Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/9DAA10BB10976AC731B8667502BCFA1E45BD5CCE.mft
File:                     9DAA10BB10976AC731B8667502BCFA1E45BD5CCE.mft (raw, json)
Hash identifier:          1KYNwYWQz6MbGsrnaVXrCg6ishSZAQpF7T60+9VLrv0=
Subject key identifier:   62:7E:3B:25:9E:00:3E:45:B3:0F:1E:A4:34:48:22:2F:00:DB:7D:11
Authority key identifier: 9D:AA:10:BB:10:97:6A:C7:31:B8:66:75:02:BC:FA:1E:45:BD:5C:CE
Certificate issuer:       /CN=9DAA10BB10976AC731B8667502BCFA1E45BD5CCE
Certificate serial:       3DE273760D29B2A2295635801D0E9A9A148FECC9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DAA10BB10976AC731B8667502BCFA1E45BD5CCE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/9DAA10BB10976AC731B8667502BCFA1E45BD5CCE.mft
Manifest number:          01EE
Signing time:             Tue 09 Jan 2024 06:59:15 +0000
Manifest this update:     Tue 09 Jan 2024 06:54:15 +0000
Manifest next update:     Wed 10 Jan 2024 07:13:15 +0000
Files and hashes:         1: 9DAA10BB10976AC731B8667502BCFA1E45BD5CCE.crl (hash: FAuXcvJX02tmNiNq81zfo6ceA1WRs8iYYUm4K1Id4YQ=)
                          2: 323830343a333464633a3a2f33322d3335203d3e20323635343835.roa (hash: wfK2qfZvISdwAOVsx5pMKtdVSMl8aPFC6/Wu5NQCROk=)
                          3: 3136382e3139372e3135362e302f32322d3234203d3e20323635343835.roa (hash: /UkwCTrVuFdXqNfMIZwP/JqzNzxVCX1Af2Tt3JSVZUE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/9DAA10BB10976AC731B8667502BCFA1E45BD5CCE.crl
                          rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/9DAA10BB10976AC731B8667502BCFA1E45BD5CCE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DAA10BB10976AC731B8667502BCFA1E45BD5CCE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 07:13:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e2:73:76:0d:29:b2:a2:29:56:35:80:1d:0e:9a:9a:14:8f:ec:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DAA10BB10976AC731B8667502BCFA1E45BD5CCE
        Validity
            Not Before: Jan  9 06:54:15 2024 GMT
            Not After : Jan 10 07:13:15 2024 GMT
        Subject: CN=627E3B259E003E45B30F1EA43448222F00DB7D11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f8:a1:4c:d6:51:45:10:16:16:47:8c:df:21:
                    a4:bf:3a:a7:b6:09:f1:ca:27:d5:2f:93:b9:0f:bb:
                    31:e6:07:60:1d:41:ee:44:bf:37:d9:bd:2c:e4:ca:
                    34:1e:36:61:80:f3:67:71:91:c4:35:51:f2:53:c7:
                    d8:41:60:d8:56:70:47:ef:a2:c9:5f:18:03:8b:36:
                    49:b8:5c:2c:98:20:cf:1f:60:9e:d0:3e:ae:7f:0f:
                    a0:ec:0a:98:28:c0:cb:ed:c1:2e:77:5d:a8:de:f9:
                    e4:38:69:f4:8f:79:f1:49:ce:65:df:86:ac:3a:49:
                    eb:f3:fb:d2:c1:8f:fe:bc:eb:38:63:3e:3d:6c:81:
                    8c:9d:2a:8b:18:f2:52:7d:9d:0c:17:3d:a8:53:82:
                    1c:e2:f9:46:e6:40:10:02:05:41:0b:18:81:03:c1:
                    3f:cc:13:a6:42:a1:9a:7a:11:d5:84:0d:8e:fd:51:
                    7e:43:ee:f2:fe:2a:80:e7:53:b8:fe:f2:64:c2:05:
                    8d:96:45:66:c1:c3:80:be:2c:9c:cb:ba:b5:47:67:
                    d9:25:86:82:3f:2c:29:b7:ed:ab:60:64:52:58:9a:
                    d8:6e:33:33:84:d3:47:3b:ea:2a:fd:74:bf:d8:8a:
                    f4:8d:88:c1:a3:7e:b0:79:0e:77:a5:23:24:0a:17:
                    a6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7E:3B:25:9E:00:3E:45:B3:0F:1E:A4:34:48:22:2F:00:DB:7D:11
            X509v3 Authority Key Identifier:
                keyid:9D:AA:10:BB:10:97:6A:C7:31:B8:66:75:02:BC:FA:1E:45:BD:5C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/9DAA10BB10976AC731B8667502BCFA1E45BD5CCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DAA10BB10976AC731B8667502BCFA1E45BD5CCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/9DAA10BB10976AC731B8667502BCFA1E45BD5CCE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:df:08:9a:5c:41:80:fd:fe:a0:21:aa:c0:ec:a4:bc:0d:89:
         29:e2:26:0a:ea:3f:1c:3a:99:d6:37:ad:70:1f:fa:f6:15:de:
         03:95:79:d6:0d:93:3a:4f:fd:1d:eb:77:b7:06:dc:f2:30:a8:
         1a:13:05:4d:de:91:d6:0a:33:89:fa:74:ca:77:c3:91:7d:6c:
         7e:9f:38:98:b3:3a:7e:f6:cf:9b:67:41:f3:eb:e7:91:f6:68:
         60:fe:55:74:65:e6:50:29:cf:3f:20:4c:77:97:4a:86:ce:3c:
         ac:48:8f:a4:67:47:4c:64:2c:55:da:cb:66:03:d6:ca:da:72:
         45:bf:e7:f0:56:c4:e7:30:bc:72:f6:f0:f3:d8:93:f1:90:01:
         80:bd:8c:8d:5b:b5:c5:9e:ed:83:e0:d0:df:f4:2f:0d:1e:20:
         68:f4:b3:36:8e:b1:79:82:8f:ac:66:6f:33:d8:96:fb:ef:08:
         97:43:ab:ac:47:04:2a:5d:a9:af:45:02:eb:03:ab:fa:7b:f4:
         0e:75:5f:d2:d4:6d:bd:5d:9e:b4:c7:5b:8e:df:45:d1:1f:31:
         8b:6d:d7:17:b7:25:a8:ee:8d:76:9a:5d:36:66:46:e4:12:5a:
         98:6c:bf:1f:31:9c:ed:5b:55:42:e9:68:57:25:b2:28:81:01:
         33:0e:47:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:44 2024 by rpki-client on console.sobornost.net