Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.mft
File:                     C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.mft (raw, json)
Hash identifier:          S74rnpGMgJcsikkIEKHWnv1p+d6q6vBmnc3riy9OQpQ=
Subject key identifier:   46:9C:D3:81:32:B7:E8:A9:4B:61:67:33:AF:59:7E:19:69:3B:37:E8
Authority key identifier: C3:8F:0E:C3:DA:3C:88:11:7E:F7:7F:A3:AA:EC:72:34:0F:4C:43:7E
Certificate issuer:       /CN=C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E
Certificate serial:       2274F3CF95AA4B9FDEA415258A15A9F1A560A431
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.mft
Manifest number:          0221
Signing time:             Tue 09 Jan 2024 00:27:14 +0000
Manifest this update:     Tue 09 Jan 2024 00:22:14 +0000
Manifest next update:     Wed 10 Jan 2024 01:40:14 +0000
Files and hashes:         1: 323830343a353766343a3a2f33322d3438203d3e20323638303937.roa (hash: CICC9b9vxm1x6mvrYxyMhf8JgX7jz6vnLdw657FQ/yE=)
                          2: 3133312e3130382e38382e302f32322d3234203d3e20323638303937.roa (hash: kJ3DrSB9kUdGkJkER149YYTolyPRnzlrSVVpxXqTusY=)
                          3: 34352e3136392e34342e302f32322d3234203d3e20323638303937.roa (hash: IJdr8bG7UGsFHyFiOT4IO+LPwJUOYYrFgV6PI5HTLEQ=)
                          4: C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.crl (hash: UPlWtOPcHVgTlmr7v4AKYU2v1FuRkYuNslULQl9OH5I=)
                          5: 3136382e3139342e3230382e302f32322d3234203d3e20323638303937.roa (hash: FiF5YKi2ruD7Uz0OoE4g/sM0vHht6N7oD8qdwKUnAlc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.crl
                          rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 01:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:74:f3:cf:95:aa:4b:9f:de:a4:15:25:8a:15:a9:f1:a5:60:a4:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E
        Validity
            Not Before: Jan  9 00:22:14 2024 GMT
            Not After : Jan 10 01:40:14 2024 GMT
        Subject: CN=469CD38132B7E8A94B616733AF597E19693B37E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:96:cc:a5:0e:47:f3:97:ad:cf:ef:c9:29:1a:
                    8e:8f:82:ef:ce:39:83:1c:ab:2d:d8:0f:35:1d:fb:
                    56:ef:cd:67:2f:b8:2c:47:97:1d:86:cf:8e:16:bb:
                    cc:4e:2f:48:f2:f2:0b:cb:28:86:cf:45:1b:18:9b:
                    c0:62:4e:af:d6:4b:7a:cd:9f:8b:cf:77:0a:22:61:
                    df:46:cb:6c:37:00:0a:10:57:63:a3:cd:0c:6e:81:
                    64:c9:8b:f8:10:b6:89:37:28:4a:bb:e6:56:41:36:
                    29:cb:9e:66:19:23:60:42:6b:a0:80:9b:ad:fb:7e:
                    fe:3f:20:b7:42:36:6f:37:b1:55:6c:5a:ec:9d:db:
                    b1:1e:dd:89:d5:38:2e:a1:b2:d0:51:da:29:9e:a4:
                    a3:09:ae:36:26:77:4e:27:98:52:07:e2:28:a0:87:
                    a1:18:b9:3d:2d:8c:8e:ba:f5:20:8c:f8:4c:60:f8:
                    2f:8f:b4:b0:83:5e:2a:fd:ad:67:e2:2d:c0:41:65:
                    7f:5b:ce:ff:47:12:cd:96:3b:3b:6a:58:81:22:44:
                    07:84:24:99:97:ed:1c:55:73:1e:ad:5b:c1:a8:8c:
                    2a:88:7a:7e:e8:30:ae:66:84:5b:ae:2b:65:01:a9:
                    00:08:51:4e:46:e4:32:71:1a:cc:3b:10:c1:d8:45:
                    f8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9C:D3:81:32:B7:E8:A9:4B:61:67:33:AF:59:7E:19:69:3B:37:E8
            X509v3 Authority Key Identifier:
                keyid:C3:8F:0E:C3:DA:3C:88:11:7E:F7:7F:A3:AA:EC:72:34:0F:4C:43:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:9e:b5:58:63:f6:6d:ce:bf:02:f4:6a:d4:0b:5c:42:c2:f2:
         98:9d:5b:02:11:94:62:73:db:38:55:9b:a2:34:4f:ff:f2:4b:
         77:ef:66:45:db:da:da:65:f6:be:c0:cc:6a:72:3e:16:11:0f:
         ad:bd:7b:40:d5:03:52:a4:c4:f0:9d:f5:47:56:f4:19:1b:f2:
         37:0e:cb:48:92:a5:54:52:7a:85:33:af:5b:df:bc:a7:f5:84:
         ac:c9:19:3a:8d:3b:cf:38:94:46:e4:5a:ad:9d:11:b1:d1:b3:
         42:f4:f9:20:41:09:2d:0b:0a:3f:3c:47:85:63:ad:f9:58:a0:
         eb:12:78:70:be:6b:71:b6:fa:35:33:f9:f9:29:9b:60:a9:a4:
         08:f3:8b:fd:c9:d6:fb:70:16:10:b3:38:c1:e1:e7:e5:5c:e6:
         2d:4e:b3:90:9f:ff:be:29:b4:f5:ac:28:12:2e:ff:87:67:01:
         9d:23:f7:7d:08:d6:50:35:a0:0e:84:42:8e:7b:42:28:12:ea:
         c3:52:7e:2c:d8:ab:cf:0f:52:66:26:a6:ac:0c:d3:68:8f:5d:
         f3:b3:de:75:9e:31:0a:6d:66:7f:cb:e3:a9:80:a6:0b:6f:e3:
         52:25:40:e7:6e:7b:88:b4:71:84:1d:33:48:b5:47:1e:0a:89:
         ea:37:16:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 02:15:40 2024 by rpki-client on console.sobornost.net