Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/41D988C453AB5CA96DA778B690390450C6345EEE.mft
File:                     41D988C453AB5CA96DA778B690390450C6345EEE.mft (raw, json)
Hash identifier:          n9iVUoK5REkfvy3lDzTdc77Blx7kQq+WpECQsa+Lha8=
Subject key identifier:   E9:5B:FB:CC:B1:52:20:0A:48:46:1E:2D:A4:46:17:65:13:22:FA:B6
Authority key identifier: 41:D9:88:C4:53:AB:5C:A9:6D:A7:78:B6:90:39:04:50:C6:34:5E:EE
Certificate issuer:       /CN=41D988C453AB5CA96DA778B690390450C6345EEE
Certificate serial:       158BFEAE2024111E098F338F71978DC401C29EC3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41D988C453AB5CA96DA778B690390450C6345EEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/41D988C453AB5CA96DA778B690390450C6345EEE.mft
Manifest number:          0194
Signing time:             Tue 09 Jan 2024 04:54:06 +0000
Manifest this update:     Tue 09 Jan 2024 04:49:06 +0000
Manifest next update:     Wed 10 Jan 2024 08:46:06 +0000
Files and hashes:         1: 3137372e35352e38382e302f32322d3234203d3e20323633353731.roa (hash: iJuMLR5S7WuTXvLwFu7XsLtnl3JOqkYJAnUOwmqpy4E=)
                          2: 323830343a6633383a3a2f33322d3334203d3e20323633353731.roa (hash: aao6uqlnmC3vFwJhW5WZHqZ/dpHIcy8DoQAvws54apQ=)
                          3: 41D988C453AB5CA96DA778B690390450C6345EEE.crl (hash: wUyGLkQip0ouW1MWkUwcHRMEVy+Uhqe3XcX/t9KF25o=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/41D988C453AB5CA96DA778B690390450C6345EEE.crl
                          rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/41D988C453AB5CA96DA778B690390450C6345EEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41D988C453AB5CA96DA778B690390450C6345EEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:8b:fe:ae:20:24:11:1e:09:8f:33:8f:71:97:8d:c4:01:c2:9e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41D988C453AB5CA96DA778B690390450C6345EEE
        Validity
            Not Before: Jan  9 04:49:06 2024 GMT
            Not After : Jan 10 08:46:06 2024 GMT
        Subject: CN=E95BFBCCB152200A48461E2DA44617651322FAB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:53:79:93:09:67:6b:19:86:c1:c3:e2:3e:89:
                    de:7c:e3:f8:70:39:30:77:da:78:46:ab:ae:3d:53:
                    e6:c5:b2:58:07:c3:c3:e2:c3:53:21:3d:11:68:2d:
                    61:ab:7e:36:62:e8:dd:bc:bd:74:ae:39:ce:d6:9a:
                    c8:fe:e0:9d:b5:0a:e9:43:b6:2e:ea:f8:e0:a0:95:
                    65:71:c7:aa:2d:1d:33:ef:a3:ac:52:da:95:fa:20:
                    b9:db:7f:74:f7:12:7f:64:41:ce:07:bf:6e:84:ea:
                    11:c0:e3:57:9d:e5:c7:b2:00:5d:89:b5:b3:4f:c9:
                    01:05:ae:12:10:c8:ad:39:35:e6:35:02:98:46:9b:
                    cf:22:cf:62:3a:d4:f1:3f:5e:fe:d5:f8:ea:1d:f4:
                    d9:63:eb:11:87:99:f9:b9:18:d7:e9:66:dd:df:bd:
                    76:c5:21:0b:db:d4:f8:08:b4:27:0e:80:08:f8:94:
                    fe:55:c1:b0:98:5a:3d:4d:9e:c5:8b:56:45:f1:c2:
                    ff:3a:d4:50:70:b7:b7:47:10:a5:4a:52:31:80:0f:
                    c4:f9:09:ad:f2:13:b6:c8:91:2f:27:c2:63:32:b8:
                    5a:e8:ad:19:33:a4:5e:dc:4d:15:1d:c4:6d:05:68:
                    4a:3f:87:a1:db:cf:fe:85:e0:45:2c:ad:18:ef:48:
                    25:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5B:FB:CC:B1:52:20:0A:48:46:1E:2D:A4:46:17:65:13:22:FA:B6
            X509v3 Authority Key Identifier:
                keyid:41:D9:88:C4:53:AB:5C:A9:6D:A7:78:B6:90:39:04:50:C6:34:5E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/41D988C453AB5CA96DA778B690390450C6345EEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41D988C453AB5CA96DA778B690390450C6345EEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/41D988C453AB5CA96DA778B690390450C6345EEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:6c:fe:49:57:6c:53:ba:19:61:0b:5b:3a:27:bf:03:ee:6f:
         61:33:84:6a:c0:05:2f:82:29:94:53:7a:52:b2:08:ce:75:0d:
         a2:44:e5:3f:80:47:66:60:34:80:f8:10:e1:24:12:20:bd:83:
         9f:59:ca:46:d7:0e:02:99:da:3d:7f:95:69:86:9e:da:cf:75:
         c2:c0:66:5d:cb:04:8d:23:71:e7:a0:7f:b7:35:86:25:44:ff:
         f9:15:49:09:46:ec:3a:75:23:97:3e:13:62:d6:56:93:7d:5b:
         81:a5:03:67:6c:77:02:4a:cc:54:dc:35:c6:56:07:c1:a9:c5:
         78:b9:11:c6:73:a8:94:d1:75:0a:23:3e:d2:53:2a:6b:c0:7d:
         10:b1:ac:86:7a:9c:bb:a4:89:78:b0:f8:25:75:e3:8a:ef:76:
         05:ed:e7:ad:87:51:09:a5:32:e0:25:4e:1a:1d:7c:52:9f:e4:
         3e:85:3c:7f:cd:24:7b:2f:18:d8:14:ad:0a:12:3e:8f:c2:0c:
         f2:fe:f8:ee:d8:08:58:83:97:2b:84:54:54:2d:e5:ef:8c:dd:
         61:09:9f:3a:d4:cd:de:86:ce:8d:7f:fd:91:e8:a6:44:ac:f8:
         ce:fe:3b:d8:d2:83:89:f1:5f:e7:60:ad:48:62:55:b3:1a:d8:
         06:2a:6b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 05:55:24 2024 by rpki-client on console.sobornost.net