Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/559666084672FD61F081E49F0C76FD1203851E54.mft
File:                     559666084672FD61F081E49F0C76FD1203851E54.mft (raw, json)
Hash identifier:          8fhOwsqZo0qtmLvLCfe4axe1joTJTfuiV/N/EDIP/SQ=
Subject key identifier:   0E:9A:92:4F:E2:DB:38:8F:23:6B:E1:F6:4E:74:AA:E9:38:CC:25:C0
Authority key identifier: 55:96:66:08:46:72:FD:61:F0:81:E4:9F:0C:76:FD:12:03:85:1E:54
Certificate issuer:       /CN=559666084672FD61F081E49F0C76FD1203851E54
Certificate serial:       3604C038BD661FED64568CC114C36A429DFF5822
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/559666084672FD61F081E49F0C76FD1203851E54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/559666084672FD61F081E49F0C76FD1203851E54.mft
Manifest number:          03E8
Signing time:             Tue 09 Jan 2024 08:54:03 +0000
Manifest this update:     Tue 09 Jan 2024 08:49:03 +0000
Manifest next update:     Wed 10 Jan 2024 11:09:03 +0000
Files and hashes:         1: 323830343a333030343a3a2f33322d3438203d3e20323634393236.roa (hash: fTHzdic9n9Bwmjqb7D6RRCdGJ4Vzw28262nPvEXPZyc=)
                          2: 559666084672FD61F081E49F0C76FD1203851E54.crl (hash: 15fnoMf31R1RP6Ts4DXTcv0pVZwxWVZA4eNjqwgxyT4=)
                          3: 3136382e3232382e3137362e302f32322d3234203d3e20323634393236.roa (hash: LKwYorDReLpsjIfO00Mlw9VS5VVufH2zXKwsPn4T11Y=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/559666084672FD61F081E49F0C76FD1203851E54.crl
                          rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/559666084672FD61F081E49F0C76FD1203851E54.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/559666084672FD61F081E49F0C76FD1203851E54.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 11:09:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:04:c0:38:bd:66:1f:ed:64:56:8c:c1:14:c3:6a:42:9d:ff:58:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=559666084672FD61F081E49F0C76FD1203851E54
        Validity
            Not Before: Jan  9 08:49:03 2024 GMT
            Not After : Jan 10 11:09:03 2024 GMT
        Subject: CN=0E9A924FE2DB388F236BE1F64E74AAE938CC25C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d6:6e:f2:f6:e3:08:70:dc:b8:ed:d4:b8:91:
                    4f:7b:b6:05:53:0b:14:31:da:78:59:48:db:93:64:
                    dc:cd:c9:a2:bf:57:8c:eb:6d:1c:8d:58:eb:ce:07:
                    52:df:eb:6f:26:75:b0:e9:74:6a:41:e7:22:9f:1e:
                    af:b5:f9:d5:a2:5e:70:a0:1f:e0:7b:a9:66:db:7e:
                    14:eb:90:d0:86:26:76:e9:82:22:cb:9a:e8:2c:bb:
                    de:7a:93:d6:de:d4:5a:c1:cd:f5:04:95:c5:41:3b:
                    77:d1:f4:19:42:5e:1d:22:ff:d7:12:40:58:7d:0f:
                    a5:0a:7b:54:ea:17:cf:c2:89:e8:e7:c4:d4:75:e3:
                    cf:d4:2f:c1:4b:c1:d4:e4:f3:dc:fc:f2:be:86:95:
                    2c:67:02:bd:7b:28:c4:ce:29:23:60:cf:34:79:2a:
                    a2:04:ba:2d:cb:d6:1a:69:fe:13:9a:ca:c3:bf:4c:
                    d8:c4:74:26:0f:28:da:1b:06:3e:7c:d2:94:6e:9a:
                    ed:a9:bc:88:b9:ba:99:67:73:28:98:9c:eb:ea:46:
                    b2:45:00:d6:5d:75:5f:6d:fa:a3:44:73:27:85:e5:
                    03:51:22:0a:3b:aa:3b:15:ee:5a:40:96:18:28:8e:
                    9a:84:ef:f5:16:02:1b:b8:2d:6a:2a:b8:44:60:64:
                    da:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9A:92:4F:E2:DB:38:8F:23:6B:E1:F6:4E:74:AA:E9:38:CC:25:C0
            X509v3 Authority Key Identifier:
                keyid:55:96:66:08:46:72:FD:61:F0:81:E4:9F:0C:76:FD:12:03:85:1E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/559666084672FD61F081E49F0C76FD1203851E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/559666084672FD61F081E49F0C76FD1203851E54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/559666084672FD61F081E49F0C76FD1203851E54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:bb:8b:a2:f4:d0:38:9d:cf:69:a5:c5:7d:a3:f3:6e:fe:77:
         fa:fb:9b:cd:cb:53:73:73:e7:90:42:83:c6:26:ec:db:92:a5:
         59:45:00:e7:87:45:98:f6:52:19:2b:ea:ef:81:3c:cd:98:52:
         39:7b:17:ea:41:da:e6:ad:b1:a7:dc:58:1a:d5:74:0c:38:8a:
         e8:59:8d:f7:c2:5e:44:3f:aa:b7:7c:fd:ba:55:2b:9f:dc:b7:
         65:72:9f:14:83:f5:09:08:29:7d:31:87:c8:bd:1c:12:fe:f6:
         01:03:f3:fb:86:c8:97:8d:7a:03:d6:2d:61:63:40:44:45:9a:
         ea:76:7c:d6:41:d5:51:88:09:35:ba:cf:84:95:dd:37:37:61:
         16:cf:24:0e:d5:d3:ab:fc:eb:df:7e:99:48:c3:9b:41:ad:b1:
         af:f0:72:26:3b:27:3d:17:a3:dc:b0:2d:f1:dc:aa:d5:ae:e6:
         bf:e3:42:08:78:68:0d:1a:60:2a:fb:8e:9c:ed:cd:51:0b:4e:
         15:4b:fa:49:89:e2:90:70:04:59:45:91:f9:ff:54:23:3e:fb:
         45:0f:6d:13:5d:4f:5b:e6:88:78:c9:9f:66:62:9c:44:94:98:
         55:ca:04:ba:e3:63:2d:51:ac:0f:27:36:f4:76:ca:43:cc:7a:
         e6:9b:29:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:57 2024 by rpki-client on console.sobornost.net