Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6rfKBVRCKSTujYFJBYJL6BAUaSkvZ2m7JChFoZYWfDqG/0/401587364D5E6A0712769D3A7DDE9D89A2CCB8B7.mft
File:                     401587364D5E6A0712769D3A7DDE9D89A2CCB8B7.mft (raw, json)
Hash identifier:          l2QaiyyIrJ8TQdEpyCFLSkRkKJVvIVAGs6CcQfemxJc=
Subject key identifier:   1D:4A:11:81:B9:1A:7F:A4:28:0E:84:C4:1C:6D:C6:C8:0F:BF:58:83
Authority key identifier: 40:15:87:36:4D:5E:6A:07:12:76:9D:3A:7D:DE:9D:89:A2:CC:B8:B7
Certificate issuer:       /CN=401587364D5E6A0712769D3A7DDE9D89A2CCB8B7
Certificate serial:       4FC8AEEB8586FD5C62A2DC05E63A055B7C68159B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/401587364D5E6A0712769D3A7DDE9D89A2CCB8B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rfKBVRCKSTujYFJBYJL6BAUaSkvZ2m7JChFoZYWfDqG/0/401587364D5E6A0712769D3A7DDE9D89A2CCB8B7.mft
Manifest number:          02AB
Signing time:             Tue 09 Jan 2024 04:07:25 +0000
Manifest this update:     Tue 09 Jan 2024 04:02:25 +0000
Manifest next update:     Wed 10 Jan 2024 04:34:25 +0000
Files and hashes:         1: 401587364D5E6A0712769D3A7DDE9D89A2CCB8B7.crl (hash: ysSdc/puMLpdkMJSHecp3BNQmNIz60IAhWwWS6iRIgI=)
                          2: 34352e3233312e302e302f32322d3234203d3e20323637313835.roa (hash: b6dCs/5mJxg/NXHlYoAQAqiTR+3buQu2XyoH54NKiWc=)
                          3: 323830343a343937343a3a2f33322d3438203d3e20323637313835.roa (hash: Va+HJuwkdq0+9+IMeJUjmmf0Rr9tOsSVvsbit8wKwF4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rfKBVRCKSTujYFJBYJL6BAUaSkvZ2m7JChFoZYWfDqG/0/401587364D5E6A0712769D3A7DDE9D89A2CCB8B7.crl
                          rsync://rpki-repo.registro.br/repo/6rfKBVRCKSTujYFJBYJL6BAUaSkvZ2m7JChFoZYWfDqG/0/401587364D5E6A0712769D3A7DDE9D89A2CCB8B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/401587364D5E6A0712769D3A7DDE9D89A2CCB8B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 04:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c8:ae:eb:85:86:fd:5c:62:a2:dc:05:e6:3a:05:5b:7c:68:15:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=401587364D5E6A0712769D3A7DDE9D89A2CCB8B7
        Validity
            Not Before: Jan  9 04:02:25 2024 GMT
            Not After : Jan 10 04:34:25 2024 GMT
        Subject: CN=1D4A1181B91A7FA4280E84C41C6DC6C80FBF5883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0c:5f:c4:c0:cc:42:83:f7:42:ed:08:46:ab:
                    3f:8f:ff:7f:14:df:cc:28:64:68:37:80:a5:dc:6d:
                    db:5d:7f:d4:27:1c:bc:43:7b:32:8a:af:cc:9f:1f:
                    b9:92:46:f4:7b:94:d5:38:eb:a6:76:38:47:bc:ca:
                    20:ff:12:2a:ea:bd:56:d7:df:fc:9a:97:ff:49:a8:
                    3a:0f:3a:b2:1e:fa:7b:8e:7d:89:1f:89:70:ea:36:
                    7f:93:e8:9f:f9:16:67:78:df:32:b6:40:18:0d:cc:
                    83:de:79:6c:9a:df:b4:83:8b:22:db:5c:0b:3c:e6:
                    45:11:e5:3b:4f:7b:75:3c:04:32:fd:6a:1a:cf:92:
                    87:3e:26:30:37:c0:0e:4c:91:98:fe:07:b8:68:8a:
                    cf:e5:cf:a2:7d:1b:7b:2d:b8:e2:b2:9b:ed:b4:d6:
                    2b:5c:53:9e:ef:2c:4f:4b:82:53:3a:d1:57:c3:62:
                    71:62:56:7e:54:41:1d:6f:35:a6:9f:8d:1d:d2:4e:
                    c1:f4:35:ca:d7:84:ff:72:9c:3c:26:9b:2f:6f:96:
                    77:f6:88:e3:42:20:d9:c4:67:31:36:e2:a0:fd:df:
                    bb:44:0d:d0:91:09:43:0f:41:cd:b1:b9:9f:64:62:
                    bc:35:44:10:41:0f:12:b0:d9:13:e6:91:34:01:4d:
                    97:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4A:11:81:B9:1A:7F:A4:28:0E:84:C4:1C:6D:C6:C8:0F:BF:58:83
            X509v3 Authority Key Identifier:
                keyid:40:15:87:36:4D:5E:6A:07:12:76:9D:3A:7D:DE:9D:89:A2:CC:B8:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rfKBVRCKSTujYFJBYJL6BAUaSkvZ2m7JChFoZYWfDqG/0/401587364D5E6A0712769D3A7DDE9D89A2CCB8B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/401587364D5E6A0712769D3A7DDE9D89A2CCB8B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rfKBVRCKSTujYFJBYJL6BAUaSkvZ2m7JChFoZYWfDqG/0/401587364D5E6A0712769D3A7DDE9D89A2CCB8B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c3:7d:9c:1f:7d:f9:eb:a6:84:f8:c0:ca:39:3b:e6:98:c0:
         b0:eb:93:73:80:cf:8a:5b:d1:d4:1a:23:51:cd:7f:59:14:14:
         d6:33:63:2d:19:a2:95:3e:ab:6a:ae:9f:a6:66:55:d4:e7:d0:
         fd:3f:4a:0d:43:a5:76:0b:4f:62:cd:2e:d6:dc:3a:18:3c:53:
         bd:8a:e6:ba:43:ca:d7:eb:50:fd:88:f3:a7:9c:be:3b:3a:ae:
         0d:cf:52:cb:5a:49:31:51:fb:30:3c:17:7a:2b:35:d3:10:66:
         9b:1c:03:dc:9f:9e:e8:d5:74:b9:28:76:51:ee:2f:9a:d5:b0:
         70:ef:a1:53:14:54:cb:94:76:5e:d4:c1:71:e9:1a:47:e4:7f:
         73:81:4e:c0:33:2e:67:69:7c:cc:78:92:dc:c9:5a:f1:63:31:
         79:d1:a2:ee:f6:a6:c1:b5:84:27:1c:5e:19:63:61:96:73:b1:
         84:0b:5f:f3:35:b2:e8:68:2a:91:1a:92:10:32:38:33:c8:2c:
         41:65:72:7c:6e:b2:9b:9c:2a:31:a9:df:41:37:84:08:27:43:
         63:8a:46:a5:d4:b5:e0:da:c7:97:3b:61:8c:d8:5c:dd:78:82:
         76:90:4a:2d:c2:69:39:c6:40:95:1f:49:ee:ee:d5:c6:a9:c9:
         a4:49:16:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 05:55:27 2024 by rpki-client on console.sobornost.net