:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:54:74:14:51:19:6c:b9:7b:58:6f:9b:9b:0a:64:ce:d9:5f:72:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Apr 26 10:32:16 2025 GMT
            Not After : Apr 27 14:22:16 2025 GMT
        Subject: CN=A4F23457A18AFEAE70A3E6CC0B3DC554697E75A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1e:a7:4e:2a:2c:7e:f6:ac:49:75:be:6f:48:
                    41:10:f3:67:98:4a:43:de:25:6b:b8:b3:2f:fb:23:
                    60:4b:ed:e1:ab:0f:6d:0a:bf:bd:c9:51:c1:72:ce:
                    96:6c:46:ee:02:ac:2f:66:9d:6f:f8:b4:75:82:e0:
                    44:da:b5:07:6a:e8:18:a6:ab:05:a8:62:28:17:a8:
                    a6:22:85:17:83:86:35:86:09:7b:a4:a8:cd:0c:60:
                    ff:96:64:8e:c9:b7:66:8c:5b:62:0c:13:85:f8:f3:
                    56:01:03:e3:14:3a:34:bc:c5:6c:69:8e:ef:93:24:
                    bf:d7:16:78:82:7f:25:e2:d1:26:d5:e2:25:0e:53:
                    75:ea:ab:07:08:f9:f9:ba:84:f8:4f:9e:dc:b6:30:
                    01:40:8b:4f:6b:e9:3f:ba:af:e7:32:d2:77:ba:a9:
                    b4:a0:8c:13:23:9d:77:8a:cf:c1:76:16:fe:c0:52:
                    7d:ef:29:63:00:4e:cd:d4:65:52:90:70:b4:4e:35:
                    21:a3:f9:ae:e1:1d:c9:a4:a2:72:4e:37:a5:14:8a:
                    02:24:f1:f2:65:ab:ff:3c:12:1a:a7:5a:0a:bf:56:
                    f6:01:ed:cf:fb:ce:22:1a:35:0a:a9:01:c2:7c:69:
                    bd:d5:30:d5:f2:c9:d2:60:e4:4c:0e:93:1c:bf:64:
                    c3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F2:34:57:A1:8A:FE:AE:70:A3:E6:CC:0B:3D:C5:54:69:7E:75:A7
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:42:66:8a:59:ee:9f:a6:a0:9b:ad:f1:a5:43:b9:b3:20:03:
         d7:27:79:8e:65:ae:57:e4:73:90:c5:44:90:c3:e4:f8:3b:3e:
         ca:36:ed:9c:b3:63:fb:63:1e:e2:3c:d4:05:06:f1:16:74:84:
         5a:26:ab:14:9e:a3:ad:e8:25:82:7b:f7:3c:47:c3:40:d7:9f:
         f7:5e:7c:3e:4e:20:45:8c:cd:ef:fe:01:db:c5:43:bd:2b:d6:
         59:57:fa:b9:49:3e:7d:96:3e:36:6d:49:18:9c:d8:9d:f0:c2:
         19:0a:fd:cc:a9:5a:02:be:64:c1:33:86:40:c2:6c:27:da:21:
         3a:49:21:04:ba:b8:49:89:5f:d0:7e:1b:a7:4d:84:aa:1d:c9:
         1d:02:0f:87:a9:01:06:27:12:eb:40:ac:cd:61:9d:4b:aa:5f:
         c5:a6:db:25:d1:6b:0c:77:5d:96:86:32:17:d7:81:48:ab:49:
         62:e2:9e:5e:5b:88:40:74:3b:c7:4e:fe:d6:f3:34:bf:e2:0c:
         ce:f7:7c:4c:fd:90:57:77:b5:16:ec:18:21:1b:59:ac:f9:3c:
         b4:f7:04:57:38:d7:7f:a9:3a:ae:f7:33:76:07:b1:e3:cf:ac:
         fb:68:a8:19:77:1f:41:cb:59:08:88:10:1c:1b:a0:0f:6b:90:
         90:e9:bc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:29 2025 by rpki-client on console.sobornost.net