Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/9A6385471736A073FAA5B009D89103B42CF42E19.mft
File:                     9A6385471736A073FAA5B009D89103B42CF42E19.mft (raw, json)
Hash identifier:          LCnTJgHQgvf3X1mj+2pLr24GchXBFWaY6TYelRQpZPc=
Subject key identifier:   B4:4E:8D:CC:CA:DE:82:89:F4:9A:6B:B3:15:11:AC:DA:29:60:E6:25
Authority key identifier: 9A:63:85:47:17:36:A0:73:FA:A5:B0:09:D8:91:03:B4:2C:F4:2E:19
Certificate issuer:       /CN=9A6385471736A073FAA5B009D89103B42CF42E19
Certificate serial:       2584B5EAFBDF77767740D94920AA19B58C8D4052
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A6385471736A073FAA5B009D89103B42CF42E19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/9A6385471736A073FAA5B009D89103B42CF42E19.mft
Manifest number:          02B2
Signing time:             Tue 09 Jan 2024 13:59:51 +0000
Manifest this update:     Tue 09 Jan 2024 13:54:51 +0000
Manifest next update:     Wed 10 Jan 2024 14:57:51 +0000
Files and hashes:         1: 3137372e38362e3131362e302f32322d3234203d3e203532353730.roa (hash: CbHY6H3DuDgIS1LeXPgXEr4cMtk03q5SRrqbj6507yw=)
                          2: 9A6385471736A073FAA5B009D89103B42CF42E19.crl (hash: pf7iNgL97G3mqYW2Ev4YlFNM7UWDBbYvdog3XjS+MkA=)
                          3: 323830343a313536343a3a2f33322d3336203d3e203532353730.roa (hash: 3E75/k1yoCiFRYbCNhBSDdAtknvA4DqqkpkJizczopU=)
                          4: 3137392e39362e3230302e302f32312d3234203d3e203532353730.roa (hash: Fho1fKQyBDvGX1KD8rhRvtmtyrZ8GF7ib0lKgyhRy24=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/9A6385471736A073FAA5B009D89103B42CF42E19.crl
                          rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/9A6385471736A073FAA5B009D89103B42CF42E19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A6385471736A073FAA5B009D89103B42CF42E19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 14:57:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:84:b5:ea:fb:df:77:76:77:40:d9:49:20:aa:19:b5:8c:8d:40:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A6385471736A073FAA5B009D89103B42CF42E19
        Validity
            Not Before: Jan  9 13:54:51 2024 GMT
            Not After : Jan 10 14:57:51 2024 GMT
        Subject: CN=B44E8DCCCADE8289F49A6BB31511ACDA2960E625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3a:33:98:eb:d8:2c:bb:54:2b:21:b6:5e:8e:
                    55:d9:c3:42:79:2a:b8:11:77:ea:73:f1:b2:52:f2:
                    fc:70:60:ae:aa:5d:66:75:8e:a0:62:42:46:0b:41:
                    15:01:fd:ee:80:96:20:a0:ec:8d:76:51:13:28:5d:
                    78:04:29:65:11:de:ee:42:d3:fc:72:35:7d:43:65:
                    0f:5e:1d:5b:0d:ed:92:30:a9:02:04:ce:46:f1:9d:
                    d2:89:a0:a9:60:1c:ad:4a:9f:ae:6a:d6:48:a9:bb:
                    59:0d:f4:9c:c3:5c:cd:39:10:1c:84:d8:58:e6:08:
                    66:31:29:dc:0e:7e:43:47:90:8e:de:c8:d4:cf:07:
                    da:ae:eb:6b:57:7a:e1:01:13:f8:1a:0b:63:0e:56:
                    20:7d:e1:de:b0:53:86:8d:11:3b:0e:ab:84:86:6e:
                    e4:55:50:3e:bf:ba:b1:da:0e:85:ba:5f:5b:d1:9d:
                    0f:87:9f:02:30:b0:46:eb:9b:eb:42:55:ba:f3:41:
                    f6:b8:82:92:5f:c2:0c:bb:cb:c4:18:6c:81:86:86:
                    30:e2:42:41:d5:d7:f5:4e:38:a1:69:ed:2c:81:a5:
                    9d:27:22:97:9c:b3:84:19:ab:65:98:7a:ce:3e:2d:
                    78:e9:4b:17:da:78:02:a0:e8:88:3f:a8:0f:9d:26:
                    81:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4E:8D:CC:CA:DE:82:89:F4:9A:6B:B3:15:11:AC:DA:29:60:E6:25
            X509v3 Authority Key Identifier:
                keyid:9A:63:85:47:17:36:A0:73:FA:A5:B0:09:D8:91:03:B4:2C:F4:2E:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/9A6385471736A073FAA5B009D89103B42CF42E19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A6385471736A073FAA5B009D89103B42CF42E19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/9A6385471736A073FAA5B009D89103B42CF42E19.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:0c:0a:d2:6a:34:f6:97:0c:3b:6b:cc:11:82:5d:4c:d7:08:
         03:f5:6b:21:70:e9:e4:fd:25:29:20:be:d4:e9:45:2a:b4:ac:
         c2:36:b0:d0:f2:e6:23:7c:a1:12:d4:b3:84:20:01:81:72:92:
         f5:16:01:b0:0f:a5:27:9f:0c:4c:55:f3:5a:0d:db:a9:99:d2:
         53:de:a8:3e:b3:4f:6c:20:91:cf:f8:1d:7d:0e:f3:56:b1:13:
         92:9b:7b:6e:f5:ad:37:d5:5c:fb:e4:4b:99:aa:e5:d1:32:40:
         30:f7:4f:7c:7b:52:a4:7a:77:85:fa:2c:f0:16:8c:ee:57:8e:
         bd:2b:c2:b3:96:3c:32:62:94:7b:00:19:7d:51:a1:65:a7:3f:
         40:9a:ec:b3:01:3f:55:b2:f4:8f:44:47:66:b5:9a:2e:43:ef:
         f7:fb:ed:9b:5d:ce:aa:5e:81:15:6a:d4:9c:db:f6:92:44:e2:
         94:d4:5a:c9:62:6b:dc:a8:2a:58:24:6e:c3:c6:9d:14:8e:62:
         38:a2:03:9a:1c:ee:0b:76:f5:80:b3:23:08:c8:c7:f4:99:27:
         91:7e:57:23:f9:8b:71:13:d3:08:37:d0:52:27:8a:80:83:5f:
         68:cc:3c:0f:14:db:ae:83:ae:3d:7e:d7:d9:b9:97:26:09:4a:
         95:b2:e8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:09 2024 by rpki-client on console.sobornost.net