Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/4B6266A06D80AFC3AE4E995228A67BAB6C6A88E2.mft
File:                     4B6266A06D80AFC3AE4E995228A67BAB6C6A88E2.mft (raw, json)
Hash identifier:          WBuxEqIyY4IbbepinoWIJ5JfLqHmPKnri7ywYVxqoxs=
Subject key identifier:   53:64:61:D7:8A:C8:43:75:93:20:69:7D:BE:3A:8E:2B:2A:FE:E4:23
Authority key identifier: 4B:62:66:A0:6D:80:AF:C3:AE:4E:99:52:28:A6:7B:AB:6C:6A:88:E2
Certificate issuer:       /CN=4B6266A06D80AFC3AE4E995228A67BAB6C6A88E2
Certificate serial:       60815E2839C8CBCE965C9AF0D68B6AF339B8887F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B6266A06D80AFC3AE4E995228A67BAB6C6A88E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/4B6266A06D80AFC3AE4E995228A67BAB6C6A88E2.mft
Manifest number:          021E
Signing time:             Tue 09 Jan 2024 13:05:29 +0000
Manifest this update:     Tue 09 Jan 2024 13:00:29 +0000
Manifest next update:     Wed 10 Jan 2024 16:25:29 +0000
Files and hashes:         1: 4B6266A06D80AFC3AE4E995228A67BAB6C6A88E2.crl (hash: gYBd45P6lDRum/7KTJbKXhZdXM5t13ipDCD9MHPkhPk=)
                          2: 3133382e39372e32302e302f32322d3234203d3e20323634313132.roa (hash: AoYr1KtkF5lB7hQtBWFoxsFNiDvqWTuiJP8AwbgI+zo=)
                          3: 323830343a323261303a3a2f33322d3335203d3e20323634313132.roa (hash: AH3cvj1P5xcM4bZo4MSqvwxfMOGFbaCSA8M458pxYlY=)
                          4: 3137302e38332e3136302e302f32322d3234203d3e20323634313132.roa (hash: 72ygssN7cKDCpF/y+pxuMYkEHxuk/TgnuJ2DkZwd0fc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/4B6266A06D80AFC3AE4E995228A67BAB6C6A88E2.crl
                          rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/4B6266A06D80AFC3AE4E995228A67BAB6C6A88E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B6266A06D80AFC3AE4E995228A67BAB6C6A88E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:81:5e:28:39:c8:cb:ce:96:5c:9a:f0:d6:8b:6a:f3:39:b8:88:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B6266A06D80AFC3AE4E995228A67BAB6C6A88E2
        Validity
            Not Before: Jan  9 13:00:29 2024 GMT
            Not After : Jan 10 16:25:29 2024 GMT
        Subject: CN=536461D78AC843759320697DBE3A8E2B2AFEE423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:76:ba:dc:30:53:24:46:7e:52:11:b9:b5:e4:
                    c4:40:11:d1:c3:23:6b:3e:25:87:f4:a3:18:a2:7c:
                    5c:35:6e:e3:7e:16:79:ee:50:d8:c4:e3:1b:9f:d8:
                    fc:64:ac:bc:b4:cb:79:c9:49:3a:6f:e1:d5:e4:98:
                    1d:48:84:c3:fa:0b:21:01:43:9c:e8:17:5a:17:23:
                    f5:01:25:a9:0f:4b:be:f9:e6:9b:f3:8e:40:dc:1e:
                    a4:02:51:13:f0:85:6f:44:24:a3:26:14:93:fc:9f:
                    66:0e:8d:85:7d:49:36:08:b3:f8:6c:98:dc:a5:75:
                    fd:53:24:3c:bd:15:81:e2:45:70:bc:44:78:e7:95:
                    28:f9:71:3f:1a:e5:61:66:51:f3:28:ea:4b:02:c6:
                    f8:4c:04:69:3f:bb:fa:ba:ff:eb:33:61:92:62:8b:
                    e5:f4:8a:94:b0:0f:dd:ca:57:13:9d:e0:26:f3:bd:
                    05:93:38:f2:18:bc:94:bf:a1:e2:84:27:db:57:db:
                    4c:dc:48:82:c8:c8:37:e0:84:f5:9c:69:c6:22:06:
                    d4:82:42:35:6d:6e:70:f8:e9:b9:68:1f:f9:a6:3a:
                    77:6d:16:04:8c:52:10:4d:52:c0:05:84:b7:25:ee:
                    42:bb:51:47:f3:08:da:97:60:26:31:d7:f0:ad:a2:
                    61:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:64:61:D7:8A:C8:43:75:93:20:69:7D:BE:3A:8E:2B:2A:FE:E4:23
            X509v3 Authority Key Identifier:
                keyid:4B:62:66:A0:6D:80:AF:C3:AE:4E:99:52:28:A6:7B:AB:6C:6A:88:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/4B6266A06D80AFC3AE4E995228A67BAB6C6A88E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B6266A06D80AFC3AE4E995228A67BAB6C6A88E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/4B6266A06D80AFC3AE4E995228A67BAB6C6A88E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:5d:0e:76:8e:b2:2e:31:78:ab:9b:ce:16:50:61:35:36:c5:
         51:ba:9f:98:81:43:5d:0e:d7:51:df:54:b5:cd:24:b6:7b:1a:
         61:17:f0:96:4d:4a:a5:cf:1f:3f:71:40:63:90:29:11:e6:5a:
         6d:16:8a:3c:79:52:21:b6:b5:8e:1d:95:07:97:e7:fb:0e:21:
         c9:3b:c8:79:78:7c:b7:58:a0:cf:fa:0a:18:87:f9:b4:c0:82:
         f2:1c:64:31:6e:c6:44:c6:47:6d:bd:2b:b2:44:64:3a:93:b8:
         b7:eb:d2:df:35:ea:70:52:03:ad:4f:20:c0:fe:29:63:57:b7:
         92:61:df:8e:44:bd:8f:dc:9c:71:b4:23:8e:2e:fb:ae:a2:04:
         12:39:5e:53:2d:88:85:27:5a:e5:07:20:8c:ef:f4:bd:76:54:
         cf:a7:24:10:55:9b:7e:05:85:bd:db:90:03:b2:8d:8b:58:5c:
         4c:2b:30:f0:3c:e2:9b:b4:37:32:74:81:aa:eb:d2:ae:61:df:
         03:c7:78:9e:2f:e4:9f:a4:16:fc:ad:39:ef:9b:2f:ba:4c:7a:
         1b:d6:4c:f1:d0:d6:2d:82:6d:7f:93:27:4c:59:69:ba:0c:39:
         cb:ef:14:d4:10:86:18:48:64:41:fb:a8:67:0c:44:18:35:73:
         42:90:68:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:12 2024 by rpki-client on console.sobornost.net