Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4JBEENoHEobzQf8LEbVdfEFELurAuG7rqQCfw51BR7Fy/0/39001353DF34F0196E25E171DFBDFA059922EBF7.mft
File:                     39001353DF34F0196E25E171DFBDFA059922EBF7.mft (raw, json)
Hash identifier:          VPTGtKlSPL28x2NmmKbly4Z5WlB768D5Is+bQNMQ848=
Subject key identifier:   41:E4:06:84:D6:86:DD:15:7C:D1:2B:17:54:20:47:09:8C:8C:92:02
Authority key identifier: 39:00:13:53:DF:34:F0:19:6E:25:E1:71:DF:BD:FA:05:99:22:EB:F7
Certificate issuer:       /CN=39001353DF34F0196E25E171DFBDFA059922EBF7
Certificate serial:       58C7F62F1FA50ED5A8740CF35A772259A3AD75A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39001353DF34F0196E25E171DFBDFA059922EBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JBEENoHEobzQf8LEbVdfEFELurAuG7rqQCfw51BR7Fy/0/39001353DF34F0196E25E171DFBDFA059922EBF7.mft
Manifest number:          4C
Signing time:             Tue 09 Jan 2024 02:00:59 +0000
Manifest this update:     Tue 09 Jan 2024 01:55:59 +0000
Manifest next update:     Wed 10 Jan 2024 05:34:59 +0000
Files and hashes:         1: 39001353DF34F0196E25E171DFBDFA059922EBF7.crl (hash: 1z5ihF46JaFz4inY/T5nApiozI9cVo9g6XhnFjZjeVI=)
                          2: 323830343a343962383a3a2f33332d3333203d3e20323637313939.roa (hash: cEItxU0fyszrizqz9zUbS4I/0BrLHLKKsaiSSrpaYII=)
                          3: 34352e3233312e3134302e302f32332d3233203d3e20323637313939.roa (hash: uFSLkXRfaoBAm0z1bnYmIPD5pxUtxNm3/sUSnbOrRiI=)
                          4: 323830343a343962383a3a2f33322d3332203d3e20323637313939.roa (hash: ft58HNFvKUCtN6JKxiS0/BOyWTMHjcs1Q6Ska1U8TO4=)
                          5: 323830343a343962383a383030303a3a2f33332d3333203d3e20323637313939.roa (hash: 53PEROI/+eA5XncBeBx4oNIo7yZ0O4cvd5QiLE5wJng=)
                          6: 34352e3233312e3134302e302f32322d3232203d3e20323637313939.roa (hash: SwuxM7D7s8Ki7PEtHbW6g/TAmKLw7ErY7VuEAeql/YQ=)
                          7: 34352e3233312e3134322e302f32332d3233203d3e20323637313939.roa (hash: 9NxgrGXOAisbw2z8fTRDuNWcxTdOw2lrL0L2t2e0FFg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JBEENoHEobzQf8LEbVdfEFELurAuG7rqQCfw51BR7Fy/0/39001353DF34F0196E25E171DFBDFA059922EBF7.crl
                          rsync://rpki-repo.registro.br/repo/4JBEENoHEobzQf8LEbVdfEFELurAuG7rqQCfw51BR7Fy/0/39001353DF34F0196E25E171DFBDFA059922EBF7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39001353DF34F0196E25E171DFBDFA059922EBF7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 05:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c7:f6:2f:1f:a5:0e:d5:a8:74:0c:f3:5a:77:22:59:a3:ad:75:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39001353DF34F0196E25E171DFBDFA059922EBF7
        Validity
            Not Before: Jan  9 01:55:59 2024 GMT
            Not After : Jan 10 05:34:59 2024 GMT
        Subject: CN=41E40684D686DD157CD12B17542047098C8C9202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9a:b2:b3:08:24:13:f5:fd:a1:1a:ca:45:e1:
                    32:c8:e8:79:64:8a:80:ce:f3:68:d4:68:74:8f:02:
                    1f:80:6b:cd:d0:67:00:df:61:fe:d4:8b:da:19:ee:
                    7c:61:51:76:3a:f3:cb:09:a1:30:d5:84:f0:54:a9:
                    26:93:53:85:34:13:13:be:3e:b7:4e:2e:49:8c:6e:
                    11:eb:2b:a3:b4:cf:eb:02:6b:39:2c:c1:b4:77:71:
                    16:c4:7a:0c:0e:18:91:f8:be:dc:63:fc:d3:d0:95:
                    54:53:42:bf:99:ae:c5:08:44:12:8b:30:03:9a:44:
                    69:45:8d:a8:1a:fc:a7:4e:e8:2d:56:59:f0:a9:ea:
                    3b:56:2c:2e:ce:0b:44:b2:2a:0f:c1:b9:2c:d8:4c:
                    54:74:80:ad:b2:37:68:c4:ec:d6:1b:ba:ee:8c:2a:
                    02:38:f7:91:53:e6:01:1c:38:6f:1d:b8:50:b8:c8:
                    77:36:e5:10:a4:98:be:09:97:c4:05:65:8b:90:aa:
                    5a:1d:24:13:48:e2:1a:ec:86:c9:ce:b7:22:50:43:
                    c6:e6:65:1b:47:61:40:d0:87:12:7c:76:a9:ab:64:
                    fa:f2:30:0f:f8:24:fa:13:96:71:2b:38:fd:16:b4:
                    60:94:e8:48:fb:7c:2a:c6:a1:76:f8:42:43:87:9b:
                    a0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E4:06:84:D6:86:DD:15:7C:D1:2B:17:54:20:47:09:8C:8C:92:02
            X509v3 Authority Key Identifier:
                keyid:39:00:13:53:DF:34:F0:19:6E:25:E1:71:DF:BD:FA:05:99:22:EB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JBEENoHEobzQf8LEbVdfEFELurAuG7rqQCfw51BR7Fy/0/39001353DF34F0196E25E171DFBDFA059922EBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39001353DF34F0196E25E171DFBDFA059922EBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JBEENoHEobzQf8LEbVdfEFELurAuG7rqQCfw51BR7Fy/0/39001353DF34F0196E25E171DFBDFA059922EBF7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:6f:18:7f:7a:03:b2:66:24:0a:a7:73:c6:bc:b0:72:bb:f0:
         cc:57:d3:20:93:98:35:d9:c3:e8:3d:49:9a:d3:79:77:75:68:
         6f:2c:66:b6:b0:96:bb:b5:7e:90:b3:a6:a0:98:98:7f:bb:99:
         b3:1f:b6:f3:a1:ad:d4:83:fd:84:da:2d:12:12:0f:fe:a0:52:
         c6:0b:39:c1:30:19:9b:ab:b8:c2:57:84:10:fa:9f:54:ee:af:
         6b:8e:4c:1e:f2:6c:67:61:9c:fe:f7:34:03:ff:5e:77:d3:98:
         c2:75:18:75:01:86:a0:c4:34:c3:22:dc:c5:9c:6d:f3:5b:18:
         02:41:3c:5a:48:1a:ff:82:17:be:87:21:6e:b3:c9:57:87:3c:
         7f:fa:c9:24:a1:59:85:7d:39:24:ed:af:f9:cc:94:16:36:77:
         c8:41:da:6f:74:d1:bc:21:0e:fb:d8:e6:62:a0:12:f1:d6:8f:
         6e:00:08:9b:9b:22:38:ce:d5:d4:fc:f4:4c:a5:3a:9f:a6:bc:
         31:ff:87:c7:d0:9a:d0:28:f8:65:85:82:d1:91:1c:ef:d1:86:
         d2:13:b7:4d:70:a9:bc:d6:7b:71:71:15:c6:21:71:73:81:50:
         87:82:5f:61:7c:9e:67:39:82:64:89:a0:6c:5e:7b:7c:93:0c:
         b7:0f:7f:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWMf2Lx+lDtWodAzzWnciWaOtdakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkwMDEzNTNERjM0RjAxOTZFMjVFMTcxREZCREZBMDU5
OTIyRUJGNzAeFw0yNDAxMDkwMTU1NTlaFw0yNDAxMTAwNTM0NTlaMDMxMTAvBgNV
BAMTKDQxRTQwNjg0RDY4NkREMTU3Q0QxMkIxNzU0MjA0NzA5OEM4QzkyMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtmrKzCCQT9f2hGspF4TLI6Hlk
ioDO82jUaHSPAh+Aa83QZwDfYf7Ui9oZ7nxhUXY688sJoTDVhPBUqSaTU4U0ExO+
PrdOLkmMbhHrK6O0z+sCazkswbR3cRbEegwOGJH4vtxj/NPQlVRTQr+ZrsUIRBKL
MAOaRGlFjaga/KdO6C1WWfCp6jtWLC7OC0SyKg/BuSzYTFR0gK2yN2jE7NYbuu6M
KgI495FT5gEcOG8duFC4yHc25RCkmL4Jl8QFZYuQqlodJBNI4hrshsnOtyJQQ8bm
ZRtHYUDQhxJ8dqmrZPryMA/4JPoTlnErOP0WtGCU6Ej7fCrGoXb4QkOHm6CnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQeQGhNaG3RV80SsXVCBHCYyMkgIwHwYDVR0j
BBgwFoAUOQATU9808BluJeFx3736BZki6/cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEpCRUVOb0hFb2J6UWY4TEViVmRmRUZFTHVyQXVHN3JxUUNmdzUxQlI3
RnkvMC8zOTAwMTM1M0RGMzRGMDE5NkUyNUUxNzFERkJERkEwNTk5MjJFQkY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM5MDAxMzUzREYzNEYwMTk2
RTI1RTE3MURGQkRGQTA1OTkyMkVCRjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEpCRUVOb0hFb2J6UWY4TEViVmRmRUZFTHVyQXVHN3JxUUNmdzUxQlI3RnkvMC8z
OTAwMTM1M0RGMzRGMDE5NkUyNUUxNzFERkJERkEwNTk5MjJFQkY3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAW8Yf3oDsmYkCqdzxrywcrvwzFfTIJOYNdnD6D1JmtN5d3VobyxmtrCWu7V+
kLOmoJiYf7uZsx+286Gt1IP9hNotEhIP/qBSxgs5wTAZm6u4wleEEPqfVO6va45M
HvJsZ2Gc/vc0A/9ed9OYwnUYdQGGoMQ0wyLcxZxt81sYAkE8Wkga/4IXvochbrPJ
V4c8f/rJJKFZhX05JO2v+cyUFjZ3yEHab3TRvCEO+9jmYqAS8daPbgAIm5siOM7V
1Pz0TKU6n6a8Mf+Hx9Ca0Cj4ZYWC0ZEc79GG0hO3TXCpvNZ7cXEVxiFxc4FQh4Jf
YXyeZzmCZImgbF57fJMMtw9/Kg==
-----END CERTIFICATE-----
Generated at Tue Jan 9 03:48:54 2024 by rpki-client on console.sobornost.net