Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/D61E35C6D73BF7E003298CCB24C4D4586086BB9D.mft
File:                     D61E35C6D73BF7E003298CCB24C4D4586086BB9D.mft (raw, json)
Hash identifier:          ChKdOxc3FxZhQGh4e9yJKHC/Vwu6wL8p5oiL39h8H/o=
Subject key identifier:   DE:F0:61:1F:C7:E1:A2:70:BC:70:19:8C:90:89:3F:66:C9:95:44:17
Authority key identifier: D6:1E:35:C6:D7:3B:F7:E0:03:29:8C:CB:24:C4:D4:58:60:86:BB:9D
Certificate issuer:       /CN=D61E35C6D73BF7E003298CCB24C4D4586086BB9D
Certificate serial:       0D6D8B1428D1CA2B0BEA235E40FFE6B1F700445E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D61E35C6D73BF7E003298CCB24C4D4586086BB9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/D61E35C6D73BF7E003298CCB24C4D4586086BB9D.mft
Manifest number:          36
Signing time:             Tue 09 Jan 2024 02:03:37 +0000
Manifest this update:     Tue 09 Jan 2024 01:58:37 +0000
Manifest next update:     Wed 10 Jan 2024 03:33:37 +0000
Files and hashes:         1: 3136342e3136332e3131362e302f32322d3233203d3e20323635393631.roa (hash: 1AYYUQDSapgSyTb0AnLfykWx/b4L6WDHmhYxAPV5JL0=)
                          2: D61E35C6D73BF7E003298CCB24C4D4586086BB9D.crl (hash: k9uHv/AfErQfWQkTiouHECElx+T5EmLonm0xiFzxZBY=)
                          3: 323830343a343037383a3a2f33322d3333203d3e20323635393631.roa (hash: 7TshpJz7gLn3wkLoR/kvIvijvKlhJIDzANissvYFbPI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/D61E35C6D73BF7E003298CCB24C4D4586086BB9D.crl
                          rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/D61E35C6D73BF7E003298CCB24C4D4586086BB9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D61E35C6D73BF7E003298CCB24C4D4586086BB9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 03:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:6d:8b:14:28:d1:ca:2b:0b:ea:23:5e:40:ff:e6:b1:f7:00:44:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D61E35C6D73BF7E003298CCB24C4D4586086BB9D
        Validity
            Not Before: Jan  9 01:58:37 2024 GMT
            Not After : Jan 10 03:33:37 2024 GMT
        Subject: CN=DEF0611FC7E1A270BC70198C90893F66C9954417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:29:b5:9a:d3:3c:d3:82:d5:32:28:a9:7b:3f:
                    b3:6f:d9:92:59:5a:cd:d0:78:45:87:92:26:e6:3b:
                    a5:e0:0a:f6:38:90:e8:58:11:ca:13:23:3d:88:e9:
                    58:ca:3f:b5:e7:5d:cb:00:b7:4b:31:de:3d:0c:ea:
                    77:31:a0:6a:d1:d0:f1:2f:44:6b:a3:a9:17:ce:4c:
                    15:0e:88:7a:40:34:5f:99:75:57:8d:f1:0d:66:22:
                    e8:a5:2e:4e:a7:30:6e:cf:ac:8f:c2:01:e1:fd:ed:
                    f5:2f:28:6c:8a:3d:29:6c:e1:14:fe:7a:ab:62:26:
                    10:9a:0b:da:f1:e1:3a:30:80:98:2d:32:54:96:34:
                    86:b1:ad:e6:ac:51:84:b6:3d:82:3a:cc:de:a6:ad:
                    b2:c0:ff:80:f0:8c:e4:af:b7:f0:66:38:e2:91:7e:
                    77:57:52:3d:7d:3b:32:1c:78:3c:d6:4a:56:06:a3:
                    7a:b8:26:0f:2d:d5:68:bd:e0:45:7d:58:b3:09:94:
                    b5:e2:fc:01:5b:fb:fc:ac:89:ce:11:da:5c:a2:6f:
                    e9:a2:8f:40:f5:35:ac:43:55:73:51:23:e4:ba:dc:
                    e3:d2:3b:73:13:91:f8:47:eb:d7:ef:1f:c9:79:b8:
                    80:f7:38:8f:c5:69:bb:f1:b6:ed:7c:91:c3:31:20:
                    cb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F0:61:1F:C7:E1:A2:70:BC:70:19:8C:90:89:3F:66:C9:95:44:17
            X509v3 Authority Key Identifier:
                keyid:D6:1E:35:C6:D7:3B:F7:E0:03:29:8C:CB:24:C4:D4:58:60:86:BB:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/D61E35C6D73BF7E003298CCB24C4D4586086BB9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D61E35C6D73BF7E003298CCB24C4D4586086BB9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/D61E35C6D73BF7E003298CCB24C4D4586086BB9D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:5e:9a:0a:94:55:99:28:20:e7:ba:b2:1b:47:bf:48:8a:0a:
         a4:84:9b:bc:8d:e6:40:a4:c9:56:63:b5:cd:a9:83:ef:90:c9:
         42:32:e7:22:d1:da:ff:f2:1c:6d:ff:a4:3c:9d:e3:dc:1b:69:
         53:e2:a5:f8:ae:a1:00:69:da:d1:aa:e9:cf:b9:89:b7:87:52:
         ae:4b:f1:0e:e2:0a:0a:db:ee:2d:36:85:78:f9:ff:7c:b4:1e:
         78:c3:dd:24:58:bf:31:f6:91:f8:f4:a9:d4:d5:05:ae:32:b1:
         9d:ba:cc:cd:fd:ea:49:db:e4:da:b0:c0:b2:26:00:e9:66:fa:
         d4:01:b1:e9:3f:90:41:a3:03:c6:53:e1:3c:55:35:cc:75:d3:
         df:86:1c:b3:83:0b:9b:d2:d3:19:1e:a6:f7:a6:f3:5d:15:f5:
         ea:cf:a9:61:ab:b7:0c:e7:38:ca:95:68:f9:d6:12:74:4e:4e:
         55:3b:87:da:17:00:8f:e1:94:10:e2:c3:7f:16:d4:9c:6a:b3:
         32:6e:42:7e:41:1f:7e:3f:f7:65:83:11:d5:a0:e1:82:87:e1:
         fc:ec:74:05:d3:6f:0c:54:52:10:99:db:79:39:82:9e:76:e2:
         57:44:4e:b4:88:4f:5d:4f:11:a5:ac:6a:48:3c:dd:7c:28:7d:
         c5:cd:24:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 03:49:00 2024 by rpki-client on console.sobornost.net