Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.mft
File:                     557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.mft (raw, json)
Hash identifier:          zqJtwDnTIHIDYtS7yoehfdsbN6H7Ose/NRkNX/pNzy8=
Subject key identifier:   78:E1:5F:BF:A0:79:13:CB:02:22:8F:4D:70:2D:43:CE:1E:3F:08:F9
Authority key identifier: 55:7B:9A:FE:2B:83:AC:C4:BF:FA:14:90:30:06:7D:9D:FC:5A:E3:1A
Certificate issuer:       /CN=557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A
Certificate serial:       5C80F7C07F845CFB554A8541930FD1449D41B225
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.mft
Manifest number:          66
Signing time:             Tue 09 Jan 2024 01:06:08 +0000
Manifest this update:     Tue 09 Jan 2024 01:01:08 +0000
Manifest next update:     Wed 10 Jan 2024 04:49:08 +0000
Files and hashes:         1: 323830343a376133633a383030303a3a2f33332d3333203d3e20323731333537.roa (hash: c54v2R7qNUcY5prJsEEVvT9l+Meb1lfuLUVNru6N2qM=)
                          2: 3137372e3132342e3130382e302f32332d3233203d3e20323731333537.roa (hash: pKsDr+Kuy5kVqzk7Einu8fV38ev4nAmlqfB5QJPC6Tc=)
                          3: 323830343a376133633a383030303a3a2f33342d3334203d3e20323731333537.roa (hash: OEpMtT7Kn7i3TiCEFD5rqCd7URwkTpCLV5QCGPjWw+c=)
                          4: 323830343a376133633a633030303a3a2f33342d3334203d3e20323731333537.roa (hash: SS0zYJmUeTVQz7z4n04rjm9z+dqQEF7b5bNPzvQcDIs=)
                          5: 3137372e3132342e3130392e302f32342d3234203d3e20323731333537.roa (hash: qvoD14qDS+daK1/flVGQenw6IlkAVT5oiqKJ8kCTo7s=)
                          6: 323830343a376133633a3a2f33342d3334203d3e20323731333537.roa (hash: MYt1tw4GL9m/0d28EYADvEOVeW2QZ0fondJItP0F8M0=)
                          7: 557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.crl (hash: hURceNr1R4PvZY1kKpKe82uXznnQAt4rQk/nJ2sld+A=)
                          8: 323830343a376133633a3a2f33332d3333203d3e20323731333537.roa (hash: 5xTespa153cVsttIMRk2PdIw5RiL++qRp0vCDGyhcq4=)
                          9: 3137372e3132342e3130382e302f32342d3234203d3e20323731333537.roa (hash: HD9qJRa7SEtsCaX4kb+nGe4Zb+OyOr6gIe3zV4h7fM8=)
                          10: 323830343a376133633a3a2f33322d3332203d3e20323731333537.roa (hash: B10XYhdYZBYxWoshaNJnRtu5fkoSz2wD+9scQkRHsx0=)
                          11: 323830343a376133633a343030303a3a2f33342d3334203d3e20323731333537.roa (hash: phHcaiyEIk2fmBnfZ4jUbkjLk8fFgqZYap8lI5w1O7I=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.crl
                          rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 01:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:80:f7:c0:7f:84:5c:fb:55:4a:85:41:93:0f:d1:44:9d:41:b2:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A
        Validity
            Not Before: Jan  9 01:01:08 2024 GMT
            Not After : Jan 10 04:49:08 2024 GMT
        Subject: CN=78E15FBFA07913CB02228F4D702D43CE1E3F08F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:12:e3:01:50:13:44:4a:20:90:46:80:fb:f8:
                    d7:d1:bb:38:70:7d:a0:6f:76:66:74:52:bd:f4:08:
                    1d:eb:0e:bb:53:48:f5:fa:9d:eb:fe:96:40:7d:6a:
                    c2:97:9c:99:10:9f:6f:19:9d:96:6e:7a:21:57:8c:
                    35:51:d2:f1:b4:a0:16:d7:d9:c4:f3:54:33:75:39:
                    aa:f4:70:c8:b1:5b:77:64:3f:02:1c:a4:d4:e4:ad:
                    17:3a:b1:d3:3f:dc:38:cd:80:92:6b:bc:0c:81:d8:
                    31:a4:03:24:0c:f2:e4:85:5c:43:4d:15:98:f1:da:
                    08:e3:c6:99:f5:03:d3:7e:14:ac:52:3a:40:15:37:
                    42:fa:3e:09:4b:9e:6d:cd:99:73:6b:f8:ac:5a:f2:
                    af:17:d0:67:1d:1d:0e:b7:fc:d6:15:5b:ac:92:a1:
                    0b:7b:90:b4:26:f7:2e:b5:0a:f6:7f:8a:a3:82:b6:
                    45:0b:36:84:74:62:d2:20:09:81:5a:b1:2f:1d:1b:
                    41:c7:02:68:0d:2c:bc:45:0c:3a:94:5e:a9:4e:db:
                    6a:35:78:74:a9:a5:0e:dd:51:e4:4f:57:c0:49:e7:
                    63:72:1a:41:a5:52:2d:b0:1c:1f:d4:98:3a:4a:c2:
                    39:af:24:aa:5e:ce:29:9a:71:c9:59:35:a1:1a:2d:
                    d0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E1:5F:BF:A0:79:13:CB:02:22:8F:4D:70:2D:43:CE:1E:3F:08:F9
            X509v3 Authority Key Identifier:
                keyid:55:7B:9A:FE:2B:83:AC:C4:BF:FA:14:90:30:06:7D:9D:FC:5A:E3:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:28:14:8e:cd:98:3f:43:35:24:a1:b3:09:f2:7f:73:f5:7f:
         99:e2:19:1a:9a:c7:23:82:79:47:84:d3:5e:87:56:28:e8:7d:
         76:ac:57:a1:1c:33:dd:c8:40:3e:61:0f:13:b8:fa:15:5c:c1:
         2f:04:57:cc:51:52:41:53:b2:f6:2a:c6:8f:6b:17:74:00:49:
         6f:10:33:2b:c3:85:0a:6f:32:90:1a:b7:41:cb:cd:ec:6c:4f:
         b7:7c:a8:be:21:29:8f:92:58:22:85:49:74:bf:7a:62:48:2e:
         92:2e:e8:e6:0e:d9:b6:92:d4:87:54:b8:f1:1b:a7:b6:c3:3a:
         d5:e9:04:0a:b7:4f:0b:80:0c:7f:a2:4f:d9:c0:26:6e:b6:82:
         20:31:3e:5e:a8:64:77:5a:ce:5a:3a:c2:80:0c:85:e9:4a:68:
         10:81:21:69:e1:5e:78:ac:3f:3a:a9:0a:78:a1:19:9c:15:e9:
         25:34:8c:ee:43:03:f8:64:e0:fc:a5:ef:a9:10:f0:33:e7:bb:
         c1:7b:05:e9:38:87:af:95:0b:84:ac:07:5e:74:e1:55:f0:1b:
         b4:78:24:95:a6:99:71:54:24:30:a3:3f:0d:da:0c:72:d5:0b:
         67:55:ee:e6:ae:3e:77:62:c6:6a:31:85:95:de:61:60:55:e4:
         3d:a5:82:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXID3wH+EXPtVSoVBkw/RRJ1BsiUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU3QjlBRkUyQjgzQUNDNEJGRkExNDkwMzAwNjdEOURG
QzVBRTMxQTAeFw0yNDAxMDkwMTAxMDhaFw0yNDAxMTAwNDQ5MDhaMDMxMTAvBgNV
BAMTKDc4RTE1RkJGQTA3OTEzQ0IwMjIyOEY0RDcwMkQ0M0NFMUUzRjA4RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2EuMBUBNESiCQRoD7+NfRuzhw
faBvdmZ0Ur30CB3rDrtTSPX6nev+lkB9asKXnJkQn28ZnZZueiFXjDVR0vG0oBbX
2cTzVDN1Oar0cMixW3dkPwIcpNTkrRc6sdM/3DjNgJJrvAyB2DGkAyQM8uSFXENN
FZjx2gjjxpn1A9N+FKxSOkAVN0L6PglLnm3NmXNr+Kxa8q8X0GcdHQ63/NYVW6yS
oQt7kLQm9y61CvZ/iqOCtkULNoR0YtIgCYFasS8dG0HHAmgNLLxFDDqUXqlO22o1
eHSppQ7dUeRPV8BJ52NyGkGlUi2wHB/UmDpKwjmvJKpezimacclZNaEaLdBjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUeOFfv6B5E8sCIo9NcC1Dzh4/CPkwHwYDVR0j
BBgwFoAUVXua/iuDrMS/+hSQMAZ9nfxa4xowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVUxQWNSeHFwbVZaalJnM3ZnU1V3NmVpV0pKYU50MTZldkVTdktEOWVi
U1EvMC81NTdCOUFGRTJCODNBQ0M0QkZGQTE0OTAzMDA2N0Q5REZDNUFFMzFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU1N0I5QUZFMkI4M0FDQzRC
RkZBMTQ5MDMwMDY3RDlERkM1QUUzMUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NVUxQWNSeHFwbVZaalJnM3ZnU1V3NmVpV0pKYU50MTZldkVTdktEOWViU1EvMC81
NTdCOUFGRTJCODNBQ0M0QkZGQTE0OTAzMDA2N0Q5REZDNUFFMzFBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvigUjs2YP0M1JKGzCfJ/c/V/meIZGprHI4J5R4TTXodWKOh9dqxXoRwz3chA
PmEPE7j6FVzBLwRXzFFSQVOy9irGj2sXdABJbxAzK8OFCm8ykBq3QcvN7GxPt3yo
viEpj5JYIoVJdL96Ykguki7o5g7ZtpLUh1S48RuntsM61ekECrdPC4AMf6JP2cAm
braCIDE+Xqhkd1rOWjrCgAyF6UpoEIEhaeFeeKw/OqkKeKEZnBXpJTSM7kMD+GTg
/KXvqRDwM+e7wXsF6TiHr5ULhKwHXnThVfAbtHgklaaZcVQkMKM/DdoMctULZ1Xu
5q4+d2LGajGFld5hYFXkPaWCAA==
-----END CERTIFICATE-----
Generated at Tue Jan 9 02:15:38 2024 by rpki-client on console.sobornost.net