Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/EE2CA5226BA54EB97440397DC62AB9F75B58FA95.mft
File:                     EE2CA5226BA54EB97440397DC62AB9F75B58FA95.mft (raw, json)
Hash identifier:          T0hOgBE6mSsNGGKkX0kII7s7r8U2tMSnEfozSbkWRwQ=
Subject key identifier:   EA:15:B7:98:EB:10:13:CF:A0:AE:C0:AB:69:FA:C0:1F:B3:22:A5:98
Authority key identifier: EE:2C:A5:22:6B:A5:4E:B9:74:40:39:7D:C6:2A:B9:F7:5B:58:FA:95
Certificate issuer:       /CN=EE2CA5226BA54EB97440397DC62AB9F75B58FA95
Certificate serial:       4ABDA1284BE9F1C3B18394AC7C267EF2BD4428ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE2CA5226BA54EB97440397DC62AB9F75B58FA95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/EE2CA5226BA54EB97440397DC62AB9F75B58FA95.mft
Manifest number:          2F
Signing time:             Mon 08 Jan 2024 23:41:33 +0000
Manifest this update:     Mon 08 Jan 2024 23:36:33 +0000
Manifest next update:     Tue 09 Jan 2024 23:50:33 +0000
Files and hashes:         1: 3137372e34342e302e302f31372d3235203d3e203238323032.roa (hash: RBJGpcti0WAo+WtYaOq/4APiNp7QmXie/8HyZlziekQ=)
                          2: 3137392e3138392e3136302e302f31392d3235203d3e203238323032.roa (hash: b0IyIbcr736btGqjMKERR9az/afGNTdBlSKoC1TnYHw=)
                          3: 3137372e3133302e3132382e302f31392d3235203d3e203238323032.roa (hash: SO+enbarQI7WCsxu2e4ETgEu5nxWjiqt7pmLQIZTcUc=)
                          4: 3138372e34342e302e302f31382d3235203d3e203238323032.roa (hash: GucNk6V8VJStyiuFOeq23ttrUoD+NlH2OUIpFk8kc1c=)
                          5: 3138392e39312e302e302f31392d3235203d3e203238323032.roa (hash: sSAj9oXiseN54SGBP9GeXPr55ic4nrXFeVwOqQcokwA=)
                          6: 3138372e3132302e36342e302f31382d3235203d3e203238323032.roa (hash: D9MO4RkFtdIQITor0qOkosOihOIBPWj1XpwbmyZl03Q=)
                          7: 3139312e35332e302e302f31362d3235203d3e203238323032.roa (hash: jB9O+X5GkGNES1ur4A3Q+/z18oidoCnWztUC4Gyb1gs=)
                          8: EE2CA5226BA54EB97440397DC62AB9F75B58FA95.crl (hash: Jl5RA94EMV05RIBPvtJpIv2FHaO65yMEbfc1pFEKu9A=)
                          9: 3137372e3133302e3136302e302f31392d3235203d3e203238323032.roa (hash: V7j5of9xK+Msy4kI1pJfN4mcL6yjdnLBq4S1+FZpkbk=)
                          10: 323830343a3837633a3a2f33322d3438203d3e203238323032.roa (hash: CxZxc5iLPrqxS2jCTZ4mj7/MO/VQTdB+0J01UkmJiwY=)
                          11: 3139312e3234302e302e302f31372d3235203d3e203238323032.roa (hash: /aqGO61LNTWv0h0M/dNyor0qrrtWCDwxA4sE1I2lR/Q=)
                          12: 3138362e3231362e36342e302f31382d3235203d3e203238323032.roa (hash: EM025fppAPIhNhJpEZ23pQQwVdiCm08wKcuCHaS6rg8=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/EE2CA5226BA54EB97440397DC62AB9F75B58FA95.crl
                          rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/EE2CA5226BA54EB97440397DC62AB9F75B58FA95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE2CA5226BA54EB97440397DC62AB9F75B58FA95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Jan 2024 23:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:bd:a1:28:4b:e9:f1:c3:b1:83:94:ac:7c:26:7e:f2:bd:44:28:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE2CA5226BA54EB97440397DC62AB9F75B58FA95
        Validity
            Not Before: Jan  8 23:36:33 2024 GMT
            Not After : Jan  9 23:50:33 2024 GMT
        Subject: CN=EA15B798EB1013CFA0AEC0AB69FAC01FB322A598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:65:33:4c:2d:64:27:14:57:c6:d7:01:78:62:
                    82:90:ba:35:93:36:cc:15:7f:8d:73:6a:85:c0:33:
                    64:f7:2c:31:e3:d8:c9:41:c1:32:03:18:14:4d:91:
                    47:08:6c:c7:07:9f:1c:fc:fe:e8:00:28:eb:55:e9:
                    c3:78:5d:4e:07:e4:fe:c8:e1:ff:22:3d:79:aa:1a:
                    2a:f8:39:bd:ff:7b:eb:e4:89:f6:c7:fd:56:b9:46:
                    4c:44:ac:96:67:8a:57:75:43:af:21:7a:84:de:3e:
                    05:6b:fc:e6:27:1f:27:d1:25:5f:1d:04:a8:17:6c:
                    9a:da:74:e2:8d:7c:9f:43:37:7a:71:89:34:bc:03:
                    05:f0:b2:a6:fa:a0:01:23:67:61:67:37:22:8e:ed:
                    a1:ec:49:04:f4:94:0c:c0:ef:ee:e9:f1:78:e7:a4:
                    2c:1d:14:11:16:f5:ee:40:81:41:0b:7d:92:79:fa:
                    2c:23:ab:63:45:69:95:97:ac:67:3c:8e:be:d6:86:
                    15:05:c6:d5:a8:34:c3:f2:08:b9:58:f9:97:b1:55:
                    b3:03:e5:2c:37:f7:34:34:c0:8b:49:10:7e:de:ee:
                    c8:3d:b1:0a:e2:5e:f5:c6:f4:e1:d7:94:c9:82:05:
                    df:ec:3a:55:9f:57:9a:a6:02:9a:bb:0a:e5:13:b1:
                    e4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:15:B7:98:EB:10:13:CF:A0:AE:C0:AB:69:FA:C0:1F:B3:22:A5:98
            X509v3 Authority Key Identifier:
                keyid:EE:2C:A5:22:6B:A5:4E:B9:74:40:39:7D:C6:2A:B9:F7:5B:58:FA:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/EE2CA5226BA54EB97440397DC62AB9F75B58FA95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE2CA5226BA54EB97440397DC62AB9F75B58FA95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/EE2CA5226BA54EB97440397DC62AB9F75B58FA95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:46:29:5a:60:42:a3:12:f5:86:9a:c7:b6:ef:21:6f:cc:c9:
         76:99:3a:5d:0f:59:7c:00:e8:8c:76:d6:8f:09:2d:15:31:e3:
         db:fc:d0:a5:58:6a:39:23:36:d7:51:d2:15:30:8b:b3:1c:8b:
         46:44:6f:0b:b8:b9:54:9b:1b:f2:4c:36:b2:83:f2:c8:13:b0:
         61:d0:1f:b7:db:28:12:85:06:e7:74:89:90:fe:93:b3:84:37:
         49:0e:4b:f7:ac:ec:fe:63:d7:b7:9d:9d:ec:84:2f:ed:2e:72:
         71:1d:ec:0a:24:78:9d:c3:af:1d:f7:64:0d:3b:43:d8:56:98:
         cf:ea:fa:eb:15:04:f2:a9:1a:78:20:40:1d:e1:5d:51:56:c0:
         9b:3a:4d:b8:12:d2:8e:5e:fd:38:bf:77:bc:ad:7f:e5:a2:9f:
         59:15:7d:dc:bc:8e:41:46:79:ad:16:0e:5f:ac:0b:55:05:a9:
         14:30:4b:dd:63:72:e3:da:14:44:97:86:a2:a6:0c:85:e8:19:
         ec:44:fa:20:3c:ab:51:b3:0a:0d:0f:63:c2:bd:bc:72:70:7a:
         8a:05:91:16:05:a2:b9:68:95:66:84:1e:2e:85:57:40:aa:c7:
         28:de:29:fa:6d:11:db:fe:55:af:f3:6d:e8:05:43:87:48:aa:
         e8:32:2b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 02:15:35 2024 by rpki-client on console.sobornost.net