Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B.mft
File:                     CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B.mft (raw, json)
Hash identifier:          4wzDoJW9Gid9ykihgFc+m0+pfJe1CCPGpRXgsvH+2XI=
Subject key identifier:   CC:2A:06:18:9E:EC:5B:AE:E0:BC:AF:77:A0:19:F6:21:1C:E5:76:9C
Authority key identifier: CE:9A:4E:28:9A:0F:1C:A3:1B:E0:31:4A:93:BF:DC:01:DC:EB:0E:0B
Certificate issuer:       /CN=CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B
Certificate serial:       3063750F6801DFF95EF19F7C8281B939E89A303B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B.mft
Manifest number:          0B
Signing time:             Tue 09 Jan 2024 10:23:10 +0000
Manifest this update:     Tue 09 Jan 2024 10:18:10 +0000
Manifest next update:     Wed 10 Jan 2024 12:51:10 +0000
Files and hashes:         1: 34352e37302e3234382e302f32322d3232203d3e20323637363130.roa (hash: 6d28YEyuMJaoJvwb6A14QqcIfHjowog1FL1cTJLPJK0=)
                          2: CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B.crl (hash: B6LuM2aUKsUw3VXOqn65xKsyt8k18wBDdnIvZVUVBFU=)
                          3: 323830343a343433383a3a2f33322d3332203d3e20323637363130.roa (hash: n4tTysCzTobthCm+zBjd4J4xD0JsGNr1Ppo/RW73xQ4=)
                          4: 34352e37302e3234382e302f32332d3233203d3e20323637363130.roa (hash: mSM7OCGhFH7RMgf5qKpkruxHUVBqrdz+N977ubYjHjY=)
                          5: 34352e37302e3235302e302f32332d3233203d3e20323637363130.roa (hash: BmvqHK2fupe8KEf54lm4S/5cU4T6TTRXQlTvdTqhNx0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B.crl
                          rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 12:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:63:75:0f:68:01:df:f9:5e:f1:9f:7c:82:81:b9:39:e8:9a:30:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B
        Validity
            Not Before: Jan  9 10:18:10 2024 GMT
            Not After : Jan 10 12:51:10 2024 GMT
        Subject: CN=CC2A06189EEC5BAEE0BCAF77A019F6211CE5769C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e8:5b:91:89:97:3a:13:e6:5d:29:14:8e:ed:
                    2e:af:f8:22:1f:93:88:3a:31:82:5b:00:f8:fd:34:
                    fc:f9:33:64:05:93:c1:3a:ae:93:8e:d3:5d:b8:8b:
                    ad:0f:58:8a:61:b8:2f:be:92:75:06:a4:4f:a5:8b:
                    8d:28:30:ae:64:e0:04:6e:c8:1e:5d:df:85:99:29:
                    44:2e:4a:04:e7:a0:ab:19:13:cc:f3:3a:ca:7a:57:
                    ab:0b:22:7c:50:c5:39:65:af:f6:62:1f:bd:50:26:
                    e2:63:7c:5b:09:82:19:73:b9:28:67:b7:90:14:b7:
                    67:43:0c:bc:25:3a:f7:ca:45:da:10:c1:c8:e6:62:
                    b7:b8:a0:1a:9c:4b:00:07:66:fc:d5:19:3f:33:91:
                    ae:14:df:7f:2d:d8:fd:39:8b:fb:b3:7b:5d:5a:97:
                    6b:bd:ca:b5:7a:0a:9f:13:14:98:24:9a:52:0e:54:
                    26:c3:77:74:32:fc:d8:db:25:48:e8:64:9b:07:ca:
                    14:67:a5:7f:26:b0:10:97:c6:53:c8:c3:0a:85:2e:
                    7d:f5:ec:95:27:9d:87:f2:55:4e:f4:54:f0:bc:6d:
                    d2:ff:f6:46:a0:05:73:85:97:e9:00:37:f4:aa:fa:
                    cb:d4:da:3e:eb:f4:ad:bd:9a:c8:18:23:64:40:63:
                    d8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2A:06:18:9E:EC:5B:AE:E0:BC:AF:77:A0:19:F6:21:1C:E5:76:9C
            X509v3 Authority Key Identifier:
                keyid:CE:9A:4E:28:9A:0F:1C:A3:1B:E0:31:4A:93:BF:DC:01:DC:EB:0E:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:64:21:c4:6c:8a:4d:07:90:15:a2:44:ec:2d:1f:28:10:ba:
         2c:1b:e6:27:f1:fd:3a:d2:e9:5c:f5:61:f4:21:af:eb:ec:7f:
         09:62:21:67:bc:59:bb:df:17:31:5c:89:ea:55:38:2d:6a:c3:
         d1:0d:ad:1e:37:a8:b0:12:71:8b:98:bc:4d:54:23:fd:4d:c1:
         50:b2:09:24:e0:a8:c0:ff:b6:00:2c:56:7b:35:42:ff:57:e8:
         0d:a0:e3:62:91:ea:a8:ff:df:1f:83:fb:c9:cc:c7:5c:e7:b3:
         40:85:d8:f4:a7:41:d8:84:1d:bc:de:53:43:59:19:30:9d:51:
         c6:54:5a:99:6a:57:fc:51:83:bc:99:3d:91:ca:b8:2d:fc:76:
         a3:c5:95:95:65:82:ca:42:6e:f3:ca:f6:25:c2:7f:61:92:09:
         2e:0e:00:54:b7:a4:67:da:a5:9c:6d:ae:6f:cc:35:8b:05:43:
         f5:9c:d4:71:b8:3d:dd:27:49:9f:39:03:ed:37:25:35:3b:e1:
         39:d3:78:7d:b3:57:aa:7d:92:44:e5:ce:19:a7:85:a3:d6:6b:
         e2:93:b5:58:ea:47:0d:18:7e:6b:84:45:42:eb:94:05:af:cd:
         70:bb:d9:88:24:69:9d:ee:74:5e:39:6d:4f:9b:55:21:ec:d5:
         89:bf:b5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:55 2024 by rpki-client on console.sobornost.net