Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/0C3D92736C234EA163D49D0CBA62F26B8F372B74.mft
File:                     0C3D92736C234EA163D49D0CBA62F26B8F372B74.mft (raw, json)
Hash identifier:          Dx8E/0qr6JwXpsWsmqpHUPj4AQ2gPWizipBTss+IK2k=
Subject key identifier:   2F:BA:C8:E0:5C:F3:0E:C4:7E:31:40:47:AA:8E:53:77:8D:A5:EA:3B
Authority key identifier: 0C:3D:92:73:6C:23:4E:A1:63:D4:9D:0C:BA:62:F2:6B:8F:37:2B:74
Certificate issuer:       /CN=0C3D92736C234EA163D49D0CBA62F26B8F372B74
Certificate serial:       18DC2E19D7A34623A9C281A3BDC8229944D73785
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C3D92736C234EA163D49D0CBA62F26B8F372B74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/0C3D92736C234EA163D49D0CBA62F26B8F372B74.mft
Manifest number:          03
Signing time:             Tue 09 Jan 2024 14:42:52 +0000
Manifest this update:     Tue 09 Jan 2024 14:37:52 +0000
Manifest next update:     Wed 10 Jan 2024 16:29:52 +0000
Files and hashes:         1: 3137392e34382e3130302e302f32322d3332203d3e20323731303732.roa (hash: tF1diJFm6mvVnwpSBbWFnws4BBWsrsuuXaUtVE2Hfgs=)
                          2: 0C3D92736C234EA163D49D0CBA62F26B8F372B74.crl (hash: QchthARpduaUVCXyHYYywF44622ETVkHjXmHTj7ZKkI=)
                          3: 323830343a373564343a3a2f33322d313238203d3e20323731303732.roa (hash: LBn/rPvJP0WB60L+T5lYpM7MXiosdwcPnCxyo9Eje6o=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/0C3D92736C234EA163D49D0CBA62F26B8F372B74.crl
                          rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/0C3D92736C234EA163D49D0CBA62F26B8F372B74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C3D92736C234EA163D49D0CBA62F26B8F372B74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:dc:2e:19:d7:a3:46:23:a9:c2:81:a3:bd:c8:22:99:44:d7:37:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C3D92736C234EA163D49D0CBA62F26B8F372B74
        Validity
            Not Before: Jan  9 14:37:52 2024 GMT
            Not After : Jan 10 16:29:52 2024 GMT
        Subject: CN=2FBAC8E05CF30EC47E314047AA8E53778DA5EA3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d6:54:80:30:fc:db:20:5d:86:c9:1f:9b:0f:
                    2a:d4:c1:3e:9a:d8:c3:f9:17:f7:12:e8:e2:82:a6:
                    10:7c:31:d3:7f:69:9b:f7:02:0c:15:6c:df:df:cb:
                    d8:66:97:8f:b1:32:b7:df:5c:c1:3d:46:6a:dd:0e:
                    91:39:4b:2d:f3:35:21:56:39:9f:d5:be:21:19:3a:
                    eb:11:47:77:dd:f1:c2:46:6a:91:8e:09:cd:0e:a2:
                    89:4d:7c:3f:91:3f:03:51:16:e0:06:9e:26:a1:f1:
                    18:5d:9e:9e:c1:f9:e6:38:c5:f5:87:26:4b:22:b9:
                    a9:52:e9:71:4b:2a:57:81:29:d2:ad:43:e6:18:c0:
                    4a:38:8f:66:ed:9d:7f:b7:4d:a3:e3:ff:f8:bf:4e:
                    74:21:b4:86:f6:bd:44:3f:5a:c1:e8:c6:97:ef:ff:
                    05:33:38:44:bb:15:e2:39:a1:05:31:ad:71:77:5a:
                    17:88:9b:89:e9:06:8c:ad:9e:d3:af:25:ba:b8:e2:
                    e1:7f:c0:54:06:7d:75:ca:27:8e:cc:fa:5e:06:e9:
                    d7:25:14:4c:76:3c:20:d6:63:df:71:3a:48:b3:89:
                    7b:e1:22:89:4e:ca:35:1b:05:16:dd:c5:98:2f:5e:
                    18:d0:ac:4c:f1:1f:9a:11:44:69:cb:2f:2d:2e:f9:
                    ba:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BA:C8:E0:5C:F3:0E:C4:7E:31:40:47:AA:8E:53:77:8D:A5:EA:3B
            X509v3 Authority Key Identifier:
                keyid:0C:3D:92:73:6C:23:4E:A1:63:D4:9D:0C:BA:62:F2:6B:8F:37:2B:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/0C3D92736C234EA163D49D0CBA62F26B8F372B74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C3D92736C234EA163D49D0CBA62F26B8F372B74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/0C3D92736C234EA163D49D0CBA62F26B8F372B74.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a8:65:c4:c8:f4:c7:77:ff:17:f1:99:45:ce:e3:63:b5:a3:
         4e:50:a4:05:b8:e7:d0:61:2d:40:12:ac:d5:04:35:a4:da:e1:
         f7:6f:66:23:c0:b4:f7:ab:ea:c3:86:a2:7d:de:2b:9b:c0:ec:
         5e:7f:8d:d6:a9:75:24:d2:e7:61:0a:7d:2a:6d:04:3d:ba:1f:
         c4:a6:7c:97:c9:f7:b5:46:08:85:cd:bb:a4:73:53:7c:ad:98:
         93:de:62:5f:43:2f:b7:be:87:79:0a:e1:69:6b:5f:c7:1e:eb:
         d7:52:c1:cd:19:b3:c8:71:30:ff:04:7f:b6:cb:75:e2:dd:9e:
         95:da:f5:f3:73:19:0a:9a:d4:83:2f:c7:20:43:d8:25:1f:7b:
         9c:6c:c1:21:b0:05:8f:9d:03:44:90:7b:d9:cb:f2:c4:84:0c:
         27:3d:02:cf:4d:1c:ff:8e:87:44:ae:81:de:7e:94:bd:f8:db:
         50:53:88:88:65:ed:ee:5d:a9:60:7c:ae:37:35:6a:ae:ac:44:
         f9:13:c2:96:0a:a6:7c:dc:03:33:2f:e2:36:1f:2a:03:79:96:
         99:b4:6d:06:f8:af:e5:85:f5:bf:53:46:3f:7d:9f:f3:84:35:
         57:e7:87:6d:b9:36:24:22:08:72:89:8f:d9:2b:07:1c:67:3d:
         f6:12:2a:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGNwuGdejRiOpwoGjvcgimUTXN4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMzRDkyNzM2QzIzNEVBMTYzRDQ5RDBDQkE2MkYyNkI4
RjM3MkI3NDAeFw0yNDAxMDkxNDM3NTJaFw0yNDAxMTAxNjI5NTJaMDMxMTAvBgNV
BAMTKDJGQkFDOEUwNUNGMzBFQzQ3RTMxNDA0N0FBOEU1Mzc3OERBNUVBM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK1lSAMPzbIF2GyR+bDyrUwT6a
2MP5F/cS6OKCphB8MdN/aZv3AgwVbN/fy9hml4+xMrffXME9RmrdDpE5Sy3zNSFW
OZ/VviEZOusRR3fd8cJGapGOCc0OoolNfD+RPwNRFuAGniah8Rhdnp7B+eY4xfWH
JksiualS6XFLKleBKdKtQ+YYwEo4j2btnX+3TaPj//i/TnQhtIb2vUQ/WsHoxpfv
/wUzOES7FeI5oQUxrXF3WheIm4npBoytntOvJbq44uF/wFQGfXXKJ47M+l4G6dcl
FEx2PCDWY99xOkiziXvhIolOyjUbBRbdxZgvXhjQrEzxH5oRRGnLLy0u+bq1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUL7rI4FzzDsR+MUBHqo5Td42l6jswHwYDVR0j
BBgwFoAUDD2Sc2wjTqFj1J0MumLya483K3QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmZERlFZUVRUekt0aGlqNjZ5V3FIM0tydnBQWWJ6ZXhUMWl4dGN4eDNK
THIvMC8wQzNEOTI3MzZDMjM0RUExNjNENDlEMENCQTYyRjI2QjhGMzcyQjc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBDM0Q5MjczNkMyMzRFQTE2
M0Q0OUQwQ0JBNjJGMjZCOEYzNzJCNzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MmZERlFZUVRUekt0aGlqNjZ5V3FIM0tydnBQWWJ6ZXhUMWl4dGN4eDNKTHIvMC8w
QzNEOTI3MzZDMjM0RUExNjNENDlEMENCQTYyRjI2QjhGMzcyQjc0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA6hlxMj0x3f/F/GZRc7jY7WjTlCkBbjn0GEtQBKs1QQ1pNrh929mI8C096vq
w4aifd4rm8DsXn+N1ql1JNLnYQp9Km0EPbofxKZ8l8n3tUYIhc27pHNTfK2Yk95i
X0Mvt76HeQrhaWtfxx7r11LBzRmzyHEw/wR/tst14t2eldr183MZCprUgy/HIEPY
JR97nGzBIbAFj50DRJB72cvyxIQMJz0Cz00c/46HRK6B3n6UvfjbUFOIiGXt7l2p
YHyuNzVqrqxE+RPClgqmfNwDMy/iNh8qA3mWmbRtBviv5YX1v1NGP32f84Q1V+eH
bbk2JCIIcomP2SsHHGc99hIqLw==
-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:07 2024 by rpki-client on console.sobornost.net