Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/338037D654F1B3A46977DD1887D72B9979CB0848.mft
File:                     338037D654F1B3A46977DD1887D72B9979CB0848.mft (raw, json)
Hash identifier:          0AO0Z9IhW+fr7cbWy4c+GZYEP+WDpB4uzeDDscEukW0=
Subject key identifier:   E5:0F:AC:A5:70:30:56:E3:62:E1:2C:D9:BE:B1:BE:7C:39:E9:53:DA
Authority key identifier: 33:80:37:D6:54:F1:B3:A4:69:77:DD:18:87:D7:2B:99:79:CB:08:48
Certificate issuer:       /CN=338037D654F1B3A46977DD1887D72B9979CB0848
Certificate serial:       23FA0E3B2CD813D60F16CC2A45D6D553942944DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/338037D654F1B3A46977DD1887D72B9979CB0848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/338037D654F1B3A46977DD1887D72B9979CB0848.mft
Manifest number:          01F0
Signing time:             Tue 09 Jan 2024 01:23:04 +0000
Manifest this update:     Tue 09 Jan 2024 01:18:04 +0000
Manifest next update:     Wed 10 Jan 2024 02:32:04 +0000
Files and hashes:         1: 3133312e302e3138302e302f32322d3234203d3e203631373037.roa (hash: WPJ+DPeNjAI0s/1miK0qmdK4lyfaHvXSu41TaKa47Ag=)
                          2: 338037D654F1B3A46977DD1887D72B9979CB0848.crl (hash: elGaC7HEUGaqfIgyz6cBGYNyzZfQxtmyHKmor6Ef5qc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/338037D654F1B3A46977DD1887D72B9979CB0848.crl
                          rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/338037D654F1B3A46977DD1887D72B9979CB0848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/338037D654F1B3A46977DD1887D72B9979CB0848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 02:32:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:fa:0e:3b:2c:d8:13:d6:0f:16:cc:2a:45:d6:d5:53:94:29:44:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=338037D654F1B3A46977DD1887D72B9979CB0848
        Validity
            Not Before: Jan  9 01:18:04 2024 GMT
            Not After : Jan 10 02:32:04 2024 GMT
        Subject: CN=E50FACA5703056E362E12CD9BEB1BE7C39E953DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:eb:9a:86:0e:90:27:aa:70:e1:7d:d5:dd:dc:
                    8a:00:5d:23:f7:b7:91:e4:e6:40:8f:f3:23:20:10:
                    2b:4d:7d:a0:71:d4:e0:3b:d8:a9:22:a8:10:14:f5:
                    99:83:07:f0:28:12:70:d4:b4:c2:93:7d:14:b4:15:
                    c0:58:de:2b:84:ff:13:da:b4:28:39:ab:c7:eb:2d:
                    f3:27:70:28:e4:7c:33:fa:97:78:33:a7:17:81:77:
                    8a:55:a2:48:9c:be:b6:36:b1:0f:08:e8:28:9c:f0:
                    e3:5b:33:04:b2:11:1b:81:68:39:45:b8:ad:88:6f:
                    94:40:20:ae:f3:05:98:d0:27:aa:9d:2b:ad:5e:33:
                    5c:ba:03:ed:af:af:e3:c3:51:e8:8f:df:e3:78:29:
                    98:45:10:1b:fe:35:07:a8:6b:d3:a8:6c:74:e6:14:
                    d9:4e:4e:f8:33:3e:c8:80:2d:93:69:c7:bc:56:0e:
                    c8:4c:c0:ee:ce:18:75:36:6c:c4:c0:7d:a2:52:c8:
                    78:94:b3:d0:af:5d:d9:46:51:22:4f:e4:44:9f:aa:
                    36:0d:d6:ee:c4:ad:1d:bb:bb:43:e4:48:a5:ef:ea:
                    b1:ff:69:e3:19:3c:e2:38:c0:2e:1a:98:25:78:2b:
                    91:62:52:a5:16:17:af:c2:26:0c:ca:e2:4b:8f:5b:
                    bf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0F:AC:A5:70:30:56:E3:62:E1:2C:D9:BE:B1:BE:7C:39:E9:53:DA
            X509v3 Authority Key Identifier:
                keyid:33:80:37:D6:54:F1:B3:A4:69:77:DD:18:87:D7:2B:99:79:CB:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/338037D654F1B3A46977DD1887D72B9979CB0848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/338037D654F1B3A46977DD1887D72B9979CB0848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/338037D654F1B3A46977DD1887D72B9979CB0848.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:5a:62:10:95:bc:84:94:42:93:3d:b2:2d:4d:24:f5:ed:a0:
         df:8e:89:e6:35:72:46:02:29:8b:8a:e7:53:e6:5d:d1:b9:f6:
         72:b6:13:9d:f3:c9:35:f5:e9:b0:7e:ba:11:0e:c3:29:47:c2:
         3b:c0:16:7e:6a:6c:fe:fa:5b:22:fa:c7:fe:f9:00:e5:8c:f0:
         d3:9d:d2:17:27:df:53:81:65:54:f2:7a:5c:4c:02:39:66:6d:
         f2:d1:e2:06:4d:47:fe:e6:c7:bc:14:a9:af:1c:68:09:71:f0:
         13:e0:bf:17:e9:54:f2:67:07:d3:cd:54:79:b1:18:86:39:10:
         3c:e5:e6:48:0f:40:bd:06:12:b8:6e:72:15:19:c0:7a:b4:b7:
         49:10:11:91:3f:cb:1f:b5:7e:89:75:9b:8a:8c:7c:1e:90:a6:
         dd:e3:d4:42:d6:4b:2e:dd:b8:a6:2d:a0:79:a8:9d:38:59:ee:
         de:30:85:aa:af:6f:aa:9f:9e:9d:0e:72:18:4e:71:01:16:ef:
         c5:86:2e:36:db:79:b7:7c:d7:5b:c3:28:5b:ed:62:bc:90:8a:
         a9:a0:f8:e2:5b:23:c5:22:0c:c5:92:13:7a:a1:0f:7f:26:a0:
         f8:c8:d1:08:ba:47:16:28:94:6b:e7:e0:ac:d8:90:3c:66:5b:
         3a:88:1f:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUI/oOOyzYE9YPFswqRdbVU5QpRN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM4MDM3RDY1NEYxQjNBNDY5NzdERDE4ODdENzJCOTk3
OUNCMDg0ODAeFw0yNDAxMDkwMTE4MDRaFw0yNDAxMTAwMjMyMDRaMDMxMTAvBgNV
BAMTKEU1MEZBQ0E1NzAzMDU2RTM2MkUxMkNEOUJFQjFCRTdDMzlFOTUzREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE65qGDpAnqnDhfdXd3IoAXSP3
t5Hk5kCP8yMgECtNfaBx1OA72KkiqBAU9ZmDB/AoEnDUtMKTfRS0FcBY3iuE/xPa
tCg5q8frLfMncCjkfDP6l3gzpxeBd4pVokicvrY2sQ8I6Cic8ONbMwSyERuBaDlF
uK2Ib5RAIK7zBZjQJ6qdK61eM1y6A+2vr+PDUeiP3+N4KZhFEBv+NQeoa9OobHTm
FNlOTvgzPsiALZNpx7xWDshMwO7OGHU2bMTAfaJSyHiUs9CvXdlGUSJP5ESfqjYN
1u7ErR27u0PkSKXv6rH/aeMZPOI4wC4amCV4K5FiUqUWF6/CJgzK4kuPW791AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU5Q+spXAwVuNi4SzZvrG+fDnpU9owHwYDVR0j
BBgwFoAUM4A31lTxs6Rpd90Yh9crmXnLCEgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2NUTGdKdDU1aGdKNTlncW15ekoyUEs4VkhER216TlV4UER1QjllS3pn
WHQvMC8zMzgwMzdENjU0RjFCM0E0Njk3N0REMTg4N0Q3MkI5OTc5Q0IwODQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMzODAzN0Q2NTRGMUIzQTQ2
OTc3REQxODg3RDcyQjk5NzlDQjA4NDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N2NUTGdKdDU1aGdKNTlncW15ekoyUEs4VkhER216TlV4UER1QjllS3pnWHQvMC8z
MzgwMzdENjU0RjFCM0E0Njk3N0REMTg4N0Q3MkI5OTc5Q0IwODQ4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFFpiEJW8hJRCkz2yLU0k9e2g346J5jVyRgIpi4rnU+Zd0bn2crYTnfPJNfXp
sH66EQ7DKUfCO8AWfmps/vpbIvrH/vkA5Yzw053SFyffU4FlVPJ6XEwCOWZt8tHi
Bk1H/ubHvBSprxxoCXHwE+C/F+lU8mcH081UebEYhjkQPOXmSA9AvQYSuG5yFRnA
erS3SRARkT/LH7V+iXWbiox8HpCm3ePUQtZLLt24pi2geaidOFnu3jCFqq9vqp+e
nQ5yGE5xARbvxYYuNtt5t3zXW8MoW+1ivJCKqaD44lsjxSIMxZITeqEPfyag+MjR
CLpHFiiUa+fgrNiQPGZbOogfdg==
-----END CERTIFICATE-----
Generated at Tue Jan 9 03:49:00 2024 by rpki-client on console.sobornost.net