Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/034B07B9A28CA47FE468C614ED3ECCFCE8810362.mft
File:                     034B07B9A28CA47FE468C614ED3ECCFCE8810362.mft (raw, json)
Hash identifier:          cTpGaAtvJfsLyzjgQNkgoxTJDygEQUyYHdeCjyEddnM=
Subject key identifier:   96:AE:2B:89:86:4C:5B:B3:3A:85:78:A1:98:8F:49:BA:6F:27:9C:E9
Authority key identifier: 03:4B:07:B9:A2:8C:A4:7F:E4:68:C6:14:ED:3E:CC:FC:E8:81:03:62
Certificate issuer:       /CN=034B07B9A28CA47FE468C614ED3ECCFCE8810362
Certificate serial:       019865AFF82E552BCC1D2C555FCC6355A7D9F69F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/034B07B9A28CA47FE468C614ED3ECCFCE8810362.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/034B07B9A28CA47FE468C614ED3ECCFCE8810362.mft
Manifest number:          C6
Signing time:             Tue 09 Jan 2024 07:09:17 +0000
Manifest this update:     Tue 09 Jan 2024 07:04:17 +0000
Manifest next update:     Wed 10 Jan 2024 09:51:17 +0000
Files and hashes:         1: 3139302e38332e38342e302f32322d3234203d3e20323730333430.roa (hash: U83PR8zKHhAzvujJQ9N0d0A3+7vwoLNVVK/7IPyF/7g=)
                          2: 034B07B9A28CA47FE468C614ED3ECCFCE8810362.crl (hash: TJIPK1G6JlOZKUlFbtow7jbop72HWYi6moqmmwkgJFQ=)
                          3: 323830343a366138303a3a2f33322d3438203d3e20323730333430.roa (hash: uMlUf318OIm4/TrFfSxVccUHKYNSds670sXccT+KeZY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/034B07B9A28CA47FE468C614ED3ECCFCE8810362.crl
                          rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/034B07B9A28CA47FE468C614ED3ECCFCE8810362.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/034B07B9A28CA47FE468C614ED3ECCFCE8810362.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 09:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:65:af:f8:2e:55:2b:cc:1d:2c:55:5f:cc:63:55:a7:d9:f6:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=034B07B9A28CA47FE468C614ED3ECCFCE8810362
        Validity
            Not Before: Jan  9 07:04:17 2024 GMT
            Not After : Jan 10 09:51:17 2024 GMT
        Subject: CN=96AE2B89864C5BB33A8578A1988F49BA6F279CE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a1:ce:30:51:72:8e:a0:42:62:a1:fb:80:81:
                    3f:a5:a2:f4:1a:55:63:2b:fb:74:c0:e8:df:38:48:
                    c8:38:e1:e5:21:45:41:3a:81:75:4f:58:df:f9:43:
                    93:be:22:53:9d:bd:ba:b5:aa:6c:35:4b:04:84:66:
                    cf:73:5f:e2:a2:55:57:3a:ff:ad:6a:23:60:50:64:
                    a0:74:63:94:7d:8a:00:ea:e0:cd:38:48:e5:5d:7b:
                    f2:57:d2:33:eb:9c:91:55:a7:25:1b:09:0f:e9:ba:
                    64:a4:16:08:e2:a9:4f:e1:78:47:de:c0:a1:c0:0f:
                    56:a2:29:56:ac:54:a5:66:4c:99:df:8f:d7:80:a7:
                    fc:c6:a0:13:a8:31:ac:5e:cb:9a:54:4a:65:64:b1:
                    ff:49:5f:95:da:fc:08:28:1c:82:96:01:e3:84:a8:
                    b0:92:2d:10:92:27:ca:24:25:2b:e6:03:ad:8b:89:
                    73:ff:54:53:a9:28:5d:bd:2b:13:8e:0d:fe:4a:4d:
                    79:30:6c:19:cc:4a:46:28:15:2a:07:35:1a:7b:86:
                    44:4a:44:b9:61:af:4d:10:78:3d:09:f3:d0:bb:44:
                    88:8e:31:1d:ea:9d:08:fa:3c:88:f7:37:eb:23:01:
                    84:0e:d3:2f:93:96:a8:a8:6a:3f:37:36:ff:ce:88:
                    4b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AE:2B:89:86:4C:5B:B3:3A:85:78:A1:98:8F:49:BA:6F:27:9C:E9
            X509v3 Authority Key Identifier:
                keyid:03:4B:07:B9:A2:8C:A4:7F:E4:68:C6:14:ED:3E:CC:FC:E8:81:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/034B07B9A28CA47FE468C614ED3ECCFCE8810362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/034B07B9A28CA47FE468C614ED3ECCFCE8810362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/034B07B9A28CA47FE468C614ED3ECCFCE8810362.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:26:2e:4a:4f:97:b9:0a:bb:ed:1f:a4:44:2c:97:0c:75:bf:
         3e:df:e5:60:ad:49:f5:f9:67:54:09:12:42:fc:a3:71:85:1d:
         31:67:13:c7:56:ac:22:e5:3b:9f:84:0a:6e:86:d9:a3:49:bf:
         3d:52:88:b1:76:67:2d:9e:0f:90:c9:13:9b:fd:bf:5d:d2:54:
         c2:dc:5f:3b:83:58:df:da:45:15:a3:96:b9:20:87:3d:95:8d:
         85:be:96:90:26:a7:e0:eb:b6:83:ec:72:cc:e6:42:7b:f2:da:
         7e:d4:c0:04:15:a4:75:f8:25:99:0f:3b:26:e7:18:39:f9:87:
         dd:35:e6:67:ba:fc:61:70:d8:f4:f5:6b:08:02:3c:e1:3a:74:
         b0:b2:63:f2:e1:39:77:e7:dc:bc:b7:c7:fd:ac:b6:24:52:45:
         5d:32:ee:32:61:74:b7:b7:80:35:bb:50:89:de:bf:3f:a7:cc:
         a6:2d:f8:fc:20:cd:3f:be:c3:e0:ed:04:5c:e6:8a:da:52:08:
         b3:6c:20:26:ae:bf:c4:48:a9:42:5f:5a:ba:72:6e:1e:e4:49:
         96:6c:90:aa:a5:a3:d3:ca:f1:04:4b:09:49:9d:0b:7f:93:69:
         4a:55:4f:50:a5:65:e5:27:fc:9d:24:dc:c9:3a:78:14:34:20:
         2a:ae:f5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:29 2024 by rpki-client on console.sobornost.net