Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/12EB79B26895FEA68CEF3BF4D6454B52AC2E2E0A.mft
File:                     12EB79B26895FEA68CEF3BF4D6454B52AC2E2E0A.mft (raw, json)
Hash identifier:          hcJYd5d81jU6uwgFW4AkoqrsyFTF3ULkVxfBIEyASuo=
Subject key identifier:   02:02:72:4F:22:2C:E8:B9:DE:2D:D4:35:5F:09:28:CC:46:AE:69:27
Authority key identifier: 12:EB:79:B2:68:95:FE:A6:8C:EF:3B:F4:D6:45:4B:52:AC:2E:2E:0A
Certificate issuer:       /CN=12EB79B26895FEA68CEF3BF4D6454B52AC2E2E0A
Certificate serial:       5843ACD0237C12171A9C52781086E671642D4129
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12EB79B26895FEA68CEF3BF4D6454B52AC2E2E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/12EB79B26895FEA68CEF3BF4D6454B52AC2E2E0A.mft
Manifest number:          0142
Signing time:             Tue 09 Jan 2024 09:38:38 +0000
Manifest this update:     Tue 09 Jan 2024 09:33:38 +0000
Manifest next update:     Wed 10 Jan 2024 11:43:38 +0000
Files and hashes:         1: 323830343a343532343a3a2f33322d3332203d3e20323637363735.roa (hash: YVT/HQJx9rZm1w4PSMnNMaZ4lbhOAs4IIhS0AF8q1Go=)
                          2: 34352e3232342e3233362e302f32322d3234203d3e20323637363735.roa (hash: icpujiuCkKLOHCfDinRV68lp0XdpNf0JffGBBBdAKcg=)
                          3: 12EB79B26895FEA68CEF3BF4D6454B52AC2E2E0A.crl (hash: 0ACoq7vrLQz2xqStdO7xK4QPdypKDSdXyvRejqHtpYY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/12EB79B26895FEA68CEF3BF4D6454B52AC2E2E0A.crl
                          rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/12EB79B26895FEA68CEF3BF4D6454B52AC2E2E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12EB79B26895FEA68CEF3BF4D6454B52AC2E2E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 11:43:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:43:ac:d0:23:7c:12:17:1a:9c:52:78:10:86:e6:71:64:2d:41:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12EB79B26895FEA68CEF3BF4D6454B52AC2E2E0A
        Validity
            Not Before: Jan  9 09:33:38 2024 GMT
            Not After : Jan 10 11:43:38 2024 GMT
        Subject: CN=0202724F222CE8B9DE2DD4355F0928CC46AE6927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9f:1f:20:af:9a:fd:47:dd:68:f3:02:74:a8:
                    84:15:bc:ae:e5:b9:6e:f6:d7:bf:b2:0a:86:74:2e:
                    51:d4:aa:95:98:3f:1f:5f:36:38:c6:57:30:0b:b9:
                    1c:00:62:42:b4:fc:ef:06:79:57:9d:38:35:20:36:
                    1c:cf:66:40:15:06:13:36:e7:9a:88:ff:b7:e9:cf:
                    c0:35:c9:a7:ae:f2:f4:09:ed:26:28:19:ca:97:2b:
                    0e:10:56:a8:c2:06:79:19:4a:92:d8:da:05:31:0b:
                    23:26:f9:ca:fd:0f:01:77:4f:96:78:f7:41:03:bd:
                    35:8e:b8:fc:8b:57:f5:4d:c0:ad:98:6f:a0:04:0a:
                    76:6c:b5:07:ff:84:07:c1:33:28:79:70:3e:3d:4a:
                    80:c9:b5:56:14:dc:e2:ed:36:0d:d6:6f:bb:38:20:
                    b8:dc:a9:65:c3:b9:6d:95:2a:c1:e5:11:c2:88:08:
                    80:43:a3:f9:1f:fa:27:38:f9:c3:56:df:ff:9c:6b:
                    15:af:8b:9c:09:32:74:f0:d2:b6:7e:92:f0:2b:c0:
                    33:50:ae:8e:91:76:f0:bf:6b:32:ba:ca:7b:7b:17:
                    5b:ab:eb:ff:b6:25:ad:d0:ca:01:f9:2d:d6:eb:bd:
                    33:61:8f:b5:0a:cd:77:dd:61:e2:71:00:c3:6c:75:
                    5e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:02:72:4F:22:2C:E8:B9:DE:2D:D4:35:5F:09:28:CC:46:AE:69:27
            X509v3 Authority Key Identifier:
                keyid:12:EB:79:B2:68:95:FE:A6:8C:EF:3B:F4:D6:45:4B:52:AC:2E:2E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/12EB79B26895FEA68CEF3BF4D6454B52AC2E2E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12EB79B26895FEA68CEF3BF4D6454B52AC2E2E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/12EB79B26895FEA68CEF3BF4D6454B52AC2E2E0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e5:db:e2:4c:eb:a5:ff:71:d9:63:03:f4:a8:76:02:b4:56:
         65:d9:2d:f3:37:98:17:19:77:db:7b:a2:e5:80:b6:3a:5c:95:
         2f:00:c5:9b:95:a6:46:fb:a6:e0:6e:d2:ed:4f:21:b0:3c:10:
         1f:fa:ad:4a:21:0d:6e:b5:c7:37:6f:ad:b0:44:d9:28:d5:96:
         0a:15:0b:0d:1e:f2:92:c0:19:6c:43:79:94:9c:c3:00:84:f0:
         98:78:2d:2d:a8:3e:aa:c0:41:68:66:a4:e7:da:a0:f3:13:75:
         52:14:cf:e5:15:3b:01:b1:72:d5:4e:da:41:79:c9:fe:eb:d5:
         92:81:5f:12:eb:a0:12:3c:04:82:9b:db:d1:0e:ac:bc:4b:9f:
         70:70:32:ad:14:5a:52:22:1f:0c:98:21:5e:83:83:eb:f4:10:
         0d:bd:72:48:5d:31:09:da:c0:ae:a3:b2:6f:9b:f5:28:88:ac:
         64:b6:a1:e6:b5:c3:36:32:62:38:e6:53:e2:97:09:1f:61:3c:
         6e:cc:ec:b0:f1:d3:2b:13:e1:65:4c:95:c2:07:ab:03:44:c5:
         c6:f8:4b:fa:c1:67:d6:81:29:39:ee:67:2c:5f:22:2b:0a:c7:
         c0:08:c8:d5:aa:31:8d:cf:b5:ed:a6:4e:a0:ff:0c:c2:11:d8:
         35:f2:b6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:38 2024 by rpki-client on console.sobornost.net