Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.mft
File:                     84A76C454E1EADE3E33056011C14E1F25D7EB27F.mft (raw, json)
Hash identifier:          ulE/dZxpIPDBlZXW7oxWNTergvfjtgfsbnPf8ljG5ig=
Subject key identifier:   B4:56:97:B4:64:36:1A:F8:26:A1:F5:C1:19:6C:0C:80:58:F4:26:E8
Authority key identifier: 84:A7:6C:45:4E:1E:AD:E3:E3:30:56:01:1C:14:E1:F2:5D:7E:B2:7F
Certificate issuer:       /CN=84A76C454E1EADE3E33056011C14E1F25D7EB27F
Certificate serial:       6348B447D3344CD14B9D7398CA213F1606EB8C57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A76C454E1EADE3E33056011C14E1F25D7EB27F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.mft
Manifest number:          020D
Signing time:             Mon 28 Apr 2025 07:47:23 +0000
Manifest this update:     Mon 28 Apr 2025 07:42:23 +0000
Manifest next update:     Tue 29 Apr 2025 08:34:23 +0000
Files and hashes:         1: 323830343a6233303a3a2f33322d3430203d3e203532373438.roa (hash: WZBC38nFqBqFUu5hdIuF8o1GyadYOiOs9kidSsa9R7c=)
                          2: 3137372e3135352e37382e302f32332d3234203d3e203532373438.roa (hash: 1+ffcC2RTV/9kxDLYJO33Z6HbV+ASqceXEuHAsqPcVA=)
                          3: 84A76C454E1EADE3E33056011C14E1F25D7EB27F.crl (hash: dPYZslxCfiAo8tioGklkIv2n1A4khb/kmT5Zdprdrj0=)
                          4: 3137372e3135352e36342e302f32322d3234203d3e203532373438.roa (hash: WV1iUPhW8HMvZ3EVURDAGoyt0gQGKBPILjQoNlaC6XM=)
                          5: 3137372e3133372e3234382e302f32322d3234203d3e203532373438.roa (hash: wuCcdAxuMWF3mwJj8yxageVime/aLqmwGtTa+WM3IBM=)
                          6: 3137372e3135352e37302e302f32332d3234203d3e203532373438.roa (hash: 0G5I8e+2Yrhx8SYjlq2yHIws1QV+dd+tAKFBkArKfHg=)
                          7: 3137372e3135352e36382e302f32332d3234203d3e203532373438.roa (hash: +tUxR+eNwt6DfzdLCVgh7Zzjn6az7JtqhCK2Y4Lm7VI=)
                          8: 3137372e3135352e36342e302f32312d3231203d3e203532373438.roa (hash: qZ1C9ylD+uM2+pbMFB/3giL4WY3o4Un5aYCzUaXUl4E=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.crl
                          rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A76C454E1EADE3E33056011C14E1F25D7EB27F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:48:b4:47:d3:34:4c:d1:4b:9d:73:98:ca:21:3f:16:06:eb:8c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84A76C454E1EADE3E33056011C14E1F25D7EB27F
        Validity
            Not Before: Apr 28 07:42:23 2025 GMT
            Not After : Apr 29 08:34:23 2025 GMT
        Subject: CN=B45697B464361AF826A1F5C1196C0C8058F426E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c6:37:0e:82:e9:c1:ca:20:98:b9:81:d9:97:
                    df:49:43:b7:b0:14:18:d8:02:53:0f:8f:84:e8:71:
                    3c:36:24:ee:50:2f:29:72:6b:42:0b:8a:16:68:39:
                    1e:bb:01:9c:12:86:b6:5e:a2:ac:2a:83:01:d1:7f:
                    cd:73:36:11:62:55:c1:89:b3:a7:c2:8e:a3:25:52:
                    9d:7f:a5:83:52:d8:ab:54:08:22:55:41:77:46:98:
                    6c:0c:75:94:39:d4:fa:0f:34:84:f5:dd:7b:7a:98:
                    77:67:38:21:32:24:46:36:44:58:ee:cc:04:37:28:
                    44:cf:b7:35:fa:89:1d:0d:50:a2:fb:4a:88:2a:25:
                    ea:77:eb:89:6b:5e:b7:75:e5:82:95:3b:b7:ff:03:
                    a1:8e:a7:3d:46:ec:c1:bf:80:fa:50:be:dd:c8:f5:
                    e5:ab:eb:f1:1a:ee:fc:26:77:e0:ae:34:35:c9:d6:
                    41:0b:c1:de:c5:c0:f4:ef:cc:9b:e3:d9:ad:72:e9:
                    a1:1a:a1:ff:eb:33:ba:27:68:40:3c:f6:26:94:c7:
                    dd:82:b4:b4:65:e8:da:51:f6:23:f8:49:4d:33:4c:
                    da:b0:ac:c2:d2:08:c9:69:c8:b9:75:ee:a0:ca:71:
                    a5:da:fc:7a:aa:f8:25:92:9a:38:1f:93:7d:f0:25:
                    ab:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:56:97:B4:64:36:1A:F8:26:A1:F5:C1:19:6C:0C:80:58:F4:26:E8
            X509v3 Authority Key Identifier:
                keyid:84:A7:6C:45:4E:1E:AD:E3:E3:30:56:01:1C:14:E1:F2:5D:7E:B2:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A76C454E1EADE3E33056011C14E1F25D7EB27F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b5:c5:5d:67:41:7b:08:e3:15:60:c4:cc:3f:00:23:15:b5:
         b6:01:69:d6:a6:1e:7c:64:3a:5d:74:72:15:2b:94:54:4e:34:
         4a:7d:05:d9:d6:1e:99:24:63:96:96:ef:04:d9:82:0e:06:04:
         b3:d9:a9:41:06:30:d6:1d:ec:85:d5:f6:95:3c:59:7f:7a:aa:
         81:72:a6:7e:0d:6f:33:fb:11:ee:1c:ea:45:b0:e9:1b:a8:60:
         8a:1e:d9:ce:43:41:f0:d8:38:10:87:47:1a:d3:e0:54:07:e0:
         89:1d:78:71:78:51:d1:b0:e0:b9:fa:96:41:29:ab:71:f0:53:
         d3:8c:ae:8d:56:98:47:0e:bf:50:f3:ad:fa:e8:92:33:b4:25:
         95:49:63:0e:41:08:88:e0:97:76:c5:09:96:e4:8b:87:db:26:
         ba:29:98:ec:dd:46:7e:2c:b9:de:55:90:80:98:99:fe:cd:bf:
         47:6d:6c:d6:ea:54:1c:5b:c7:f4:a7:70:48:63:a1:55:33:70:
         81:72:e8:87:2f:56:1c:79:2a:04:f1:7b:27:7f:a4:91:ae:6d:
         f0:62:19:0a:23:05:d0:82:59:86:c2:ae:75:ba:a6:29:95:29:
         f2:df:33:85:a0:87:b0:88:4d:46:1b:82:6a:c7:83:dd:f1:96:
         80:9e:f7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:33 2025 by rpki-client on console.sobornost.net