Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/F296B143778F1DB13805ABCD379BEFAFAD6C3E41.mft
File:                     F296B143778F1DB13805ABCD379BEFAFAD6C3E41.mft (raw, json)
Hash identifier:          Bi8Q8qeSeRlVsvUdocatbMkLwSPNEi2n7WkGCuBS2tQ=
Subject key identifier:   35:B9:C4:99:32:4B:F0:4E:4A:71:46:F2:B5:A5:6A:40:BB:F4:32:B3
Authority key identifier: F2:96:B1:43:77:8F:1D:B1:38:05:AB:CD:37:9B:EF:AF:AD:6C:3E:41
Certificate issuer:       /CN=F296B143778F1DB13805ABCD379BEFAFAD6C3E41
Certificate serial:       19CF7B3C8CFABFF00F5354D4F8A9074142C8A44F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F296B143778F1DB13805ABCD379BEFAFAD6C3E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/F296B143778F1DB13805ABCD379BEFAFAD6C3E41.mft
Manifest number:          066C
Signing time:             Tue 09 Jan 2024 04:28:09 +0000
Manifest this update:     Tue 09 Jan 2024 04:23:09 +0000
Manifest next update:     Wed 10 Jan 2024 07:21:09 +0000
Files and hashes:         1: 34352e3137342e31302e302f32342d3234203d3e20323638393338.roa (hash: U5juIZEbnNcGlT2vo6jtdnYS3yUCV56bU+K4+lWnK8U=)
                          2: 323830343a356365383a3a2f33322d3332203d3e20323638393338.roa (hash: tltf9BSLkZfMRHFWL5z9Bpk4B2TYtEARo/XQ6s5Gu7A=)
                          3: 323830343a356365383a393030303a3a2f34302d3430203d3e20323638393338.roa (hash: 3IWqlRGV4xR4T9XOCGnxu1Tw0Vc9e5LnzwQS6Ku81Io=)
                          4: 34352e3137342e31302e302f32332d3233203d3e20323638393338.roa (hash: J6nfaHX1R8qS+igm0brhwxGCTqqzENdNx743xySd7Gc=)
                          5: 34352e3137342e31312e302f32342d3234203d3e20323638393338.roa (hash: 8KQf7A08bZpoOVwsq6cT1wpeNDwkv93FHPflCQbBExI=)
                          6: F296B143778F1DB13805ABCD379BEFAFAD6C3E41.crl (hash: EoDDUV0GOX2j9NdLZ3UlMPLLG/vhRsRKMMzGYfSAby8=)
                          7: 323830343a356365383a343030303a3a2f34302d3430203d3e20323638393338.roa (hash: H9w2Uuxe8bNyazD1J70O44CFOL6ETgjG20PfJzE8Bms=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/F296B143778F1DB13805ABCD379BEFAFAD6C3E41.crl
                          rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/F296B143778F1DB13805ABCD379BEFAFAD6C3E41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F296B143778F1DB13805ABCD379BEFAFAD6C3E41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:cf:7b:3c:8c:fa:bf:f0:0f:53:54:d4:f8:a9:07:41:42:c8:a4:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F296B143778F1DB13805ABCD379BEFAFAD6C3E41
        Validity
            Not Before: Jan  9 04:23:09 2024 GMT
            Not After : Jan 10 07:21:09 2024 GMT
        Subject: CN=35B9C499324BF04E4A7146F2B5A56A40BBF432B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:54:44:97:8d:f4:46:1e:7e:85:d9:cf:5b:25:
                    ee:ab:c0:67:00:ef:83:c4:de:eb:d3:99:c5:81:57:
                    0a:c6:11:46:24:24:03:80:1b:20:4b:f2:53:aa:95:
                    d9:43:18:bb:b8:23:4f:7f:72:d8:8f:07:0b:ec:de:
                    a7:ca:29:ff:f8:7a:6c:e5:d4:25:a8:1b:cd:1b:14:
                    0f:1c:c7:78:0a:9c:a1:ad:64:5e:f0:52:3e:ed:ca:
                    58:30:b4:f7:2b:56:74:3f:c7:20:ba:4e:07:50:ac:
                    1a:aa:6f:32:5b:01:1a:ef:c8:0f:f3:6c:e7:76:e4:
                    a8:69:cb:8d:af:48:81:e6:bd:26:77:a2:42:ef:58:
                    41:8d:de:55:92:1e:80:28:40:8e:b4:9f:b2:b4:f3:
                    37:21:b9:46:b6:de:15:97:a1:8b:2e:17:c5:b4:6e:
                    32:0b:da:5f:8d:24:4c:c5:80:fd:81:c7:5d:45:da:
                    6f:41:d2:5b:28:41:e7:1a:67:9f:f1:bb:21:86:0e:
                    e9:ce:cc:48:36:ef:b4:31:9c:bb:b9:44:5d:34:44:
                    24:d4:15:96:57:a3:56:11:2f:a9:f6:89:59:c3:73:
                    b5:69:13:54:39:ca:07:1f:6d:f2:de:fa:ac:cb:34:
                    b0:11:d8:f2:84:65:7d:8f:54:0b:7e:a2:3c:29:6b:
                    79:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B9:C4:99:32:4B:F0:4E:4A:71:46:F2:B5:A5:6A:40:BB:F4:32:B3
            X509v3 Authority Key Identifier:
                keyid:F2:96:B1:43:77:8F:1D:B1:38:05:AB:CD:37:9B:EF:AF:AD:6C:3E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/F296B143778F1DB13805ABCD379BEFAFAD6C3E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F296B143778F1DB13805ABCD379BEFAFAD6C3E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/F296B143778F1DB13805ABCD379BEFAFAD6C3E41.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:5b:40:2f:fd:d6:c4:53:74:d8:df:88:46:a7:ad:31:ee:25:
         8e:10:a4:2c:35:0b:9f:b3:ef:3c:db:44:7d:b5:7c:33:2f:dd:
         c0:05:76:4f:c4:35:da:5f:6c:96:5a:92:71:53:44:a5:fc:dc:
         fa:a1:4f:79:7b:88:16:36:d0:31:92:18:37:61:d1:ee:ff:0b:
         b9:91:fc:cb:51:30:b4:3c:1b:21:74:cf:a8:fe:77:27:44:93:
         f4:c4:fe:9e:ac:51:f1:ca:f1:d6:65:59:e0:b6:71:f9:56:30:
         40:d8:8c:58:23:c6:51:90:a5:0c:c9:e5:7e:f6:dd:ec:c2:79:
         61:3f:f8:3e:27:29:bd:a1:3d:cb:d6:cc:a2:c1:eb:6c:83:60:
         22:14:08:cd:a5:26:a9:a0:22:56:26:b8:c5:39:dd:2f:c0:88:
         15:90:e3:94:d2:0d:6d:0c:5e:e0:ea:b3:89:a8:59:6c:e8:a5:
         3b:40:df:d0:fa:b4:38:8b:cb:27:41:34:cc:48:26:73:4b:22:
         3e:af:69:01:17:71:25:f2:9b:3e:20:b3:be:93:c6:de:37:9e:
         f1:77:eb:d5:1e:e9:fb:6a:ad:36:b3:8e:26:93:2b:46:b1:4f:
         9f:9d:ce:fa:b8:c3:16:16:03:3b:f0:62:91:70:b4:07:77:8e:
         25:4c:5c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 05:55:25 2024 by rpki-client on console.sobornost.net