Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/4C284B298BD83B2CD795241085A51344CAAA6914.mft
File:                     4C284B298BD83B2CD795241085A51344CAAA6914.mft (raw, json)
Hash identifier:          UIn4JhLVi9uIhn5/kvk7ISjZgFYQd6d5RV1CXvnhHL4=
Subject key identifier:   75:87:7A:88:D3:D8:6D:61:1F:0B:5E:E6:AE:14:47:36:44:45:0A:FF
Authority key identifier: 4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14
Certificate issuer:       /CN=4C284B298BD83B2CD795241085A51344CAAA6914
Certificate serial:       02492D147FB460BB561A968CA0E70A0BFFFE8A6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/4C284B298BD83B2CD795241085A51344CAAA6914.mft
Manifest number:          024D
Signing time:             Tue 09 Jan 2024 11:52:33 +0000
Manifest this update:     Tue 09 Jan 2024 11:47:33 +0000
Manifest next update:     Wed 10 Jan 2024 14:39:33 +0000
Files and hashes:         1: 4C284B298BD83B2CD795241085A51344CAAA6914.crl (hash: XiXL3/2R0qjtiEWFNhE9CqiD1Yp3YdBZ0HsaAMVFiaw=)
                          2: 323830343a323537303a343030303a3a2f34342d3434203d3e20323634323831.roa (hash: g14eREduOm+HczhlITDmhCeU8O3jK8ze4yUgkxlCyeE=)
                          3: 323830343a323537303a393030303a3a2f34342d3434203d3e20323634323831.roa (hash: w9h7A5KTJBqMKGgEXbzMfSlZxvdbt2j35xkeulbsMCI=)
                          4: 3133382e3132312e35342e302f32332d3233203d3e20323634323831.roa (hash: WQpyla12GZaS1g3iOx5ZvxSIRjVvcXsFY7CScVdz8Y4=)
                          5: 323830343a323537303a633030303a3a2f34342d3434203d3e20323634323831.roa (hash: 3oGT9X2AcD0ZNbqPTUK/jwZRCxhjHKtU6i4zKgP44Wc=)
                          6: 3137302e3233332e3137322e302f32332d3233203d3e20323634323831.roa (hash: TmVnwbFqcgMP7GRR3tO7Mp9dhmQizQkrW+rJm5MBfIc=)
                          7: 3133382e3132312e35322e302f32332d3233203d3e20323634323831.roa (hash: 6I5vDzNChAK+PvXMcXIh23FYyNyLke9ua07jRk+b+SM=)
                          8: 3137302e3234342e31322e302f32322d3232203d3e20323634323831.roa (hash: vqR0Y7NCM8JBF726bgfwEs7xRsWfwIiwT9jeT5R4xB8=)
                          9: 3137302e3233332e3137322e302f32322d3232203d3e20323634323831.roa (hash: D1FQZ2XVPivt1gw/VG5S7SpT6/HVia80GJG5Ekftd98=)
                          10: 323830343a323537303a3a2f33322d3332203d3e20323634323831.roa (hash: IrDgZOEgyB7J7fxelV4hFwHQKKZaNGSNYe47etC82oA=)
                          11: 323830343a323537303a623030303a3a2f33362d3336203d3e20323634323831.roa (hash: poxdlcHoY8I0v+6aqDzFo9isAbl6G+qD65PaTvdDiy4=)
                          12: 3137302e3233332e3137342e302f32332d3233203d3e20323634323831.roa (hash: EZhs/bkeBvjU0knVcw5jx/ZAAqxlumfcx1oX4XlncIw=)
                          13: 323830343a323537303a383030303a3a2f33362d3336203d3e20323634323831.roa (hash: shiXbzxe6/+yQtnBuc9TQdfSV5hrNZZSMgpQcTPvEpo=)
                          14: 3137302e3234342e31322e302f32332d3233203d3e20323634323831.roa (hash: 2jny+u2K/7WvNrKX+9XHK0u/oesZhUFF557fL9UUwe8=)
                          15: 323830343a323537303a333030303a3a2f33362d3336203d3e20323634323831.roa (hash: ZigsSwVj/VXMJ2t1YSQtl/gYcDBYjDluWSPHE5UTV6c=)
                          16: 3133382e3132312e35322e302f32322d3232203d3e20323634323831.roa (hash: NcCfXtSXcNrRbaJRJl1QDQ13+c7v1qzXpVilnIiulCY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/4C284B298BD83B2CD795241085A51344CAAA6914.crl
                          rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/4C284B298BD83B2CD795241085A51344CAAA6914.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 12:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:49:2d:14:7f:b4:60:bb:56:1a:96:8c:a0:e7:0a:0b:ff:fe:8a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C284B298BD83B2CD795241085A51344CAAA6914
        Validity
            Not Before: Jan  9 11:47:33 2024 GMT
            Not After : Jan 10 14:39:33 2024 GMT
        Subject: CN=75877A88D3D86D611F0B5EE6AE14473644450AFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6a:9b:0b:76:dc:47:ee:47:67:c5:43:af:5f:
                    a8:18:de:b3:5e:74:96:a7:37:01:44:92:07:fb:9f:
                    94:8f:10:44:6f:80:c7:57:2e:29:fe:aa:20:d9:51:
                    d9:5b:8e:35:9c:be:34:58:6e:39:80:be:d7:09:71:
                    5b:cb:fc:5a:d5:87:be:61:26:d2:fc:e1:53:f9:7c:
                    9e:56:23:be:6b:99:90:43:64:e6:2a:1a:b6:6e:03:
                    d5:08:fe:3b:e8:f5:55:8f:e9:94:52:dd:6b:bf:d1:
                    89:51:6e:34:82:e4:65:39:9f:4f:ee:04:33:62:6d:
                    e9:72:a3:3d:08:86:b2:81:87:59:29:48:79:97:f4:
                    f5:62:fe:4e:b1:2c:64:08:ed:b1:9d:a9:eb:87:2d:
                    d8:10:a8:28:93:f9:fc:24:c3:62:6e:5d:bc:30:e5:
                    77:1a:62:ba:a1:bf:56:90:f1:99:05:4e:71:bf:02:
                    2e:7c:a6:28:de:79:f6:72:2f:2d:69:db:d1:28:ad:
                    94:9a:60:fb:85:5c:35:e3:06:ef:de:d7:9c:d3:1f:
                    a6:8d:51:d7:0d:60:b7:84:11:a6:d7:7b:85:0b:5b:
                    d8:43:10:25:97:d2:5b:1e:91:7a:70:4e:ba:ce:31:
                    67:b4:81:7f:33:e4:31:61:ff:16:cd:14:a0:4f:57:
                    62:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:87:7A:88:D3:D8:6D:61:1F:0B:5E:E6:AE:14:47:36:44:45:0A:FF
            X509v3 Authority Key Identifier:
                keyid:4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/4C284B298BD83B2CD795241085A51344CAAA6914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/4C284B298BD83B2CD795241085A51344CAAA6914.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b9:3c:5c:8d:d5:5f:71:6b:dc:8b:f2:6f:c3:50:91:f4:22:
         cb:9e:8e:ed:31:f2:ce:2e:14:ae:13:1c:4c:54:cb:69:b6:b5:
         c7:94:04:2b:b5:79:4e:34:23:01:e8:55:76:e6:39:06:34:e5:
         fd:39:fa:9d:bf:bb:da:3b:4e:d8:a9:d5:a5:8b:b6:95:b0:d6:
         b7:3c:df:bd:74:11:e1:bf:9e:96:9a:26:63:ae:15:ae:9d:5a:
         0f:48:6a:ee:78:d0:49:df:75:89:12:3b:4a:71:b3:39:bf:d2:
         55:44:4d:bf:da:c1:bc:2e:fd:87:f0:fd:3d:9f:d7:cd:6c:56:
         e3:02:a6:9c:8b:0c:da:78:47:86:ae:48:85:bd:8e:9f:3b:ce:
         e8:fe:9e:d0:68:ef:07:e1:77:2b:62:c0:c5:09:7c:7d:19:37:
         47:7d:f8:dc:b9:13:c4:ee:29:bb:59:05:fa:6e:b2:61:23:96:
         d8:14:db:86:ed:bb:c8:90:19:42:7e:1f:28:38:66:92:34:19:
         70:11:b1:90:2a:38:65:ec:3f:e7:f0:16:89:96:41:72:aa:07:
         b2:65:59:0e:92:6b:10:21:c1:80:22:1b:40:24:1d:20:ee:d5:
         c8:e8:cc:09:c6:74:1c:92:05:0d:9a:bb:49:b0:cb:d8:3d:f8:
         2e:ec:1a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:36 2024 by rpki-client on console.sobornost.net