Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.mft
File:                     BFB83D9B381A4D353332D2E566DBD36508CE5F20.mft (raw, json)
Hash identifier:          k1ANV1bqi9Koxnvg5CAs5WVbSDhkB+QOOsv34zoLFxg=
Subject key identifier:   03:0B:08:42:BE:00:23:12:ED:55:A2:B5:2E:FE:24:11:F8:D2:6B:6D
Authority key identifier: BF:B8:3D:9B:38:1A:4D:35:33:32:D2:E5:66:DB:D3:65:08:CE:5F:20
Certificate issuer:       /CN=BFB83D9B381A4D353332D2E566DBD36508CE5F20
Certificate serial:       5BCF80F9BD004608AB9698308F12206F4F0D46A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.mft
Manifest number:          08
Signing time:             Tue 09 Jan 2024 08:55:30 +0000
Manifest this update:     Tue 09 Jan 2024 08:50:30 +0000
Manifest next update:     Wed 10 Jan 2024 11:42:30 +0000
Files and hashes:         1: BFB83D9B381A4D353332D2E566DBD36508CE5F20.crl (hash: tktHuwCr4Ru4EGBqGpTXyaZwHjEfMiVZl5VYVw44xv8=)
                          2: 3133382e33362e3131382e302f32332d3233203d3e20323634353737.roa (hash: DDLcc1D9hgsGBG+BgaPWORp3C6r1GrUwbpxwn/Udc9o=)
                          3: 3133382e33362e3131362e302f32332d3233203d3e20323634353737.roa (hash: KegOYdjE4NXe94eKsC70somWXNY4x2MKtaG5UtoK4zs=)
                          4: 323830343a323164383a383030303a3a2f33332d3333203d3e20323634353737.roa (hash: G2FyoRpZzNrWxRjOjy8Nyldnhkd0a4zmqANpVK8onps=)
                          5: 323830343a323164383a3a2f33322d3332203d3e20323634353737.roa (hash: Q2/ZAt4Vn1M3g1IEepJ+MwFztPZAHl3mDMuxmhZLfTg=)
                          6: 323830343a323164383a3a2f33332d3333203d3e20323634353737.roa (hash: OKAT26pje8F+WI7WQCnUdZ4udMPn7c9T3zuTrAx0K4g=)
                          7: 3133382e33362e3131362e302f32322d3232203d3e20323634353737.roa (hash: lku70VGp2C4bAPNZQe4f338Kq9wyWDVONpgJmlKT1hA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.crl
                          rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 11:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:cf:80:f9:bd:00:46:08:ab:96:98:30:8f:12:20:6f:4f:0d:46:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFB83D9B381A4D353332D2E566DBD36508CE5F20
        Validity
            Not Before: Jan  9 08:50:30 2024 GMT
            Not After : Jan 10 11:42:30 2024 GMT
        Subject: CN=030B0842BE002312ED55A2B52EFE2411F8D26B6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1e:3d:50:ac:c0:33:30:ce:33:55:9f:2c:ce:
                    2b:5f:09:ca:3a:9c:42:be:7a:20:0e:f1:ba:73:82:
                    74:f0:e4:47:f3:a0:ce:5e:34:c1:85:d5:50:15:77:
                    38:6b:e1:f7:c7:15:1c:71:19:78:5c:86:71:d6:4e:
                    4a:47:74:ad:6f:b4:66:5e:12:cb:5b:04:60:d9:2d:
                    e5:66:05:de:f9:a6:ab:c8:38:e1:81:4d:63:8f:35:
                    83:ee:16:c6:83:0f:d8:cf:15:b0:ae:6c:e3:93:29:
                    5a:0f:3b:e2:62:4a:59:9b:49:00:19:a5:a4:76:6e:
                    79:fc:61:f4:f2:74:4c:50:88:ea:1b:63:1e:7a:97:
                    7f:0a:a3:26:32:bf:3b:86:2c:1c:12:04:20:13:92:
                    40:24:4a:cf:a9:d4:c7:57:c4:ce:d5:c2:1f:00:8d:
                    9d:9e:fd:9b:dd:32:4f:e3:9d:3e:53:08:dc:af:8a:
                    e0:09:c0:92:bc:e5:e6:92:b8:02:7c:79:22:e1:dd:
                    26:62:41:39:88:2f:b3:a0:c2:e5:3a:7f:83:58:31:
                    6f:cd:96:ea:b3:44:62:bc:ae:59:e0:8d:80:60:72:
                    7a:4f:a1:0a:34:7d:8d:e3:c0:15:7c:bc:90:f9:6d:
                    65:a7:b4:eb:47:b1:c4:86:39:5e:23:b0:2f:00:90:
                    4b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0B:08:42:BE:00:23:12:ED:55:A2:B5:2E:FE:24:11:F8:D2:6B:6D
            X509v3 Authority Key Identifier:
                keyid:BF:B8:3D:9B:38:1A:4D:35:33:32:D2:E5:66:DB:D3:65:08:CE:5F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:51:41:a5:98:23:70:94:24:e1:88:1b:43:75:52:3b:d6:2b:
         b3:fe:08:4f:02:ba:21:8c:57:78:86:77:06:08:97:a6:c6:b2:
         0e:2e:94:4e:30:00:77:26:61:d9:80:35:d6:de:60:c4:53:33:
         4c:95:6f:31:5f:2c:45:96:59:45:4f:35:26:b0:0b:cf:3e:f2:
         50:dc:c0:ea:98:66:a1:25:bd:5f:1a:f7:e9:e4:f9:3b:1a:2c:
         c2:3b:49:e5:4e:76:eb:03:3c:23:c6:57:4a:4f:ec:7e:6a:73:
         f8:db:e8:98:74:78:f4:91:f5:73:78:ae:e9:a4:4d:3d:6f:c5:
         a0:e5:fb:4f:f6:75:87:83:58:c9:44:1b:0f:ea:ca:6b:fd:02:
         ce:0f:94:47:c9:41:92:c3:ec:03:ef:8d:f2:19:da:ff:b3:75:
         16:4c:a3:de:77:11:b8:69:ab:d8:de:34:40:9f:13:1b:ad:60:
         5f:52:5e:a6:77:ae:a4:84:48:36:68:dc:22:bf:e6:9e:4d:2d:
         45:02:e1:de:cc:d0:a1:d2:da:76:ea:63:3d:c2:08:25:5f:d7:
         36:ab:06:0e:02:cd:70:76:ff:bd:86:cc:ba:4c:4a:c9:94:3b:
         ed:2b:ac:ee:c4:73:b0:e8:11:28:76:b1:af:b8:99:01:ac:e7:
         2a:79:da:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUW8+A+b0ARgirlpgwjxIgb08NRqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZCODNEOUIzODFBNEQzNTMzMzJEMkU1NjZEQkQzNjUw
OENFNUYyMDAeFw0yNDAxMDkwODUwMzBaFw0yNDAxMTAxMTQyMzBaMDMxMTAvBgNV
BAMTKDAzMEIwODQyQkUwMDIzMTJFRDU1QTJCNTJFRkUyNDExRjhEMjZCNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHj1QrMAzMM4zVZ8szitfCco6
nEK+eiAO8bpzgnTw5EfzoM5eNMGF1VAVdzhr4ffHFRxxGXhchnHWTkpHdK1vtGZe
EstbBGDZLeVmBd75pqvIOOGBTWOPNYPuFsaDD9jPFbCubOOTKVoPO+JiSlmbSQAZ
paR2bnn8YfTydExQiOobYx56l38KoyYyvzuGLBwSBCATkkAkSs+p1MdXxM7Vwh8A
jZ2e/ZvdMk/jnT5TCNyviuAJwJK85eaSuAJ8eSLh3SZiQTmIL7OgwuU6f4NYMW/N
luqzRGK8rlngjYBgcnpPoQo0fY3jwBV8vJD5bWWntOtHscSGOV4jsC8AkEt1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUAwsIQr4AIxLtVaK1Lv4kEfjSa20wHwYDVR0j
BBgwFoAUv7g9mzgaTTUzMtLlZtvTZQjOXyAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1cyY1NrUVF5cXNBZnVSNjY5NFZaRjJFQmQ3V1Boa0RNY3ZlRDN0ZHl6
ZmIvMC9CRkI4M0Q5QjM4MUE0RDM1MzMzMkQyRTU2NkRCRDM2NTA4Q0U1RjIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGQjgzRDlCMzgxQTREMzUz
MzMyRDJFNTY2REJEMzY1MDhDRTVGMjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M1cyY1NrUVF5cXNBZnVSNjY5NFZaRjJFQmQ3V1Boa0RNY3ZlRDN0ZHl6ZmIvMC9C
RkI4M0Q5QjM4MUE0RDM1MzMzMkQyRTU2NkRCRDM2NTA4Q0U1RjIwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtVFBpZgjcJQk4YgbQ3VSO9Yrs/4ITwK6IYxXeIZ3BgiXpsayDi6UTjAAdyZh
2YA11t5gxFMzTJVvMV8sRZZZRU81JrALzz7yUNzA6phmoSW9Xxr36eT5OxoswjtJ
5U526wM8I8ZXSk/sfmpz+NvomHR49JH1c3iu6aRNPW/FoOX7T/Z1h4NYyUQbD+rK
a/0Czg+UR8lBksPsA++N8hna/7N1Fkyj3ncRuGmr2N40QJ8TG61gX1JepneupIRI
NmjcIr/mnk0tRQLh3szQodLadupjPcIIJV/XNqsGDgLNcHb/vYbMukxKyZQ77Sus
7sRzsOgRKHaxr7iZAaznKnnaGQ==
-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:31 2024 by rpki-client on console.sobornost.net