Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.mft
File:                     BFD60F81B153DBF24A19964DD2996A1F74DE57F7.mft (raw, json)
Hash identifier:          ctpBDK8fkY/dtZ7x+g+l6I8QtkyRTzmgTZevQQxWKjQ=
Subject key identifier:   CB:50:5F:D7:0B:57:DD:AB:B3:0E:0D:0E:81:8B:12:AE:52:87:43:D2
Authority key identifier: BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7
Certificate issuer:       /CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
Certificate serial:       0D8A8B00E4A6A12F611E666131C263C8C28D5122
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.mft
Manifest number:          5E
Signing time:             Mon 08 Jan 2024 23:11:06 +0000
Manifest this update:     Mon 08 Jan 2024 23:06:06 +0000
Manifest next update:     Wed 10 Jan 2024 03:07:06 +0000
Files and hashes:         1: 3136382e3139372e3133382e302f32332d3233203d3e203532383732.roa (hash: WUn4d03PO3SL7DcIFAg8jkgzuHLj1QikJwvbfhu7gq0=)
                          2: 3136382e302e3233362e302f32322d3232203d3e203532383732.roa (hash: f3ile6BZmIqWp+u54hXwsW2Ey4Uib+VUDOYYs0/zOXw=)
                          3: 3137372e3132382e3139322e302f32312d3234203d3e203532383732.roa (hash: SurjR/2QkDdQ5WYVurdVVUQWeyLMrr5uDpJ02aNtoOo=)
                          4: 3136382e3139372e3133372e302f32342d3234203d3e203532383732.roa (hash: QpBvoMeoqppruoqveXj+xa5ciNAhmTTFltDFPybNBpI=)
                          5: 3136382e3139372e3133362e302f32332d3233203d3e203532383732.roa (hash: uGA6SOcP4QOTroKjOFhjFKYUYzR6Z8IH3b31BqPCdfI=)
                          6: 323830343a3838633a383030303a3a2f33332d3333203d3e203532383732.roa (hash: Y0z+Gx9dmkwmb7DfcFBJAlNKcpqM8MOx/q8peqsfy/Y=)
                          7: 3136382e3139372e3133382e302f32342d3234203d3e203532383732.roa (hash: QkDqCXNn0y5LLYteNAzIRdRGm9u+foMA62rlgS9fzck=)
                          8: 323830343a3838633a3a2f33322d3332203d3e203532383732.roa (hash: I/0kY4dLAO7t5CHL6seAq/NZgx377wmA9tw76IrWAno=)
                          9: 3136382e3139372e3133392e302f32342d3234203d3e203532383732.roa (hash: GGYUhlP42Mz+dG39Paq0lwnQVHRAqOBs70j3E/DzaGo=)
                          10: 3136382e3139372e3133362e302f32342d3234203d3e203532383732.roa (hash: HREX7PaDNhDXp+xmqsvF7fT8F9sxmxk+8P+25525y1o=)
                          11: BFD60F81B153DBF24A19964DD2996A1F74DE57F7.crl (hash: ukJDYtFuucCPwfJ24ievDnFHW9BwBezppUdhW7mIeSU=)
                          12: 3136382e302e3233392e302f32342d3234203d3e203532383732.roa (hash: 0POEL7qUix+llV82RZ3StKmQwACRHQOILc9Qd15gFSs=)
                          13: 323830343a3838633a3a2f33332d3333203d3e203532383732.roa (hash: P7vQD3CmhhFD4GjPfZo6KoVQZ/eTqPdZ4puFySsjukc=)
                          14: 3136382e3139372e3133362e302f32322d3232203d3e203532383732.roa (hash: 3nrZTK0yVcetcZTIOD//Ouf4RbHKpx39vFzYxAf8VAM=)
                          15: 3136382e302e3233382e302f32332d3233203d3e203532383732.roa (hash: CPEEUDbR82ExqxXCTSZ2/PNDYUDDQu7pxVLGWyRWsLE=)
                          16: 3136382e302e3233362e302f32332d3233203d3e203532383732.roa (hash: qSlI9uOqqJCW0gFRM8o57WG4jOxpTvhOxe1KixgLtBk=)
                          17: 3136382e302e3233382e302f32342d3234203d3e203532383732.roa (hash: yPEJNgXrQqmWX5LROQbcsn8fEJoT9wck+ZuqiyWQCyY=)
                          18: 3136382e302e3233362e302f32342d3234203d3e203532383732.roa (hash: pcFy9gzCAu9jpFqKEBqDb+uR8cLi3sCGc/Togzq9w1c=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.crl
                          rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Jan 2024 23:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8a:8b:00:e4:a6:a1:2f:61:1e:66:61:31:c2:63:c8:c2:8d:51:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
        Validity
            Not Before: Jan  8 23:06:06 2024 GMT
            Not After : Jan 10 03:07:06 2024 GMT
        Subject: CN=CB505FD70B57DDABB30E0D0E818B12AE528743D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:6c:4f:44:3a:09:a9:62:df:18:d1:7f:51:
                    cc:d7:61:81:f5:15:dd:df:4f:73:34:a5:68:b2:3f:
                    e0:a0:a5:4d:9d:4e:35:cb:09:4a:8c:8f:d4:2c:c8:
                    b1:3b:5c:c6:3d:88:d6:c7:46:8f:82:44:de:41:37:
                    54:a8:3f:ff:53:9a:7c:21:ea:a2:00:54:d3:bf:55:
                    ec:47:1f:0e:fd:62:23:ec:99:c7:b5:ca:d1:aa:3c:
                    55:ac:ee:de:f6:3e:7b:90:ae:c0:49:22:9c:cf:9f:
                    0f:10:e6:c9:2d:53:53:68:dc:f1:fe:28:b5:09:10:
                    e4:f3:1c:1e:2e:b7:53:03:e7:27:cd:69:9f:4e:de:
                    ac:2a:aa:92:82:36:05:06:d8:97:59:55:2e:93:0f:
                    bb:1f:bc:b0:77:8b:d9:a4:a1:74:8f:07:c2:c7:07:
                    eb:af:06:7e:49:9f:e8:05:be:73:62:23:a1:08:ac:
                    3f:37:81:ce:c5:2e:43:18:52:ae:b0:92:b5:ce:d0:
                    f0:ea:fb:af:4e:5d:d2:15:e9:05:84:76:ab:22:30:
                    95:35:90:4c:c0:ec:6b:46:01:a9:fc:eb:3a:48:8d:
                    5e:72:fd:c3:cf:db:7c:6f:1b:d6:d0:f4:2b:b4:e8:
                    88:53:0e:c2:4e:29:3f:dd:29:83:d3:7b:71:39:59:
                    a8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:50:5F:D7:0B:57:DD:AB:B3:0E:0D:0E:81:8B:12:AE:52:87:43:D2
            X509v3 Authority Key Identifier:
                keyid:BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:96:53:89:08:e7:cd:ba:be:20:f3:1d:6f:5c:16:1f:ac:c5:
         be:cd:a0:9e:44:8d:f3:5c:f4:40:2c:03:89:62:5c:bd:11:d4:
         07:5e:19:96:46:13:e8:54:bd:24:10:cf:c9:19:b1:c9:a0:f7:
         dd:98:23:67:9a:56:59:ea:29:69:94:cb:67:b4:be:5f:18:12:
         a6:39:93:d4:b5:11:05:07:4e:1f:ae:9a:e2:63:54:b2:8c:cb:
         5f:bc:a6:17:b2:94:4b:49:06:65:fe:a8:2a:70:ea:a5:e1:87:
         7c:57:2d:ab:14:d6:a6:91:8c:eb:50:32:4f:9f:00:e7:a7:cd:
         9d:10:0f:d6:4d:81:a3:14:5e:bf:9b:7f:e5:a3:f8:b2:54:a6:
         2a:96:36:dd:3e:fa:45:e0:76:12:80:b6:a0:73:a5:94:d6:c2:
         8c:2a:a8:7c:61:27:ab:6a:34:2a:00:ae:3f:33:d1:b7:9d:7d:
         14:b3:74:2e:3f:bf:c7:ab:60:e9:0a:e3:ac:11:e0:38:06:dc:
         c5:d8:78:2b:07:f6:2b:09:b7:64:02:30:88:eb:83:06:ac:fd:
         62:09:f1:de:74:a2:ab:53:ce:b0:a0:40:65:3e:96:94:f1:56:
         93:de:57:74:6a:43:85:d0:32:24:8e:bc:0a:c7:93:de:31:72:
         d5:0f:9f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 00:20:52 2024 by rpki-client on console.sobornost.net