Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/26734E052303F932E311FB193F1624A7DC9609D7.mft
File:                     26734E052303F932E311FB193F1624A7DC9609D7.mft (raw, json)
Hash identifier:          Kx0nk6w6ZXSjMBw/yhrl+wcMay/ftLOJzzRc8RheUn8=
Subject key identifier:   F8:75:00:77:9F:04:04:7D:E5:6B:BE:75:3A:A2:0F:2F:17:FF:65:BC
Authority key identifier: 26:73:4E:05:23:03:F9:32:E3:11:FB:19:3F:16:24:A7:DC:96:09:D7
Certificate issuer:       /CN=26734E052303F932E311FB193F1624A7DC9609D7
Certificate serial:       127C1DA6B36F34D569A9426DC3197E9E454ACD40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26734E052303F932E311FB193F1624A7DC9609D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/26734E052303F932E311FB193F1624A7DC9609D7.mft
Manifest number:          03A2
Signing time:             Tue 09 Jan 2024 08:15:10 +0000
Manifest this update:     Tue 09 Jan 2024 08:10:10 +0000
Manifest next update:     Wed 10 Jan 2024 10:44:10 +0000
Files and hashes:         1: 34352e3139302e32322e302f32332d3233203d3e20323639363038.roa (hash: VE+3Ivs3f7hEj57yIPz8FoijUL0nX4qVMahFbU9qG/w=)
                          2: 26734E052303F932E311FB193F1624A7DC9609D7.crl (hash: LqLLvXt+fXbGvSSYRXIVSZN75dsabLboDfPE6fUsUvU=)
                          3: 34352e3139302e32302e302f32342d3234203d3e20323639363038.roa (hash: rccMn5AVhM/kwPrDEPVDc1ty5ElOxhbb1o7F0H+wJss=)
                          4: 34352e3139302e32332e302f32342d3234203d3e20323639363038.roa (hash: bRWibkpQo42ByllcgaZV3t3ycpIYOZwNRhtEbZYfplY=)
                          5: 323830343a363732383a3a2f33322d3332203d3e20323639363038.roa (hash: 1l8oJ7eFEfjHdDrvKHbLuIkpn6n1pVeXgVRm6zqlQbU=)
                          6: 323830343a363732383a383030303a3a2f33332d3333203d3e20323639363038.roa (hash: hH2pMsiPDZ6GfF9o36TiTCuLw31MmIVfcarGJElikCM=)
                          7: 34352e3139302e32302e302f32322d3232203d3e20323639363038.roa (hash: TGOgML2JzzzYiXLe4+Abh43tK6ksjEkhNHQjgjFza/E=)
                          8: 323830343a363732383a3a2f33332d3333203d3e20323639363038.roa (hash: GWqnCWuZ6QP5tK3PM+DaTP7lW0AWKn96hbMOqDViGWE=)
                          9: 34352e3139302e32302e302f32352d3235203d3e20323639363038.roa (hash: W7TZADbHvsrTFDKtLVSXfN5oa1BxMlyQY9RsILu9ZBA=)
                          10: 34352e3139302e32302e302f32332d3233203d3e20323639363038.roa (hash: A6Z+gEbPVhSePe0F3TF4vDXDp29TJEKr2ReOrF1+tXU=)
                          11: 34352e3139302e32322e302f32342d3234203d3e20323639363038.roa (hash: Yc1qaEPySL4t402gE/u92CwsYTpCwUD8KY56UXcMWRQ=)
                          12: 34352e3139302e32312e302f32342d3234203d3e20323639363038.roa (hash: 6CwWKil3XbZ22LOpJdRlv2Zlyi5ePEltf/SE8BnfLjE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/26734E052303F932E311FB193F1624A7DC9609D7.crl
                          rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/26734E052303F932E311FB193F1624A7DC9609D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26734E052303F932E311FB193F1624A7DC9609D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 10:44:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:7c:1d:a6:b3:6f:34:d5:69:a9:42:6d:c3:19:7e:9e:45:4a:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26734E052303F932E311FB193F1624A7DC9609D7
        Validity
            Not Before: Jan  9 08:10:10 2024 GMT
            Not After : Jan 10 10:44:10 2024 GMT
        Subject: CN=F87500779F04047DE56BBE753AA20F2F17FF65BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:84:57:b4:87:30:09:12:0f:53:8c:f8:b1:5a:
                    fe:c8:0c:a4:3f:88:45:7e:3d:30:bd:51:c9:d0:78:
                    f4:6a:99:4a:11:d7:63:fe:ee:5a:86:ca:ce:55:a4:
                    f7:b1:dd:ec:ca:c0:b0:4e:99:7d:7d:d9:5d:0f:9f:
                    d0:5e:6e:e2:08:74:f6:42:39:7c:38:c1:2a:43:c5:
                    fd:d5:da:c6:65:d8:71:a8:5f:57:62:d4:79:53:aa:
                    3a:fd:a5:69:c3:4f:46:e4:78:19:8c:67:21:40:a5:
                    4e:7e:52:fb:c0:3f:04:7a:4f:e3:a9:a9:42:61:49:
                    04:c1:f4:d4:c5:32:73:e1:7b:a3:7b:c3:d9:51:8e:
                    92:bf:01:46:21:ac:7a:35:3f:68:f6:0c:21:41:a0:
                    7d:e0:01:b7:44:db:bc:b4:dc:e0:d7:3b:a8:d1:1b:
                    6f:80:15:24:aa:be:6e:29:4a:85:49:63:90:51:dc:
                    b5:90:60:13:fe:40:5b:76:57:aa:b8:73:0c:16:ca:
                    a3:55:ce:37:07:0f:39:39:66:6f:fa:80:40:c4:3b:
                    db:a4:7b:a8:6c:a3:34:bc:04:9c:04:8d:19:33:eb:
                    f8:27:23:22:a2:08:be:0e:04:41:34:12:83:2b:ba:
                    a4:f4:0b:17:b5:08:16:69:a0:74:84:a5:f1:b0:b3:
                    68:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:75:00:77:9F:04:04:7D:E5:6B:BE:75:3A:A2:0F:2F:17:FF:65:BC
            X509v3 Authority Key Identifier:
                keyid:26:73:4E:05:23:03:F9:32:E3:11:FB:19:3F:16:24:A7:DC:96:09:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/26734E052303F932E311FB193F1624A7DC9609D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26734E052303F932E311FB193F1624A7DC9609D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/26734E052303F932E311FB193F1624A7DC9609D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:05:2b:24:42:ac:4c:ae:17:10:e0:50:0e:a9:88:51:82:a7:
         f8:99:e7:47:b8:ec:7c:c1:9a:48:98:42:0e:e3:c2:a8:24:cb:
         4e:e8:97:2f:b7:0c:32:4f:ab:5e:63:f6:c0:26:0f:dc:17:df:
         76:1f:c1:83:51:1d:ee:93:ef:9f:20:98:5d:1a:cd:a5:1e:74:
         76:9c:32:86:c4:c6:d8:ad:df:e2:fa:a7:12:09:f4:36:67:8d:
         97:15:b9:1d:c1:e9:fb:3e:f5:20:42:61:51:4c:fa:69:62:bd:
         33:bf:ea:36:f3:18:05:58:65:8f:62:e4:d0:28:49:53:8c:f6:
         79:c5:cc:9e:fa:c7:8f:53:ab:5b:bf:3a:49:64:06:cf:34:db:
         8c:42:af:8a:36:2a:45:fe:64:f8:db:02:50:49:ac:c5:71:58:
         f3:0d:5c:d8:78:16:5f:1e:a1:f2:98:ca:ee:03:f7:bf:e0:e2:
         df:e9:d3:66:90:01:28:41:75:3f:d2:83:25:d2:fa:d2:29:55:
         e8:9e:65:89:d0:84:ee:8e:85:80:8d:ed:fb:ef:70:ef:31:5f:
         2e:f6:74:bc:4e:98:fd:db:7d:4c:04:8b:ee:64:ad:88:d9:05:
         b8:87:8e:59:08:d8:0c:6f:e3:fc:c7:04:ef:29:a4:5b:86:68:
         40:5d:0a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:57 2024 by rpki-client on console.sobornost.net