Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/A12BD2D5FEDA2D7B1553F0B18B08A4D8C0153067.mft
File:                     A12BD2D5FEDA2D7B1553F0B18B08A4D8C0153067.mft (raw, json)
Hash identifier:          iQNJP3zQzS8Xq69E8SW69K7fvd7ae4tOTO+6xU6uGAI=
Subject key identifier:   6F:CC:98:2D:6D:7C:95:7A:13:35:95:C4:EC:D6:73:4F:E3:FE:1C:2A
Authority key identifier: A1:2B:D2:D5:FE:DA:2D:7B:15:53:F0:B1:8B:08:A4:D8:C0:15:30:67
Certificate issuer:       /CN=A12BD2D5FEDA2D7B1553F0B18B08A4D8C0153067
Certificate serial:       579B5B12A2D3FBBD47B68565E3C4C5AA7FED1025
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A12BD2D5FEDA2D7B1553F0B18B08A4D8C0153067.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/A12BD2D5FEDA2D7B1553F0B18B08A4D8C0153067.mft
Manifest number:          02
Signing time:             Tue 09 Jan 2024 03:50:13 +0000
Manifest this update:     Tue 09 Jan 2024 03:45:13 +0000
Manifest next update:     Wed 10 Jan 2024 06:32:13 +0000
Files and hashes:         1: 34352e3137342e3139392e302f32342d3234203d3e20323731353939.roa (hash: peSMyTGwfKtbGQlH3Z7z2HBqTtEF3ljQDvfNwyTTvOI=)
                          2: 34352e3137342e3139362e302f32342d3234203d3e20323731353939.roa (hash: 0aVaT4wjsgsUQpLWXze9DpeZaHP9XnBveLsbzpp1vpg=)
                          3: A12BD2D5FEDA2D7B1553F0B18B08A4D8C0153067.crl (hash: pyMrqBeg7i9D11cIvpva27JZtKAgY1PwK+qtU0qZ08U=)
                          4: 34352e3137342e3139382e302f32332d3233203d3e20323731353939.roa (hash: mJ+WV17lvQjlDp8+UqXxR9cP6oDgMjPnwAcH56n2wz0=)
                          5: 323830343a376530633a3a2f33332d3333203d3e20323731353939.roa (hash: YyJYsYkgxspznSsXFKhQZS4jRD/havUqjOW7Q1+ipiE=)
                          6: 34352e3137342e3139362e302f32322d3232203d3e20323731353939.roa (hash: 6r/s+hR4m6YTRtk05uS7PM+K4M2M3tUHpji8Q8bVcb0=)
                          7: 34352e3137342e3139372e302f32342d3234203d3e20323731353939.roa (hash: E3nlaARx3PzB1rSXI0CV9TZHHa1d5VKn18/CrRlOWWU=)
                          8: 323830343a376530633a383030303a3a2f33332d3333203d3e20323731353939.roa (hash: cdQFAc5oMDalIJSuzmJxNwGls/2qu5wxUNoLXs7yrss=)
                          9: 323830343a376530633a3a2f33322d3332203d3e20323731353939.roa (hash: 9B3rAR0JTWT3bp/MqirVAlLl1g/UTVn3+dBilcZ/ONY=)
                          10: 34352e3137342e3139382e302f32342d3234203d3e20323731353939.roa (hash: pHqEVF5obVHwJ6Unhb0D21MpSdPGenUQ9pUQiZYcreU=)
                          11: 34352e3137342e3139362e302f32332d3233203d3e20323731353939.roa (hash: TXmmNpcMDXWexdXHbuLEEkKPqo3axpYd1WtJv+MeRE8=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/A12BD2D5FEDA2D7B1553F0B18B08A4D8C0153067.crl
                          rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/A12BD2D5FEDA2D7B1553F0B18B08A4D8C0153067.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A12BD2D5FEDA2D7B1553F0B18B08A4D8C0153067.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9b:5b:12:a2:d3:fb:bd:47:b6:85:65:e3:c4:c5:aa:7f:ed:10:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A12BD2D5FEDA2D7B1553F0B18B08A4D8C0153067
        Validity
            Not Before: Jan  9 03:45:13 2024 GMT
            Not After : Jan 10 06:32:13 2024 GMT
        Subject: CN=6FCC982D6D7C957A133595C4ECD6734FE3FE1C2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:87:77:ef:cb:17:36:aa:86:a6:dc:77:84:fe:
                    0e:a5:87:c3:d6:06:4f:ed:f1:c4:02:31:01:41:7a:
                    8f:fc:40:db:49:f3:3f:31:fb:55:8d:7b:1c:cc:16:
                    e5:f9:dc:d6:fd:08:e0:a2:31:34:01:3c:eb:4e:64:
                    c8:ab:06:54:27:9d:9f:fe:f6:6f:0e:1b:18:6c:03:
                    c6:b2:79:77:33:f2:8e:6b:9b:f7:bf:e8:65:31:c3:
                    0f:c6:14:a5:8f:db:55:14:b7:6d:94:56:23:9e:a6:
                    bb:ee:6d:fa:cd:96:05:10:d8:58:55:c0:be:0c:ec:
                    0b:90:3a:5b:76:b9:5d:cb:98:d7:42:99:66:8a:4f:
                    d0:f3:72:9b:9c:2f:65:53:b9:82:07:12:e5:a5:e6:
                    c3:fc:f2:d2:d7:fe:15:9b:77:af:31:24:92:08:39:
                    c7:27:1f:3b:c2:73:f4:42:79:c6:72:27:b2:16:80:
                    ff:10:2e:83:2d:03:be:f5:4e:9b:55:6b:38:97:3f:
                    2e:b2:c3:68:93:ae:f5:b1:3d:c1:7d:92:d5:88:4b:
                    ae:c5:62:c6:2f:5d:0e:df:d9:b2:41:2d:50:f2:cd:
                    50:6c:6c:2a:bd:17:ef:ad:e7:a0:9b:b5:35:aa:a0:
                    65:95:49:fc:3b:b5:57:28:5d:55:5d:c0:80:43:bc:
                    36:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CC:98:2D:6D:7C:95:7A:13:35:95:C4:EC:D6:73:4F:E3:FE:1C:2A
            X509v3 Authority Key Identifier:
                keyid:A1:2B:D2:D5:FE:DA:2D:7B:15:53:F0:B1:8B:08:A4:D8:C0:15:30:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/A12BD2D5FEDA2D7B1553F0B18B08A4D8C0153067.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A12BD2D5FEDA2D7B1553F0B18B08A4D8C0153067.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/A12BD2D5FEDA2D7B1553F0B18B08A4D8C0153067.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:48:c5:28:b1:28:ee:2b:7c:ed:e5:84:96:6f:4a:0b:b0:3d:
         5a:fa:98:7a:bd:86:f1:80:5f:a5:c5:09:06:bd:a9:40:34:d4:
         28:dc:86:81:fd:75:53:a1:c3:cd:65:33:77:cc:7a:74:aa:8a:
         6f:0a:8b:ac:f5:cd:64:9c:6a:c7:78:9f:8f:c6:76:02:29:b2:
         d3:8e:0a:73:1b:b4:4a:94:ed:a8:49:c3:24:61:f1:f5:15:9b:
         e9:32:bf:22:35:58:86:32:e1:40:f9:16:5d:c8:51:c1:c3:f3:
         5a:b8:eb:a3:f8:e3:ea:1a:05:61:7d:63:51:df:ac:18:4b:c7:
         e1:2a:f8:d4:a7:16:39:3e:81:c2:aa:4d:e4:95:42:07:73:5f:
         5d:fd:8c:ad:00:3d:3f:3a:1a:c0:b0:87:e9:9d:dd:a0:11:b1:
         15:1a:05:aa:13:62:02:6a:8f:a9:be:a7:31:0c:44:8c:9e:60:
         f9:75:f0:d9:e8:9b:d6:65:c5:e3:7a:37:37:13:6b:36:c0:55:
         8e:25:01:52:99:de:34:d6:bf:48:a6:9f:e4:37:05:aa:b6:5f:
         bb:c5:e0:fb:a8:20:68:73:3a:22:67:27:66:b1:7b:51:25:3b:
         bc:e1:c5:74:07:28:87:3b:7a:fc:66:99:67:b5:29:d9:f1:83:
         76:9c:78:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUV5tbEqLT+71HtoVl48TFqn/tECUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTEyQkQyRDVGRURBMkQ3QjE1NTNGMEIxOEIwOEE0RDhD
MDE1MzA2NzAeFw0yNDAxMDkwMzQ1MTNaFw0yNDAxMTAwNjMyMTNaMDMxMTAvBgNV
BAMTKDZGQ0M5ODJENkQ3Qzk1N0ExMzM1OTVDNEVDRDY3MzRGRTNGRTFDMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrh3fvyxc2qoam3HeE/g6lh8PW
Bk/t8cQCMQFBeo/8QNtJ8z8x+1WNexzMFuX53Nb9COCiMTQBPOtOZMirBlQnnZ/+
9m8OGxhsA8ayeXcz8o5rm/e/6GUxww/GFKWP21UUt22UViOeprvubfrNlgUQ2FhV
wL4M7AuQOlt2uV3LmNdCmWaKT9DzcpucL2VTuYIHEuWl5sP88tLX/hWbd68xJJII
OccnHzvCc/RCecZyJ7IWgP8QLoMtA771TptVaziXPy6yw2iTrvWxPcF9ktWIS67F
YsYvXQ7f2bJBLVDyzVBsbCq9F++t56CbtTWqoGWVSfw7tVcoXVVdwIBDvDYxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUb8yYLW18lXoTNZXE7NZzT+P+HCowHwYDVR0j
BBgwFoAUoSvS1f7aLXsVU/Cxiwik2MAVMGcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnZQS2dvWGhvVk5CTmZYNEgyUkVFRloxUFZtRjhSOFhtVThxMVVVZGlt
R2IvMC9BMTJCRDJENUZFREEyRDdCMTU1M0YwQjE4QjA4QTREOEMwMTUzMDY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ExMkJEMkQ1RkVEQTJEN0Ix
NTUzRjBCMThCMDhBNEQ4QzAxNTMwNjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MnZQS2dvWGhvVk5CTmZYNEgyUkVFRloxUFZtRjhSOFhtVThxMVVVZGltR2IvMC9B
MTJCRDJENUZFREEyRDdCMTU1M0YwQjE4QjA4QTREOEMwMTUzMDY3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHEjFKLEo7it87eWElm9KC7A9WvqYer2G8YBfpcUJBr2pQDTUKNyGgf11U6HD
zWUzd8x6dKqKbwqLrPXNZJxqx3ifj8Z2Aimy044Kcxu0SpTtqEnDJGHx9RWb6TK/
IjVYhjLhQPkWXchRwcPzWrjro/jj6hoFYX1jUd+sGEvH4Sr41KcWOT6BwqpN5JVC
B3NfXf2MrQA9PzoawLCH6Z3doBGxFRoFqhNiAmqPqb6nMQxEjJ5g+XXw2eib1mXF
43o3NxNrNsBVjiUBUpneNNa/SKaf5DcFqrZfu8Xg+6ggaHM6ImcnZrF7USU7vOHF
dAcohzt6/GaZZ7Up2fGDdpx4jw==
-----END CERTIFICATE-----
Generated at Tue Jan 9 05:55:16 2024 by rpki-client on console.sobornost.net