Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/87BCBAAA331A32BF197193D998796DFC7822EBB7.mft
File:                     87BCBAAA331A32BF197193D998796DFC7822EBB7.mft (raw, json)
Hash identifier:          D5/IA1Wk84hFlU+KyXclg9Yuq6juFZUUMIHJmvCbno0=
Subject key identifier:   8C:C1:F6:C1:B3:77:50:CB:BE:C2:34:05:35:45:71:76:07:40:92:23
Authority key identifier: 87:BC:BA:AA:33:1A:32:BF:19:71:93:D9:98:79:6D:FC:78:22:EB:B7
Certificate issuer:       /CN=87BCBAAA331A32BF197193D998796DFC7822EBB7
Certificate serial:       2E17326D72FD18E030328842126E869CD516A76A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87BCBAAA331A32BF197193D998796DFC7822EBB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/87BCBAAA331A32BF197193D998796DFC7822EBB7.mft
Manifest number:          0437
Signing time:             Tue 09 Jan 2024 03:02:00 +0000
Manifest this update:     Tue 09 Jan 2024 02:57:00 +0000
Manifest next update:     Wed 10 Jan 2024 03:02:00 +0000
Files and hashes:         1: 323830343a323531343a3a2f33322d3438203d3e20323634323539.roa (hash: 4S5n4iSZ4PQUvzFG0ejjo5ram+ZpfSTsx5/q4kVhDcI=)
                          2: 3133382e3131382e34302e302f32322d3234203d3e20323634323539.roa (hash: qUnyQNumS6aQOOLGo0V+ule9+1vxC8yOCK5BNA0XPSI=)
                          3: 87BCBAAA331A32BF197193D998796DFC7822EBB7.crl (hash: Gb8gVMQ1KcTEin8ClybqteAskIePqKUMc7OmGOCoXOs=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/87BCBAAA331A32BF197193D998796DFC7822EBB7.crl
                          rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/87BCBAAA331A32BF197193D998796DFC7822EBB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87BCBAAA331A32BF197193D998796DFC7822EBB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 03:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:17:32:6d:72:fd:18:e0:30:32:88:42:12:6e:86:9c:d5:16:a7:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BCBAAA331A32BF197193D998796DFC7822EBB7
        Validity
            Not Before: Jan  9 02:57:00 2024 GMT
            Not After : Jan 16 03:02:00 2024 GMT
        Subject: CN=3082010A0282010100B862E90DA0D6B91255D34D095EEC788977EE4C51F9894B4BBA7DDEAD86A51CC5520C138BE8A055CC86F924843F68929B103AB030EE0B1BB6D20CDC75BB0B1C2ACFF82D46ADD0C457F271E48AC9D778ACE82CB4F9B0AB57079175E419BFD4162796968A5B54E9B7D715D9D86D7991581FD23111408199A6F262DF587C561A81BE6128C41D3EFEF1048EDD65255C6F6A6F63112EBE74ABC2EE22FD2B39D88F549A6101893360BF446616381AEA1479BE232A00A7E1ECFA58033F312CD640C60595DAE312B9C1DC71183BE868227F1F0764C6E066171454363F2C2896F0EA28B315DF4C2A2D06A147E0843234851DCAC150E4EBDDFA54430509332A8C7F8F8268770203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:62:e9:0d:a0:d6:b9:12:55:d3:4d:09:5e:ec:
                    78:89:77:ee:4c:51:f9:89:4b:4b:ba:7d:de:ad:86:
                    a5:1c:c5:52:0c:13:8b:e8:a0:55:cc:86:f9:24:84:
                    3f:68:92:9b:10:3a:b0:30:ee:0b:1b:b6:d2:0c:dc:
                    75:bb:0b:1c:2a:cf:f8:2d:46:ad:d0:c4:57:f2:71:
                    e4:8a:c9:d7:78:ac:e8:2c:b4:f9:b0:ab:57:07:91:
                    75:e4:19:bf:d4:16:27:96:96:8a:5b:54:e9:b7:d7:
                    15:d9:d8:6d:79:91:58:1f:d2:31:11:40:81:99:a6:
                    f2:62:df:58:7c:56:1a:81:be:61:28:c4:1d:3e:fe:
                    f1:04:8e:dd:65:25:5c:6f:6a:6f:63:11:2e:be:74:
                    ab:c2:ee:22:fd:2b:39:d8:8f:54:9a:61:01:89:33:
                    60:bf:44:66:16:38:1a:ea:14:79:be:23:2a:00:a7:
                    e1:ec:fa:58:03:3f:31:2c:d6:40:c6:05:95:da:e3:
                    12:b9:c1:dc:71:18:3b:e8:68:22:7f:1f:07:64:c6:
                    e0:66:17:14:54:36:3f:2c:28:96:f0:ea:28:b3:15:
                    df:4c:2a:2d:06:a1:47:e0:84:32:34:85:1d:ca:c1:
                    50:e4:eb:dd:fa:54:43:05:09:33:2a:8c:7f:8f:82:
                    68:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C1:F6:C1:B3:77:50:CB:BE:C2:34:05:35:45:71:76:07:40:92:23
            X509v3 Authority Key Identifier:
                keyid:87:BC:BA:AA:33:1A:32:BF:19:71:93:D9:98:79:6D:FC:78:22:EB:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/87BCBAAA331A32BF197193D998796DFC7822EBB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87BCBAAA331A32BF197193D998796DFC7822EBB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/87BCBAAA331A32BF197193D998796DFC7822EBB7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:4d:fd:2b:97:71:f1:1c:d7:c8:73:8c:ac:88:0b:57:c8:f2:
         b7:4f:7a:88:9a:20:15:c6:6a:37:24:6d:08:6a:d1:a2:04:e9:
         08:84:03:19:96:08:a7:15:f8:8a:05:8f:f6:bb:17:31:aa:37:
         7a:30:4b:15:df:6b:18:2c:af:c0:08:9d:29:7f:51:40:3e:88:
         20:db:39:3f:e9:0e:1e:ed:c9:84:87:d4:a3:16:93:06:2d:27:
         32:6d:66:93:74:d1:fb:73:c8:0e:e1:33:7b:a8:0c:f3:7a:d5:
         c3:3d:92:78:94:03:63:ed:ab:26:5f:c8:e1:01:10:02:38:59:
         66:f7:08:00:85:a1:1b:72:7d:ef:1a:b7:75:c1:d6:7a:a1:98:
         41:3e:32:39:d8:55:56:44:db:7c:80:df:e7:5a:1a:a2:da:52:
         6d:44:ce:43:f2:ba:2f:32:9d:c1:ee:e4:29:5f:ce:85:06:3d:
         ab:8e:7c:4e:75:46:a2:92:ba:71:73:d9:23:98:ec:cf:d1:a5:
         1c:04:a8:d5:6c:2c:a5:fc:2d:5b:e8:61:0e:4d:40:84:f7:42:
         9e:01:b1:0d:78:30:f3:d1:dc:f5:31:18:27:3c:39:09:65:ba:
         5f:13:5e:b9:87:a0:eb:bb:ad:b6:f2:7c:4c:16:a1:d2:c6:f1:
         88:6b:ba:5f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 9 05:55:15 2024 by rpki-client on console.sobornost.net