Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/FA7B033EBE453D5BA603746BD8ED0F0AF5B2BB38.mft
File:                     FA7B033EBE453D5BA603746BD8ED0F0AF5B2BB38.mft (raw, json)
Hash identifier:          4v1G5eK6qMAe92Tha+gjeCMneDehRwJ6qZIGK1F6+Ms=
Subject key identifier:   0E:12:13:A1:CE:5B:D8:D3:27:40:E9:5B:2C:DC:25:3E:C3:A2:39:78
Authority key identifier: FA:7B:03:3E:BE:45:3D:5B:A6:03:74:6B:D8:ED:0F:0A:F5:B2:BB:38
Certificate issuer:       /CN=FA7B033EBE453D5BA603746BD8ED0F0AF5B2BB38
Certificate serial:       252D9DD83722DF04D143E891A43F328C4EF59F8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA7B033EBE453D5BA603746BD8ED0F0AF5B2BB38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/FA7B033EBE453D5BA603746BD8ED0F0AF5B2BB38.mft
Manifest number:          66
Signing time:             Tue 09 Jan 2024 09:49:56 +0000
Manifest this update:     Tue 09 Jan 2024 09:44:56 +0000
Manifest next update:     Wed 10 Jan 2024 13:26:56 +0000
Files and hashes:         1: 323830343a6132633a3a2f33322d313238203d3e20323633303238.roa (hash: aoDJpWFlwgdaytbMIi1ImUFlGmOt9J+/3o7VV06apFw=)
                          2: 3137372e382e3131322e302f32302d3332203d3e20323633303238.roa (hash: +yupD2RMMCMS1ISdxwdgx3xqhuK210uIUaQB6qDzbRk=)
                          3: FA7B033EBE453D5BA603746BD8ED0F0AF5B2BB38.crl (hash: gccuW6MN901NBtAEBHUrT6QWwp4UHBSlHRSBt1t+9mw=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/FA7B033EBE453D5BA603746BD8ED0F0AF5B2BB38.crl
                          rsync://rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/FA7B033EBE453D5BA603746BD8ED0F0AF5B2BB38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA7B033EBE453D5BA603746BD8ED0F0AF5B2BB38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 12:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:2d:9d:d8:37:22:df:04:d1:43:e8:91:a4:3f:32:8c:4e:f5:9f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA7B033EBE453D5BA603746BD8ED0F0AF5B2BB38
        Validity
            Not Before: Jan  9 09:44:56 2024 GMT
            Not After : Jan 10 13:26:56 2024 GMT
        Subject: CN=0E1213A1CE5BD8D32740E95B2CDC253EC3A23978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4c:0f:32:f9:ab:d2:7d:b9:9f:2f:f0:09:c6:
                    96:4e:ee:b9:00:67:88:ff:80:3d:85:59:1b:d9:e6:
                    2e:21:3c:72:7d:aa:94:5c:e5:83:4d:c4:a2:03:99:
                    0b:65:cd:c1:8d:37:5e:f4:fc:fb:34:f1:9c:91:7d:
                    b8:77:83:3b:0a:4a:b4:2b:32:80:a3:41:c0:49:61:
                    00:a5:8f:19:48:f7:11:05:61:20:57:17:82:61:25:
                    b6:59:a4:fa:0d:eb:c0:f9:f7:0f:04:a3:57:4a:c3:
                    65:f8:5b:f2:1b:91:22:37:e0:6d:e2:00:ae:2d:ad:
                    d6:30:f7:f3:bf:28:22:27:6d:11:f9:5b:58:2e:b0:
                    7b:65:28:6d:ea:1d:72:da:49:e1:e9:5f:ea:8d:98:
                    5b:81:cb:91:1e:d0:be:56:73:66:da:a9:5c:36:51:
                    b6:84:ce:9d:19:6c:63:b8:06:5a:74:f2:83:b2:57:
                    58:69:de:d2:58:b2:83:e4:e6:11:51:84:16:32:42:
                    57:d1:62:01:b8:9f:3c:a2:45:a5:99:cd:6a:d2:f2:
                    8e:60:e1:e1:19:45:cb:49:53:a6:55:2e:05:de:55:
                    40:8b:73:7e:49:3c:b8:a6:82:1c:47:99:83:f8:e8:
                    66:4b:7a:50:cb:2e:f5:85:cb:3c:5e:11:d5:1e:ad:
                    07:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:12:13:A1:CE:5B:D8:D3:27:40:E9:5B:2C:DC:25:3E:C3:A2:39:78
            X509v3 Authority Key Identifier:
                keyid:FA:7B:03:3E:BE:45:3D:5B:A6:03:74:6B:D8:ED:0F:0A:F5:B2:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/FA7B033EBE453D5BA603746BD8ED0F0AF5B2BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA7B033EBE453D5BA603746BD8ED0F0AF5B2BB38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TcNNxoJKX4KKX9HHbqPNCqGLsiMpzuBpyiNXBLDqXHg/0/FA7B033EBE453D5BA603746BD8ED0F0AF5B2BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:8c:14:85:35:ce:e4:fb:6b:65:30:b8:da:1b:d6:da:42:a1:
         cc:12:04:c9:23:ca:ab:d9:81:d8:4d:73:57:8f:1b:69:4b:2d:
         01:72:78:9f:e5:6c:92:d7:d1:88:f3:7b:16:df:d7:57:12:12:
         d5:99:7e:e4:39:3f:4a:5d:fe:39:b7:e2:42:a2:cb:0f:8f:a1:
         06:ad:8b:32:b0:d1:85:fb:57:27:ea:84:7f:91:a8:c0:92:2d:
         9e:fb:4d:1b:c4:3d:da:01:11:94:ec:84:65:61:13:53:01:5d:
         4f:ce:15:63:93:73:51:d5:71:28:41:47:de:d1:68:d7:3d:ae:
         e1:32:a9:04:62:be:c6:f3:09:d1:7b:16:84:fd:d1:d1:97:f2:
         85:4e:ef:38:4b:da:67:b8:93:6a:15:a5:81:47:0e:11:71:50:
         c4:f0:37:df:51:a3:0d:18:89:b2:8a:ba:94:b2:2f:c0:f2:c4:
         8c:8e:14:ab:f9:eb:93:2d:20:97:53:0a:20:65:58:ef:bf:34:
         50:43:8a:7a:6a:1d:78:49:f9:be:ef:fd:61:90:85:a8:5d:f1:
         89:9d:77:d6:71:1f:76:b8:0f:41:a4:e6:cc:8b:37:84:99:47:
         47:2d:8b:3d:67:82:27:6c:35:86:6f:3a:9a:b8:a0:33:e6:33:
         5a:b4:4e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:51 2024 by rpki-client on console.sobornost.net