Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/DBA87B52C08D64387CF846B996B53360B65F2B90.mft
File:                     DBA87B52C08D64387CF846B996B53360B65F2B90.mft (raw, json)
Hash identifier:          OpAXMr6TRgW852k5NTqPygccarkAn3YIqypV0ugbnxY=
Subject key identifier:   5A:F5:38:6A:6A:18:44:C7:BF:F4:48:EF:23:FC:3A:63:8C:12:F9:09
Authority key identifier: DB:A8:7B:52:C0:8D:64:38:7C:F8:46:B9:96:B5:33:60:B6:5F:2B:90
Certificate issuer:       /CN=DBA87B52C08D64387CF846B996B53360B65F2B90
Certificate serial:       1ED512D552B892BFCDF421B2507BB9E9EA6C252E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBA87B52C08D64387CF846B996B53360B65F2B90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/DBA87B52C08D64387CF846B996B53360B65F2B90.mft
Manifest number:          01F1
Signing time:             Tue 09 Jan 2024 08:09:29 +0000
Manifest this update:     Tue 09 Jan 2024 08:04:29 +0000
Manifest next update:     Wed 10 Jan 2024 09:14:29 +0000
Files and hashes:         1: 34352e3136382e36342e302f32322d3234203d3e20323638313338.roa (hash: myyavwzl5m9NizSjgcyzEoGAqvIM5HsG4SPQdX5y84k=)
                          2: DBA87B52C08D64387CF846B996B53360B65F2B90.crl (hash: L1l2O8o/nl+AdFy0nQSw4lNORtLW/Q+EO1+8Amz5CGo=)
                          3: 323830343a353839383a3a2f33322d3335203d3e20323638313338.roa (hash: bxZaCPDQG7DvTjm8LJwhwpWOYar/qZyzUZ+CdZF5w7M=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/DBA87B52C08D64387CF846B996B53360B65F2B90.crl
                          rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/DBA87B52C08D64387CF846B996B53360B65F2B90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBA87B52C08D64387CF846B996B53360B65F2B90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 09:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d5:12:d5:52:b8:92:bf:cd:f4:21:b2:50:7b:b9:e9:ea:6c:25:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA87B52C08D64387CF846B996B53360B65F2B90
        Validity
            Not Before: Jan  9 08:04:29 2024 GMT
            Not After : Jan 10 09:14:29 2024 GMT
        Subject: CN=5AF5386A6A1844C7BFF448EF23FC3A638C12F909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:28:17:23:0c:fd:c2:7c:27:5c:a8:66:8b:72:
                    9b:54:c3:18:7d:af:3c:4d:12:22:89:1c:54:fb:ef:
                    88:f7:8c:e8:cc:93:f7:26:97:ea:11:86:ef:75:9b:
                    10:fd:85:fa:2a:63:de:55:8d:f4:00:5b:f9:41:36:
                    79:6d:43:4a:7a:5a:31:1f:7d:e4:9e:60:fa:55:b1:
                    85:a1:cf:a5:8e:4d:16:9d:a3:1c:c8:ad:0f:71:14:
                    07:0e:f8:ac:49:ae:bd:f9:55:03:b6:51:82:a3:5c:
                    2e:24:b6:e6:f1:92:f4:3d:6f:e8:ef:76:4b:d8:d5:
                    45:b3:a4:c6:40:66:e1:74:24:16:64:71:39:e2:ab:
                    72:5d:fb:26:b1:34:aa:b6:7d:6b:8a:dc:8a:5e:aa:
                    33:48:81:66:da:c2:2f:18:69:b3:b3:90:03:26:a3:
                    d8:6d:a8:ed:9e:87:0b:47:e2:c0:97:58:3a:22:f7:
                    87:39:16:4d:44:b3:63:70:79:68:8f:4a:0b:22:84:
                    0e:9a:02:27:28:66:16:90:91:fd:d4:55:e2:38:5f:
                    16:36:ff:da:49:32:1e:b3:7b:09:be:ad:ce:c1:54:
                    83:c5:54:d8:2b:4a:52:35:d3:95:8d:cd:fd:0a:73:
                    77:7b:7f:52:51:01:61:eb:dd:9b:26:0c:9a:01:93:
                    26:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F5:38:6A:6A:18:44:C7:BF:F4:48:EF:23:FC:3A:63:8C:12:F9:09
            X509v3 Authority Key Identifier:
                keyid:DB:A8:7B:52:C0:8D:64:38:7C:F8:46:B9:96:B5:33:60:B6:5F:2B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/DBA87B52C08D64387CF846B996B53360B65F2B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBA87B52C08D64387CF846B996B53360B65F2B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/DBA87B52C08D64387CF846B996B53360B65F2B90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:3e:ba:61:a4:c9:09:9c:cc:50:be:e3:21:fc:05:77:5e:5f:
         57:bb:4b:21:65:4c:d2:52:66:62:0c:bb:15:ab:91:aa:28:0e:
         08:32:21:a8:98:45:47:e2:04:4a:ff:f4:af:12:0c:ae:5f:df:
         74:6a:49:54:e4:e5:41:8a:45:7c:d4:e5:39:4d:78:d5:c1:af:
         0a:50:39:7e:29:39:86:d5:9e:ea:a4:b0:f3:4e:86:43:f4:5e:
         97:bb:ba:ae:c5:83:83:57:83:6a:e6:d4:b5:ab:a4:f0:56:f6:
         39:73:d5:e6:41:6e:aa:00:36:fb:85:26:f6:8d:10:c6:26:8e:
         7d:27:33:f5:bb:ee:3d:c3:a7:88:a3:0c:0e:06:25:e7:ff:a7:
         b7:2e:fe:d8:fa:d1:bd:3e:c0:f7:e2:56:7e:f1:6e:dc:77:c6:
         98:8f:e7:8d:0f:17:03:18:11:97:94:da:91:78:50:1f:4e:53:
         15:75:44:71:47:3b:e3:e2:25:5f:a0:cc:70:ec:ec:f9:e2:1b:
         cc:d5:90:00:a4:9b:e8:5a:30:d6:fc:d2:40:14:ee:97:1a:bb:
         89:65:fe:c8:ac:8a:da:af:85:68:ae:42:3f:1c:14:83:71:3a:
         24:b6:11:bb:69:37:32:49:14:3e:2d:2f:3f:ab:81:aa:42:11:
         ea:5d:72:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:27 2024 by rpki-client on console.sobornost.net