Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/434516E49630AF5CA662DE84C95B5F62F5486695.mft
File:                     434516E49630AF5CA662DE84C95B5F62F5486695.mft (raw, json)
Hash identifier:          +XzoRpNGUR95SPNPGyX2urOq7/bsOP1HCLL41WLDfhw=
Subject key identifier:   F7:2C:A4:03:0D:DB:5C:95:6C:9B:62:EC:D7:74:7E:2F:6B:5D:23:A7
Authority key identifier: 43:45:16:E4:96:30:AF:5C:A6:62:DE:84:C9:5B:5F:62:F5:48:66:95
Certificate issuer:       /CN=434516E49630AF5CA662DE84C95B5F62F5486695
Certificate serial:       603D179985281F5719C5731EE879A2A1339385E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/434516E49630AF5CA662DE84C95B5F62F5486695.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/434516E49630AF5CA662DE84C95B5F62F5486695.mft
Manifest number:          0112
Signing time:             Tue 09 Jan 2024 02:33:18 +0000
Manifest this update:     Tue 09 Jan 2024 02:28:18 +0000
Manifest next update:     Wed 10 Jan 2024 06:18:18 +0000
Files and hashes:         1: 34352e3136382e3136382e302f32322d3234203d3e20323638303737.roa (hash: fEvDQR2PhYnOjWt27mlThxDEP2zuU3u3PQqZNgSt3sk=)
                          2: 323830343a353761343a3a2f33322d3332203d3e20323638303737.roa (hash: sfS6kV+cqvBv7TUJiOE+rWipqb3hkkWmEkGQsqRtHCY=)
                          3: 434516E49630AF5CA662DE84C95B5F62F5486695.crl (hash: 6rcRLSeONK7U6kCnbltQIcjUC0+BPkNf8WzbLAg5dHI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/434516E49630AF5CA662DE84C95B5F62F5486695.crl
                          rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/434516E49630AF5CA662DE84C95B5F62F5486695.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/434516E49630AF5CA662DE84C95B5F62F5486695.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 05:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:3d:17:99:85:28:1f:57:19:c5:73:1e:e8:79:a2:a1:33:93:85:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=434516E49630AF5CA662DE84C95B5F62F5486695
        Validity
            Not Before: Jan  9 02:28:18 2024 GMT
            Not After : Jan 10 06:18:18 2024 GMT
        Subject: CN=F72CA4030DDB5C956C9B62ECD7747E2F6B5D23A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:ab:2c:79:62:26:fa:31:27:86:9a:cf:52:
                    0b:48:29:16:f2:60:41:a2:61:56:65:95:89:79:05:
                    a9:11:dc:73:99:12:52:87:0e:85:06:0f:14:eb:44:
                    7c:40:dd:e6:c3:7a:ca:c6:5a:27:12:b2:a5:f1:29:
                    63:9f:ed:09:7b:ff:0e:de:b1:54:9a:2d:8a:f6:10:
                    a8:20:eb:fa:dc:65:75:a8:99:56:82:04:a3:68:3f:
                    ee:b7:84:de:3a:17:bb:4e:af:fb:04:1e:63:ae:53:
                    c3:e2:4d:c6:00:64:3a:48:45:06:5b:3b:fc:f8:f8:
                    f8:3b:33:ea:fb:21:6d:da:b2:12:12:15:be:7e:c6:
                    ad:34:22:ad:84:f2:4e:10:40:56:cd:41:c7:ba:38:
                    86:46:4a:c0:be:d2:28:49:25:fc:56:59:f1:36:92:
                    c2:77:64:2c:07:7e:a9:97:0d:12:39:60:ef:66:8e:
                    7b:01:0c:21:39:21:80:0e:da:51:73:8f:fc:02:28:
                    b8:b2:90:24:bf:df:77:4c:a9:c9:6d:9d:8a:59:90:
                    6c:06:99:c7:85:65:39:a9:a0:59:07:bc:56:a5:a7:
                    23:30:24:03:7c:e5:99:95:01:be:90:e0:c8:69:46:
                    39:ea:8b:44:2f:cd:e6:03:0a:5d:a4:d1:ec:82:19:
                    d7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2C:A4:03:0D:DB:5C:95:6C:9B:62:EC:D7:74:7E:2F:6B:5D:23:A7
            X509v3 Authority Key Identifier:
                keyid:43:45:16:E4:96:30:AF:5C:A6:62:DE:84:C9:5B:5F:62:F5:48:66:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/434516E49630AF5CA662DE84C95B5F62F5486695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/434516E49630AF5CA662DE84C95B5F62F5486695.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/434516E49630AF5CA662DE84C95B5F62F5486695.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:90:0f:4e:fc:a9:b6:d0:48:c0:8a:d9:5b:73:79:b1:ac:a2:
         8d:23:d8:ad:24:fb:84:02:57:c6:74:ad:5a:f7:d8:aa:ca:ea:
         b7:ef:44:3a:ad:01:56:31:bc:a6:ac:b4:51:ef:92:73:ee:b2:
         71:8f:04:cc:f5:b0:3a:9f:2e:4a:61:68:09:0d:bd:09:9d:5f:
         8e:4d:35:98:54:ba:13:72:36:e3:dc:99:e2:1f:ef:39:6d:b6:
         b8:33:fb:dc:c1:73:62:33:41:9b:8e:ae:4d:16:84:13:c8:50:
         83:3c:08:95:68:68:70:8e:ad:8b:4a:33:14:fc:62:61:6b:b0:
         63:4f:d0:3f:38:94:58:c3:5a:7d:79:ac:fd:a5:c6:84:bc:dd:
         7e:ee:bc:16:3d:11:cf:49:2e:7b:24:65:f6:c2:7d:79:4f:14:
         c9:91:21:7a:e7:2b:6c:3b:1d:e4:12:40:b8:21:87:7a:47:ff:
         de:6b:97:a5:1f:22:98:2f:06:27:7f:53:49:0c:2c:a6:a0:43:
         76:1f:89:5c:ba:cd:8c:0b:8f:e8:6d:32:88:2a:3a:3b:06:0d:
         bb:a8:94:1f:e1:d1:3e:2e:08:35:b1:86:e2:13:a8:e6:32:a3:
         a5:94:84:08:7f:01:ba:c7:80:ac:3c:5d:89:50:c2:c6:21:34:
         30:9c:96:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 03:48:54 2024 by rpki-client on console.sobornost.net