Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/C3C02E9BA820D2E706528BC873C80443D02CE667.mft
File:                     C3C02E9BA820D2E706528BC873C80443D02CE667.mft (raw, json)
Hash identifier:          BWdTdZfAP2goi9ggKNL18anB3WJfI2XoxBn2DXJkLvI=
Subject key identifier:   27:06:30:96:67:EC:0B:DF:43:C4:79:1C:A5:F7:98:3E:80:DF:CD:23
Authority key identifier: C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67
Certificate issuer:       /CN=C3C02E9BA820D2E706528BC873C80443D02CE667
Certificate serial:       314A5CC68409D97A6C70E6A1284F0E13FE68F18F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/C3C02E9BA820D2E706528BC873C80443D02CE667.mft
Manifest number:          B9
Signing time:             Tue 09 Jan 2024 11:01:28 +0000
Manifest this update:     Tue 09 Jan 2024 10:56:28 +0000
Manifest next update:     Wed 10 Jan 2024 11:43:28 +0000
Files and hashes:         1: 323830343a316165303a3a2f33322d3335203d3e203631363936.roa (hash: iDE+FOM4JhFlLJXsbmVURpa4/hcEqFYTXXFjCB40GcU=)
                          2: 323830343a316165303a323a3a2f34382d3438203d3e203631363936.roa (hash: We2KHJAAwChICT14gTUrR2A1JC+CVZhWHOwb4ejMhnc=)
                          3: 323830343a316165303a333030303a3a2f34322d3432203d3e203631363936.roa (hash: W/xIkEj/DROG6no8jjMSiY4HlNtGnb+AXmX199XhyCY=)
                          4: 3133382e33362e3233322e302f32322d3234203d3e203631363936.roa (hash: p9CIcqIm3r5EndTm1Ee8bixqQgB3oqRQtgO8zW0bPy0=)
                          5: 3230312e3134302e3234382e302f32322d3234203d3e203631363936.roa (hash: Vm4//6NuA8qzXn6G9CJO6WBGACwwmoNdInYVGBwN10Q=)
                          6: C3C02E9BA820D2E706528BC873C80443D02CE667.crl (hash: iKLhspNV1vg1q//STM+gOSkvh47reS1SKId4QBFLB5Y=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/C3C02E9BA820D2E706528BC873C80443D02CE667.crl
                          rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/C3C02E9BA820D2E706528BC873C80443D02CE667.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 11:43:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4a:5c:c6:84:09:d9:7a:6c:70:e6:a1:28:4f:0e:13:fe:68:f1:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3C02E9BA820D2E706528BC873C80443D02CE667
        Validity
            Not Before: Jan  9 10:56:28 2024 GMT
            Not After : Jan 10 11:43:28 2024 GMT
        Subject: CN=2706309667EC0BDF43C4791CA5F7983E80DFCD23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fb:7d:89:6b:6d:cd:66:d4:55:bb:d4:36:8e:
                    91:8c:fc:84:7e:80:ac:b7:91:5a:e2:45:03:02:2d:
                    bd:60:8b:07:8a:40:f1:0c:5c:44:42:65:8e:c7:36:
                    a7:ec:17:d1:df:5c:fc:77:38:84:95:0b:86:b2:cf:
                    63:c8:4c:53:ce:81:dc:99:2d:d8:32:c6:71:90:c0:
                    d7:15:f3:67:4e:03:6e:15:1d:ec:98:e1:06:f2:e5:
                    1b:47:bd:e0:ab:3a:eb:14:1b:0c:6e:f1:b0:74:29:
                    bd:86:4b:f8:64:f7:7d:fd:91:50:a9:18:0c:45:3a:
                    c7:bf:cc:7d:bf:41:1c:81:97:8f:eb:e5:1b:d5:de:
                    7f:80:9c:96:a4:17:20:d7:e8:1b:81:be:5b:30:6a:
                    61:58:f0:6f:72:fc:31:15:86:39:a5:7a:32:dc:0f:
                    e0:6e:f0:08:37:14:10:07:10:18:5b:c4:56:67:fa:
                    84:95:cf:88:fa:8b:75:2d:97:21:97:18:8c:d8:3b:
                    e9:83:b6:1f:5d:bf:bb:4a:c2:d2:68:f7:02:4b:7d:
                    44:e9:45:f5:78:7b:53:bb:48:08:f7:7c:b6:69:64:
                    37:d7:85:a7:1f:f3:90:bd:ea:04:eb:9e:b6:25:16:
                    0b:eb:0b:ab:a3:b1:c3:0d:ab:9e:ee:e7:a5:d3:cf:
                    f3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:06:30:96:67:EC:0B:DF:43:C4:79:1C:A5:F7:98:3E:80:DF:CD:23
            X509v3 Authority Key Identifier:
                keyid:C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/C3C02E9BA820D2E706528BC873C80443D02CE667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/C3C02E9BA820D2E706528BC873C80443D02CE667.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a7:af:43:c4:45:99:12:c7:60:08:84:11:71:61:be:33:9d:
         52:1e:cb:5d:d3:c2:1a:73:83:ec:6e:5e:d5:a3:69:5e:21:96:
         f4:cf:a1:bc:00:0a:20:24:84:17:01:70:b8:35:6c:d3:6d:d1:
         2f:ad:eb:8c:70:1c:da:0b:59:6f:aa:a7:28:c9:cc:ed:2c:e1:
         57:bc:59:51:76:e7:fe:88:b4:77:c8:ef:7a:dd:9a:7b:f1:6b:
         1e:93:7a:3c:36:35:b5:be:e6:44:76:c3:f5:6e:56:e3:6d:90:
         b8:64:ff:b8:ed:be:37:df:11:47:b0:e3:a5:13:1e:7b:76:a9:
         9d:1a:a5:25:c9:d8:88:3b:8a:b7:e7:a0:fd:ef:7e:51:73:00:
         c6:b6:99:e8:0b:16:b6:7c:1b:f5:ea:73:4c:60:77:28:89:ea:
         76:3a:1a:28:02:b6:93:be:3f:53:25:08:eb:22:46:a2:54:b4:
         f6:d8:88:f0:10:c5:20:73:8d:d9:fb:af:9c:49:cf:f5:55:32:
         d1:27:68:5b:e9:50:72:1a:66:e2:08:68:ae:be:b0:c7:39:e9:
         88:23:22:18:65:19:ae:ae:5a:39:2f:61:bf:db:7b:56:9e:0e:
         79:74:15:18:c5:04:81:ea:93:de:7b:48:17:46:3a:c3:6f:eb:
         f4:64:20:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:24 2024 by rpki-client on console.sobornost.net