Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/2DC65EAA07C4399B272B4966F17DC74117D2DA20.mft
File:                     2DC65EAA07C4399B272B4966F17DC74117D2DA20.mft (raw, json)
Hash identifier:          zcZArXt5tMT/ZSKxjGacw/Ba8+MRaEVttyvZ0NQisjo=
Subject key identifier:   1C:37:C8:C9:4D:83:C3:31:06:75:C4:88:29:E9:74:94:88:3B:23:37
Authority key identifier: 2D:C6:5E:AA:07:C4:39:9B:27:2B:49:66:F1:7D:C7:41:17:D2:DA:20
Certificate issuer:       /CN=2DC65EAA07C4399B272B4966F17DC74117D2DA20
Certificate serial:       2376719650C9C84DEFA58E316B72F40259736814
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DC65EAA07C4399B272B4966F17DC74117D2DA20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/2DC65EAA07C4399B272B4966F17DC74117D2DA20.mft
Manifest number:          7F
Signing time:             Tue 09 Jan 2024 05:51:28 +0000
Manifest this update:     Tue 09 Jan 2024 05:46:28 +0000
Manifest next update:     Wed 10 Jan 2024 07:05:28 +0000
Files and hashes:         1: 2DC65EAA07C4399B272B4966F17DC74117D2DA20.crl (hash: ZAnF/ZGdSrs/xPW5V9XJd4GnfbvGlMEeTIowwRi+DaY=)
                          2: 3137372e3132382e3232382e302f32322d3234203d3e203238353932.roa (hash: XycrSXz2yiwfIdDX7QebaMQtlypbvRSkXx5Cyas3bU0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/2DC65EAA07C4399B272B4966F17DC74117D2DA20.crl
                          rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/2DC65EAA07C4399B272B4966F17DC74117D2DA20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DC65EAA07C4399B272B4966F17DC74117D2DA20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:76:71:96:50:c9:c8:4d:ef:a5:8e:31:6b:72:f4:02:59:73:68:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DC65EAA07C4399B272B4966F17DC74117D2DA20
        Validity
            Not Before: Jan  9 05:46:28 2024 GMT
            Not After : Jan 10 07:05:28 2024 GMT
        Subject: CN=1C37C8C94D83C3310675C48829E97494883B2337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:61:5a:f7:5f:59:06:f9:04:0e:75:ab:58:fe:
                    23:b0:2e:ac:08:0a:24:18:17:91:65:52:f1:f1:36:
                    6e:61:08:9f:4a:8b:6b:24:82:7a:8a:f1:e5:a6:a3:
                    82:44:df:4f:a1:79:4d:d9:45:17:d6:ec:f0:ea:36:
                    36:c7:5f:7b:51:fa:5f:f9:17:ec:31:20:bd:e8:fb:
                    de:84:3e:b3:8d:e1:61:2c:df:2a:1c:73:c7:6c:15:
                    c9:d6:85:de:d7:91:3a:a7:34:91:88:1c:b3:1b:f6:
                    8e:f8:6b:f8:98:cb:7f:3b:16:27:54:86:99:0d:77:
                    42:a6:44:cf:16:57:05:86:e4:35:da:c2:f1:7d:93:
                    e8:f0:78:4c:97:ae:40:57:ef:68:a2:e0:11:4f:0b:
                    8c:15:60:68:3c:19:20:6a:77:d5:4c:54:70:09:f7:
                    ab:84:b5:5b:66:36:35:e6:7f:58:bd:b5:7f:d4:28:
                    5c:06:cd:07:71:a4:fa:a5:03:77:45:09:db:12:75:
                    e7:20:e5:15:f8:52:46:85:13:62:76:22:12:a6:b4:
                    a7:4b:3e:34:de:04:1d:ed:9c:e1:02:10:38:b4:72:
                    9f:6f:21:03:d8:40:69:4e:aa:84:61:1d:08:b7:f2:
                    af:90:fd:12:26:63:06:36:83:f8:9a:bd:49:b5:07:
                    1b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:37:C8:C9:4D:83:C3:31:06:75:C4:88:29:E9:74:94:88:3B:23:37
            X509v3 Authority Key Identifier:
                keyid:2D:C6:5E:AA:07:C4:39:9B:27:2B:49:66:F1:7D:C7:41:17:D2:DA:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/2DC65EAA07C4399B272B4966F17DC74117D2DA20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DC65EAA07C4399B272B4966F17DC74117D2DA20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/2DC65EAA07C4399B272B4966F17DC74117D2DA20.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:db:9a:15:9f:e7:66:e7:74:86:c8:54:d7:82:0d:95:27:73:
         65:c2:67:0f:ca:8e:57:75:fd:45:c0:c9:2b:eb:5d:94:1a:23:
         f7:81:08:c0:b9:3f:5c:be:18:a0:d2:66:0e:0c:46:04:4c:d6:
         8d:cf:04:7d:0c:ba:da:0e:3f:da:16:c7:ee:42:e6:ef:50:41:
         e9:75:b2:08:d0:d4:57:d0:97:11:04:a0:82:30:d3:23:fb:6b:
         c0:f5:5e:b8:54:06:28:2c:66:0b:1e:3a:7a:aa:e9:f0:d9:f3:
         b5:ff:7c:51:f3:57:06:e3:f6:31:97:2b:ef:94:6a:ab:2f:69:
         b0:c3:17:ee:41:20:b2:14:a1:12:ec:df:96:95:7b:b5:8e:08:
         2a:b2:79:1d:57:13:93:0d:76:06:dc:d3:f2:5b:16:00:4e:d4:
         f4:49:97:13:8e:8a:3d:11:de:65:8b:99:08:c7:82:2e:3c:de:
         bc:0d:8c:d4:6d:b5:fd:c9:70:97:40:85:09:59:92:b8:28:6f:
         37:5f:5f:60:7e:67:59:21:df:3f:f3:57:f4:9e:79:ff:79:f3:
         21:06:3c:69:a4:e0:83:db:6d:20:96:05:e0:1c:76:cf:34:13:
         6f:a2:af:45:1c:44:08:66:f0:b2:6f:e7:13:67:bc:45:b2:55:
         ef:74:df:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 07:51:20 2024 by rpki-client on console.sobornost.net