Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/4F5EDED3C202280D5CAC67446904FA39A6C921EA.mft
File:                     4F5EDED3C202280D5CAC67446904FA39A6C921EA.mft (raw, json)
Hash identifier:          Xf/O7igQiNIqCHgdC4ObZ7lJFWpTG6XkIKhpm/ldmcs=
Subject key identifier:   A2:34:88:D3:58:29:D9:E8:53:C4:C3:92:29:69:53:FF:66:CA:78:29
Authority key identifier: 4F:5E:DE:D3:C2:02:28:0D:5C:AC:67:44:69:04:FA:39:A6:C9:21:EA
Certificate issuer:       /CN=4F5EDED3C202280D5CAC67446904FA39A6C921EA
Certificate serial:       6CF0F8A5EA280B9B38AC4409B7D7A454E4DF7287
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F5EDED3C202280D5CAC67446904FA39A6C921EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/4F5EDED3C202280D5CAC67446904FA39A6C921EA.mft
Manifest number:          02CE
Signing time:             Tue 09 Jan 2024 14:08:00 +0000
Manifest this update:     Tue 09 Jan 2024 14:03:00 +0000
Manifest next update:     Wed 10 Jan 2024 14:08:00 +0000
Files and hashes:         1: 34352e3233332e382e302f32322d3234203d3e20323637323836.roa (hash: qiRYqVZrIfU7DPGk2rFiIEgb1xMMeGd+N0box+V0uwk=)
                          2: 323830343a346232343a3a2f33322d3438203d3e20323637323836.roa (hash: nl1umktWv2Ag5YqbNYOqsBEKzLTLtb1f2qNWfm+FZM0=)
                          3: 4F5EDED3C202280D5CAC67446904FA39A6C921EA.crl (hash: WyF5Njtz0WhKdecTawWXMEcdy8dOVben1IwtTxz4d0E=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/4F5EDED3C202280D5CAC67446904FA39A6C921EA.crl
                          rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/4F5EDED3C202280D5CAC67446904FA39A6C921EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F5EDED3C202280D5CAC67446904FA39A6C921EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 14:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f0:f8:a5:ea:28:0b:9b:38:ac:44:09:b7:d7:a4:54:e4:df:72:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F5EDED3C202280D5CAC67446904FA39A6C921EA
        Validity
            Not Before: Jan  9 14:03:00 2024 GMT
            Not After : Jan 16 14:08:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e2:d6:49:b9:f0:e9:05:ca:3c:77:c3:85:ba:
                    6b:9e:9b:bd:31:05:c9:52:2d:2b:fa:16:fb:ee:72:
                    5d:49:fb:ea:ec:ac:34:e5:13:b8:67:7e:85:60:31:
                    15:1f:51:93:42:55:f5:b1:86:38:5b:c5:a3:60:a0:
                    79:47:55:db:d2:cc:41:bf:43:d4:db:4b:e1:16:40:
                    c0:de:89:34:9e:3b:96:57:19:2a:05:10:7d:30:9d:
                    aa:0c:74:17:91:6d:7d:56:bc:43:ef:c2:4a:e9:0d:
                    a5:44:ca:da:8d:98:4a:76:e1:63:d7:e4:7f:a3:28:
                    37:9b:66:9d:72:6e:8e:8c:a4:2d:62:d2:3c:80:7f:
                    5f:e3:77:a5:93:ff:dd:c8:a3:e9:8a:4f:2e:f2:97:
                    aa:46:39:fd:8d:e2:a1:1e:6f:67:f7:5e:bc:bc:26:
                    f4:a9:6a:26:d1:f9:f2:96:5b:07:f6:8f:fc:98:1f:
                    78:33:f2:ad:da:b3:94:49:dd:2c:42:38:66:05:54:
                    96:1a:7f:2d:d7:60:55:cd:e4:b1:ad:6d:c3:73:7d:
                    88:0a:c5:b9:b7:10:79:3e:ab:d0:4b:ff:9b:bb:b2:
                    ed:24:4b:30:96:3b:5d:71:c8:a0:1e:b1:e6:f6:88:
                    e2:d8:16:d0:78:98:0a:e7:74:ef:e7:76:46:40:3e:
                    d3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:34:88:D3:58:29:D9:E8:53:C4:C3:92:29:69:53:FF:66:CA:78:29
            X509v3 Authority Key Identifier:
                keyid:4F:5E:DE:D3:C2:02:28:0D:5C:AC:67:44:69:04:FA:39:A6:C9:21:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/4F5EDED3C202280D5CAC67446904FA39A6C921EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F5EDED3C202280D5CAC67446904FA39A6C921EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/4F5EDED3C202280D5CAC67446904FA39A6C921EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:79:dc:48:15:cf:44:6f:c0:87:0a:59:cd:d1:a8:cc:79:84:
         57:e7:d0:04:d8:25:86:96:7b:b2:8e:92:5e:b5:04:67:3a:10:
         98:73:db:a7:e7:7f:0c:14:43:81:ee:16:28:42:78:0c:ec:aa:
         e5:78:ca:23:e7:50:03:67:19:6e:c5:ff:cf:66:12:14:09:4d:
         70:19:01:bd:1a:d0:69:6d:0d:db:1c:23:68:1a:21:90:b6:68:
         b1:f5:e7:2a:f4:2f:65:4a:25:68:d3:9b:b4:db:b7:f5:64:ae:
         d1:ce:02:bb:0f:1b:03:71:3b:dd:6d:3e:28:a0:86:e8:d1:1f:
         b4:3a:14:84:22:9f:40:35:7f:c6:79:5c:41:66:d5:a0:00:14:
         79:3d:ad:60:62:62:1e:0c:82:52:b1:35:04:89:f7:9b:32:72:
         ba:7b:9e:39:a0:e1:9d:ae:12:62:d9:d9:ff:4e:f0:c8:1c:ce:
         2d:88:6c:c9:3f:7a:b4:dc:74:3b:a8:8f:ea:6b:54:7a:e7:79:
         d5:8a:01:be:8b:f7:ad:00:63:13:b3:8b:7b:69:c2:ff:cb:3d:
         b9:f5:b9:4c:50:20:50:da:bf:f1:5b:67:71:93:ff:59:25:ca:
         57:1c:7f:9b:68:9e:21:3d:59:41:e7:a7:78:dd:a2:a7:af:65:
         fc:b2:a6:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:13 2024 by rpki-client on console.sobornost.net