Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/8CE5ABDB7CEF7BFE5762FB9B68A586B1310B1742.mft
File:                     8CE5ABDB7CEF7BFE5762FB9B68A586B1310B1742.mft (raw, json)
Hash identifier:          z4QnqAj7vrFv0JXwl1uYWXW5GYN1s+vGJhRKUHg90LA=
Subject key identifier:   EC:1B:8C:0A:53:1A:AE:C8:D5:10:A4:1C:2E:E0:AF:89:0C:2C:77:20
Authority key identifier: 8C:E5:AB:DB:7C:EF:7B:FE:57:62:FB:9B:68:A5:86:B1:31:0B:17:42
Certificate issuer:       /CN=8CE5ABDB7CEF7BFE5762FB9B68A586B1310B1742
Certificate serial:       72EFCE02D10ABD3402DF1778FE2EDCAA3D75D6EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CE5ABDB7CEF7BFE5762FB9B68A586B1310B1742.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/8CE5ABDB7CEF7BFE5762FB9B68A586B1310B1742.mft
Manifest number:          01F6
Signing time:             Tue 09 Jan 2024 13:50:38 +0000
Manifest this update:     Tue 09 Jan 2024 13:45:38 +0000
Manifest next update:     Wed 10 Jan 2024 17:05:38 +0000
Files and hashes:         1: 8CE5ABDB7CEF7BFE5762FB9B68A586B1310B1742.crl (hash: QFA+9SIJ1uhQrwdgsUfNEqcDIjgf6Vw6BqwCO6V4MEI=)
                          2: 323830343a333661303a313130303a3a2f34302d3430203d3e20323636333630.roa (hash: iriVBi3siZ7MzfY26nShQuI7M2USvKAd/rfcpzSq0II=)
                          3: 323830343a333661303a3a2f33322d3332203d3e20323636333630.roa (hash: Q+1iBe1aE5hrpcSMTKAsjFdl5DQAuc9BiKCg3+ukvjk=)
                          4: 323830343a333661303a323130303a3a2f34302d3430203d3e20323636333630.roa (hash: uU/p3rqO/Z6JGoyXDFWY/wuOWaKQzkXAeTeg1KbfHo4=)
                          5: 3137302e3233392e3235322e302f32322d3234203d3e20323636333630.roa (hash: 6nHT6wSJi28khP11lFUpLJziYeQIo50bF/8Goos7dmQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/8CE5ABDB7CEF7BFE5762FB9B68A586B1310B1742.crl
                          rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/8CE5ABDB7CEF7BFE5762FB9B68A586B1310B1742.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CE5ABDB7CEF7BFE5762FB9B68A586B1310B1742.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ef:ce:02:d1:0a:bd:34:02:df:17:78:fe:2e:dc:aa:3d:75:d6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CE5ABDB7CEF7BFE5762FB9B68A586B1310B1742
        Validity
            Not Before: Jan  9 13:45:38 2024 GMT
            Not After : Jan 10 17:05:38 2024 GMT
        Subject: CN=EC1B8C0A531AAEC8D510A41C2EE0AF890C2C7720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1a:a2:8d:75:4e:57:48:06:52:6f:5f:2b:90:
                    7f:83:8b:53:a0:38:ad:0d:c7:96:ac:78:72:4c:18:
                    00:56:f6:46:db:f2:ff:d7:d6:a2:8f:bb:1e:8c:26:
                    51:91:ac:19:90:0d:93:2a:53:13:c1:fc:43:3d:14:
                    2b:cf:8e:2e:c7:b7:6e:ad:19:9d:aa:15:82:73:1d:
                    4d:49:ff:9e:04:72:12:f8:3b:e3:98:56:cc:67:64:
                    cb:bb:ab:e2:a8:0b:86:74:0a:78:22:00:e5:87:2c:
                    5f:20:29:c3:ff:05:47:9b:a0:ce:ed:31:7a:9e:07:
                    7f:68:d0:6f:90:2e:b1:c3:8e:03:62:0f:05:04:2e:
                    bd:a2:86:84:cc:cd:88:46:1a:54:33:93:a7:fa:06:
                    e7:c7:bf:e7:61:8f:03:76:99:8f:cd:c5:af:32:c2:
                    96:05:58:9b:39:03:c9:a8:0e:cf:1f:0f:e6:43:c2:
                    ea:e2:60:cc:6d:70:05:65:73:43:ce:61:10:45:b2:
                    a1:c7:7f:58:5b:ff:ca:7c:38:6e:3e:54:35:ef:23:
                    cb:da:b2:fa:bf:f6:2c:7f:ee:be:a8:9e:38:47:7d:
                    8a:1b:44:b7:86:d5:55:44:50:5b:d1:e1:80:cc:94:
                    b0:14:09:f1:2f:44:ef:0e:c0:69:40:ff:a2:60:2f:
                    49:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1B:8C:0A:53:1A:AE:C8:D5:10:A4:1C:2E:E0:AF:89:0C:2C:77:20
            X509v3 Authority Key Identifier:
                keyid:8C:E5:AB:DB:7C:EF:7B:FE:57:62:FB:9B:68:A5:86:B1:31:0B:17:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/8CE5ABDB7CEF7BFE5762FB9B68A586B1310B1742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CE5ABDB7CEF7BFE5762FB9B68A586B1310B1742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/8CE5ABDB7CEF7BFE5762FB9B68A586B1310B1742.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ba:d7:15:31:c8:23:59:e4:bd:88:9c:ed:ea:1b:70:64:a3:
         e2:f8:bb:5e:94:9d:bf:49:b7:d9:bb:bb:26:0c:8b:f7:79:4e:
         4f:e2:04:ca:0c:4a:a1:4e:c9:9e:00:7e:a1:20:f4:0b:fc:29:
         b3:22:68:fc:00:2c:4c:74:ab:91:c9:1a:52:f5:b5:7b:7b:16:
         82:8e:4c:64:73:4e:7f:c8:93:f1:9c:03:7c:8d:61:77:97:9f:
         f1:47:9d:73:a1:6a:35:d9:f9:84:db:bf:52:77:8a:6a:de:2d:
         3a:ae:cb:ed:84:97:94:a7:15:ca:47:47:4e:a4:1a:9c:4e:2c:
         38:53:1e:cb:5f:57:99:d5:3f:bf:50:ca:9e:c4:e8:be:dc:91:
         a5:52:e0:01:30:fe:1b:a0:72:9f:14:82:ab:85:1c:a6:33:54:
         fe:45:4d:07:d8:53:be:ae:9a:4a:02:79:a5:b9:b6:58:a8:48:
         c9:73:60:3a:fe:cd:e7:d2:14:5b:fe:2e:4c:7f:ba:da:f1:59:
         24:07:d5:df:76:6a:fa:ac:6e:c6:13:90:6f:97:36:56:2a:0a:
         ea:a1:48:77:81:f2:59:d1:62:7c:5a:28:d8:10:59:54:cf:49:
         28:50:01:9c:ed:c9:cb:80:1e:9d:c9:fc:eb:ae:1b:0d:7b:b3:
         70:22:8b:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcu/OAtEKvTQC3xd4/i7cqj111uowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENFNUFCREI3Q0VGN0JGRTU3NjJGQjlCNjhBNTg2QjEz
MTBCMTc0MjAeFw0yNDAxMDkxMzQ1MzhaFw0yNDAxMTAxNzA1MzhaMDMxMTAvBgNV
BAMTKEVDMUI4QzBBNTMxQUFFQzhENTEwQTQxQzJFRTBBRjg5MEMyQzc3MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMGqKNdU5XSAZSb18rkH+Di1Og
OK0Nx5aseHJMGABW9kbb8v/X1qKPux6MJlGRrBmQDZMqUxPB/EM9FCvPji7Ht26t
GZ2qFYJzHU1J/54EchL4O+OYVsxnZMu7q+KoC4Z0CngiAOWHLF8gKcP/BUeboM7t
MXqeB39o0G+QLrHDjgNiDwUELr2ihoTMzYhGGlQzk6f6BufHv+dhjwN2mY/Nxa8y
wpYFWJs5A8moDs8fD+ZDwuriYMxtcAVlc0POYRBFsqHHf1hb/8p8OG4+VDXvI8va
svq/9ix/7r6onjhHfYobRLeG1VVEUFvR4YDMlLAUCfEvRO8OwGlA/6JgL0nPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU7BuMClMarsjVEKQcLuCviQwsdyAwHwYDVR0j
BBgwFoAUjOWr23zve/5XYvubaKWGsTELF0IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEVOWXhVWEV4dVN5d0U4UmFWNmtEaXZKVVJWdzJKYXBNbkYxR1NaQXBK
U1MvMC84Q0U1QUJEQjdDRUY3QkZFNTc2MkZCOUI2OEE1ODZCMTMxMEIxNzQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhDRTVBQkRCN0NFRjdCRkU1
NzYyRkI5QjY4QTU4NkIxMzEwQjE3NDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEVOWXhVWEV4dVN5d0U4UmFWNmtEaXZKVVJWdzJKYXBNbkYxR1NaQXBKU1MvMC84
Q0U1QUJEQjdDRUY3QkZFNTc2MkZCOUI2OEE1ODZCMTMxMEIxNzQyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVbrXFTHII1nkvYic7eobcGSj4vi7XpSdv0m32bu7JgyL93lOT+IEygxKoU7J
ngB+oSD0C/wpsyJo/AAsTHSrkckaUvW1e3sWgo5MZHNOf8iT8ZwDfI1hd5ef8Ued
c6FqNdn5hNu/UneKat4tOq7L7YSXlKcVykdHTqQanE4sOFMey19XmdU/v1DKnsTo
vtyRpVLgATD+G6BynxSCq4UcpjNU/kVNB9hTvq6aSgJ5pbm2WKhIyXNgOv7N59IU
W/4uTH+62vFZJAfV33Zq+qxuxhOQb5c2VioK6qFId4HyWdFifFoo2BBZVM9JKFAB
nO3Jy4Aencn8664bDXuzcCKL6w==
-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:11 2024 by rpki-client on console.sobornost.net