Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/65701EC534316BB42767D8A355E77A014EED2D7C.mft
File:                     65701EC534316BB42767D8A355E77A014EED2D7C.mft (raw, json)
Hash identifier:          NMubMm6d/102qr6eGc+l444+TudMZ9EjIkSjfN6d9Ps=
Subject key identifier:   4E:76:96:45:87:81:48:13:F2:D2:00:94:D9:CC:46:C9:A2:3C:B5:9A
Authority key identifier: 65:70:1E:C5:34:31:6B:B4:27:67:D8:A3:55:E7:7A:01:4E:ED:2D:7C
Certificate issuer:       /CN=65701EC534316BB42767D8A355E77A014EED2D7C
Certificate serial:       1467D44F1B4A8E3FA292143767A16EB0BFB4542B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65701EC534316BB42767D8A355E77A014EED2D7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/65701EC534316BB42767D8A355E77A014EED2D7C.mft
Manifest number:          30
Signing time:             Tue 09 Jan 2024 07:24:37 +0000
Manifest this update:     Tue 09 Jan 2024 07:19:37 +0000
Manifest next update:     Wed 10 Jan 2024 09:43:37 +0000
Files and hashes:         1: 3137392e3130392e3131362e302f32322d3232203d3e20323730373630.roa (hash: kUkmFnRYrHD+J6a47wNMjLcuxEyIjaIoXJ8qy3xFnkU=)
                          2: 3137392e3130392e3131372e302f32342d3234203d3e20323730373630.roa (hash: iLdGv3jjLWs8DZrxZ3qyZQ3DCMXZSZCbqcUnx0w+8e4=)
                          3: 323830343a373066633a333030303a3a2f33362d3336203d3e20323730373630.roa (hash: FGIrFIoPveUAdKs1Bo7t0wq1HmEngIO3OGL+i8unPB0=)
                          4: 323830343a373066633a3a2f33322d3332203d3e20323730373630.roa (hash: nbOKn9ZSyp3qp7coIdHuDJfs/MuviotYjTC05+cgW40=)
                          5: 323830343a373066633a343030303a3a2f33362d3336203d3e20323730373630.roa (hash: Qjbyxv2TneVC+ugTG+gweU2x3BX0k97P1htVZr0WaIE=)
                          6: 3137392e3130392e3131362e302f32342d3234203d3e20323730373630.roa (hash: Pg7tKXdeL+e59yCulBtV+axiE13Oraaxg/5AB02yyKM=)
                          7: 323830343a373066633a383030303a3a2f33362d3336203d3e20323730373630.roa (hash: BXa2TMbcP+MCcv6OSTZn3vl0ByQujl05KISBSjH0AhM=)
                          8: 323830343a373066633a643030303a3a2f33362d3336203d3e20323730373630.roa (hash: 8oXheD82CQEV3wApYL0lWg3nlheC0pOBH72WLJ2Bk0Q=)
                          9: 3137392e3130392e3131382e302f32332d3233203d3e20323730373630.roa (hash: 7m1tKYJxYFSBxsoE1+FTblgU38A1IKN3n/HummcAqe4=)
                          10: 323830343a373066633a623030303a3a2f33362d3336203d3e20323730373630.roa (hash: lWN/9ofTQhUx1B1FohdM9FK63XR8B9Uf8/ux4/unCAI=)
                          11: 65701EC534316BB42767D8A355E77A014EED2D7C.crl (hash: zXNRAvgUfuZMJ/yoWGSoCcCIbjSxjPXb6LIzJtfKvX0=)
                          12: 3137392e3130392e3131382e302f32342d3234203d3e20323730373630.roa (hash: Gdw/OfF6+xGtwZnn2GW/N/2mMHI4idMOdU4Cj6/cSbw=)
                          13: 3137392e3130392e3131362e302f32332d3233203d3e20323730373630.roa (hash: NfnCjpuijW0m++q+CPkfPvrdDtYUWBi1ygvjhoUqQrQ=)
                          14: 323830343a373066633a653030303a3a2f33362d3336203d3e20323730373630.roa (hash: /Pn9ShJeMvBvF8bd8MHnkMKBDqER9SD/Xb9GVGRu4qg=)
                          15: 323830343a373066633a663030303a3a2f33362d3336203d3e20323730373630.roa (hash: huzSCvOZaKxHw/wNhupRnCYxMPciI5iwb5iuWMN044g=)
                          16: 323830343a373066633a393030303a3a2f33362d3336203d3e20323730373630.roa (hash: LqbRsAbum7NJ7BexoqGSUzw5Yr0cqsATMuuHNiTcYU8=)
                          17: 3137392e3130392e3131392e302f32342d3234203d3e20323730373630.roa (hash: J4hMh99o+5E7QdmsdKyAK3l3VAjuWBhKK7uLfijHqn4=)
                          18: 323830343a373066633a323030303a3a2f33362d3336203d3e20323730373630.roa (hash: nfxStbcrr+xER9VfxyGcnOqyVd7Z6Q9+8+i35MVYB14=)
                          19: 323830343a373066633a613030303a3a2f33362d3336203d3e20323730373630.roa (hash: v3d83UXZ76n7QRvRA6YEqUdgnm31FnWKtrNffE2zpuE=)
                          20: 323830343a373066633a313030303a3a2f33362d3336203d3e20323730373630.roa (hash: mrK4n8biQPMtDNVspbKbwawLLCspLEkbNJwUSuiZYOA=)
                          21: 323830343a373066633a3a2f33362d3336203d3e20323730373630.roa (hash: WJtLmysYkbz8xM2InoCEr8TnfkZosujm0wp2YXm6jIM=)
                          22: 323830343a373066633a373030303a3a2f33362d3336203d3e20323730373630.roa (hash: M4+RuwrB2MvJL/f1fIQlGy/W+ruY83Miu2NQjg4znsM=)
                          23: 323830343a373066633a353030303a3a2f33362d3336203d3e20323730373630.roa (hash: VppOUBHtyE+DIffsP0VjDZ9sN54cnHQeFLiuC+2n4t8=)
                          24: 323830343a373066633a633030303a3a2f33362d3336203d3e20323730373630.roa (hash: lq4Ba4WfJp0dtnrFmxNXmGuQObun335Y3RkjTSBtXu0=)
                          25: 323830343a373066633a363030303a3a2f33362d3336203d3e20323730373630.roa (hash: oG+XZQZDkVyjYFdOBQoVQw2X18+U/PoRzFn37AxdUsg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/65701EC534316BB42767D8A355E77A014EED2D7C.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/65701EC534316BB42767D8A355E77A014EED2D7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65701EC534316BB42767D8A355E77A014EED2D7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 09:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:67:d4:4f:1b:4a:8e:3f:a2:92:14:37:67:a1:6e:b0:bf:b4:54:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65701EC534316BB42767D8A355E77A014EED2D7C
        Validity
            Not Before: Jan  9 07:19:37 2024 GMT
            Not After : Jan 10 09:43:37 2024 GMT
        Subject: CN=4E76964587814813F2D20094D9CC46C9A23CB59A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:12:54:05:a9:83:bc:7a:45:4d:d5:eb:5d:93:
                    cf:1b:89:53:94:09:a4:a9:d8:64:c5:05:b9:4b:ab:
                    45:1c:61:e3:b9:2d:c8:50:00:8a:0d:2f:c9:b5:19:
                    18:41:e1:67:72:05:39:1f:b2:aa:59:12:9c:58:75:
                    a3:47:16:3b:eb:c2:ac:34:68:b8:0d:16:7d:5d:d7:
                    13:86:a4:72:0c:bf:53:8f:2e:fc:aa:e9:77:ae:90:
                    1d:ff:cc:22:bf:56:68:db:da:9e:80:4a:92:db:ea:
                    ae:26:7c:47:6b:56:f2:f5:4a:d5:c4:66:00:63:b6:
                    a7:de:94:88:8a:4b:bb:2d:75:a7:a6:06:99:86:66:
                    7a:d9:56:ac:c3:98:be:a7:ec:9d:5f:d2:f2:86:c4:
                    48:61:c3:80:e8:84:b4:19:da:fe:68:bb:47:d7:e2:
                    8c:91:2e:f1:91:a7:f5:76:41:98:67:4b:69:98:e3:
                    2c:ae:61:6a:bc:9d:d9:91:b2:e1:8d:16:80:92:03:
                    3b:10:9e:e2:4d:c6:29:fe:bf:70:27:d4:55:15:8a:
                    13:2d:dc:d6:7e:a5:8c:2e:7d:7b:4a:2d:6c:e6:c3:
                    3f:8d:9b:7b:a3:2b:4b:ae:66:d3:04:36:72:3f:0b:
                    09:4d:e4:c9:d4:fa:1a:59:12:65:73:2a:0f:56:b5:
                    80:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:76:96:45:87:81:48:13:F2:D2:00:94:D9:CC:46:C9:A2:3C:B5:9A
            X509v3 Authority Key Identifier:
                keyid:65:70:1E:C5:34:31:6B:B4:27:67:D8:A3:55:E7:7A:01:4E:ED:2D:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/65701EC534316BB42767D8A355E77A014EED2D7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65701EC534316BB42767D8A355E77A014EED2D7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/65701EC534316BB42767D8A355E77A014EED2D7C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:d0:af:e2:f9:c8:ef:c2:f6:18:56:10:b8:1f:f5:a7:0c:16:
         db:18:27:a7:93:fa:b9:04:eb:be:c6:ba:2f:49:9f:e1:7a:55:
         f1:0f:bb:f6:1e:21:cf:6b:d5:7c:d0:0d:d3:8f:c4:ad:0a:14:
         98:ec:20:3b:b3:d0:f7:7f:80:f2:fe:a4:5a:4f:77:13:94:d1:
         e3:c9:99:00:0e:3f:75:62:84:36:43:d5:ae:ec:5f:7e:91:48:
         a3:52:fc:f7:cc:0e:f4:1d:05:d2:83:21:53:27:19:75:5a:e5:
         4d:9e:49:9f:44:31:57:75:09:ac:48:a4:86:d4:fb:df:7b:fe:
         c4:98:3b:6d:f0:1a:82:a2:f0:92:54:65:df:80:be:c3:46:ce:
         e6:06:90:b4:22:ae:ae:75:7a:a0:a0:f4:bd:12:2e:d5:50:af:
         7e:33:b6:96:df:5a:6e:d8:36:c7:04:33:23:d7:ef:85:2f:d1:
         e6:3c:db:56:52:0b:7b:54:df:df:d4:21:a7:8b:18:03:70:97:
         da:52:b9:d4:97:01:e5:21:52:fc:5f:80:6a:ef:78:cf:a1:03:
         b6:ae:6b:a3:1d:e6:8f:d3:57:24:15:99:14:c5:09:95:62:3c:
         1d:9d:43:3c:ce:31:02:b9:0e:98:09:52:f1:2c:6a:a1:eb:47:
         a0:c4:d1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:47 2024 by rpki-client on console.sobornost.net