Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/EFDF48FA1ADBF92791D092FD8C6D900497AD577A.mft
File:                     EFDF48FA1ADBF92791D092FD8C6D900497AD577A.mft (raw, json)
Hash identifier:          g71Gg2RsIMYKo4j79In+hZb8hbCIKv61hyE7eT+TkmI=
Subject key identifier:   68:F9:43:3D:A4:31:6A:C3:A8:1A:A6:CE:08:F7:34:FF:81:4F:B5:48
Authority key identifier: EF:DF:48:FA:1A:DB:F9:27:91:D0:92:FD:8C:6D:90:04:97:AD:57:7A
Certificate issuer:       /CN=EFDF48FA1ADBF92791D092FD8C6D900497AD577A
Certificate serial:       25FD558EE5723416F6F64AC0DDE346F13B47F4E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EFDF48FA1ADBF92791D092FD8C6D900497AD577A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/EFDF48FA1ADBF92791D092FD8C6D900497AD577A.mft
Manifest number:          06FB
Signing time:             Tue 09 Jan 2024 11:04:00 +0000
Manifest this update:     Tue 09 Jan 2024 10:59:00 +0000
Manifest next update:     Wed 10 Jan 2024 11:04:00 +0000
Files and hashes:         1: 323830343a323065303a3a2f33322d3438203d3e20323634353138.roa (hash: mNoehZFJE/APMAVUF6veizpyThKA1QRydjmnXzmVggU=)
                          2: EFDF48FA1ADBF92791D092FD8C6D900497AD577A.crl (hash: viUn+9nHze1TKScR29wbGpF4aTOrm2kaHC+PtOhoU/g=)
                          3: 3133312e3235352e37362e302f32322d3234203d3e20323634353138.roa (hash: YR4gapch0HiCfKIKPgUQwCJJLui6STzPHLkIXP8+CXc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/EFDF48FA1ADBF92791D092FD8C6D900497AD577A.crl
                          rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/EFDF48FA1ADBF92791D092FD8C6D900497AD577A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EFDF48FA1ADBF92791D092FD8C6D900497AD577A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 11:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fd:55:8e:e5:72:34:16:f6:f6:4a:c0:dd:e3:46:f1:3b:47:f4:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFDF48FA1ADBF92791D092FD8C6D900497AD577A
        Validity
            Not Before: Jan  9 10:59:00 2024 GMT
            Not After : Jan 16 11:04:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6f:d0:c8:41:37:ca:e4:c5:3c:9a:6b:dd:f8:
                    27:39:cf:55:85:0b:7b:ba:e1:b3:df:c4:b2:73:07:
                    62:11:17:e1:2c:68:47:39:b4:9d:c0:a0:a4:b0:60:
                    66:01:e3:35:69:c9:dc:43:79:d3:85:41:34:fd:53:
                    1a:b0:4c:b7:3c:c6:d1:1f:45:89:30:5d:57:ef:1e:
                    7d:c2:e6:34:f7:0b:79:54:bb:a3:26:e9:4a:b2:ac:
                    11:20:09:f5:1a:4a:37:dd:df:8e:c6:13:7b:45:95:
                    49:22:93:69:d1:69:c5:c6:72:8f:1b:ca:02:82:01:
                    76:2c:3d:d9:02:db:d0:ee:ea:b8:1f:3e:90:95:8e:
                    9f:a2:66:81:a6:3b:fa:57:ff:7e:b7:24:a5:29:87:
                    92:3c:e5:f7:ad:e5:5e:2b:07:d8:7a:9b:61:bc:a3:
                    cd:ee:b7:0c:a6:a1:7b:7c:16:a1:58:37:e7:0e:96:
                    85:9b:0b:31:4b:c4:18:c0:bd:a0:86:e4:64:12:43:
                    7a:14:08:16:21:a5:d9:b4:eb:af:55:e7:6a:e9:e2:
                    18:bb:08:28:7d:f7:f9:80:5c:24:75:c0:31:0a:d0:
                    2e:bc:91:90:0b:89:0c:dc:dc:06:a3:40:37:2e:3c:
                    22:a3:97:70:ec:cc:d4:0f:73:5a:94:b6:e2:ea:af:
                    cc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F9:43:3D:A4:31:6A:C3:A8:1A:A6:CE:08:F7:34:FF:81:4F:B5:48
            X509v3 Authority Key Identifier:
                keyid:EF:DF:48:FA:1A:DB:F9:27:91:D0:92:FD:8C:6D:90:04:97:AD:57:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/EFDF48FA1ADBF92791D092FD8C6D900497AD577A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EFDF48FA1ADBF92791D092FD8C6D900497AD577A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/EFDF48FA1ADBF92791D092FD8C6D900497AD577A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:0f:03:4d:a3:02:24:af:53:42:28:c7:29:18:54:54:28:cc:
         fc:8a:9a:3d:85:cb:cc:bb:b0:da:1d:74:74:f9:35:c3:d1:c0:
         d0:f4:60:4a:a5:1c:a2:fc:eb:c8:2e:8d:93:66:88:a2:63:3c:
         9f:5e:07:d0:06:10:c2:2f:bf:16:5b:61:9d:18:a9:dd:bc:83:
         ab:6a:45:f1:97:c6:23:d5:8a:1a:21:f3:8d:6b:8d:5f:0f:97:
         58:2b:e3:48:51:26:83:aa:a2:7e:a6:26:d6:9f:3a:d3:cc:f9:
         86:77:c3:df:90:1f:76:32:40:ef:c4:e7:22:53:25:27:19:e8:
         06:41:43:d8:78:cd:e2:b7:b4:d2:0e:d7:8c:22:5a:10:33:67:
         59:b0:84:a9:68:ca:78:8e:e5:37:ff:1d:eb:ed:91:f4:7f:c5:
         27:27:35:bd:ff:b5:9c:aa:c6:a2:9c:8a:e8:85:3d:39:d9:0a:
         d2:7a:68:11:17:31:d4:73:48:1b:5e:e5:a6:e5:90:7e:96:ba:
         5a:9a:e5:d6:9f:76:ce:86:e6:06:97:f3:c9:ec:bc:f5:ed:20:
         92:b5:0e:92:68:f1:9b:08:cd:81:5a:a2:e3:ca:69:8e:05:2e:
         e6:49:8d:9e:18:f0:33:6c:0d:e2:44:92:7b:cc:e8:ae:67:96:
         ab:7c:34:70
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:27 2024 by rpki-client on console.sobornost.net