Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C.mft
File:                     70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C.mft (raw, json)
Hash identifier:          cHeEQoL4IgmOFVzWaIJ4wlvLr1ASMNFAxD2fNOkw598=
Subject key identifier:   B1:A4:63:98:71:02:D8:40:B6:63:97:D2:A4:DF:1D:7C:F3:EE:BE:6F
Authority key identifier: 70:EB:E5:F7:33:1A:AB:22:96:77:DF:BD:99:8C:3C:3E:D3:3C:EA:4C
Certificate issuer:       /CN=70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C
Certificate serial:       511CB20E53D75A4A731BE48257A647EFAE781573
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C.mft
Manifest number:          A7
Signing time:             Tue 09 Jan 2024 08:19:39 +0000
Manifest this update:     Tue 09 Jan 2024 08:14:39 +0000
Manifest next update:     Wed 10 Jan 2024 08:52:39 +0000
Files and hashes:         1: 323830343a373465343a3a2f33322d3332203d3e20323731303130.roa (hash: us0g93On/A6JCAtww9oln65LSDKXfrbjDxC0visutG0=)
                          2: 3139302e3130362e38382e302f32342d3234203d3e20323731303130.roa (hash: /8gDlKTI1nm8p5fdADzsf1nkAe2h5w1J53VY3cZ/b/A=)
                          3: 3139302e3130362e38392e302f32342d3234203d3e20323731303130.roa (hash: 3W/GLlPUSxjW4Sg7cTtbN19jRE90VANw0C0VnkwE7Mg=)
                          4: 3139302e3130362e39302e302f32342d3234203d3e20323731303130.roa (hash: rX1sNBDafsdLpTmJ82z2JJAqXBBX+FGVG5sY9UHFwGE=)
                          5: 3139302e3130362e39312e302f32342d3234203d3e20323731303130.roa (hash: dOp6godhsJcZAcnNxaMufxjQVx7/pHwgItEfsf5zkPE=)
                          6: 3139302e3130362e38382e302f32322d3232203d3e20323731303130.roa (hash: NjL87jnkzS57tqqBZQbmJBKQQTP1TwEnskOrV6qEeSo=)
                          7: 70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C.crl (hash: RQRPuIKl/tmU0wr0ssdgu8vJbd+5UbD3ijC7bUpEBi0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C.crl
                          rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 08:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1c:b2:0e:53:d7:5a:4a:73:1b:e4:82:57:a6:47:ef:ae:78:15:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C
        Validity
            Not Before: Jan  9 08:14:39 2024 GMT
            Not After : Jan 10 08:52:39 2024 GMT
        Subject: CN=B1A463987102D840B66397D2A4DF1D7CF3EEBE6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:34:96:e8:b2:ac:9b:0b:35:9e:bd:eb:3c:54:
                    ea:fc:48:97:ec:7a:92:90:34:35:e9:61:26:ba:ab:
                    42:d7:38:22:58:d5:6f:98:3e:5f:8b:6b:0a:95:2c:
                    c2:be:5b:e2:68:6a:03:81:98:27:01:0f:6c:41:0d:
                    fa:38:5b:35:3f:ad:59:96:21:d4:a3:10:8b:2b:d9:
                    30:a9:6f:5f:89:af:11:ea:64:d0:08:09:ee:b2:72:
                    c5:f6:28:ec:51:e3:40:51:ad:56:84:ca:03:fe:e7:
                    06:fd:b8:0a:4d:40:5d:c6:51:bd:c0:21:cc:e9:b5:
                    e5:44:a0:3f:cd:43:6a:44:22:04:00:7b:3d:04:a5:
                    73:e0:bf:7e:10:bd:89:c9:b5:61:60:46:c8:a1:af:
                    44:25:bb:cf:ab:ba:d0:0d:9f:4e:76:66:b7:26:6c:
                    f2:b2:41:b9:ef:d3:8c:75:35:f9:31:94:53:fb:bb:
                    8a:f1:fc:02:92:d0:b3:19:ac:e3:b3:d2:1c:e0:ca:
                    8b:a9:6c:e1:67:1d:43:b7:c4:3f:11:27:f9:f7:29:
                    4b:29:21:45:85:2c:fe:4f:4e:91:a9:aa:2e:37:a2:
                    20:b2:66:cc:45:44:23:13:b6:99:15:eb:0a:5e:96:
                    31:40:30:b1:83:d6:7e:3d:bb:6d:71:a6:fa:70:12:
                    68:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A4:63:98:71:02:D8:40:B6:63:97:D2:A4:DF:1D:7C:F3:EE:BE:6F
            X509v3 Authority Key Identifier:
                keyid:70:EB:E5:F7:33:1A:AB:22:96:77:DF:BD:99:8C:3C:3E:D3:3C:EA:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/70EBE5F7331AAB229677DFBD998C3C3ED33CEA4C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:95:26:01:a1:23:79:65:12:d0:d8:ff:fe:a4:5e:13:31:fa:
         ee:64:1a:92:14:13:13:c8:49:72:8a:33:e1:f1:81:33:76:08:
         b1:fe:0e:0f:1e:8c:95:2d:d4:e4:d3:60:30:ca:c8:8e:48:7d:
         0d:8e:2b:81:82:25:1e:56:d4:6c:39:27:c5:57:89:a9:9a:f7:
         c0:41:a8:66:5a:79:1c:2e:64:e0:11:ea:ca:24:77:55:b6:8e:
         a6:ce:0d:fe:7f:15:ad:7e:1c:a0:ad:c5:d1:83:21:0c:3f:a4:
         ab:d1:65:f4:93:ad:83:de:25:cd:76:61:7c:25:33:73:32:9b:
         ec:e9:2b:03:e4:f2:f1:36:83:a1:0a:5a:83:85:36:25:fd:03:
         88:f2:77:ea:47:97:12:ae:a3:58:86:8f:8b:4e:ea:7f:1e:b8:
         56:cb:47:f0:77:49:2b:08:df:99:35:2e:29:98:17:62:57:57:
         90:74:a0:8d:0c:c5:0e:7d:1c:07:90:88:15:eb:f3:44:e8:c7:
         f9:81:be:be:4a:89:8f:88:97:63:bc:83:06:ca:c9:2e:b0:89:
         ff:7a:7f:9d:62:d3:e6:11:17:e7:6d:76:4e:85:9d:65:15:c5:
         3b:bb:f0:45:ba:cd:b5:80:5d:d5:ba:d0:b7:43:51:03:8a:de:
         71:db:b9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:57 2024 by rpki-client on console.sobornost.net