Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/C8DC8A11BCAE1099820440AC9DEDA78F35E4E8D1.mft
File:                     C8DC8A11BCAE1099820440AC9DEDA78F35E4E8D1.mft (raw, json)
Hash identifier:          n7w20CpJaY+19lfKSme2JIstHdmG2EmeLOBLaIVvSwE=
Subject key identifier:   EC:B5:83:EE:38:F9:B4:24:F6:1E:2A:9B:2D:71:BC:08:8B:4D:28:B7
Authority key identifier: C8:DC:8A:11:BC:AE:10:99:82:04:40:AC:9D:ED:A7:8F:35:E4:E8:D1
Certificate issuer:       /CN=C8DC8A11BCAE1099820440AC9DEDA78F35E4E8D1
Certificate serial:       7F2394BA931025C6B801B0AAD0981F736732C8E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8DC8A11BCAE1099820440AC9DEDA78F35E4E8D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/C8DC8A11BCAE1099820440AC9DEDA78F35E4E8D1.mft
Manifest number:          018D
Signing time:             Tue 09 Jan 2024 08:54:14 +0000
Manifest this update:     Tue 09 Jan 2024 08:49:14 +0000
Manifest next update:     Wed 10 Jan 2024 11:39:14 +0000
Files and hashes:         1: C8DC8A11BCAE1099820440AC9DEDA78F35E4E8D1.crl (hash: zv4OxyMvzZ+bP8Aa0QXzAkDeqPfS+URqpy1X8lY0Ygs=)
                          2: 34352e3136372e3133362e302f32322d3234203d3e20323638303637.roa (hash: xSzHt2ZpSp94vToRveiXxpW5eDpZGu4LI6LQM7Q3njE=)
                          3: 323830343a353737383a3a2f33322d3334203d3e20323638303637.roa (hash: dz893AWQU82CuCf+k0KlNjYid8nf/usWwJGq9+LGN2s=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/C8DC8A11BCAE1099820440AC9DEDA78F35E4E8D1.crl
                          rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/C8DC8A11BCAE1099820440AC9DEDA78F35E4E8D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8DC8A11BCAE1099820440AC9DEDA78F35E4E8D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 11:39:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:23:94:ba:93:10:25:c6:b8:01:b0:aa:d0:98:1f:73:67:32:c8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8DC8A11BCAE1099820440AC9DEDA78F35E4E8D1
        Validity
            Not Before: Jan  9 08:49:14 2024 GMT
            Not After : Jan 10 11:39:14 2024 GMT
        Subject: CN=ECB583EE38F9B424F61E2A9B2D71BC088B4D28B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d3:a0:f1:ca:57:e1:6a:a7:92:e3:af:51:e9:
                    a6:d4:f6:ff:73:97:10:e5:1d:fe:10:96:44:be:ee:
                    63:91:3a:7b:62:11:85:ff:f9:09:f8:f2:33:1a:7c:
                    82:a8:2a:e8:a8:ce:85:62:71:41:18:3d:cd:19:bf:
                    ae:aa:4b:a9:47:ea:5b:33:ec:ae:ea:5f:3b:a9:42:
                    aa:fe:31:48:bb:48:bd:d6:eb:54:68:e9:50:ec:ef:
                    6a:ab:c6:06:a6:05:b0:a8:e4:98:fe:dc:be:32:59:
                    97:ec:d4:06:c6:e8:2d:a9:1d:fd:eb:70:34:b1:da:
                    e1:c3:66:00:52:d1:e5:f7:b4:d8:65:a7:61:e6:bb:
                    f9:00:90:ee:09:b6:e1:25:df:e7:2d:0b:74:b7:75:
                    81:74:bf:c3:8d:d0:e2:41:cf:1a:c0:78:6a:da:a1:
                    08:7b:1a:36:57:d6:b5:ed:d3:a2:fb:bd:0d:e4:f6:
                    35:23:46:66:23:2f:48:e8:ca:b6:4a:77:76:85:66:
                    66:5e:5d:53:2c:17:5f:db:b1:38:78:12:a1:fd:25:
                    96:35:d6:ec:99:bf:3e:35:9a:12:6b:d5:39:39:89:
                    92:64:27:18:71:f5:6c:0e:e5:a1:64:ae:65:69:55:
                    d7:b7:cf:53:43:ca:33:6a:9b:59:77:22:4f:54:11:
                    a4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B5:83:EE:38:F9:B4:24:F6:1E:2A:9B:2D:71:BC:08:8B:4D:28:B7
            X509v3 Authority Key Identifier:
                keyid:C8:DC:8A:11:BC:AE:10:99:82:04:40:AC:9D:ED:A7:8F:35:E4:E8:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/C8DC8A11BCAE1099820440AC9DEDA78F35E4E8D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8DC8A11BCAE1099820440AC9DEDA78F35E4E8D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/C8DC8A11BCAE1099820440AC9DEDA78F35E4E8D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:d8:14:82:bd:fb:c9:55:91:81:c5:ec:e1:90:ea:72:59:f4:
         e9:0a:57:e4:50:36:ef:66:0d:d5:ad:05:a6:c3:c0:25:78:66:
         28:95:5a:58:7e:29:45:ab:99:73:2c:bd:46:97:e8:84:71:dd:
         a0:42:04:48:84:e0:8b:84:5e:97:90:67:17:f7:64:60:32:96:
         dd:4a:a6:6e:06:85:24:de:a3:2a:8b:bc:42:0d:97:49:72:36:
         8f:e7:2f:a6:ee:ec:b7:4d:b0:4c:7a:0f:64:f8:59:69:e6:27:
         65:f2:13:16:4e:29:94:50:2a:1c:e6:c5:9f:d6:b6:ff:61:03:
         b4:d3:c5:61:e2:fc:cf:be:47:ca:c9:5b:3d:a0:d2:08:89:15:
         2c:f9:be:c6:f5:ba:e1:2d:3b:e3:14:53:53:e8:c6:05:0d:88:
         0d:23:61:ce:cc:cd:0e:0c:49:66:1a:42:03:25:34:1b:07:d3:
         9b:56:94:b0:cc:28:ee:e6:93:11:73:e8:e2:ef:73:07:4a:e7:
         67:73:3d:2a:e0:1c:0f:6d:f6:b0:e0:38:6b:39:2e:cb:36:9e:
         aa:39:5a:91:87:5c:c2:d3:ce:02:3d:34:db:75:e1:f9:49:3b:
         c2:16:09:7e:6c:02:0a:a0:df:56:2d:5a:1d:52:71:7f:a0:4b:
         90:cc:c4:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfyOUupMQJca4AbCq0Jgfc2cyyOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhEQzhBMTFCQ0FFMTA5OTgyMDQ0MEFDOURFREE3OEYz
NUU0RThEMTAeFw0yNDAxMDkwODQ5MTRaFw0yNDAxMTAxMTM5MTRaMDMxMTAvBgNV
BAMTKEVDQjU4M0VFMzhGOUI0MjRGNjFFMkE5QjJENzFCQzA4OEI0RDI4QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC506DxylfhaqeS469R6abU9v9z
lxDlHf4QlkS+7mOROntiEYX/+Qn48jMafIKoKuiozoVicUEYPc0Zv66qS6lH6lsz
7K7qXzupQqr+MUi7SL3W61Ro6VDs72qrxgamBbCo5Jj+3L4yWZfs1AbG6C2pHf3r
cDSx2uHDZgBS0eX3tNhlp2Hmu/kAkO4JtuEl3+ctC3S3dYF0v8ON0OJBzxrAeGra
oQh7GjZX1rXt06L7vQ3k9jUjRmYjL0joyrZKd3aFZmZeXVMsF1/bsTh4EqH9JZY1
1uyZvz41mhJr1Tk5iZJkJxhx9WwO5aFkrmVpVde3z1NDyjNqm1l3Ik9UEaRpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU7LWD7jj5tCT2HiqbLXG8CItNKLcwHwYDVR0j
BBgwFoAUyNyKEbyuEJmCBECsne2njzXk6NEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1pyNXd6SDVZRjhWU2hmYnFkeG9HOXdtQ0ZlV0tIZXJ2bUw3M3dmMnFM
dWYvMC9DOERDOEExMUJDQUUxMDk5ODIwNDQwQUM5REVEQTc4RjM1RTRFOEQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M4REM4QTExQkNBRTEwOTk4
MjA0NDBBQzlERURBNzhGMzVFNEU4RDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N1pyNXd6SDVZRjhWU2hmYnFkeG9HOXdtQ0ZlV0tIZXJ2bUw3M3dmMnFMdWYvMC9D
OERDOEExMUJDQUUxMDk5ODIwNDQwQUM5REVEQTc4RjM1RTRFOEQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAftgUgr37yVWRgcXs4ZDqcln06QpX5FA272YN1a0FpsPAJXhmKJVaWH4pRauZ
cyy9RpfohHHdoEIESITgi4Rel5BnF/dkYDKW3UqmbgaFJN6jKou8Qg2XSXI2j+cv
pu7st02wTHoPZPhZaeYnZfITFk4plFAqHObFn9a2/2EDtNPFYeL8z75HyslbPaDS
CIkVLPm+xvW64S074xRTU+jGBQ2IDSNhzszNDgxJZhpCAyU0GwfTm1aUsMwo7uaT
EXPo4u9zB0rnZ3M9KuAcD232sOA4azkuyzaeqjlakYdcwtPOAj0023Xh+Uk7whYJ
fmwCCqDfVi1aHVJxf6BLkMzERA==
-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:27 2024 by rpki-client on console.sobornost.net