Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.mft
File:                     95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.mft (raw, json)
Hash identifier:          6xZddDdOZaTdXPbzWS9I2ueBnjj97qfny82U/I8oocc=
Subject key identifier:   23:0E:75:17:44:D9:0C:60:0E:78:E1:3F:40:4E:E4:81:F9:BD:17:12
Authority key identifier: 95:F1:E3:4D:9E:98:C4:BD:C4:C9:35:1D:8B:C9:3C:26:B1:67:D9:F3
Certificate issuer:       /CN=95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3
Certificate serial:       48676C7B61C75BECC7217927924B9E5477F6BB0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.mft
Manifest number:          E4
Signing time:             Tue 09 Jan 2024 10:11:11 +0000
Manifest this update:     Tue 09 Jan 2024 10:06:11 +0000
Manifest next update:     Wed 10 Jan 2024 11:58:11 +0000
Files and hashes:         1: 323830343a363164633a3a2f33322d3332203d3e20323639323631.roa (hash: LdaLSGRwZmFy30YkaRqnlAYvJMwik0JT5EL+4Qx/JtE=)
                          2: 95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.crl (hash: xBmQUeFSzkZGzu4ZwqWZ787ZGMVsz565BOg7FD9eXNM=)
                          3: 34352e3138322e31362e302f32322d3232203d3e20323639323631.roa (hash: aWnZktMFW+uFEJtPapWnMdpAOmirKPC57y542ZjuGm0=)
                          4: 323830343a363164633a343030303a3a2f33362d3336203d3e20323639323631.roa (hash: 15UDY9/6boYYbq26O2zaEK0pOM+n0JHGfC46XcGS9NI=)
                          5: 323830343a363164633a363030303a3a2f33362d3336203d3e20323639323631.roa (hash: oqgyKH5f65pOhF9Fr9CG8qC9CVDEBziXb+OWlDSTfdE=)
                          6: 323830343a363164633a633030303a3a2f33362d3336203d3e20323639323631.roa (hash: v/RDTRAuwan9201R6GhQAlJAJxjfSXFo3p4DJPc8WkU=)
                          7: 323830343a363164633a3a2f33362d3336203d3e20323639323631.roa (hash: nOKihko+HX0FP5QW6eFC4h7Pwhubr54YdLiizMymZaQ=)
                          8: 323830343a363164633a643030303a3a2f33362d3336203d3e20323639323631.roa (hash: OtHUiihA0LSA/iPfE7wv6FWQPFdZvYlCpbCRiMce/gU=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.crl
                          rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 11:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:67:6c:7b:61:c7:5b:ec:c7:21:79:27:92:4b:9e:54:77:f6:bb:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3
        Validity
            Not Before: Jan  9 10:06:11 2024 GMT
            Not After : Jan 10 11:58:11 2024 GMT
        Subject: CN=230E751744D90C600E78E13F404EE481F9BD1712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:31:48:40:99:8c:92:ae:7b:04:7e:71:98:de:
                    78:84:57:82:a9:b2:86:e3:0d:14:c9:a3:b1:97:89:
                    a1:7e:55:99:c5:a2:49:3a:07:d9:60:a3:ad:72:0e:
                    bc:f4:94:26:01:0e:5e:ae:52:50:1e:d7:61:e0:e3:
                    f3:6d:da:5b:cb:f4:9f:bf:f4:c3:fd:f3:cb:b9:c7:
                    20:bd:37:37:ce:6b:1a:78:5f:6e:51:d4:86:76:32:
                    05:d9:92:3a:81:7e:0e:f4:33:08:5d:89:37:81:f3:
                    3f:ba:d9:cc:c8:35:2b:96:87:f8:fc:47:23:fa:1e:
                    6a:e5:01:e3:23:6d:d6:67:39:00:ec:bd:30:63:ff:
                    68:0d:3e:62:3f:a6:27:62:e0:93:c2:4b:ff:a1:94:
                    b4:4a:c6:b0:a2:51:88:d0:d4:c3:6f:d4:08:a4:86:
                    0a:25:77:0d:58:bb:8e:be:b0:96:2d:f4:6d:07:9f:
                    87:0b:03:0c:f3:9a:ee:3d:75:20:93:65:bb:89:a2:
                    78:e1:76:81:ea:11:3e:be:45:93:16:77:99:74:41:
                    b9:1e:19:0e:1e:7c:dd:8c:12:8d:38:69:0d:0f:b4:
                    ae:8e:82:38:c9:6f:bc:49:33:dc:d2:7b:4e:f7:ff:
                    1f:7a:98:2c:7e:02:68:d4:d7:de:11:98:4b:11:e2:
                    88:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0E:75:17:44:D9:0C:60:0E:78:E1:3F:40:4E:E4:81:F9:BD:17:12
            X509v3 Authority Key Identifier:
                keyid:95:F1:E3:4D:9E:98:C4:BD:C4:C9:35:1D:8B:C9:3C:26:B1:67:D9:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:74:e4:20:15:bc:a6:66:a5:20:ca:70:81:04:16:21:2c:65:
         4f:ad:b7:1c:ac:6f:1b:26:eb:f6:73:55:ae:37:24:05:cd:39:
         52:c6:e5:d7:ad:7c:2a:fe:3e:38:20:b1:94:6a:2b:09:56:d2:
         2c:23:cc:a8:c0:a0:1d:7c:d5:68:10:46:9b:6c:52:95:67:7c:
         30:2d:8c:40:37:54:54:0a:2c:a8:4f:b5:dc:da:94:ee:53:92:
         92:13:96:c6:8f:9d:1e:cc:46:68:eb:a6:1d:07:50:f7:3f:c1:
         14:39:c7:76:d1:b1:f7:05:78:f8:ed:59:4f:5f:3e:58:f4:be:
         fb:5e:a8:f8:9f:2e:c6:02:18:47:64:e3:a0:ef:f5:21:ca:53:
         28:d7:15:6b:34:ca:9f:1e:65:29:4e:3a:8c:72:ca:aa:24:75:
         c6:d1:04:e7:8e:db:0c:1c:12:9a:21:42:c0:30:7f:e3:74:c7:
         59:48:c3:71:fc:c3:94:fb:69:1c:c7:a6:5d:06:a0:5e:fd:4d:
         73:ab:83:7f:7b:f1:38:05:34:9b:47:a7:74:cc:44:93:b1:af:
         86:cf:6a:d6:66:6a:25:b4:78:f7:78:5e:f7:2e:c9:75:11:cb:
         b2:c3:21:fa:23:9e:8e:d1:c1:d3:e2:20:9f:85:f8:70:e7:55:
         de:ba:76:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSGdse2HHW+zHIXknkkueVHf2uw8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVGMUUzNEQ5RTk4QzRCREM0QzkzNTFEOEJDOTNDMjZC
MTY3RDlGMzAeFw0yNDAxMDkxMDA2MTFaFw0yNDAxMTAxMTU4MTFaMDMxMTAvBgNV
BAMTKDIzMEU3NTE3NDREOTBDNjAwRTc4RTEzRjQwNEVFNDgxRjlCRDE3MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwMUhAmYySrnsEfnGY3niEV4Kp
sobjDRTJo7GXiaF+VZnFokk6B9lgo61yDrz0lCYBDl6uUlAe12Hg4/Nt2lvL9J+/
9MP988u5xyC9NzfOaxp4X25R1IZ2MgXZkjqBfg70MwhdiTeB8z+62czINSuWh/j8
RyP6HmrlAeMjbdZnOQDsvTBj/2gNPmI/pidi4JPCS/+hlLRKxrCiUYjQ1MNv1Aik
hgoldw1Yu46+sJYt9G0Hn4cLAwzzmu49dSCTZbuJonjhdoHqET6+RZMWd5l0Qbke
GQ4efN2MEo04aQ0PtK6OgjjJb7xJM9zSe073/x96mCx+AmjU194RmEsR4ojPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUIw51F0TZDGAOeOE/QE7kgfm9FxIwHwYDVR0j
BBgwFoAUlfHjTZ6YxL3EyTUdi8k8JrFn2fMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM250YnM1OWtGSGkzdFJoU1pOVzRMODVKeDhwZGNNeXNGQ1ZveDgzYkRH
M0UvMC85NUYxRTM0RDlFOThDNEJEQzRDOTM1MUQ4QkM5M0MyNkIxNjdEOUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1RjFFMzREOUU5OEM0QkRD
NEM5MzUxRDhCQzkzQzI2QjE2N0Q5RjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M250YnM1OWtGSGkzdFJoU1pOVzRMODVKeDhwZGNNeXNGQ1ZveDgzYkRHM0UvMC85
NUYxRTM0RDlFOThDNEJEQzRDOTM1MUQ4QkM5M0MyNkIxNjdEOUYzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVHTkIBW8pmalIMpwgQQWISxlT623HKxvGybr9nNVrjckBc05Usbl1618Kv4+
OCCxlGorCVbSLCPMqMCgHXzVaBBGm2xSlWd8MC2MQDdUVAosqE+13NqU7lOSkhOW
xo+dHsxGaOumHQdQ9z/BFDnHdtGx9wV4+O1ZT18+WPS++16o+J8uxgIYR2TjoO/1
IcpTKNcVazTKnx5lKU46jHLKqiR1xtEE547bDBwSmiFCwDB/43THWUjDcfzDlPtp
HMemXQagXv1Nc6uDf3vxOAU0m0endMxEk7Gvhs9q1mZqJbR493he9y7JdRHLssMh
+iOejtHB0+Ign4X4cOdV3rp2uQ==
-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:34 2024 by rpki-client on console.sobornost.net