Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/77661238571E5EE2E3F07BA7ACA6A704010D82E2.mft
File:                     77661238571E5EE2E3F07BA7ACA6A704010D82E2.mft (raw, json)
Hash identifier:          6B7DbO4dxjkO34zHrtRQie0h1mMasvbeUTTyxX0NCPc=
Subject key identifier:   3E:68:D6:1F:90:07:AE:29:EB:59:3E:0D:23:B5:E3:98:E2:CB:58:BA
Authority key identifier: 77:66:12:38:57:1E:5E:E2:E3:F0:7B:A7:AC:A6:A7:04:01:0D:82:E2
Certificate issuer:       /CN=77661238571E5EE2E3F07BA7ACA6A704010D82E2
Certificate serial:       10903607B3E038CFA46981A2ABD8175001893B8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77661238571E5EE2E3F07BA7ACA6A704010D82E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/77661238571E5EE2E3F07BA7ACA6A704010D82E2.mft
Manifest number:          1C
Signing time:             Tue 09 Jan 2024 06:04:02 +0000
Manifest this update:     Tue 09 Jan 2024 05:59:02 +0000
Manifest next update:     Wed 10 Jan 2024 08:20:02 +0000
Files and hashes:         1: 77661238571E5EE2E3F07BA7ACA6A704010D82E2.crl (hash: UQhIyMQWQ1xc4Vi6vQ3JJ3Jtq+c87QxyqqeWuOAlUAw=)
                          2: 34352e3232342e3139362e302f32332d3233203d3e20323637363732.roa (hash: ytnd/pAGBSreDzp6c4cb0dkiJ8W4Qne51E7novNpS/g=)
                          3: 323830343a343531383a3a2f33322d3332203d3e20323637363732.roa (hash: rnrP1yEhLDo9ZmwLzAOkhzkIZRiT/165MYnrjtKA/ms=)
                          4: 34352e3232342e3139382e302f32332d3233203d3e20323637363732.roa (hash: 5GaqPcAMBJC27Lhi5r8w4Dr2Fy0te0pp3Y4KbJy5z7A=)
                          5: 34352e3232342e3139362e302f32322d3232203d3e20323637363732.roa (hash: AGmb6hmwHrAe6wA09hJL27Rp8dQmTyAqjmzYN/wAMaI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/77661238571E5EE2E3F07BA7ACA6A704010D82E2.crl
                          rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/77661238571E5EE2E3F07BA7ACA6A704010D82E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77661238571E5EE2E3F07BA7ACA6A704010D82E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:90:36:07:b3:e0:38:cf:a4:69:81:a2:ab:d8:17:50:01:89:3b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77661238571E5EE2E3F07BA7ACA6A704010D82E2
        Validity
            Not Before: Jan  9 05:59:02 2024 GMT
            Not After : Jan 10 08:20:02 2024 GMT
        Subject: CN=3E68D61F9007AE29EB593E0D23B5E398E2CB58BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:09:11:46:01:f5:d4:e4:f7:b9:56:6c:55:5c:
                    44:04:67:ff:96:df:a7:a7:76:98:64:22:4d:6f:6a:
                    23:89:03:68:be:16:52:ca:1a:be:49:ac:64:df:04:
                    9a:3d:a1:d2:21:6a:5c:7f:41:e5:07:77:be:93:43:
                    e4:90:b0:85:c5:40:d2:fd:fc:9a:7a:84:db:aa:cb:
                    ea:9a:96:82:2e:7b:ed:c9:5f:2b:a4:b6:65:05:ec:
                    5f:8e:0a:aa:40:a5:4c:2a:7c:67:e7:5d:dc:f1:eb:
                    fb:ba:98:84:e4:94:4d:6f:cc:28:cb:f5:73:7e:a6:
                    4a:3c:f0:eb:a7:35:1d:3b:2d:a5:db:e2:ae:89:a5:
                    6e:bd:c1:72:2b:e6:1d:5a:e6:95:05:04:93:9c:46:
                    4c:d5:5a:81:0b:70:c0:7c:90:ad:f0:39:5f:51:00:
                    6b:08:80:60:6a:e2:7e:86:0c:45:84:e0:2c:70:f5:
                    74:32:f0:38:e1:bd:d3:bb:fe:b6:ca:eb:1d:cb:f9:
                    1e:57:a3:4e:88:fe:aa:94:c9:4e:4d:8b:56:ef:91:
                    d1:1c:80:82:65:16:a0:f3:4c:b7:ea:23:5c:11:29:
                    f8:1f:b5:da:d8:f3:63:a4:dc:a6:9b:69:49:c8:5e:
                    95:95:7d:05:0a:42:37:80:d4:56:3d:6a:bb:5c:24:
                    db:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:68:D6:1F:90:07:AE:29:EB:59:3E:0D:23:B5:E3:98:E2:CB:58:BA
            X509v3 Authority Key Identifier:
                keyid:77:66:12:38:57:1E:5E:E2:E3:F0:7B:A7:AC:A6:A7:04:01:0D:82:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/77661238571E5EE2E3F07BA7ACA6A704010D82E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77661238571E5EE2E3F07BA7ACA6A704010D82E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/77661238571E5EE2E3F07BA7ACA6A704010D82E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c6:e8:bb:e8:b0:8b:ec:3c:18:a9:1d:f8:62:ae:b7:d6:f9:
         dd:fb:5d:ed:21:ce:eb:d5:80:93:10:f1:ea:68:f8:38:48:99:
         18:ce:eb:17:07:95:5e:55:c2:d8:de:27:6d:24:fb:e3:f9:6f:
         07:dc:9a:4f:b6:e1:3a:fd:6a:99:d5:93:e5:22:55:30:94:dd:
         f6:eb:8f:8f:36:2e:aa:5e:36:77:60:08:cb:a5:62:bf:e2:18:
         5c:8f:bc:08:f7:58:3c:ca:c3:7e:3c:95:6c:58:dc:a8:d6:3d:
         76:eb:85:51:38:79:30:62:ec:33:94:1a:21:b4:80:d7:4f:53:
         0f:ed:2c:ab:f2:c8:d1:31:01:61:fe:0d:b7:00:4f:21:56:c1:
         dd:30:61:1d:13:52:43:69:88:a6:b1:89:92:6a:5e:81:97:be:
         9c:e1:f3:2f:b5:b3:94:da:d7:da:46:57:68:69:70:b8:54:d6:
         35:29:0e:6d:63:40:f5:ad:82:28:fd:2c:6f:6d:2a:7a:51:47:
         0c:9c:ca:7b:88:bf:3b:53:ab:cb:54:18:14:9a:cc:10:5a:73:
         b4:85:1e:8d:38:0d:07:8d:00:6d:e9:e7:37:30:50:6d:ab:2a:
         4e:dc:c8:4e:ca:f9:ff:fb:33:d3:18:48:b6:20:ef:14:61:0b:
         74:2b:99:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 07:51:17 2024 by rpki-client on console.sobornost.net