Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/794ABB590E08053920E07BE29B54C6B3636F3107.mft
File:                     794ABB590E08053920E07BE29B54C6B3636F3107.mft (raw, json)
Hash identifier:          ZLJsg1rQZQAEPyGNrPhm8EJW/O0hYsiwUqfAJulJB+o=
Subject key identifier:   47:B7:18:DF:3D:57:21:B6:25:49:B2:DE:BF:36:5F:13:75:67:7D:B5
Authority key identifier: 79:4A:BB:59:0E:08:05:39:20:E0:7B:E2:9B:54:C6:B3:63:6F:31:07
Certificate issuer:       /CN=794ABB590E08053920E07BE29B54C6B3636F3107
Certificate serial:       313640DFA2FB5F4BCD23E531A14F35016CD10D98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/794ABB590E08053920E07BE29B54C6B3636F3107.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/794ABB590E08053920E07BE29B54C6B3636F3107.mft
Manifest number:          0216
Signing time:             Tue 09 Jan 2024 02:28:17 +0000
Manifest this update:     Tue 09 Jan 2024 02:23:17 +0000
Manifest next update:     Wed 10 Jan 2024 04:22:17 +0000
Files and hashes:         1: 34352e3137352e31322e302f32322d3234203d3e20323638383734.roa (hash: CLE0j11iKP5l1J3iCywhfzJ5+p3z5u7WiYFr+h9rsao=)
                          2: 323830343a356265303a3a2f33322d3335203d3e20323638383734.roa (hash: e6wdp7jkWelfaXAz//nQDbDvMymVDdCJtIGjtPok2DQ=)
                          3: 794ABB590E08053920E07BE29B54C6B3636F3107.crl (hash: Da/jt6MDfOM97GLIlWbZN11SdusU4EcobimXFMHZcIA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/794ABB590E08053920E07BE29B54C6B3636F3107.crl
                          rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/794ABB590E08053920E07BE29B54C6B3636F3107.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/794ABB590E08053920E07BE29B54C6B3636F3107.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 04:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:36:40:df:a2:fb:5f:4b:cd:23:e5:31:a1:4f:35:01:6c:d1:0d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794ABB590E08053920E07BE29B54C6B3636F3107
        Validity
            Not Before: Jan  9 02:23:17 2024 GMT
            Not After : Jan 10 04:22:17 2024 GMT
        Subject: CN=47B718DF3D5721B62549B2DEBF365F1375677DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:59:14:3c:77:7d:f8:ca:9d:3f:ea:81:26:e3:
                    38:14:11:51:27:33:40:78:f1:47:12:ff:1e:7e:11:
                    af:e8:f1:4b:3f:e6:d1:02:7e:6a:9c:92:cc:2b:a4:
                    75:ce:21:95:41:2a:ac:c5:f0:d3:8d:6b:e8:76:a2:
                    d5:e8:14:4e:88:0f:4c:23:67:b5:fc:42:62:aa:46:
                    1c:82:8e:d0:5e:6b:00:ba:a7:58:57:28:98:f7:d3:
                    8e:47:e7:4c:b7:ba:e4:39:7a:fa:49:2e:f8:1d:ce:
                    c2:da:6e:d5:2d:b8:08:0c:e9:f4:57:6a:05:dc:4c:
                    dc:b4:02:fc:78:bf:3d:89:8b:84:7e:b0:ef:cf:da:
                    55:f7:72:0b:a8:63:82:3b:32:9a:da:4f:68:31:45:
                    e4:8c:70:b7:ac:53:6d:79:7d:9d:dc:38:be:07:3e:
                    93:92:d8:c7:5b:3f:be:fa:b8:25:cf:8e:82:41:92:
                    b7:21:8f:3a:90:1c:15:a8:39:89:7d:4b:0c:c5:d5:
                    8f:29:a7:76:72:ad:0b:69:f5:ab:37:77:5e:80:00:
                    4f:2e:26:03:06:f2:d9:b0:6f:ae:3b:c8:3e:26:2c:
                    8b:17:db:f6:4a:ea:09:c1:a0:b7:e7:2e:1a:ca:83:
                    e4:ea:44:1c:2c:25:34:c7:fd:d9:18:95:86:65:58:
                    f8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B7:18:DF:3D:57:21:B6:25:49:B2:DE:BF:36:5F:13:75:67:7D:B5
            X509v3 Authority Key Identifier:
                keyid:79:4A:BB:59:0E:08:05:39:20:E0:7B:E2:9B:54:C6:B3:63:6F:31:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/794ABB590E08053920E07BE29B54C6B3636F3107.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/794ABB590E08053920E07BE29B54C6B3636F3107.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/794ABB590E08053920E07BE29B54C6B3636F3107.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:22:5e:0d:cd:04:47:7c:62:87:ce:66:55:04:18:b0:73:08:
         75:0e:3a:63:37:0f:3d:96:d6:74:4a:52:30:72:8f:83:93:ed:
         70:46:0a:ac:a9:c5:a1:09:23:bd:0b:2b:4e:b9:39:c6:3c:18:
         a1:69:98:fd:ac:1e:0f:cc:e2:4b:69:a1:b0:61:07:c2:2c:a2:
         38:c3:6e:4d:c6:6a:e6:db:54:09:d2:6e:95:af:08:f2:cb:d9:
         8c:71:26:eb:f5:f9:ea:2d:bf:c3:c9:df:dc:1e:c3:6b:26:42:
         58:d5:6e:6c:4a:9b:57:1e:83:41:6a:61:8d:17:3d:90:09:d7:
         3c:03:ca:0d:ec:6b:d2:0d:ba:1a:23:66:5a:22:03:45:7c:4b:
         f3:d0:21:63:58:b9:60:f7:6a:b8:b4:58:d0:5f:32:87:35:a9:
         ad:86:3d:66:b3:74:99:1d:b0:e6:a0:82:87:49:56:57:56:35:
         b9:33:be:d6:27:a3:97:14:4e:e6:80:a2:ac:ac:dd:e3:11:25:
         d7:49:c0:6d:93:10:1d:5b:f8:2c:27:2c:2e:6f:42:ab:9e:46:
         d2:42:de:59:1d:da:b3:47:07:3a:00:ed:a1:6c:1b:4f:75:89:
         0f:fb:f7:06:41:ac:68:57:50:16:8e:3a:6c:f4:2d:a7:e0:35:
         3a:57:3a:87
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMTZA36L7X0vNI+UxoU81AWzRDZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk0QUJCNTkwRTA4MDUzOTIwRTA3QkUyOUI1NEM2QjM2
MzZGMzEwNzAeFw0yNDAxMDkwMjIzMTdaFw0yNDAxMTAwNDIyMTdaMDMxMTAvBgNV
BAMTKDQ3QjcxOERGM0Q1NzIxQjYyNTQ5QjJERUJGMzY1RjEzNzU2NzdEQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOWRQ8d334yp0/6oEm4zgUEVEn
M0B48UcS/x5+Ea/o8Us/5tECfmqckswrpHXOIZVBKqzF8NONa+h2otXoFE6ID0wj
Z7X8QmKqRhyCjtBeawC6p1hXKJj3045H50y3uuQ5evpJLvgdzsLabtUtuAgM6fRX
agXcTNy0Avx4vz2Ji4R+sO/P2lX3cguoY4I7MpraT2gxReSMcLesU215fZ3cOL4H
PpOS2MdbP776uCXPjoJBkrchjzqQHBWoOYl9SwzF1Y8pp3ZyrQtp9as3d16AAE8u
JgMG8tmwb647yD4mLIsX2/ZK6gnBoLfnLhrKg+TqRBwsJTTH/dkYlYZlWPjLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUR7cY3z1XIbYlSbLevzZfE3VnfbUwHwYDVR0j
BBgwFoAUeUq7WQ4IBTkg4Hvim1TGs2NvMQcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGprUGNSbXhITW9vbTk2Z21hTldZUUp2MUxoMlBRaFl2V2VNVjIyWVhj
aTQvMC83OTRBQkI1OTBFMDgwNTM5MjBFMDdCRTI5QjU0QzZCMzYzNkYzMTA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc5NEFCQjU5MEUwODA1Mzky
MEUwN0JFMjlCNTRDNkIzNjM2RjMxMDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NGprUGNSbXhITW9vbTk2Z21hTldZUUp2MUxoMlBRaFl2V2VNVjIyWVhjaTQvMC83
OTRBQkI1OTBFMDgwNTM5MjBFMDdCRTI5QjU0QzZCMzYzNkYzMTA3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqiJeDc0ER3xih85mVQQYsHMIdQ46YzcPPZbWdEpSMHKPg5PtcEYKrKnFoQkj
vQsrTrk5xjwYoWmY/aweD8ziS2mhsGEHwiyiOMNuTcZq5ttUCdJula8I8svZjHEm
6/X56i2/w8nf3B7DayZCWNVubEqbVx6DQWphjRc9kAnXPAPKDexr0g26GiNmWiID
RXxL89AhY1i5YPdquLRY0F8yhzWprYY9ZrN0mR2w5qCCh0lWV1Y1uTO+1iejlxRO
5oCirKzd4xEl10nAbZMQHVv4LCcsLm9Cq55G0kLeWR3as0cHOgDtoWwbT3WJD/v3
BkGsaFdQFo46bPQtp+A1Olc6hw==
-----END CERTIFICATE-----
Generated at Tue Jan 9 03:48:55 2024 by rpki-client on console.sobornost.net