Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/0/64367EC9AEEF715A53DD9ED39A5466ECBDB03A39.mft
File:                     64367EC9AEEF715A53DD9ED39A5466ECBDB03A39.mft (raw, json)
Hash identifier:          sNk2jPEKpZOuiZ1BoKwdxMdqV5Oays78REmzNN8/Hd4=
Subject key identifier:   FC:81:D3:A7:22:B8:85:F3:41:A5:A3:C6:36:BC:27:81:A2:07:0C:17
Authority key identifier: 64:36:7E:C9:AE:EF:71:5A:53:DD:9E:D3:9A:54:66:EC:BD:B0:3A:39
Certificate issuer:       /CN=64367EC9AEEF715A53DD9ED39A5466ECBDB03A39
Certificate serial:       68E02045C4AA4CE6D7E9B003A9CCD48D920A7C9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64367EC9AEEF715A53DD9ED39A5466ECBDB03A39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/0/64367EC9AEEF715A53DD9ED39A5466ECBDB03A39.mft
Manifest number:          0657
Signing time:             Tue 09 Jan 2024 11:03:33 +0000
Manifest this update:     Tue 09 Jan 2024 10:58:33 +0000
Manifest next update:     Wed 10 Jan 2024 12:33:33 +0000
Files and hashes:         1: 64367EC9AEEF715A53DD9ED39A5466ECBDB03A39.crl (hash: LeSoW5EVfiS/CIxvU2efD4GdHd/qHO5/VmUE5bK8URQ=)
                          2: 323830343a366538633a3a2f33322d3438203d3e20323730363034.roa (hash: upZ8ZIKgRv6HLvw8D1aTqXY867aCyPnK6r5Hk6GXLow=)
                          3: 3138372e302e33322e302f32322d3234203d3e20323730363034.roa (hash: eK9uo4xnfPUW+lSqIJvdgNGDCCfBuGKck3qzqy5kCFM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/0/64367EC9AEEF715A53DD9ED39A5466ECBDB03A39.crl
                          rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/0/64367EC9AEEF715A53DD9ED39A5466ECBDB03A39.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64367EC9AEEF715A53DD9ED39A5466ECBDB03A39.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 12:33:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e0:20:45:c4:aa:4c:e6:d7:e9:b0:03:a9:cc:d4:8d:92:0a:7c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64367EC9AEEF715A53DD9ED39A5466ECBDB03A39
        Validity
            Not Before: Jan  9 10:58:33 2024 GMT
            Not After : Jan 10 12:33:33 2024 GMT
        Subject: CN=FC81D3A722B885F341A5A3C636BC2781A2070C17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:be:4a:25:c9:c0:c2:01:47:4e:8e:d4:38:
                    6b:2e:09:82:83:dc:c2:ca:36:91:57:dd:ea:fb:67:
                    11:a7:79:96:d6:6a:9d:5b:26:7d:10:32:21:8e:35:
                    c0:9a:a9:92:c1:c8:8b:11:ff:90:c0:1b:9e:b4:35:
                    87:16:0f:12:ff:13:df:57:14:db:c2:b1:f9:02:ba:
                    44:61:f3:ba:f5:72:72:47:4f:fa:03:29:78:c6:98:
                    9f:ab:c2:aa:90:92:0b:19:38:d8:d1:14:cc:f9:0b:
                    dc:18:6d:c0:15:7b:e5:23:bf:01:69:2d:b6:d6:3d:
                    f8:51:e2:c6:3f:36:ab:cb:bd:1f:4e:09:0a:6b:99:
                    d0:c2:18:59:71:2f:14:0e:c6:86:2b:e9:4f:5a:e1:
                    29:b0:c2:a3:30:79:7d:1f:d9:27:be:77:5c:ab:56:
                    00:c6:b0:71:bf:07:58:d0:00:1a:cf:5a:ab:aa:d4:
                    fc:05:50:98:9c:0a:35:74:7f:ea:a0:7e:5d:2a:f5:
                    79:0a:43:89:1a:27:22:47:0d:2a:c4:01:a0:96:10:
                    34:30:39:98:26:ff:64:1e:93:f1:87:03:fd:5b:3c:
                    28:88:5b:00:a8:22:5c:60:78:c4:50:8c:5c:53:03:
                    db:84:70:08:87:be:1d:4c:61:c8:2e:19:b1:4b:bf:
                    17:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:81:D3:A7:22:B8:85:F3:41:A5:A3:C6:36:BC:27:81:A2:07:0C:17
            X509v3 Authority Key Identifier:
                keyid:64:36:7E:C9:AE:EF:71:5A:53:DD:9E:D3:9A:54:66:EC:BD:B0:3A:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/0/64367EC9AEEF715A53DD9ED39A5466ECBDB03A39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64367EC9AEEF715A53DD9ED39A5466ECBDB03A39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/0/64367EC9AEEF715A53DD9ED39A5466ECBDB03A39.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:91:1d:d6:19:bd:2f:30:98:6c:1c:9a:3c:41:72:87:73:25:
         fa:f2:a8:65:1c:f5:22:51:32:41:dc:36:0c:a0:f6:df:98:a6:
         55:fa:91:c5:b0:01:3b:f5:7f:3d:0d:46:c9:f8:52:72:73:b9:
         87:79:71:7d:25:ba:4c:8e:2d:ea:7e:35:2d:d5:85:09:29:97:
         f6:d1:b2:eb:90:54:be:23:51:d4:d5:1a:ab:15:d5:e2:93:42:
         78:a7:5c:d0:af:9d:0c:b8:4b:ca:eb:bd:f0:40:93:df:78:ef:
         1c:01:05:26:50:69:41:3c:14:48:9e:3c:f8:d7:39:65:c7:bf:
         8c:75:f0:83:c5:3a:6e:c7:ad:2f:22:9a:8b:b7:ef:4d:ee:08:
         74:f2:8c:f4:20:d2:b3:30:95:a0:c1:6b:9b:c2:fd:46:08:06:
         7b:45:d0:04:15:f4:34:11:13:1a:c4:eb:f9:3e:25:7e:87:00:
         5a:e9:0b:b7:15:77:2a:8a:c4:1b:28:28:43:76:1c:54:ea:ff:
         86:97:68:23:30:6c:1c:c4:f4:15:45:23:f4:f7:81:7e:2f:0c:
         24:17:c7:b0:2b:c4:20:b8:33:fe:83:90:0b:5b:30:5e:35:33:
         1e:fa:e3:15:80:21:0d:ba:54:97:6b:24:c3:94:75:39:81:b2:
         97:d5:34:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaOAgRcSqTObX6bADqczUjZIKfJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQzNjdFQzlBRUVGNzE1QTUzREQ5RUQzOUE1NDY2RUNC
REIwM0EzOTAeFw0yNDAxMDkxMDU4MzNaFw0yNDAxMTAxMjMzMzNaMDMxMTAvBgNV
BAMTKEZDODFEM0E3MjJCODg1RjM0MUE1QTNDNjM2QkMyNzgxQTIwNzBDMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5GL5KJcnAwgFHTo7UOGsuCYKD
3MLKNpFX3er7ZxGneZbWap1bJn0QMiGONcCaqZLByIsR/5DAG560NYcWDxL/E99X
FNvCsfkCukRh87r1cnJHT/oDKXjGmJ+rwqqQkgsZONjRFMz5C9wYbcAVe+UjvwFp
LbbWPfhR4sY/NqvLvR9OCQprmdDCGFlxLxQOxoYr6U9a4SmwwqMweX0f2Se+d1yr
VgDGsHG/B1jQABrPWquq1PwFUJicCjV0f+qgfl0q9XkKQ4kaJyJHDSrEAaCWEDQw
OZgm/2Qek/GHA/1bPCiIWwCoIlxgeMRQjFxTA9uEcAiHvh1MYcguGbFLvxerAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/IHTpyK4hfNBpaPGNrwngaIHDBcwHwYDVR0j
BBgwFoAUZDZ+ya7vcVpT3Z7TmlRm7L2wOjkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEVkb011ZWFFUHZEdkNrUUhMWFBqZXY3UFQ4UGl4M2kzRTVMdE11U1hI
RFMvMC82NDM2N0VDOUFFRUY3MTVBNTNERDlFRDM5QTU0NjZFQ0JEQjAzQTM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY0MzY3RUM5QUVFRjcxNUE1
M0REOUVEMzlBNTQ2NkVDQkRCMDNBMzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEVkb011ZWFFUHZEdkNrUUhMWFBqZXY3UFQ4UGl4M2kzRTVMdE11U1hIRFMvMC82
NDM2N0VDOUFFRUY3MTVBNTNERDlFRDM5QTU0NjZFQ0JEQjAzQTM5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAs5Ed1hm9LzCYbByaPEFyh3Ml+vKoZRz1IlEyQdw2DKD235imVfqRxbABO/V/
PQ1GyfhScnO5h3lxfSW6TI4t6n41LdWFCSmX9tGy65BUviNR1NUaqxXV4pNCeKdc
0K+dDLhLyuu98ECT33jvHAEFJlBpQTwUSJ48+Nc5Zce/jHXwg8U6bsetLyKai7fv
Te4IdPKM9CDSszCVoMFrm8L9RggGe0XQBBX0NBETGsTr+T4lfocAWukLtxV3KorE
GygoQ3YcVOr/hpdoIzBsHMT0FUUj9PeBfi8MJBfHsCvEILgz/oOQC1swXjUzHvrj
FYAhDbpUl2skw5R1OYGyl9U0Rw==
-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:37 2024 by rpki-client on console.sobornost.net