Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/06C8C441DDB121E8A6F43500C58D474F8861F147.mft
File:                     06C8C441DDB121E8A6F43500C58D474F8861F147.mft (raw, json)
Hash identifier:          oeM0XxMLkk4OVYu+koO6F4/aqk6/Z9k7RFDJ8pLJxLQ=
Subject key identifier:   97:73:B2:A4:5F:BB:D7:DE:CE:34:BC:36:55:FC:9B:1C:C8:28:A9:B7
Authority key identifier: 06:C8:C4:41:DD:B1:21:E8:A6:F4:35:00:C5:8D:47:4F:88:61:F1:47
Certificate issuer:       /CN=06C8C441DDB121E8A6F43500C58D474F8861F147
Certificate serial:       6FBC601DABA0D1043D11F5DCDF9FA51E96B007C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06C8C441DDB121E8A6F43500C58D474F8861F147.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/06C8C441DDB121E8A6F43500C58D474F8861F147.mft
Manifest number:          23
Signing time:             Tue 09 Jan 2024 02:48:11 +0000
Manifest this update:     Tue 09 Jan 2024 02:43:11 +0000
Manifest next update:     Wed 10 Jan 2024 05:09:11 +0000
Files and hashes:         1: 06C8C441DDB121E8A6F43500C58D474F8861F147.crl (hash: BWjh5ij8np1nXZTJivzFPBy0Tb3QmgC4hX4qPJp3XWE=)
                          2: 34352e3137392e3136382e302f32322d3234203d3e20323639303932.roa (hash: RHzV4Q3+xYB6SgwevCVYLd3hpyg+lwY58kX5VHbERjE=)
                          3: 323830343a356635343a3a2f33322d3336203d3e20323639303932.roa (hash: 4P7DMUA7DPWkY8MNuZQVp6SwRsUNTEo6ToyUGsAa3NI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/06C8C441DDB121E8A6F43500C58D474F8861F147.crl
                          rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/06C8C441DDB121E8A6F43500C58D474F8861F147.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06C8C441DDB121E8A6F43500C58D474F8861F147.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 05:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:bc:60:1d:ab:a0:d1:04:3d:11:f5:dc:df:9f:a5:1e:96:b0:07:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06C8C441DDB121E8A6F43500C58D474F8861F147
        Validity
            Not Before: Jan  9 02:43:11 2024 GMT
            Not After : Jan 10 05:09:11 2024 GMT
        Subject: CN=9773B2A45FBBD7DECE34BC3655FC9B1CC828A9B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e5:90:4f:24:1f:90:88:9d:31:11:5f:87:3a:
                    74:93:bc:2a:bc:1b:36:9f:fd:ff:70:d8:d5:c3:a7:
                    f1:59:ce:07:8e:ae:88:98:a9:ee:41:c2:a1:d8:ea:
                    d0:1d:84:2a:42:8c:f6:7f:cc:8e:bb:b0:4e:2a:00:
                    d6:b4:a5:5b:4e:b6:be:02:bc:75:b1:13:9d:48:0d:
                    ed:ee:f1:25:b1:75:33:95:78:73:5c:47:90:f8:28:
                    94:70:27:48:92:a7:e7:ac:07:54:4b:cd:a6:13:1d:
                    cd:92:01:88:fa:40:66:8b:49:2a:ea:01:d3:89:62:
                    88:a6:85:ac:cb:cf:90:e5:ab:79:6a:6c:0c:64:c1:
                    e9:d9:19:07:2f:65:88:70:86:c6:78:18:0f:6b:ac:
                    08:97:2b:25:32:f3:80:62:b2:14:39:d4:e1:6f:c6:
                    03:8e:f1:18:f8:a2:54:5d:6c:d9:c2:52:ed:40:94:
                    c7:4f:62:e2:e3:bc:40:ed:a2:5f:f0:d1:d6:de:53:
                    42:d3:46:6d:07:f6:3b:c6:4c:64:fd:9b:d8:c9:b3:
                    ee:49:2a:8f:45:b7:fa:7b:13:db:cc:9e:32:de:e2:
                    75:0d:2d:12:c6:92:5a:4b:f2:31:aa:dd:92:48:dd:
                    30:fa:ca:4b:90:2d:91:2b:cb:fb:fa:de:fb:88:a7:
                    80:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:73:B2:A4:5F:BB:D7:DE:CE:34:BC:36:55:FC:9B:1C:C8:28:A9:B7
            X509v3 Authority Key Identifier:
                keyid:06:C8:C4:41:DD:B1:21:E8:A6:F4:35:00:C5:8D:47:4F:88:61:F1:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/06C8C441DDB121E8A6F43500C58D474F8861F147.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06C8C441DDB121E8A6F43500C58D474F8861F147.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/06C8C441DDB121E8A6F43500C58D474F8861F147.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:5b:da:45:ea:0b:30:1f:84:be:dc:41:dd:eb:88:51:46:63:
         13:d2:f4:77:7a:93:e8:5c:dc:1b:1d:aa:21:4b:23:a6:53:3c:
         73:bf:4f:bf:21:d4:7f:5e:ad:82:ed:17:7d:fc:0b:f3:cf:33:
         46:aa:e6:f3:8b:2e:5b:b9:d8:b1:05:90:92:29:91:e6:c4:d7:
         09:07:1d:9d:45:17:d6:77:ef:a0:e5:f4:2e:16:fd:c8:da:88:
         96:e4:c8:58:c0:89:b5:2c:ce:b0:a6:33:4a:c0:c5:6e:65:f5:
         db:82:8b:45:8c:91:57:d7:6c:a0:0d:39:a7:be:8f:8a:eb:0c:
         ce:01:53:0c:e4:7b:67:e7:b1:03:f9:eb:3d:58:99:42:79:ca:
         a0:64:47:95:04:f6:30:3c:69:a6:98:aa:bf:dd:07:35:be:fd:
         5e:1f:61:4c:1a:b0:03:05:76:eb:ba:5a:4d:8b:a0:51:73:05:
         a8:17:c4:6a:be:d6:d9:e5:19:c2:f3:79:41:16:bf:fa:cf:ad:
         8f:c5:d8:f0:fc:6a:5e:65:5b:5f:80:11:ad:be:70:00:12:35:
         d4:97:d4:dc:6a:82:67:cc:b4:2c:db:af:4d:e1:f7:39:5c:71:
         d1:a7:e0:ef:91:50:95:19:3d:59:7b:12:35:03:69:2c:0f:fe:
         15:9d:e7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 03:48:53 2024 by rpki-client on console.sobornost.net