Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/83C1CE78B3568C27B5960BA7AB655DD62285FC06.mft
File:                     83C1CE78B3568C27B5960BA7AB655DD62285FC06.mft (raw, json)
Hash identifier:          vtKP9f8m1cA+EQPmFpHw2orjB6y4z2pf+q5/L4oT9Uo=
Subject key identifier:   47:24:C5:78:1D:14:40:68:31:98:38:44:EE:C7:7F:B0:4C:79:0F:DD
Authority key identifier: 83:C1:CE:78:B3:56:8C:27:B5:96:0B:A7:AB:65:5D:D6:22:85:FC:06
Certificate issuer:       /CN=83C1CE78B3568C27B5960BA7AB655DD62285FC06
Certificate serial:       5AADD6070DE384822B95C0EF9628EC36C05AA277
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83C1CE78B3568C27B5960BA7AB655DD62285FC06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/83C1CE78B3568C27B5960BA7AB655DD62285FC06.mft
Manifest number:          CF
Signing time:             Tue 09 Jan 2024 01:00:25 +0000
Manifest this update:     Tue 09 Jan 2024 00:55:25 +0000
Manifest next update:     Wed 10 Jan 2024 02:37:25 +0000
Files and hashes:         1: 83C1CE78B3568C27B5960BA7AB655DD62285FC06.crl (hash: Vk39yE3jrExuJq6CgwewEgc0ZNUtxvs+dCdKXqwKUnE=)
                          2: 323830343a333831303a3a2f33322d3438203d3e20323636343533.roa (hash: Wp4TUI4yw2HfopHy6WcXRRbDwa4tiH7n+AAkMC3VxCw=)
                          3: 3137302e38332e33362e302f32322d3234203d3e20323636343533.roa (hash: UIcCSOK886gefX1WBTUJmK5AZVqt621cgt44yr6ijDk=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/83C1CE78B3568C27B5960BA7AB655DD62285FC06.crl
                          rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/83C1CE78B3568C27B5960BA7AB655DD62285FC06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83C1CE78B3568C27B5960BA7AB655DD62285FC06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 01:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ad:d6:07:0d:e3:84:82:2b:95:c0:ef:96:28:ec:36:c0:5a:a2:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83C1CE78B3568C27B5960BA7AB655DD62285FC06
        Validity
            Not Before: Jan  9 00:55:25 2024 GMT
            Not After : Jan 10 02:37:25 2024 GMT
        Subject: CN=4724C5781D14406831983844EEC77FB04C790FDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:65:d2:67:c4:31:e1:39:35:16:d3:b8:2e:50:
                    fd:a6:74:73:5d:29:57:e4:60:f9:34:d9:a9:c5:18:
                    77:fc:f0:6f:f8:15:61:66:6d:44:3d:0e:5b:23:5a:
                    19:b8:76:37:7d:66:01:0e:cf:fe:7e:14:76:a6:f9:
                    5d:45:54:ae:93:24:46:f0:b9:e6:8d:20:b2:29:da:
                    5a:ab:6b:a7:b3:a8:65:55:22:f1:76:77:95:0b:15:
                    36:38:9c:d6:bd:51:e7:a1:d9:e0:bb:d6:9f:7e:af:
                    6b:39:dc:f6:e9:11:7d:10:4c:a3:8c:d3:c7:45:97:
                    06:f5:c5:49:e1:18:50:9d:6b:c1:e8:f9:2f:e9:e9:
                    8f:a3:2d:2d:4d:13:38:68:f0:7d:18:f5:6a:cf:f1:
                    4e:f8:1e:ba:46:6b:47:5c:fa:8c:dd:db:9d:c3:e4:
                    f8:bf:53:5d:53:26:9b:e0:80:fb:57:2c:0a:68:98:
                    60:13:72:74:b0:b0:56:39:39:30:39:2d:81:98:0c:
                    e5:be:f1:c1:43:76:d1:41:6e:79:23:71:2a:f9:dd:
                    4c:93:2b:e6:d0:73:be:b6:09:ed:c4:42:0b:68:bf:
                    65:e3:97:2b:f0:39:27:9b:8d:64:ea:84:a8:8a:e6:
                    bf:ec:17:33:58:d3:c5:d4:74:14:15:69:98:42:0c:
                    20:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:24:C5:78:1D:14:40:68:31:98:38:44:EE:C7:7F:B0:4C:79:0F:DD
            X509v3 Authority Key Identifier:
                keyid:83:C1:CE:78:B3:56:8C:27:B5:96:0B:A7:AB:65:5D:D6:22:85:FC:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/83C1CE78B3568C27B5960BA7AB655DD62285FC06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83C1CE78B3568C27B5960BA7AB655DD62285FC06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/83C1CE78B3568C27B5960BA7AB655DD62285FC06.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:39:09:90:0a:7d:8c:f6:65:59:f0:7b:10:c4:77:52:09:8d:
         e7:27:95:5e:aa:d3:15:84:40:46:ff:3c:14:38:5c:bd:14:9e:
         b9:98:c0:95:99:95:f9:a7:dc:ec:bb:84:9f:38:bc:ea:d2:16:
         1c:40:86:2d:30:df:a5:84:78:6b:87:10:c6:a5:31:67:69:78:
         a1:6e:75:7d:67:80:6d:48:19:b7:6d:59:23:d7:7d:32:ba:f5:
         bb:35:d9:44:cc:42:7e:e0:46:44:02:3f:ba:d7:d7:f6:96:40:
         0c:f0:09:d5:f3:8b:03:31:20:e7:26:c9:0f:ca:fb:64:8d:0d:
         d3:16:22:14:80:d0:e5:f3:75:4d:92:91:2a:98:dd:fb:cb:6f:
         41:60:7b:f0:eb:29:84:5f:68:89:c3:30:c8:e8:9a:5b:3f:26:
         44:e9:18:ad:7d:a1:4d:41:8f:3c:62:ec:42:f0:d0:31:d0:49:
         27:e6:f2:55:7a:b6:a0:61:7b:e5:df:35:30:8d:7a:e5:c0:42:
         a0:02:25:7f:f9:fd:82:93:3a:d6:49:8c:4d:90:b2:87:24:38:
         2a:b2:e7:1c:de:56:9e:49:14:72:c0:4f:da:fd:62:d3:3c:10:
         cf:cd:9d:5e:a1:ad:39:c1:1b:f2:4c:93:c8:25:b1:be:38:11:
         23:6d:c7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 02:15:32 2024 by rpki-client on console.sobornost.net