Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/9C70B4472C9D58109895B5DC4990D4CDEA5A5723.mft
File:                     9C70B4472C9D58109895B5DC4990D4CDEA5A5723.mft (raw, json)
Hash identifier:          XGTouMJ54iQj78hA82tnEU1lFFGBDctwcamIlpPOzZ0=
Subject key identifier:   95:6F:44:A2:E6:27:F6:63:7F:C8:2C:03:4A:8A:88:26:EB:D7:FF:B0
Authority key identifier: 9C:70:B4:47:2C:9D:58:10:98:95:B5:DC:49:90:D4:CD:EA:5A:57:23
Certificate issuer:       /CN=9C70B4472C9D58109895B5DC4990D4CDEA5A5723
Certificate serial:       4B89DAAB85B691F66EABABBA5A8C6DC69FFCB2E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C70B4472C9D58109895B5DC4990D4CDEA5A5723.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/9C70B4472C9D58109895B5DC4990D4CDEA5A5723.mft
Manifest number:          67
Signing time:             Tue 09 Jan 2024 05:35:35 +0000
Manifest this update:     Tue 09 Jan 2024 05:30:35 +0000
Manifest next update:     Wed 10 Jan 2024 07:09:35 +0000
Files and hashes:         1: 3230312e34392e3138302e302f32342d3234203d3e20323731343636.roa (hash: v2A287kDXPbMKrAIw4RjXLQeK0s2XBB6nErLrZ0gM9Y=)
                          2: 3230312e34392e3137362e302f32322d3232203d3e20323731343636.roa (hash: LBqYZ5Mo7kfi94i3BVPY4SCoDxbjR7zoSwhQTecnzG8=)
                          3: 3230312e34392e3138322e302f32342d3234203d3e20323731343636.roa (hash: AllR4CUf8qL2R/f/B0+tk3ndOFXVI7t/FdOjpaHJYvA=)
                          4: 3230312e34392e3137362e302f32342d3234203d3e20323731343636.roa (hash: /+gEP1YxI32ljFpjzAxpNL2LeYHgV9Xad3qjHEvUFC8=)
                          5: 9C70B4472C9D58109895B5DC4990D4CDEA5A5723.crl (hash: u7kLbEXBsIXRl+VkdE39sKpDQBf6wmbgYuTQ5s5ewPc=)
                          6: 323830343a376266383a383030303a3a2f33342d3334203d3e20323731343636.roa (hash: joYAV+H8a3VZhum23qnoEukb7T8RT1wGKw1mWDOWbHM=)
                          7: 3230312e34392e3137382e302f32332d3233203d3e20323731343636.roa (hash: UcKbcoHFGh9VuvWHtL40KSo9Td60c2qztUbQaKFMhdM=)
                          8: 323830343a376266383a343030303a3a2f33342d3334203d3e20323731343636.roa (hash: Ti9JkHqwJMlwTpDLlFD34tnlatV1MhZhl/vLHhU+8Yw=)
                          9: 323830343a376266383a383030303a3a2f33332d3333203d3e20323731343636.roa (hash: 0wg+YuE93w3aNyyTZ/TJ/9rsFEGLmyMn8CIrZZZzU84=)
                          10: 323830343a376266383a3a2f33342d3334203d3e20323731343636.roa (hash: lHVgxjGCgFTsiqM0XU2aAhB3K1bCHZ0qXItjJPQ+lhQ=)
                          11: 3230312e34392e3138312e302f32342d3234203d3e20323731343636.roa (hash: 2UllKK7rQ4YExSYLcqE3QIe6imrbe96PUvcpwg0vcQQ=)
                          12: 3230312e34392e3137362e302f32312d3231203d3e20323731343636.roa (hash: ol8qZRwsaILLKFXsuXppGjkDI49Qf80wSRSa7qnzEeY=)
                          13: 3230312e34392e3138302e302f32332d3233203d3e20323731343636.roa (hash: W2aod/PU8oKd3JyMJsWQ6MYodDOqtRnkI7g/zgncGZ8=)
                          14: 323830343a376266383a3130313a3a2f34382d3438203d3e20323731343636.roa (hash: tajSzZw48jHZZrZSBfNROGn8QBMGO23IL/pAqSNv0NQ=)
                          15: 3230312e34392e3138302e302f32322d3232203d3e20323731343636.roa (hash: OHKRQZ3zVMgrCowrjKWiQcOjOX8qdvz6lNzavX6gksk=)
                          16: 323830343a376266383a3a2f33322d3332203d3e20323731343636.roa (hash: S9zRJrQl8UtQQYtlKBYWg1lskBNlrJ8s2bwct3qaJ9Y=)
                          17: 3230312e34392e3138322e302f32332d3233203d3e20323731343636.roa (hash: Yq7aZSfLgOxyFbMfCk/c2L2MiISBz+7nLQA84RXlBXo=)
                          18: 323830343a376266383a633030303a3a2f33342d3334203d3e20323731343636.roa (hash: N+PEMMY97fpvE8t0vhm+ezHkQzgBUSywhGTDto0pcnI=)
                          19: 3230312e34392e3137382e302f32342d3234203d3e20323731343636.roa (hash: LA9rX88LeimDwuHjiAsuwvTuNMRUivBO2RGJ7zSTYiA=)
                          20: 3230312e34392e3137362e302f32312d3234203d3e20323731343636.roa (hash: 81gBk2Urrh2t9NOSyNJrLoZYE2EEn33eJJPDFwNzRCQ=)
                          21: 3230312e34392e3138332e302f32342d3234203d3e20323731343636.roa (hash: jmNBnXv+5lYVe85sdCUINzf3wLF1qreUQCEZ9aDZ+Mk=)
                          22: 3230312e34392e3137392e302f32342d3234203d3e20323731343636.roa (hash: qke0ho6T/XsRNHOHJrzXgr+XNR9PhshP1UhXMNdu8GI=)
                          23: 323830343a376266383a3a2f33332d3333203d3e20323731343636.roa (hash: nfvWwRvYOQy+7Wb+xZQwzK7T3lPtD7M8d5X/CKlLN9M=)
                          24: 3230312e34392e3137372e302f32342d3234203d3e20323731343636.roa (hash: ydqzi1JyKV7sXg9ZXR14p1eOTMcNTXfAYQEtzDm4Ssc=)
                          25: 3230312e34392e3137362e302f32332d3233203d3e20323731343636.roa (hash: opJqH59NfsEKDu6QGGdU3kBlSD2xXUepGawXw2+nnKk=)
                          26: 323830343a376266383a3330303a3a2f34382d3438203d3e20323731343636.roa (hash: tPYbZ/HRFLzHRxcqwftcz+Rl2/9OjFmnrvipWfmlo+M=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/9C70B4472C9D58109895B5DC4990D4CDEA5A5723.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/9C70B4472C9D58109895B5DC4990D4CDEA5A5723.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C70B4472C9D58109895B5DC4990D4CDEA5A5723.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:89:da:ab:85:b6:91:f6:6e:ab:ab:ba:5a:8c:6d:c6:9f:fc:b2:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C70B4472C9D58109895B5DC4990D4CDEA5A5723
        Validity
            Not Before: Jan  9 05:30:35 2024 GMT
            Not After : Jan 10 07:09:35 2024 GMT
        Subject: CN=956F44A2E627F6637FC82C034A8A8826EBD7FFB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:88:5d:d6:9c:df:f4:99:b7:d5:d5:61:bb:c5:
                    13:69:51:5f:27:de:9c:00:f3:41:9a:ae:6d:97:73:
                    02:8d:04:00:64:db:ba:ce:7c:92:1c:8c:4a:f7:eb:
                    d4:9f:fb:0d:70:3c:32:56:3a:da:66:ed:cb:e8:59:
                    f0:db:11:6c:ff:6c:93:e7:89:0b:3f:e8:5e:dd:49:
                    e7:e8:96:af:c2:15:bd:c5:ac:93:38:96:c8:22:0f:
                    7f:66:1b:d6:39:cd:4e:e9:73:cd:82:0e:2a:b9:d0:
                    fd:0f:9c:22:75:bd:cf:3f:1e:ce:d9:74:e5:e0:67:
                    f9:6a:a7:7c:d4:c4:5b:53:70:12:fe:d7:e2:54:f0:
                    7e:14:00:6b:fc:84:2c:2b:0c:00:85:a4:0e:26:59:
                    a6:27:58:ed:ce:2d:2d:00:2c:f5:da:e5:c9:c1:f4:
                    01:1b:cb:69:06:c6:cd:1e:fb:14:11:a0:9c:04:16:
                    8c:43:17:1b:6e:dc:05:11:86:0b:a6:4e:cb:53:b7:
                    5d:fe:7c:00:2b:ea:05:ac:93:88:40:61:39:5e:25:
                    94:af:82:c0:b7:91:5e:d3:84:6b:85:db:d6:c8:2e:
                    d1:36:20:1a:75:05:0c:77:65:1b:ea:7b:44:e9:26:
                    f2:74:50:a4:67:b8:cf:12:d0:65:ea:e2:fe:eb:b9:
                    cd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6F:44:A2:E6:27:F6:63:7F:C8:2C:03:4A:8A:88:26:EB:D7:FF:B0
            X509v3 Authority Key Identifier:
                keyid:9C:70:B4:47:2C:9D:58:10:98:95:B5:DC:49:90:D4:CD:EA:5A:57:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/9C70B4472C9D58109895B5DC4990D4CDEA5A5723.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C70B4472C9D58109895B5DC4990D4CDEA5A5723.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/9C70B4472C9D58109895B5DC4990D4CDEA5A5723.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:48:a1:cc:74:53:9e:53:4d:14:a4:2d:06:e1:20:57:bc:dd:
         e6:f2:42:d5:eb:d3:06:18:11:db:95:09:ec:e8:5c:6d:73:47:
         07:9e:b2:f5:43:3c:15:7a:16:ae:af:36:a0:4b:7f:a9:40:1f:
         5d:ac:42:13:4b:7d:6c:da:7a:5d:d7:55:ef:82:bd:78:a0:95:
         db:4f:9b:0f:a8:7b:db:3f:34:5a:35:b6:22:e5:38:07:ea:e6:
         28:e1:df:dc:33:ad:01:6b:f4:dd:89:79:48:c7:10:46:23:07:
         32:35:84:4a:22:19:9d:e4:41:53:0d:63:d2:e2:18:80:34:93:
         bf:8e:7d:b4:24:c0:4d:79:96:af:c3:dc:67:30:e3:ea:60:a6:
         2a:bc:a2:e3:b2:36:fa:d5:00:5a:4d:9c:97:c1:9d:79:65:4f:
         ed:2d:dd:9d:72:79:14:47:84:97:f5:55:ae:37:82:50:82:e5:
         75:bf:68:6a:57:1a:ee:d5:01:a4:f5:12:84:c2:b0:84:44:11:
         2c:46:ed:01:44:c7:53:68:0e:d5:21:cd:d6:3c:a9:e6:7a:63:
         10:b4:31:c1:b4:ce:89:c6:9a:8e:f6:31:ff:63:77:0a:df:23:
         aa:29:2d:33:70:88:7a:e9:2f:52:c3:b2:bb:5f:9e:ce:1c:45:
         e9:1e:f7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 07:51:18 2024 by rpki-client on console.sobornost.net