Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/14945FB8256310020FB33CBB0208C3D3EE0DC64A.mft
File:                     14945FB8256310020FB33CBB0208C3D3EE0DC64A.mft (raw, json)
Hash identifier:          PNEkU66N7E4teH3S9k7p3UuyVL1+77dVjmfQcocSg+Y=
Subject key identifier:   DE:95:6D:30:11:4E:B8:4C:9E:2F:B7:89:18:32:E7:07:4F:D0:28:00
Authority key identifier: 14:94:5F:B8:25:63:10:02:0F:B3:3C:BB:02:08:C3:D3:EE:0D:C6:4A
Certificate issuer:       /CN=14945FB8256310020FB33CBB0208C3D3EE0DC64A
Certificate serial:       74B6A0F11DA4244DCB452DE001A8132F9DC4706A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14945FB8256310020FB33CBB0208C3D3EE0DC64A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/14945FB8256310020FB33CBB0208C3D3EE0DC64A.mft
Manifest number:          44
Signing time:             Tue 09 Jan 2024 13:48:18 +0000
Manifest this update:     Tue 09 Jan 2024 13:43:18 +0000
Manifest next update:     Wed 10 Jan 2024 14:13:18 +0000
Files and hashes:         1: 323830343a383736383a3a2f33322d3336203d3e20323732373037.roa (hash: njMU8uV0bb/eXUMsz7fS6Xl7ElCATK0yyt/sV4T3dmc=)
                          2: 14945FB8256310020FB33CBB0208C3D3EE0DC64A.crl (hash: 2eNp6YNKv6Ktf13hHQeFnc0GOro0yktuCoUyFuG6y28=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/14945FB8256310020FB33CBB0208C3D3EE0DC64A.crl
                          rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/14945FB8256310020FB33CBB0208C3D3EE0DC64A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14945FB8256310020FB33CBB0208C3D3EE0DC64A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 14:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b6:a0:f1:1d:a4:24:4d:cb:45:2d:e0:01:a8:13:2f:9d:c4:70:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14945FB8256310020FB33CBB0208C3D3EE0DC64A
        Validity
            Not Before: Jan  9 13:43:18 2024 GMT
            Not After : Jan 10 14:13:18 2024 GMT
        Subject: CN=DE956D30114EB84C9E2FB7891832E7074FD02800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7d:a5:22:37:8c:11:8f:64:4e:ba:b0:50:9e:
                    10:f8:86:c7:1d:83:49:28:2a:5f:bd:40:5a:a0:dd:
                    f0:f5:cf:97:50:47:a3:b6:69:8f:6c:9e:61:bb:a9:
                    2b:e2:ee:fc:1c:14:14:ce:c8:b1:49:69:3a:dc:a4:
                    7c:74:e1:7f:40:fb:c5:10:22:4a:f7:47:a7:c7:77:
                    fc:d8:12:79:2a:f6:1c:61:7f:ed:28:24:cb:a4:60:
                    d1:5a:e0:0d:36:e3:02:bb:fd:56:5f:4d:78:e2:5b:
                    e6:51:66:12:1e:2e:ec:da:bd:a2:3a:bc:64:b0:ae:
                    7b:29:ec:e5:e5:0c:52:f5:fb:a6:83:48:30:84:0a:
                    d3:98:57:a6:88:33:e4:bb:de:00:3c:2b:f1:b0:f8:
                    cc:a1:59:d6:f0:dd:d7:e4:fd:ba:f0:97:5a:8b:78:
                    96:ea:88:45:5e:58:f9:0c:ae:02:62:ea:37:21:90:
                    60:61:bf:2b:c6:63:ac:a8:f5:6e:78:c3:98:73:22:
                    f2:dd:e6:7e:08:c0:eb:85:49:ab:b5:02:83:b2:74:
                    e7:69:27:f3:e5:f2:b5:d1:9c:a7:db:75:07:aa:bf:
                    fb:bd:13:b2:63:6c:8c:45:a4:22:c3:9c:13:af:41:
                    f1:0a:15:64:9a:c2:cc:c8:30:f3:e5:69:40:d4:06:
                    95:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:95:6D:30:11:4E:B8:4C:9E:2F:B7:89:18:32:E7:07:4F:D0:28:00
            X509v3 Authority Key Identifier:
                keyid:14:94:5F:B8:25:63:10:02:0F:B3:3C:BB:02:08:C3:D3:EE:0D:C6:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/14945FB8256310020FB33CBB0208C3D3EE0DC64A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14945FB8256310020FB33CBB0208C3D3EE0DC64A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/14945FB8256310020FB33CBB0208C3D3EE0DC64A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:92:dc:50:21:39:f2:87:06:c3:21:24:a0:73:a7:77:a7:30:
         03:be:eb:e2:37:60:39:9b:41:42:04:0f:d7:e6:77:02:6d:fb:
         11:3a:7e:7b:f6:b8:54:db:db:33:f0:a7:49:ca:ff:e1:53:eb:
         98:05:05:5c:48:0f:6b:20:f6:48:46:7a:b6:3b:3c:b2:46:c1:
         e6:cb:af:0e:30:93:33:e1:23:05:da:e3:32:d2:bf:bd:85:bc:
         9e:1a:84:ec:8a:74:75:b1:d1:2c:43:6d:10:3d:ea:fc:68:45:
         9c:df:f5:73:fb:87:8b:ca:a2:7c:8b:f4:7e:d5:e2:5c:54:4e:
         37:dc:a3:87:94:f1:b2:1a:83:cb:bb:aa:c3:ae:87:92:a7:80:
         c1:e5:ca:f3:ba:4e:ee:c6:a0:76:ab:b1:b2:20:8e:cd:d8:70:
         f3:3a:b8:03:7a:fd:63:75:99:d3:99:ed:3f:03:e7:d7:e1:0c:
         2f:f0:e1:b9:68:b5:0f:20:8b:32:a5:1b:f6:ce:94:aa:30:6f:
         9b:3b:26:e0:20:01:76:3b:aa:94:da:1e:2b:3a:47:83:ec:31:
         0b:6f:92:05:46:d2:ea:65:94:95:f6:29:f5:ff:f9:a1:ee:98:
         f3:67:f5:dd:42:c0:31:8e:55:2b:7c:6b:b2:bd:fe:84:69:43:
         7f:da:85:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:08 2024 by rpki-client on console.sobornost.net