Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
File:                     28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft (raw, json)
Hash identifier:          Al0GbDJvzM0VRWI7SQJbllQTuvHhLl6HmbFNvhmwrPU=
Subject key identifier:   0B:6B:4C:B0:0E:10:C4:EA:E5:D5:9C:40:86:4F:5E:67:05:65:87:6E
Authority key identifier: 28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0
Certificate issuer:       /CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0
Certificate serial:       4B86BD20FB1F5E37E1CAE884E890C4BD43430FE0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
Manifest number:          013C
Signing time:             Mon 28 Apr 2025 12:13:48 +0000
Manifest this update:     Mon 28 Apr 2025 12:08:48 +0000
Manifest next update:     Tue 29 Apr 2025 14:43:48 +0000
Files and hashes:         1: 323830343a343762383a3a2f33322d3438203d3e20323637303733.roa (hash: kMrhH0VDhwxMZhLjZTsI3oMyDgm9tXjaUvcEbwtxkbg=)
                          2: 34352e3232382e3136302e302f32322d3234203d3e20323637303733.roa (hash: 36tm/ZNfVriCex/AeT9EEPTP1z2C4g9vj5bmygGd8xU=)
                          3: 28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl (hash: uCDefI+GdRhIlHLO6Cu6VZC6hVdZwjzUL4584A6PKVE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl
                          rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 14:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:86:bd:20:fb:1f:5e:37:e1:ca:e8:84:e8:90:c4:bd:43:43:0f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0
        Validity
            Not Before: Apr 28 12:08:48 2025 GMT
            Not After : Apr 29 14:43:48 2025 GMT
        Subject: CN=0B6B4CB00E10C4EAE5D59C40864F5E670565876E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0e:a5:7d:7d:15:3a:fa:65:3e:f2:d4:bb:60:
                    39:b4:50:b4:55:61:1e:9d:ff:80:61:e3:3b:ba:89:
                    90:ac:1c:ab:36:9a:da:22:2b:ea:e9:fc:bf:02:a1:
                    c9:fa:91:1f:30:1b:e1:9a:ce:59:20:97:4b:fb:d5:
                    72:0a:b0:d8:a0:97:5f:f2:f2:2b:7b:c9:0d:42:81:
                    ba:34:e7:f2:cb:b0:75:7a:a9:1a:20:ae:36:56:83:
                    01:f0:da:c0:ad:4f:7a:0e:a8:68:35:54:77:78:30:
                    9c:c2:8c:fd:4b:e1:d0:52:50:5e:76:ce:e6:b4:17:
                    fd:0c:77:25:55:7f:e7:74:ce:c9:60:75:7b:98:1c:
                    e4:a9:3a:1d:21:d2:f7:ab:5d:3f:00:a2:28:7d:50:
                    cf:5a:7e:65:da:82:47:0c:0f:0b:62:9b:e0:e9:60:
                    82:1d:2a:a3:ef:01:9e:29:b2:22:6a:15:b0:a3:b8:
                    ca:8c:b9:91:28:1b:1b:8f:14:12:de:1a:0d:2c:b1:
                    a8:1d:f0:e9:e9:3f:a7:2a:1e:26:b3:8f:90:b6:32:
                    03:99:07:c8:1b:10:07:09:b5:7c:46:f9:e1:e5:f9:
                    8e:4a:d1:87:f7:db:3a:e1:e5:96:69:53:6b:f6:11:
                    07:80:63:97:e6:b2:53:d9:12:13:90:8f:aa:b2:79:
                    7f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6B:4C:B0:0E:10:C4:EA:E5:D5:9C:40:86:4F:5E:67:05:65:87:6E
            X509v3 Authority Key Identifier:
                keyid:28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:0c:76:9d:07:8b:28:b9:00:e7:eb:07:5c:54:ad:48:ae:dd:
         be:ad:13:be:cc:f9:e5:b5:ac:c4:47:11:b4:99:45:c4:05:ca:
         62:d5:6f:6f:36:99:ea:98:9b:f0:86:1d:22:e1:b1:22:fa:f4:
         33:f0:af:57:81:26:ad:09:3e:fe:26:ee:30:9c:04:59:c8:6f:
         7d:dc:86:3d:de:08:98:aa:b6:99:f9:8a:d9:a8:cb:10:53:6c:
         1a:3b:29:09:bb:dd:5e:4a:c9:f3:35:8d:b4:e5:ba:0c:16:0c:
         71:f0:a9:49:eb:85:3d:4b:ad:9d:87:6c:b7:a1:b7:c4:b1:aa:
         c3:4c:99:fd:d8:10:49:bd:e8:96:72:23:1b:1d:ef:fb:90:46:
         14:ce:7a:4d:ee:68:44:32:b9:5f:06:b3:5b:c1:fc:22:46:31:
         cb:0a:12:a2:25:e6:0d:e3:08:90:f1:bb:f7:0a:9f:af:cb:86:
         5e:73:ea:e2:26:de:5e:3f:cb:0b:5b:19:5f:3c:f8:5b:8e:0a:
         bf:83:2d:ad:b0:cf:fd:a4:46:ae:6e:93:30:14:0a:be:69:11:
         11:c3:a5:49:ea:7c:89:19:07:f5:27:b0:9d:7a:d8:f7:65:e7:
         5f:8f:cf:99:75:fb:77:70:b4:fd:31:54:aa:a8:65:bc:7d:d2:
         43:a0:39:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:25:13 2025 by rpki-client on console.sobornost.net