Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/F7E9118C1C3192650B2A5E2B07DC58D7953305AC.mft
File:                     F7E9118C1C3192650B2A5E2B07DC58D7953305AC.mft (raw, json)
Hash identifier:          uLL7obpFx98bCQPf3HtfMYpMD+Gg9/d9mwYlbGkUorU=
Subject key identifier:   C5:40:0C:95:93:06:35:44:8B:8B:5D:1E:F1:C5:2A:BC:69:47:E1:3C
Authority key identifier: F7:E9:11:8C:1C:31:92:65:0B:2A:5E:2B:07:DC:58:D7:95:33:05:AC
Certificate issuer:       /CN=F7E9118C1C3192650B2A5E2B07DC58D7953305AC
Certificate serial:       05517AB2620DD8C51FAF9F144EF338218F92F3D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7E9118C1C3192650B2A5E2B07DC58D7953305AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/F7E9118C1C3192650B2A5E2B07DC58D7953305AC.mft
Manifest number:          019A
Signing time:             Tue 09 Jan 2024 01:50:59 +0000
Manifest this update:     Tue 09 Jan 2024 01:45:59 +0000
Manifest next update:     Wed 10 Jan 2024 02:11:59 +0000
Files and hashes:         1: F7E9118C1C3192650B2A5E2B07DC58D7953305AC.crl (hash: ttHxNv5685WyHlSYlAAlFUNWxSlelpyUBmsFlDjsYX0=)
                          2: 34352e3232342e32342e302f32322d3332203d3e20323637363336.roa (hash: wy0rfblkjmVrdAt5CgnHYNteXzCM6UBombvI7v5LzUk=)
                          3: 323830343a343438303a3a2f33322d313238203d3e20323637363336.roa (hash: 6oAyDZOBOVTL/cwJCc1tKh4DJTkrNbAeT7A7QBYaOuY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/F7E9118C1C3192650B2A5E2B07DC58D7953305AC.crl
                          rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/F7E9118C1C3192650B2A5E2B07DC58D7953305AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7E9118C1C3192650B2A5E2B07DC58D7953305AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 02:11:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:51:7a:b2:62:0d:d8:c5:1f:af:9f:14:4e:f3:38:21:8f:92:f3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7E9118C1C3192650B2A5E2B07DC58D7953305AC
        Validity
            Not Before: Jan  9 01:45:59 2024 GMT
            Not After : Jan 10 02:11:59 2024 GMT
        Subject: CN=C5400C95930635448B8B5D1EF1C52ABC6947E13C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:91:58:98:27:09:72:05:31:2d:21:af:b3:ee:
                    cf:07:4c:14:4f:8b:05:75:4b:28:03:bc:0a:2c:9c:
                    53:54:df:6f:4f:2d:9c:44:37:ea:e5:3c:67:92:6d:
                    77:4e:52:7c:6b:2f:52:7b:c2:79:c2:91:46:ad:99:
                    28:3a:ae:8d:6a:79:18:db:da:d3:bd:e2:f6:cc:9e:
                    26:da:59:c1:b8:0d:90:3b:d8:ac:6f:89:79:95:63:
                    1b:7b:10:5d:bf:48:3b:6b:62:46:a5:e7:d2:d2:e3:
                    24:7e:93:c6:ce:5d:56:5e:61:da:15:ba:77:63:bc:
                    52:0e:60:5e:15:3f:26:c2:f2:90:2b:41:86:6d:0a:
                    d4:c3:e9:be:3f:bd:71:c9:87:b9:08:a7:31:2f:e3:
                    f5:c2:e2:51:78:b4:ea:e4:7b:80:e4:8b:75:e9:28:
                    10:6b:a4:b9:42:9c:43:f8:7d:5c:93:e1:ab:58:5b:
                    27:f2:27:a7:f3:6f:7b:76:55:2d:c4:bd:df:a9:5c:
                    51:2b:15:f8:08:c1:36:c9:84:a7:14:ca:69:4f:42:
                    85:ed:e1:46:a0:3f:97:f1:79:47:d0:48:13:22:50:
                    75:1c:27:f0:7a:98:e0:b5:03:bf:53:44:e3:49:51:
                    d1:c4:fb:61:0f:45:22:e9:e6:87:00:ac:8d:db:41:
                    cc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:40:0C:95:93:06:35:44:8B:8B:5D:1E:F1:C5:2A:BC:69:47:E1:3C
            X509v3 Authority Key Identifier:
                keyid:F7:E9:11:8C:1C:31:92:65:0B:2A:5E:2B:07:DC:58:D7:95:33:05:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/F7E9118C1C3192650B2A5E2B07DC58D7953305AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7E9118C1C3192650B2A5E2B07DC58D7953305AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/F7E9118C1C3192650B2A5E2B07DC58D7953305AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:0d:94:ee:85:c7:9e:56:7a:56:c3:34:b6:95:2c:e2:0e:bb:
         5d:a6:4a:b5:0c:ab:77:1d:f3:a5:62:91:c8:af:84:92:21:02:
         b8:1f:2f:d3:9e:77:60:a1:fe:93:85:5b:b4:8a:89:49:12:8f:
         3f:0c:19:61:87:b3:b9:11:03:0b:bf:fb:56:2c:d6:27:3b:f5:
         08:29:ae:5c:d5:e5:88:64:d4:5d:57:68:6e:99:b0:c5:b8:bb:
         c3:39:ad:ee:0b:31:f9:cd:db:09:04:67:c5:14:9a:5b:cf:6c:
         53:1c:18:24:05:fa:51:be:a3:4c:85:68:85:75:b3:0b:13:25:
         a9:ec:6b:7a:9b:28:c4:95:90:25:17:ce:4e:84:ef:a3:d2:91:
         ad:e9:d1:99:b4:90:68:61:e3:0c:d2:b3:db:07:24:f0:d0:6c:
         40:b4:41:71:ee:9d:51:9f:3e:91:d0:b5:42:26:d3:3d:31:a0:
         f6:48:8c:f2:06:6d:6e:de:36:35:38:36:c7:20:90:96:f5:38:
         15:e3:b4:95:87:01:2e:fe:89:0a:43:42:a5:b4:59:c2:4c:87:
         17:fd:15:aa:9a:9e:68:05:1d:08:43:de:c6:dd:43:5a:fa:32:
         e9:e1:f8:79:78:42:07:17:b6:8f:ef:38:23:ec:78:df:56:92:
         12:ba:ee:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 03:48:58 2024 by rpki-client on console.sobornost.net