Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/B795E64BA1E2F5B1580AA0E798426FEAF258FA8F.mft
File:                     B795E64BA1E2F5B1580AA0E798426FEAF258FA8F.mft (raw, json)
Hash identifier:          AU+XO6u0tCTDS6IM8Bd+TPbsiTgBbQrTfxd6AhhSbLM=
Subject key identifier:   82:61:DF:A7:EE:06:FE:A5:4C:3D:C5:79:B6:C8:01:7E:CE:F9:AD:D2
Authority key identifier: B7:95:E6:4B:A1:E2:F5:B1:58:0A:A0:E7:98:42:6F:EA:F2:58:FA:8F
Certificate issuer:       /CN=B795E64BA1E2F5B1580AA0E798426FEAF258FA8F
Certificate serial:       4D6FEB8FC88FCA5F269279D7C884A52C955E14FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B795E64BA1E2F5B1580AA0E798426FEAF258FA8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/B795E64BA1E2F5B1580AA0E798426FEAF258FA8F.mft
Manifest number:          0204
Signing time:             Mon 08 Jan 2024 23:52:07 +0000
Manifest this update:     Mon 08 Jan 2024 23:47:07 +0000
Manifest next update:     Wed 10 Jan 2024 03:03:07 +0000
Files and hashes:         1: 323830343a353866343a3a2f33322d3335203d3e20323638313630.roa (hash: Sig1u+PmrTwdZrgfDpbhvIIObzemeDCdeZV/ZTUVdtY=)
                          2: 34352e3137302e3134342e302f32332d3234203d3e20323638313630.roa (hash: KGLPQ5U2eIX1U+pfnFl9iRMwvmcyLAnix1D69p7TNIM=)
                          3: 34352e3137302e3134362e302f32332d3234203d3e20323638313630.roa (hash: EvfuERCDohTJ6qiwURaHUbZ/03IXys6Hm951C+DXK/s=)
                          4: B795E64BA1E2F5B1580AA0E798426FEAF258FA8F.crl (hash: FSLYYdD1AIZGfhdtkfQrY2B4/cMMkuD6vQkbkD6M0wY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/B795E64BA1E2F5B1580AA0E798426FEAF258FA8F.crl
                          rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/B795E64BA1E2F5B1580AA0E798426FEAF258FA8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B795E64BA1E2F5B1580AA0E798426FEAF258FA8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 01:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:6f:eb:8f:c8:8f:ca:5f:26:92:79:d7:c8:84:a5:2c:95:5e:14:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B795E64BA1E2F5B1580AA0E798426FEAF258FA8F
        Validity
            Not Before: Jan  8 23:47:07 2024 GMT
            Not After : Jan 10 03:03:07 2024 GMT
        Subject: CN=8261DFA7EE06FEA54C3DC579B6C8017ECEF9ADD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d3:b0:25:9e:6a:b5:ef:11:77:2a:93:94:f7:
                    4b:27:6c:a5:7f:99:2a:bb:cf:af:46:14:e6:57:dc:
                    ad:27:4f:c8:f0:74:66:4f:52:b1:8e:87:63:8d:e8:
                    f1:fe:f9:b9:3e:1e:d3:ef:44:5f:04:e0:f1:da:9b:
                    d8:80:11:0a:08:14:01:d6:9a:9c:d8:26:ad:52:9e:
                    6f:f8:5f:72:4d:f8:91:6f:41:51:17:43:de:6a:84:
                    91:6d:47:d7:1f:18:15:3e:4f:50:ea:dd:94:dd:1c:
                    90:f6:73:46:20:c1:59:7d:14:de:1a:b9:2b:48:fe:
                    cb:84:fb:8b:c5:ce:e9:73:5c:84:b4:73:10:c3:83:
                    42:1d:96:da:e7:31:a3:ea:ed:91:cd:8c:7b:58:dd:
                    11:bc:69:4c:8a:6e:ad:33:b5:a4:1c:4f:74:f6:72:
                    c5:47:73:d0:46:c5:60:44:d9:0e:1d:84:04:15:54:
                    38:0c:ea:fa:81:13:fd:3b:db:ff:10:b2:30:7a:4c:
                    d6:0e:84:91:19:7b:3d:a8:00:6b:54:39:7b:94:9b:
                    b3:56:7c:5e:b5:f7:6d:ed:c3:87:c7:c7:81:f1:66:
                    e6:9d:16:17:cb:e2:92:60:7e:49:48:a4:78:81:13:
                    7d:7c:e4:7c:25:db:4c:4b:14:a4:3a:ff:da:4b:45:
                    83:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:61:DF:A7:EE:06:FE:A5:4C:3D:C5:79:B6:C8:01:7E:CE:F9:AD:D2
            X509v3 Authority Key Identifier:
                keyid:B7:95:E6:4B:A1:E2:F5:B1:58:0A:A0:E7:98:42:6F:EA:F2:58:FA:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/B795E64BA1E2F5B1580AA0E798426FEAF258FA8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B795E64BA1E2F5B1580AA0E798426FEAF258FA8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/B795E64BA1E2F5B1580AA0E798426FEAF258FA8F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:fa:37:66:c7:e6:ed:79:f1:6d:69:b8:e9:6a:dc:4a:ca:63:
         5a:63:64:98:25:ac:28:f8:09:fb:ad:96:01:22:0d:e6:da:d5:
         17:a2:b1:94:25:87:44:92:fb:ee:1c:1a:33:eb:90:c6:13:90:
         fc:44:82:bd:d8:6e:b5:56:d7:64:fa:8d:51:6b:7c:26:4b:b3:
         6f:5d:44:99:2e:6b:78:f4:65:68:09:b2:a5:63:3b:71:68:ef:
         53:94:63:fd:68:2e:ce:59:c2:32:26:a5:a9:dc:ef:0c:e3:98:
         8f:83:30:12:ed:ff:4a:ef:9c:03:5d:18:47:75:0b:f4:7c:a1:
         d0:9d:0b:68:bd:7e:df:45:68:58:9a:79:fc:1c:ca:34:a6:20:
         99:bf:cf:b9:7f:ad:87:1a:9a:0b:c3:21:24:fd:a6:37:75:81:
         c7:93:14:db:12:7d:93:42:02:e2:f2:1a:85:38:91:6b:0f:8e:
         56:d6:b8:41:72:51:a5:81:75:73:68:d3:21:ce:ae:d8:ae:d3:
         27:08:8a:f5:f4:ca:12:c5:0b:6d:25:bd:5d:c2:8d:a4:72:b5:
         1d:73:0d:bd:e0:ce:06:5c:60:e3:76:05:0b:fd:d3:a6:71:27:
         3c:e8:9e:43:23:97:04:d5:c9:40:af:df:45:23:13:5d:76:ef:
         5e:80:44:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 02:15:45 2024 by rpki-client on console.sobornost.net