Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/0/A5A2D06E44B31D838E39336BA43B0AA05C316FFC.mft
File:                     A5A2D06E44B31D838E39336BA43B0AA05C316FFC.mft (raw, json)
Hash identifier:          6UmhTSjx/QgaNCGFD3R8zbQe+h6Ar2pOZiQMN10Uxp0=
Subject key identifier:   53:26:35:B3:2A:56:E1:73:35:B3:17:77:80:8A:79:54:B8:D7:DE:71
Authority key identifier: A5:A2:D0:6E:44:B3:1D:83:8E:39:33:6B:A4:3B:0A:A0:5C:31:6F:FC
Certificate issuer:       /CN=A5A2D06E44B31D838E39336BA43B0AA05C316FFC
Certificate serial:       21E1CD9144114DBBECFC7674BD69F079436FF2ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5A2D06E44B31D838E39336BA43B0AA05C316FFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/0/A5A2D06E44B31D838E39336BA43B0AA05C316FFC.mft
Manifest number:          0344
Signing time:             Tue 09 Jan 2024 05:41:40 +0000
Manifest this update:     Tue 09 Jan 2024 05:36:40 +0000
Manifest next update:     Wed 10 Jan 2024 07:37:40 +0000
Files and hashes:         1: 323830313a38303a333664303a3a2f34382d3634203d3e20323639323136.roa (hash: oWA+dqvxYYqiWF+tv3fb6uxcnGyc7zWjqOT5qaLbfOM=)
                          2: A5A2D06E44B31D838E39336BA43B0AA05C316FFC.crl (hash: AwO5yN/FwdZyoxnBuEE6j+wdoJQI6r4ZaEXaKRDgNdE=)
                          3: 34352e3138312e372e302f32342d3234203d3e20323639323136.roa (hash: lI7niHQCh/D0z09QhpkckfLrIDIQlslIc71kUuySXuM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/0/A5A2D06E44B31D838E39336BA43B0AA05C316FFC.crl
                          rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/0/A5A2D06E44B31D838E39336BA43B0AA05C316FFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5A2D06E44B31D838E39336BA43B0AA05C316FFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e1:cd:91:44:11:4d:bb:ec:fc:76:74:bd:69:f0:79:43:6f:f2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A2D06E44B31D838E39336BA43B0AA05C316FFC
        Validity
            Not Before: Jan  9 05:36:40 2024 GMT
            Not After : Jan 10 07:37:40 2024 GMT
        Subject: CN=532635B32A56E17335B31777808A7954B8D7DE71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:64:7d:5c:8b:21:9d:12:17:36:ef:8f:a4:ca:
                    ab:6f:b1:ff:74:3e:f8:f2:dd:47:a6:2c:11:98:aa:
                    f1:39:98:ba:d8:c6:aa:16:7c:3f:d3:c0:a5:25:f0:
                    9b:aa:79:d1:9e:5c:d0:aa:25:e0:b2:7c:b2:8a:30:
                    67:78:93:84:54:ee:eb:e1:7a:d9:06:b6:ed:88:dc:
                    e1:29:bb:18:d8:56:1c:d1:a2:ab:d9:ec:00:bc:67:
                    fd:c9:f9:d9:e9:5b:b0:67:de:03:c8:2b:81:60:d2:
                    c4:dd:ff:18:f5:04:69:92:89:ba:85:17:2b:25:3b:
                    a0:f4:62:73:3d:18:3e:86:c9:39:1a:dc:23:8a:3c:
                    a2:22:f6:17:4d:40:c9:dd:af:07:f4:9c:5b:98:88:
                    2e:f1:90:8d:3a:08:ba:a1:7d:b7:4c:fd:b9:8e:29:
                    d2:a3:87:b6:b2:8a:09:8e:3e:30:b3:9a:d1:74:09:
                    48:5a:74:b2:e5:02:48:bb:85:ba:8d:d4:89:d0:8f:
                    01:81:77:05:cd:1d:0e:3d:73:5d:0c:11:a6:87:5b:
                    73:ce:94:42:de:d3:77:b7:64:1b:fe:c4:20:6d:70:
                    f7:81:0d:cc:eb:ed:e3:a2:0e:b6:35:8d:f7:96:f4:
                    ae:c4:aa:6b:1f:2e:1c:09:5f:ee:fe:21:18:44:46:
                    f4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:26:35:B3:2A:56:E1:73:35:B3:17:77:80:8A:79:54:B8:D7:DE:71
            X509v3 Authority Key Identifier:
                keyid:A5:A2:D0:6E:44:B3:1D:83:8E:39:33:6B:A4:3B:0A:A0:5C:31:6F:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/0/A5A2D06E44B31D838E39336BA43B0AA05C316FFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5A2D06E44B31D838E39336BA43B0AA05C316FFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/0/A5A2D06E44B31D838E39336BA43B0AA05C316FFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:2c:d0:c3:b2:37:79:5e:36:f9:7a:54:46:9f:bc:77:18:2e:
         e6:e5:c3:40:f4:c5:dc:37:93:c2:70:0e:ff:9a:2d:1f:6f:9c:
         cb:f2:79:db:08:72:9a:3a:8a:3f:95:67:02:01:df:fb:e6:94:
         cf:08:22:1c:1e:c0:ae:de:2e:bc:4d:55:ab:b7:d1:bc:2f:b1:
         79:50:09:48:f6:aa:22:0f:88:fa:cf:ce:84:a1:c4:b1:fd:e1:
         fe:69:8e:59:14:1e:8e:f7:b8:42:76:d1:83:2c:cd:a7:c0:5d:
         dc:68:12:7c:84:11:ac:19:96:e0:a0:80:36:f7:0a:5b:ed:27:
         97:0c:79:d8:00:00:ab:0b:9d:30:0f:67:7f:b9:4f:50:b5:79:
         52:11:c6:14:3a:dc:55:f3:d4:dd:93:87:af:c6:1d:cf:1d:ad:
         d8:f1:0c:b2:45:1e:f6:91:19:1f:69:92:40:45:45:ab:36:81:
         14:48:d7:b6:28:cd:95:10:6d:fb:e4:c9:e0:4f:b9:e8:c7:93:
         7e:24:6b:ff:db:1a:28:1d:ec:31:31:b5:f2:4a:f8:4e:4d:bb:
         1a:f5:a0:44:c7:30:2b:6e:e6:dc:03:e3:03:b7:83:52:b3:55:
         71:0e:f9:ec:60:6f:5e:90:f9:34:08:67:7e:bc:bb:25:0d:5b:
         81:6f:d8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 07:51:46 2024 by rpki-client on console.sobornost.net