Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/10B05660CB8C13B3B13E3B0810B278833D500547.mft
File:                     10B05660CB8C13B3B13E3B0810B278833D500547.mft (raw, json)
Hash identifier:          KnCdDa1UMDjj65hrAzh9GqfW7tZ0qekKCUkLy4p1O6A=
Subject key identifier:   C7:4A:A4:52:2D:F0:5A:49:8E:E7:73:5E:F7:75:92:12:4F:C3:7E:41
Authority key identifier: 10:B0:56:60:CB:8C:13:B3:B1:3E:3B:08:10:B2:78:83:3D:50:05:47
Certificate issuer:       /CN=10B05660CB8C13B3B13E3B0810B278833D500547
Certificate serial:       16BCF937619BB7B3F01B4DDB454195C2AEBD05B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10B05660CB8C13B3B13E3B0810B278833D500547.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/10B05660CB8C13B3B13E3B0810B278833D500547.mft
Manifest number:          0115
Signing time:             Mon 08 Jan 2024 20:01:20 +0000
Manifest this update:     Mon 08 Jan 2024 19:56:20 +0000
Manifest next update:     Tue 09 Jan 2024 23:37:20 +0000
Files and hashes:         1: 10B05660CB8C13B3B13E3B0810B278833D500547.crl (hash: CSf/ItDwmbOZz1RQTYV77rFK5RMk3OxubIe/AE2wqj4=)
                          2: 3139322e3134302e382e302f32342d3234203d3e20323636313534.roa (hash: FQbu4mDgGViKZ/rk5oACBCb3Ha9g+ygdB41UhBympV8=)
                          3: 3139322e3134302e382e302f32332d3233203d3e20323636313534.roa (hash: DY4ZtXQDcMWG3DOtKmypPTUTGi107cqV6pH5vgcgFAQ=)
                          4: 3139322e3134302e31302e302f32342d3234203d3e20323636313534.roa (hash: KMEAKRhpg1WNqZGoBvx94FZqOUQcvMFemhtMmlsXFJ4=)
                          5: 3139322e3134302e392e302f32342d3234203d3e20323636313534.roa (hash: tkJF0s2yuJsEW2K9ZgWgdqExlXkqJa0ZUrZlSveFPik=)
                          6: 323830343a336238343a3a2f33332d3333203d3e20323636313534.roa (hash: vf+AdB43XW3Iikehuz+Xui5bYMePEDSAoqPTXPYg93s=)
                          7: 3139322e3134302e31312e302f32342d3234203d3e20323636313534.roa (hash: M0UwNxzLdVlI5ODwjlsMLdz9mTqgPQiXCN+9qUr4+dc=)
                          8: 3139322e3134302e31302e302f32332d3233203d3e20323636313534.roa (hash: rrVsA2HIlqQ6xlLCINbS199PbMpIhyvrNL7C/ue1Ru8=)
                          9: 323830343a336238343a383030303a3a2f33332d3333203d3e20323636313534.roa (hash: eXJWJ//Rzh95xhFl6+aRCdu+VwJ7IMcX+UtSClnkemQ=)
                          10: 3139322e3134302e382e302f32322d3232203d3e20323636313534.roa (hash: Y2+WYKJ+NtqxW6QMnZkwTlJV7xCaWrLMIvPlFzhxCSs=)
                          11: 323830343a336238343a313430303a3a2f34302d3430203d3e20323636313534.roa (hash: rUA3AqIR/ODenjA9UeqAXZB/TIOtCPNgb0snn0ZoLq8=)
                          12: 323830343a336238343a313330303a3a2f34302d3430203d3e20323636313534.roa (hash: bksj9cw9jLdDzlnfpFjaCdRc6zYenP24oS4iUJKjxT4=)
                          13: 323830343a336238343a3a2f33322d3332203d3e20323636313534.roa (hash: 0jbCLEWtU4JQbLChLBJtpT+qmyD7Y9C5KUgVubmOORE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/10B05660CB8C13B3B13E3B0810B278833D500547.crl
                          rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/10B05660CB8C13B3B13E3B0810B278833D500547.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10B05660CB8C13B3B13E3B0810B278833D500547.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Jan 2024 22:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:bc:f9:37:61:9b:b7:b3:f0:1b:4d:db:45:41:95:c2:ae:bd:05:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10B05660CB8C13B3B13E3B0810B278833D500547
        Validity
            Not Before: Jan  8 19:56:20 2024 GMT
            Not After : Jan  9 23:37:20 2024 GMT
        Subject: CN=C74AA4522DF05A498EE7735EF77592124FC37E41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6f:f9:50:07:73:26:fb:95:83:ae:96:c0:59:
                    32:ec:e0:d3:66:48:92:af:4d:e7:5a:88:0d:76:fd:
                    df:0f:db:87:3d:0e:c8:af:5a:95:1d:a1:14:3a:d2:
                    1e:ae:e3:3d:f7:9f:0f:14:3f:44:91:f5:1a:82:57:
                    2d:b9:0c:9c:f6:14:89:a2:ef:c1:29:c8:8f:01:b2:
                    fe:44:b4:4a:1f:45:a8:28:0a:92:50:03:de:1b:c9:
                    a9:72:84:67:7b:42:c1:74:c5:e4:7c:e5:d0:34:19:
                    a2:0d:64:b9:c3:6f:69:67:64:b4:fc:f3:0d:d2:8f:
                    e8:d9:44:5a:d6:9c:2c:58:1b:8d:b7:23:73:08:4d:
                    be:1e:01:4d:14:7c:47:0e:1c:bc:d6:3f:e4:6a:ca:
                    43:c3:39:07:d6:d5:53:30:b6:0b:3c:36:f9:80:15:
                    b9:db:39:72:68:26:e9:af:e9:ac:30:fe:92:b8:06:
                    61:59:ac:35:3d:8d:2b:ef:1a:8c:a5:45:12:3e:1b:
                    4f:e9:8a:1a:23:e3:9f:2f:d1:c5:fd:16:92:f6:ad:
                    b7:e9:87:5e:3b:75:90:e7:a7:32:bf:1a:b5:3c:59:
                    b0:2f:fd:68:fb:81:6b:9e:a1:4c:86:bc:bc:32:1e:
                    36:48:a4:e4:47:a6:0d:15:7d:4b:44:7e:69:2f:b1:
                    f6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4A:A4:52:2D:F0:5A:49:8E:E7:73:5E:F7:75:92:12:4F:C3:7E:41
            X509v3 Authority Key Identifier:
                keyid:10:B0:56:60:CB:8C:13:B3:B1:3E:3B:08:10:B2:78:83:3D:50:05:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/10B05660CB8C13B3B13E3B0810B278833D500547.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10B05660CB8C13B3B13E3B0810B278833D500547.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/10B05660CB8C13B3B13E3B0810B278833D500547.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:5f:cc:1c:03:9b:f7:73:c8:30:27:e4:a7:13:83:2a:11:a4:
         e1:f1:ae:f1:4b:e9:3f:9b:ba:60:db:e5:80:62:2e:4e:ed:86:
         5a:69:17:53:ce:5e:d8:6d:83:1d:f8:19:b1:80:da:63:99:0b:
         22:87:54:37:5f:26:b5:d1:2c:3d:e6:90:be:4e:d9:ca:cc:e0:
         6f:ff:3b:2f:d5:e4:a8:86:23:a8:06:f1:9f:c6:66:13:76:f4:
         e0:a6:d8:9a:42:ad:e9:e2:35:a2:49:82:21:c1:a3:36:88:f5:
         94:ab:81:bc:62:8d:e9:de:fc:36:48:35:23:22:e3:dd:18:dc:
         c6:a4:33:77:48:93:bc:d6:13:80:43:60:d9:0d:75:28:8e:72:
         b6:3e:55:6e:6c:ef:df:ce:db:60:dc:2d:c2:84:93:7e:df:ec:
         6d:3a:b4:55:fe:f6:af:5a:21:e4:70:7c:18:33:cc:20:e5:86:
         87:b1:73:9f:19:0c:3d:98:d2:91:a7:59:8a:70:62:a5:ad:7b:
         ad:ff:60:ab:36:86:3a:95:ad:46:9c:0e:62:79:06:38:fa:b5:
         64:81:cd:2f:8c:58:cc:21:bf:92:cc:33:26:29:5f:70:b7:99:
         1a:1b:e1:bc:00:07:87:f3:fb:a6:e7:ec:f3:58:85:51:32:8c:
         ac:95:cf:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFrz5N2Gbt7PwG03bRUGVwq69BbkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBCMDU2NjBDQjhDMTNCM0IxM0UzQjA4MTBCMjc4ODMz
RDUwMDU0NzAeFw0yNDAxMDgxOTU2MjBaFw0yNDAxMDkyMzM3MjBaMDMxMTAvBgNV
BAMTKEM3NEFBNDUyMkRGMDVBNDk4RUU3NzM1RUY3NzU5MjEyNEZDMzdFNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnb/lQB3Mm+5WDrpbAWTLs4NNm
SJKvTedaiA12/d8P24c9DsivWpUdoRQ60h6u4z33nw8UP0SR9RqCVy25DJz2FImi
78EpyI8Bsv5EtEofRagoCpJQA94byalyhGd7QsF0xeR85dA0GaINZLnDb2lnZLT8
8w3Sj+jZRFrWnCxYG423I3MITb4eAU0UfEcOHLzWP+RqykPDOQfW1VMwtgs8NvmA
FbnbOXJoJumv6aww/pK4BmFZrDU9jSvvGoylRRI+G0/pihoj458v0cX9FpL2rbfp
h147dZDnpzK/GrU8WbAv/Wj7gWueoUyGvLwyHjZIpORHpg0VfUtEfmkvsfZjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUx0qkUi3wWkmO53Ne93WSEk/DfkEwHwYDVR0j
BBgwFoAUELBWYMuME7OxPjsIELJ4gz1QBUcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNE16dFpSQVUyR1FyNGV6azhSODk4Z0YzYUZnbnBoQTlRc05LQWRDa0Z0
TWsvMC8xMEIwNTY2MENCOEMxM0IzQjEzRTNCMDgxMEIyNzg4MzNENTAwNTQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwQjA1NjYwQ0I4QzEzQjNC
MTNFM0IwODEwQjI3ODgzM0Q1MDA1NDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NE16dFpSQVUyR1FyNGV6azhSODk4Z0YzYUZnbnBoQTlRc05LQWRDa0Z0TWsvMC8x
MEIwNTY2MENCOEMxM0IzQjEzRTNCMDgxMEIyNzg4MzNENTAwNTQ3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAH1/MHAOb93PIMCfkpxODKhGk4fGu8UvpP5u6YNvlgGIuTu2GWmkXU85e2G2D
HfgZsYDaY5kLIodUN18mtdEsPeaQvk7Zyszgb/87L9XkqIYjqAbxn8ZmE3b04KbY
mkKt6eI1okmCIcGjNoj1lKuBvGKN6d78Nkg1IyLj3RjcxqQzd0iTvNYTgENg2Q11
KI5ytj5Vbmzv387bYNwtwoSTft/sbTq0Vf72r1oh5HB8GDPMIOWGh7FznxkMPZjS
kadZinBipa17rf9gqzaGOpWtRpwOYnkGOPq1ZIHNL4xYzCG/kswzJilfcLeZGhvh
vAAHh/P7pufs81iFUTKMrJXPHQ==
-----END CERTIFICATE-----
Generated at Mon Jan 8 21:28:51 2024 by rpki-client on console.sobornost.net