Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/A2B53975CAA9F37EBEDF5A91D478B7210E52844B.mft
File:                     A2B53975CAA9F37EBEDF5A91D478B7210E52844B.mft (raw, json)
Hash identifier:          Mr+UNa+yigUSckqZdAMj7QXbmhpqrSZPdWtv88uQq2I=
Subject key identifier:   0D:77:88:4F:7C:D3:74:C8:BF:F4:C1:72:7F:10:DD:C7:84:DF:3D:97
Authority key identifier: A2:B5:39:75:CA:A9:F3:7E:BE:DF:5A:91:D4:78:B7:21:0E:52:84:4B
Certificate issuer:       /CN=A2B53975CAA9F37EBEDF5A91D478B7210E52844B
Certificate serial:       0B017C5CFF1C3AB833A4D1479B6C9C4292FEDE12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A2B53975CAA9F37EBEDF5A91D478B7210E52844B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/A2B53975CAA9F37EBEDF5A91D478B7210E52844B.mft
Manifest number:          0A
Signing time:             Tue 09 Jan 2024 05:01:21 +0000
Manifest this update:     Tue 09 Jan 2024 04:56:21 +0000
Manifest next update:     Wed 10 Jan 2024 07:03:21 +0000
Files and hashes:         1: 3230302e3132342e38342e302f32322d3332203d3e20323730323734.roa (hash: 3s/nYMW4BFdSVc46WOZAOjQPTz07EPAAYVzW/LgDM88=)
                          2: 323830343a363938303a3a2f33322d313238203d3e20323730323734.roa (hash: ktiWAQiy1oduTOIo1sln8jHNuHVMFNxkMWD7bIC6XdA=)
                          3: A2B53975CAA9F37EBEDF5A91D478B7210E52844B.crl (hash: emezQPzKBuMp33h1vsgGw48EVnU9uY6ZD2pzp8wpvGY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/A2B53975CAA9F37EBEDF5A91D478B7210E52844B.crl
                          rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/A2B53975CAA9F37EBEDF5A91D478B7210E52844B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A2B53975CAA9F37EBEDF5A91D478B7210E52844B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:01:7c:5c:ff:1c:3a:b8:33:a4:d1:47:9b:6c:9c:42:92:fe:de:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B53975CAA9F37EBEDF5A91D478B7210E52844B
        Validity
            Not Before: Jan  9 04:56:21 2024 GMT
            Not After : Jan 10 07:03:21 2024 GMT
        Subject: CN=0D77884F7CD374C8BFF4C1727F10DDC784DF3D97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:52:79:b1:48:2f:3f:8b:bd:9a:76:84:78:89:
                    b6:b6:3a:f7:3d:6c:44:50:d9:f6:a8:87:4e:ca:69:
                    ef:f9:32:90:b4:8d:de:11:43:a0:16:9d:99:6b:f2:
                    eb:f7:95:7e:b1:07:3e:ce:a4:70:26:c0:32:ae:a4:
                    68:9d:aa:64:1c:c4:e4:10:ab:b2:dc:e6:c9:f1:29:
                    d1:21:a2:6c:0e:b1:1d:45:91:34:c4:4c:fc:46:7f:
                    55:1b:68:53:87:e0:5a:f9:73:21:6b:08:52:68:18:
                    28:65:02:66:c3:d4:60:48:42:df:42:94:e1:51:72:
                    68:fa:d0:81:06:2e:c8:63:9a:41:0d:92:20:9d:a1:
                    98:8c:01:ea:a0:a8:60:24:6d:d5:4e:f0:6e:9f:8e:
                    ca:0c:ee:08:46:c4:78:ea:0f:17:a8:3f:8e:73:e4:
                    b4:21:64:7b:ef:0b:c8:e7:34:29:36:ca:7a:6f:e6:
                    ba:c8:57:35:d2:98:9e:d3:53:ca:79:7e:a2:72:19:
                    f2:e7:ea:0a:b3:cd:38:07:c5:ce:56:63:be:5f:57:
                    70:dd:e6:e4:d1:db:d1:cc:22:2c:43:50:4e:c7:cb:
                    f8:24:94:4f:bb:49:be:8e:8f:49:6f:3f:15:35:79:
                    52:21:36:3c:a3:9b:7f:98:8e:34:fe:93:f7:24:a0:
                    ca:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:77:88:4F:7C:D3:74:C8:BF:F4:C1:72:7F:10:DD:C7:84:DF:3D:97
            X509v3 Authority Key Identifier:
                keyid:A2:B5:39:75:CA:A9:F3:7E:BE:DF:5A:91:D4:78:B7:21:0E:52:84:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/A2B53975CAA9F37EBEDF5A91D478B7210E52844B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A2B53975CAA9F37EBEDF5A91D478B7210E52844B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/A2B53975CAA9F37EBEDF5A91D478B7210E52844B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c7:16:9c:20:e3:09:cb:e2:e5:5e:ef:37:3f:cd:7d:28:d2:
         19:02:9e:6e:93:05:5e:68:d4:af:58:a4:a6:9f:e6:92:f4:59:
         f0:da:95:a2:b5:59:ef:d5:8a:9e:9e:26:8d:ee:5b:8a:e2:e9:
         66:75:93:30:a0:f7:da:cf:5c:bd:64:0e:16:c7:43:8c:7c:92:
         02:8e:68:24:e7:43:0f:8a:a4:3a:d0:a4:e0:50:76:4e:66:d6:
         31:57:86:98:19:a5:5f:9e:c5:50:12:00:58:c3:9d:7c:0c:cf:
         59:1a:84:fa:bb:95:0c:a6:24:d7:dd:70:0d:09:e8:50:5f:b6:
         ef:78:f8:58:bd:b6:9b:6c:d2:dc:33:fe:f8:9a:29:32:cb:b5:
         56:d0:db:d9:53:99:77:16:d6:6b:d2:5e:d8:3f:27:3c:0c:20:
         ff:cf:bb:c6:78:ea:8a:99:2f:7c:ba:8b:3d:12:62:95:61:e1:
         7f:ba:af:31:7c:fc:53:64:27:bc:0c:fe:f8:c8:47:3d:f9:92:
         e3:3b:f1:a9:ab:5a:48:6a:cc:a8:a8:da:f0:c3:77:7e:cf:5d:
         1f:82:90:05:6e:80:66:74:c8:92:6a:59:d6:16:51:d7:bf:50:
         c9:99:34:d4:ef:db:5b:a5:28:ee:b9:47:90:a8:a4:0d:db:ec:
         81:1d:98:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 07:51:44 2024 by rpki-client on console.sobornost.net