Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/4A7B1D273A29E52A919C6B66992B0B94316D67EE.mft
File:                     4A7B1D273A29E52A919C6B66992B0B94316D67EE.mft (raw, json)
Hash identifier:          3aTDGkruYcRnJRUWbo7wXZJOe13qMcs1FolCcWIulGE=
Subject key identifier:   CC:0B:D4:86:31:AE:73:A5:E1:B2:E8:C5:BE:97:ED:BF:8B:C6:FC:32
Authority key identifier: 4A:7B:1D:27:3A:29:E5:2A:91:9C:6B:66:99:2B:0B:94:31:6D:67:EE
Certificate issuer:       /CN=4A7B1D273A29E52A919C6B66992B0B94316D67EE
Certificate serial:       393AEF5934C91966ECFAC28EBDDCF865BA28DE93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A7B1D273A29E52A919C6B66992B0B94316D67EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/4A7B1D273A29E52A919C6B66992B0B94316D67EE.mft
Manifest number:          037A
Signing time:             Tue 09 Jan 2024 12:43:57 +0000
Manifest this update:     Tue 09 Jan 2024 12:38:57 +0000
Manifest next update:     Wed 10 Jan 2024 13:17:57 +0000
Files and hashes:         1: 4A7B1D273A29E52A919C6B66992B0B94316D67EE.crl (hash: iZ/T0V5T691C1XYSufoJAEGXanW46cARspprwTk9fGM=)
                          2: 3230302e3231392e322e302f32332d3233203d3e20323731303137.roa (hash: k4Kr8dxHfid15tWPpaQTDnu27uGSmqPGf7xTr6lK7nU=)
                          3: 3230302e3231392e302e302f32332d3234203d3e20323731303137.roa (hash: eESu9Ni6dpMC20ZfVdXlePLaLm/3IXW/Y6voB6JUTOs=)
                          4: 323830343a373530303a3a2f33322d3332203d3e20323731303137.roa (hash: J3g8/MJTXSwZtwqoMM8vQhC98EKvJnYb5cbV0XVd4K8=)
                          5: 3230302e3231392e332e302f32342d3234203d3e20323731303137.roa (hash: QxLuuW0/UiPtyiBN1ogoPhSR8p9VsjwN0DnfcaSRZlc=)
                          6: 3230302e3231392e322e302f32342d3234203d3e20323731303137.roa (hash: BGQhjcHMQm9XcE805mgMdQehyItgWG1qUZ6udpSe79Y=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/4A7B1D273A29E52A919C6B66992B0B94316D67EE.crl
                          rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/4A7B1D273A29E52A919C6B66992B0B94316D67EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A7B1D273A29E52A919C6B66992B0B94316D67EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 12:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:3a:ef:59:34:c9:19:66:ec:fa:c2:8e:bd:dc:f8:65:ba:28:de:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A7B1D273A29E52A919C6B66992B0B94316D67EE
        Validity
            Not Before: Jan  9 12:38:57 2024 GMT
            Not After : Jan 10 13:17:57 2024 GMT
        Subject: CN=CC0BD48631AE73A5E1B2E8C5BE97EDBF8BC6FC32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f1:59:e7:cc:86:fd:c4:48:10:02:d7:4e:82:
                    38:c5:d3:8d:5c:95:6d:85:25:19:68:95:aa:71:b5:
                    58:5d:01:28:88:7b:e0:f6:d9:c7:1f:5d:b6:f1:10:
                    61:eb:73:36:cc:22:9f:55:22:9b:b0:58:82:1c:3d:
                    6c:fc:56:a7:af:0b:3a:f6:cc:aa:e2:a1:05:58:39:
                    c1:80:c2:ad:a7:51:cc:4c:f3:22:f0:67:02:53:a7:
                    df:b0:a6:3c:60:7d:e9:28:56:05:3e:b9:a1:e4:0a:
                    32:40:4f:f8:33:94:ea:ae:9e:d6:72:4d:43:9a:ab:
                    5b:f3:b6:38:e5:51:88:42:71:e2:5c:9a:fe:07:f4:
                    56:2a:5f:29:3a:42:62:7a:5a:9f:d7:28:23:2a:6f:
                    45:14:a6:fb:85:24:95:d0:12:4c:50:3e:b3:24:9c:
                    60:a7:7d:fe:88:85:d1:4b:1c:f2:79:f8:64:0d:1b:
                    27:9d:ae:e7:28:4e:2e:ba:43:b4:08:81:eb:a5:fd:
                    9e:e2:14:7c:55:38:c4:41:4d:43:55:bb:3b:d9:ac:
                    7e:7f:da:cc:eb:a1:c2:ed:ec:74:2a:f2:1a:2a:6f:
                    68:22:95:a5:89:74:22:89:dc:4b:b7:bb:f5:32:0f:
                    33:99:65:7e:65:23:a3:56:88:36:74:dc:6c:2c:7a:
                    ff:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0B:D4:86:31:AE:73:A5:E1:B2:E8:C5:BE:97:ED:BF:8B:C6:FC:32
            X509v3 Authority Key Identifier:
                keyid:4A:7B:1D:27:3A:29:E5:2A:91:9C:6B:66:99:2B:0B:94:31:6D:67:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/4A7B1D273A29E52A919C6B66992B0B94316D67EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A7B1D273A29E52A919C6B66992B0B94316D67EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/0/4A7B1D273A29E52A919C6B66992B0B94316D67EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:9e:d5:b4:b6:ed:0b:78:bd:6c:db:77:89:b3:78:f9:90:d6:
         57:a7:a8:a7:15:cb:2d:a4:87:a7:29:ce:b9:2a:28:cc:7f:f4:
         d5:e4:f7:77:ec:c6:b3:fa:72:c4:5e:df:aa:17:ad:3b:3b:31:
         90:4a:a9:63:f1:95:e8:c5:31:83:40:63:9a:6f:13:5a:29:9b:
         ec:e2:65:c7:95:5f:3b:5e:32:43:ca:e6:09:22:ea:98:e5:02:
         8f:e2:0e:99:fe:1a:b5:2a:79:73:3c:f2:f6:cd:ca:c2:ef:24:
         67:f2:19:de:10:e8:19:54:d8:92:4e:4b:07:06:22:35:10:00:
         84:0d:6f:55:9f:36:2f:93:b9:7e:71:cc:1d:47:31:93:09:6a:
         e9:c5:30:74:9c:19:81:81:62:e0:13:ff:7b:48:df:a7:b4:b7:
         e1:0b:fc:a7:49:8c:c4:e4:8a:15:4c:74:57:59:0f:7b:33:6f:
         03:44:7c:4f:c7:60:25:05:ab:6c:89:1f:eb:69:cf:11:7f:25:
         a7:f6:72:87:37:e3:24:a1:2b:fa:64:77:72:a9:a1:5d:07:da:
         75:2c:63:ee:9a:d8:90:89:ce:51:d5:97:e8:c9:37:b2:52:92:
         e4:4f:3f:ea:a1:6d:de:ab:03:9f:8d:fc:e8:73:d8:98:3c:60:
         e5:46:37:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOTrvWTTJGWbs+sKOvdz4Zboo3pMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEE3QjFEMjczQTI5RTUyQTkxOUM2QjY2OTkyQjBCOTQz
MTZENjdFRTAeFw0yNDAxMDkxMjM4NTdaFw0yNDAxMTAxMzE3NTdaMDMxMTAvBgNV
BAMTKENDMEJENDg2MzFBRTczQTVFMUIyRThDNUJFOTdFREJGOEJDNkZDMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi8VnnzIb9xEgQAtdOgjjF041c
lW2FJRlolapxtVhdASiIe+D22ccfXbbxEGHrczbMIp9VIpuwWIIcPWz8VqevCzr2
zKrioQVYOcGAwq2nUcxM8yLwZwJTp9+wpjxgfekoVgU+uaHkCjJAT/gzlOquntZy
TUOaq1vztjjlUYhCceJcmv4H9FYqXyk6QmJ6Wp/XKCMqb0UUpvuFJJXQEkxQPrMk
nGCnff6IhdFLHPJ5+GQNGyedrucoTi66Q7QIgeul/Z7iFHxVOMRBTUNVuzvZrH5/
2szrocLt7HQq8hoqb2gilaWJdCKJ3Eu3u/UyDzOZZX5lI6NWiDZ03Gwsev9jAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzAvUhjGuc6XhsujFvpftv4vG/DIwHwYDVR0j
BBgwFoAUSnsdJzop5SqRnGtmmSsLlDFtZ+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnJjVWVyYWZodFhZc2JXclpEZzhCVEZnOWM0VkVmNnFvUlNrM3A3TEd0
WjgvMC80QTdCMUQyNzNBMjlFNTJBOTE5QzZCNjY5OTJCMEI5NDMxNkQ2N0VFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRBN0IxRDI3M0EyOUU1MkE5
MTlDNkI2Njk5MkIwQjk0MzE2RDY3RUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NnJjVWVyYWZodFhZc2JXclpEZzhCVEZnOWM0VkVmNnFvUlNrM3A3TEd0WjgvMC80
QTdCMUQyNzNBMjlFNTJBOTE5QzZCNjY5OTJCMEI5NDMxNkQ2N0VFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmp7VtLbtC3i9bNt3ibN4+ZDWV6eopxXLLaSHpynOuSoozH/01eT3d+zGs/py
xF7fqhetOzsxkEqpY/GV6MUxg0Bjmm8TWimb7OJlx5VfO14yQ8rmCSLqmOUCj+IO
mf4atSp5czzy9s3Kwu8kZ/IZ3hDoGVTYkk5LBwYiNRAAhA1vVZ82L5O5fnHMHUcx
kwlq6cUwdJwZgYFi4BP/e0jfp7S34Qv8p0mMxOSKFUx0V1kPezNvA0R8T8dgJQWr
bIkf62nPEX8lp/ZyhzfjJKEr+mR3cqmhXQfadSxj7prYkInOUdWX6Mk3slKS5E8/
6qFt3qsDn4386HPYmDxg5UY3KQ==
-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:55 2024 by rpki-client on console.sobornost.net