Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/0296E8534D3AE275B3F059BE9EE60DDB30CC34A1.mft
File:                     0296E8534D3AE275B3F059BE9EE60DDB30CC34A1.mft (raw, json)
Hash identifier:          bcQnqErdDglzTv5P+mKtkRm3dtfPGebR3WtBjK43BdI=
Subject key identifier:   0F:ED:B4:E7:F7:84:85:0E:42:AB:27:26:F5:03:40:AC:57:C0:14:3F
Authority key identifier: 02:96:E8:53:4D:3A:E2:75:B3:F0:59:BE:9E:E6:0D:DB:30:CC:34:A1
Certificate issuer:       /CN=0296E8534D3AE275B3F059BE9EE60DDB30CC34A1
Certificate serial:       5DCCF0E86A439708122C8F99552A8A9A9AEA0554
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0296E8534D3AE275B3F059BE9EE60DDB30CC34A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/0296E8534D3AE275B3F059BE9EE60DDB30CC34A1.mft
Manifest number:          01F7
Signing time:             Tue 09 Jan 2024 03:08:26 +0000
Manifest this update:     Tue 09 Jan 2024 03:03:26 +0000
Manifest next update:     Wed 10 Jan 2024 06:30:26 +0000
Files and hashes:         1: 3137372e37322e3133362e302f32312d3236203d3e203533303138.roa (hash: Rn7mLAtx8Vh6w7MOEwqkqtOFQkjIFz/PikKQ1Rgv4cM=)
                          2: 323830343a333534633a383530303a3a2f34302d3430203d3e203533303138.roa (hash: RgDXxGrqfNHZIglUPLH1AaMs1iFSz55A6uJASstUbsY=)
                          3: 3137372e37322e3132382e302f32312d3234203d3e203533303138.roa (hash: J/+YlvRtMa3SgIpAH2aXrUPzF/zylQKDDhdhizcD+AI=)
                          4: 0296E8534D3AE275B3F059BE9EE60DDB30CC34A1.crl (hash: /x9aQqDfeZmF+TvlLHs8dV3Jza+6OPgbn90CaJ6yUKw=)
                          5: 323830343a333534633a383630303a3a2f34302d3430203d3e203533303138.roa (hash: 5K3uMScEi2HZ6tI87jpQ6heGc+iYMy2t3uFH1ynJ/CQ=)
                          6: 323830343a333534633a3a2f33322d3335203d3e203533303138.roa (hash: hXZL8uARsebn7s8OP+J0MbQTTZWuTmzKHHpB3+w3dls=)
                          7: 323830343a333534633a343530303a3a2f34302d3430203d3e203533303138.roa (hash: khcI/YUhIcacyrFqjcsUDdTqHfA4Jq3QXoLGtdhKVjI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/0296E8534D3AE275B3F059BE9EE60DDB30CC34A1.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/0296E8534D3AE275B3F059BE9EE60DDB30CC34A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0296E8534D3AE275B3F059BE9EE60DDB30CC34A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:cc:f0:e8:6a:43:97:08:12:2c:8f:99:55:2a:8a:9a:9a:ea:05:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0296E8534D3AE275B3F059BE9EE60DDB30CC34A1
        Validity
            Not Before: Jan  9 03:03:26 2024 GMT
            Not After : Jan 10 06:30:26 2024 GMT
        Subject: CN=0FEDB4E7F784850E42AB2726F50340AC57C0143F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:23:4a:61:f9:f0:06:f2:aa:b2:77:4b:42:87:
                    40:f6:23:80:f7:ac:19:89:98:d7:4c:51:8e:1a:49:
                    41:21:c6:3c:3e:a3:76:70:36:6e:29:77:df:10:96:
                    f2:0f:01:cb:99:4a:0b:6c:16:51:87:06:b3:d7:c6:
                    59:d0:da:17:86:e2:27:5e:6e:38:38:75:ca:37:ba:
                    63:e3:8b:f1:35:25:8d:f0:1a:76:db:fb:dd:e5:77:
                    17:06:db:57:bb:1d:0f:07:7e:88:96:71:c7:dd:dc:
                    27:f8:13:72:e6:37:a0:e9:3b:41:15:35:b0:eb:31:
                    8d:bc:82:ed:b5:94:bd:66:d4:57:c3:d4:27:6a:21:
                    ef:18:f7:f6:46:42:e5:97:e0:81:72:1c:8a:b1:ac:
                    1c:c0:64:37:b3:9c:8b:97:80:48:c0:34:c5:3b:26:
                    53:da:0b:3d:23:22:d5:a8:e1:d6:ce:82:f1:23:ba:
                    e9:9f:1c:30:a5:3b:29:58:98:09:be:3b:70:a1:94:
                    0f:d3:8d:2b:47:f7:0c:be:01:33:1c:0b:96:e5:24:
                    a8:cb:7d:d6:57:db:bc:53:ed:11:73:f8:38:43:86:
                    20:55:c9:a9:61:98:d3:7f:dd:74:6d:ed:3e:b2:a2:
                    00:45:eb:f0:0a:db:eb:35:16:1e:56:80:e5:d5:f5:
                    e5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:ED:B4:E7:F7:84:85:0E:42:AB:27:26:F5:03:40:AC:57:C0:14:3F
            X509v3 Authority Key Identifier:
                keyid:02:96:E8:53:4D:3A:E2:75:B3:F0:59:BE:9E:E6:0D:DB:30:CC:34:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/0296E8534D3AE275B3F059BE9EE60DDB30CC34A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0296E8534D3AE275B3F059BE9EE60DDB30CC34A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/0296E8534D3AE275B3F059BE9EE60DDB30CC34A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:bb:18:d7:df:39:d1:11:c1:cd:93:36:5c:fa:28:34:83:6b:
         69:b6:84:08:d9:b0:28:57:fa:d0:f0:19:3c:4e:e5:95:94:67:
         f0:de:09:92:ab:b2:00:2b:84:fc:0b:04:25:25:7e:db:94:d2:
         e7:17:59:36:c8:d7:7f:18:a1:d4:d7:dd:ce:f5:f7:6c:1f:ca:
         59:a0:bb:f2:dd:53:30:01:53:34:47:6b:95:e7:27:94:b4:a7:
         e2:50:2c:22:ad:19:05:17:31:f8:6b:c7:e2:04:7e:5b:39:79:
         b4:6e:a8:b8:86:9c:24:ef:d7:01:15:9d:d7:5c:fa:5d:57:23:
         5c:1e:f8:19:b2:be:c1:cc:e3:54:9b:7d:fd:82:c2:e2:60:1b:
         88:36:5d:f7:4f:23:ad:1a:ea:3d:8b:02:e8:b8:a8:27:c7:e5:
         84:95:43:60:62:c8:94:de:f3:03:60:6e:86:ea:a1:19:81:63:
         79:19:77:b9:74:88:18:d2:33:19:87:01:bf:20:3b:10:15:86:
         c7:82:fc:9d:a4:11:d5:d4:4a:1c:7d:cb:90:19:80:24:71:e3:
         ab:0c:43:81:91:33:f2:7e:99:66:1e:41:7d:a3:4d:33:35:f8:
         23:b3:db:08:19:2c:f5:bb:f0:b4:fc:4d:31:c7:09:50:a9:4c:
         45:3f:47:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 05:55:27 2024 by rpki-client on console.sobornost.net