Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/EEC6BC6193AFE19EDF1A1CFB6C4F29E1A3E12BC5.mft
File:                     EEC6BC6193AFE19EDF1A1CFB6C4F29E1A3E12BC5.mft (raw, json)
Hash identifier:          Go2FVz+ws+2EJepbvlcZLMt7+yIc3DoDpt1uPI3x90U=
Subject key identifier:   F9:0E:FB:77:A7:E4:0F:8B:42:A9:E5:00:89:6C:F3:ED:F1:34:5E:F5
Authority key identifier: EE:C6:BC:61:93:AF:E1:9E:DF:1A:1C:FB:6C:4F:29:E1:A3:E1:2B:C5
Certificate issuer:       /CN=EEC6BC6193AFE19EDF1A1CFB6C4F29E1A3E12BC5
Certificate serial:       26951A63C3313910F946B721F09C99C66AFA8B00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EEC6BC6193AFE19EDF1A1CFB6C4F29E1A3E12BC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/EEC6BC6193AFE19EDF1A1CFB6C4F29E1A3E12BC5.mft
Manifest number:          23
Signing time:             Tue 09 Jan 2024 09:29:33 +0000
Manifest this update:     Tue 09 Jan 2024 09:24:33 +0000
Manifest next update:     Wed 10 Jan 2024 11:25:33 +0000
Files and hashes:         1: 3136382e3232382e3135322e302f32322d3234203d3e20323634393339.roa (hash: WvqK7He8MngWBHIysQ5rps29EigNBAl1/9IGPlBtIhY=)
                          2: 323830343a333034303a3a2f33322d3438203d3e20323634393339.roa (hash: gIRIYBxMBlyiEnGHb8iD3zQEfDXnQ0nYcp6L5Ba8aXs=)
                          3: EEC6BC6193AFE19EDF1A1CFB6C4F29E1A3E12BC5.crl (hash: bkE+tnVa7TPhcQUBMHBf4GZ7B2blAaJtjJR/9QQQrzY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/EEC6BC6193AFE19EDF1A1CFB6C4F29E1A3E12BC5.crl
                          rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/EEC6BC6193AFE19EDF1A1CFB6C4F29E1A3E12BC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EEC6BC6193AFE19EDF1A1CFB6C4F29E1A3E12BC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 11:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:95:1a:63:c3:31:39:10:f9:46:b7:21:f0:9c:99:c6:6a:fa:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC6BC6193AFE19EDF1A1CFB6C4F29E1A3E12BC5
        Validity
            Not Before: Jan  9 09:24:33 2024 GMT
            Not After : Jan 10 11:25:33 2024 GMT
        Subject: CN=F90EFB77A7E40F8B42A9E500896CF3EDF1345EF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:76:de:d0:2e:11:b8:7d:c4:3f:6c:6b:43:65:
                    ef:2f:b1:7c:14:f1:82:3b:3f:d0:73:7c:0d:5a:71:
                    c7:55:d3:af:a0:03:0f:91:8e:60:86:85:b6:02:f1:
                    2e:d5:d6:4c:f6:5e:0b:ed:74:50:9f:53:81:f2:bb:
                    61:fb:ba:f8:ac:5d:a8:8c:1a:15:b8:3b:bd:71:a1:
                    4b:db:48:ce:36:98:d9:6c:64:01:2e:83:f7:f6:69:
                    9f:93:02:6c:ba:97:42:c7:b9:de:88:35:31:1a:8c:
                    c4:54:c9:31:4a:db:b1:74:21:72:42:ef:2f:b2:d8:
                    99:7e:20:94:3e:26:4d:fa:8b:e0:f6:fe:d1:a5:76:
                    c4:1d:f7:a7:83:2e:b3:29:4b:62:27:28:9a:8c:bf:
                    38:39:23:dc:9f:14:95:f5:0d:6a:8c:14:e4:bf:e1:
                    fc:1b:d9:e5:7e:68:80:77:64:ad:c1:91:20:81:b9:
                    52:6a:c1:53:c9:be:f2:95:7f:18:24:25:3b:81:da:
                    d2:8d:ae:79:11:13:8c:94:af:04:82:a6:ea:bd:03:
                    e1:06:64:21:71:f7:42:15:4c:55:87:b7:5b:49:7b:
                    3d:e7:95:d4:8f:09:54:22:5f:b8:b8:db:05:1c:92:
                    c6:62:b9:4c:69:e1:26:20:7e:ec:fe:26:33:d5:fa:
                    6a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0E:FB:77:A7:E4:0F:8B:42:A9:E5:00:89:6C:F3:ED:F1:34:5E:F5
            X509v3 Authority Key Identifier:
                keyid:EE:C6:BC:61:93:AF:E1:9E:DF:1A:1C:FB:6C:4F:29:E1:A3:E1:2B:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/EEC6BC6193AFE19EDF1A1CFB6C4F29E1A3E12BC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EEC6BC6193AFE19EDF1A1CFB6C4F29E1A3E12BC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/EEC6BC6193AFE19EDF1A1CFB6C4F29E1A3E12BC5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:96:15:52:9e:73:1a:f9:db:65:65:23:3f:74:a0:7e:7a:c1:
         52:20:d1:67:2a:62:d1:a8:6c:37:d2:16:af:f9:2c:18:06:30:
         ac:21:44:50:86:b3:54:22:df:dd:21:22:9c:be:f6:5e:9f:4b:
         0b:77:2c:11:86:04:83:88:95:97:55:42:59:17:5d:d7:1a:d1:
         47:a4:4c:07:0d:80:73:72:47:06:c7:58:e6:93:6a:2f:0e:8d:
         b9:d6:81:c2:5a:1a:d1:6f:d9:94:eb:73:01:89:b3:b5:75:8a:
         32:ac:37:6e:52:a0:96:3c:d1:4a:f4:93:78:7b:ef:49:25:c5:
         ab:1a:b0:dd:20:24:f7:19:c2:2c:4f:45:4e:b1:c2:77:e5:ed:
         5e:ad:88:ed:db:42:b4:8b:2d:cf:94:77:48:ed:c5:91:07:13:
         f5:26:5b:bb:b4:d2:5c:ac:95:19:62:00:0d:04:48:d0:1a:79:
         c0:dd:ed:a9:56:ce:40:67:28:74:b9:18:16:68:84:56:12:3c:
         1e:8f:5f:cf:85:52:ba:56:78:1e:dd:d1:3a:68:33:ed:f2:b7:
         77:f2:80:b5:3e:8c:71:df:09:99:d3:dc:fa:59:23:d6:dc:a5:
         b5:77:80:6a:79:eb:c8:1a:cd:78:d3:e0:11:78:15:ca:78:fc:
         b0:b6:5f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:30 2024 by rpki-client on console.sobornost.net