Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/2A0B42E66255DEDBDF5C2C8EC8F0A1F9FD66079E.mft
File:                     2A0B42E66255DEDBDF5C2C8EC8F0A1F9FD66079E.mft (raw, json)
Hash identifier:          bRueyJj8YsavrsLgBhCrlzLTxJpAGJYfc3CEtO14WAU=
Subject key identifier:   A2:FD:E9:82:27:55:81:B6:49:C6:F7:6C:D0:3B:F7:B9:1B:B7:A9:73
Authority key identifier: 2A:0B:42:E6:62:55:DE:DB:DF:5C:2C:8E:C8:F0:A1:F9:FD:66:07:9E
Certificate issuer:       /CN=2A0B42E66255DEDBDF5C2C8EC8F0A1F9FD66079E
Certificate serial:       138592D84A6987F7046C26E4168D712C189057D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A0B42E66255DEDBDF5C2C8EC8F0A1F9FD66079E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/2A0B42E66255DEDBDF5C2C8EC8F0A1F9FD66079E.mft
Manifest number:          BB
Signing time:             Tue 09 Jan 2024 06:47:46 +0000
Manifest this update:     Tue 09 Jan 2024 06:42:46 +0000
Manifest next update:     Wed 10 Jan 2024 07:30:46 +0000
Files and hashes:         1: 3133382e39392e3135322e302f32322d3332203d3e20323634323035.roa (hash: tnIoVvB0HfIdxpoMmdNWA1q3drZ085iUEJn40T8li3U=)
                          2: 2A0B42E66255DEDBDF5C2C8EC8F0A1F9FD66079E.crl (hash: FE0PpmF2t5I3vsN+Sz8DQESGHzBaGJhJvzary8aqARY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/2A0B42E66255DEDBDF5C2C8EC8F0A1F9FD66079E.crl
                          rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/2A0B42E66255DEDBDF5C2C8EC8F0A1F9FD66079E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A0B42E66255DEDBDF5C2C8EC8F0A1F9FD66079E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:85:92:d8:4a:69:87:f7:04:6c:26:e4:16:8d:71:2c:18:90:57:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A0B42E66255DEDBDF5C2C8EC8F0A1F9FD66079E
        Validity
            Not Before: Jan  9 06:42:46 2024 GMT
            Not After : Jan 10 07:30:46 2024 GMT
        Subject: CN=A2FDE982275581B649C6F76CD03BF7B91BB7A973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:17:81:af:35:16:69:41:d3:4a:80:40:dc:88:
                    0e:af:e4:a3:a2:9f:8e:6e:38:bc:b8:51:ca:bd:5a:
                    87:14:95:d3:be:d6:e5:b4:ef:8a:56:a8:29:e9:fd:
                    09:74:52:66:c7:7b:78:aa:ba:4e:8c:31:f3:38:3a:
                    86:ed:42:96:56:8e:ff:b2:ad:6c:5a:31:8e:62:8a:
                    72:03:69:67:6a:3e:75:fa:09:14:a8:e6:00:fe:0b:
                    76:12:65:a3:1a:c6:35:a8:4c:9a:5f:91:14:19:23:
                    d4:1e:68:78:53:5c:72:7c:03:bf:0d:82:bc:83:ac:
                    b5:cd:a2:97:e1:b2:67:5b:72:36:3c:5a:3b:59:68:
                    ba:0b:b8:28:0c:1a:55:11:3d:e3:8f:df:78:66:af:
                    4b:d1:91:d8:50:5c:2b:32:46:2c:7a:a9:26:34:4e:
                    4c:e0:78:13:26:6d:4c:dc:b2:a6:f2:fc:fc:02:81:
                    e5:f4:2b:c6:49:d8:31:1a:c3:a0:62:ac:0c:98:0e:
                    35:33:70:e8:77:c8:e0:d6:3f:79:c4:2b:79:ec:a8:
                    ae:54:d6:87:71:ca:96:31:3d:b4:9c:c2:aa:2b:b7:
                    47:8a:ae:aa:8b:54:fe:02:9a:f9:13:bd:6d:83:4f:
                    4c:0b:ba:1f:d4:b9:82:f0:99:61:cc:c8:62:1e:16:
                    f9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FD:E9:82:27:55:81:B6:49:C6:F7:6C:D0:3B:F7:B9:1B:B7:A9:73
            X509v3 Authority Key Identifier:
                keyid:2A:0B:42:E6:62:55:DE:DB:DF:5C:2C:8E:C8:F0:A1:F9:FD:66:07:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/2A0B42E66255DEDBDF5C2C8EC8F0A1F9FD66079E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A0B42E66255DEDBDF5C2C8EC8F0A1F9FD66079E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/2A0B42E66255DEDBDF5C2C8EC8F0A1F9FD66079E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:57:78:9d:a4:5b:89:51:38:03:aa:80:11:bf:1f:17:c5:6f:
         89:d8:31:82:fb:a4:7a:2a:c9:cc:1f:19:0b:77:f3:7f:41:61:
         36:23:04:82:2e:2f:58:a3:bd:9f:ce:3f:58:f2:d6:c8:7e:d3:
         db:73:e7:8e:a6:e9:45:0d:4e:48:f2:e5:07:39:70:2d:30:a4:
         5e:e9:92:5e:d2:17:3e:3e:84:f9:8d:94:44:85:85:f8:ac:38:
         f6:33:37:67:3e:36:e7:90:e5:f3:00:2f:87:d3:bf:73:7d:54:
         e3:af:0f:1e:95:a4:21:4d:c6:3d:db:24:ce:c8:a7:53:9b:08:
         50:d6:ca:22:56:da:f2:0d:40:3e:b6:2c:f0:59:3d:c7:1d:54:
         64:47:07:f6:37:5b:d7:ab:b1:92:25:57:ac:8e:77:ad:d3:75:
         b7:5d:70:30:aa:15:c8:9f:83:3e:20:24:01:89:9b:8f:18:ab:
         99:e4:71:e6:30:f4:c0:0f:e3:b0:c8:e6:a5:05:53:47:c0:06:
         ce:b7:3b:e8:61:5a:d7:f6:8a:bb:cf:cb:be:15:b4:c4:5b:7b:
         75:d9:c2:6c:ad:6a:44:87:7f:60:d7:af:1d:49:60:7d:49:65:
         6d:5f:3f:2d:c6:da:36:5c:cd:29:f5:db:c9:fb:08:f9:62:67:
         ba:cd:08:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 07:51:28 2024 by rpki-client on console.sobornost.net