Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/5D7C936A02A87484DC75839C6718D62DF72983BF.mft
File:                     5D7C936A02A87484DC75839C6718D62DF72983BF.mft (raw, json)
Hash identifier:          VGQe0dz1wP+zIHENV4zLTI77MyMCz43fydGEmoiWeNc=
Subject key identifier:   74:1F:2C:FE:E1:AF:08:B8:18:2E:2F:83:71:0E:69:15:6B:7D:3F:E6
Authority key identifier: 5D:7C:93:6A:02:A8:74:84:DC:75:83:9C:67:18:D6:2D:F7:29:83:BF
Certificate issuer:       /CN=5D7C936A02A87484DC75839C6718D62DF72983BF
Certificate serial:       4F83B108A21F201BD267CE27F0C5C75C61B42E7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D7C936A02A87484DC75839C6718D62DF72983BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/5D7C936A02A87484DC75839C6718D62DF72983BF.mft
Manifest number:          047F
Signing time:             Mon 08 Jan 2024 23:47:00 +0000
Manifest this update:     Mon 08 Jan 2024 23:42:00 +0000
Manifest next update:     Wed 10 Jan 2024 02:52:00 +0000
Files and hashes:         1: 3137302e37382e35322e302f32322d3234203d3e20323635343935.roa (hash: TtevbWEgQq4rjWQzpObkWQ0Qh798KiYPlxDANe8Rn+I=)
                          2: 323830343a333530343a3a2f33322d3438203d3e20323635343935.roa (hash: yBB/8Zf3a5kU8Fwur5s2bs8hHjzcDQEJ/yVx4e6Eexo=)
                          3: 5D7C936A02A87484DC75839C6718D62DF72983BF.crl (hash: Hor79UiAoYAatZhGvfeK+VXtH1G10238GefxddXDR50=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/5D7C936A02A87484DC75839C6718D62DF72983BF.crl
                          rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/5D7C936A02A87484DC75839C6718D62DF72983BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D7C936A02A87484DC75839C6718D62DF72983BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 01:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:83:b1:08:a2:1f:20:1b:d2:67:ce:27:f0:c5:c7:5c:61:b4:2e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D7C936A02A87484DC75839C6718D62DF72983BF
        Validity
            Not Before: Jan  8 23:42:00 2024 GMT
            Not After : Jan 10 02:52:00 2024 GMT
        Subject: CN=741F2CFEE1AF08B8182E2F83710E69156B7D3FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:30:da:c4:86:e5:3b:b7:80:f8:a3:79:1d:5d:
                    41:a2:13:57:2f:a6:4b:b2:6a:e0:71:a0:e0:6f:c4:
                    60:a2:e6:f7:8a:65:28:c8:62:08:23:3b:02:09:29:
                    6b:6e:47:af:a2:31:26:1d:a9:75:46:00:b0:4e:d3:
                    ec:08:de:99:2c:09:1a:45:ce:06:0a:77:be:29:f1:
                    78:dd:59:47:3e:68:a9:b7:5b:1d:ea:bd:98:5c:b6:
                    a1:47:7b:18:7e:60:05:20:39:91:6b:42:fb:1e:85:
                    a7:3e:89:3b:c4:25:54:0a:33:fd:07:28:a5:53:62:
                    38:f8:4d:60:2a:1a:e8:2c:2b:c5:54:fb:a2:21:7d:
                    5e:18:d6:86:bd:f8:64:ba:1e:18:4d:c5:0d:e0:39:
                    dc:94:cf:9d:ec:6a:50:50:36:97:fd:60:de:dc:05:
                    f2:f2:76:73:60:97:db:1c:d6:f9:b5:69:87:e3:2d:
                    ee:67:b0:3a:99:7c:70:1f:22:43:19:4d:d0:ab:11:
                    50:19:3c:e6:d3:1d:ef:ac:e4:fd:8f:d2:e2:6e:fd:
                    ca:7b:11:e1:71:59:24:46:1f:96:61:39:05:b5:9d:
                    bd:03:40:ba:eb:be:a6:da:de:03:a9:0c:2a:13:c6:
                    ec:6a:c8:5e:d4:ee:1e:2b:46:3f:bb:72:7e:9e:fd:
                    95:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1F:2C:FE:E1:AF:08:B8:18:2E:2F:83:71:0E:69:15:6B:7D:3F:E6
            X509v3 Authority Key Identifier:
                keyid:5D:7C:93:6A:02:A8:74:84:DC:75:83:9C:67:18:D6:2D:F7:29:83:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/5D7C936A02A87484DC75839C6718D62DF72983BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D7C936A02A87484DC75839C6718D62DF72983BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/5D7C936A02A87484DC75839C6718D62DF72983BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ee:42:6c:5b:40:96:e3:ef:67:45:50:40:5d:82:12:9c:bf:
         e1:35:09:3d:52:20:82:b4:ea:64:bb:a5:9f:c0:11:f5:e5:e7:
         0a:11:86:b8:e4:51:f2:f0:59:97:01:2d:d9:aa:6c:a3:7c:05:
         7a:58:70:1c:f0:ca:c1:cc:2b:90:33:01:7a:78:54:d3:1c:92:
         b5:85:da:f5:70:76:56:40:71:4d:34:c2:9d:6e:45:4a:fc:55:
         69:87:fb:8e:39:d1:8f:7a:29:c0:cd:1a:14:75:fc:e8:9d:6c:
         43:ff:25:e3:82:85:78:63:ba:3b:e3:04:fc:5c:25:50:c4:c8:
         b3:cb:db:b2:ba:1a:45:d7:ad:93:44:19:9e:7a:ee:86:61:60:
         bc:d7:94:ac:63:6b:02:0e:9a:bd:cf:13:d3:05:3c:1d:d2:9f:
         1d:02:ac:28:dc:c3:4f:4e:7a:a7:d8:15:3d:6e:8c:13:d0:d5:
         fd:06:fd:32:ce:ff:68:95:99:8e:e4:19:a9:73:34:ab:71:70:
         7b:9a:25:84:7d:af:b3:7e:41:6a:61:9b:8a:1c:77:ab:22:bf:
         d9:1d:a4:af:10:61:8f:b7:ed:1f:f5:f1:2c:61:33:16:dd:8a:
         07:f9:ac:6b:d4:85:74:cc:39:a0:44:1a:10:06:f6:36:e4:dc:
         86:0d:29:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 02:15:31 2024 by rpki-client on console.sobornost.net