Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/130B968B1EDC329E460C55006CCB5A9D396FEF29.mft
File:                     130B968B1EDC329E460C55006CCB5A9D396FEF29.mft (raw, json)
Hash identifier:          OgxQWFOtOv8zw+F+YKbCyaYHsONHeC6trHdRlq/OQis=
Subject key identifier:   93:1F:70:7E:31:29:50:ED:F9:44:9D:30:8E:B0:38:99:E2:02:D5:49
Authority key identifier: 13:0B:96:8B:1E:DC:32:9E:46:0C:55:00:6C:CB:5A:9D:39:6F:EF:29
Certificate issuer:       /CN=130B968B1EDC329E460C55006CCB5A9D396FEF29
Certificate serial:       14236878E2397017919F98D79326ED9800A4D167
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/130B968B1EDC329E460C55006CCB5A9D396FEF29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/130B968B1EDC329E460C55006CCB5A9D396FEF29.mft
Manifest number:          0218
Signing time:             Tue 09 Jan 2024 12:00:15 +0000
Manifest this update:     Tue 09 Jan 2024 11:55:15 +0000
Manifest next update:     Wed 10 Jan 2024 13:48:15 +0000
Files and hashes:         1: 323830343a316463343a3a2f33322d3335203d3e20323634333932.roa (hash: PRRDFwApD25ZiPs2R7DqpxjLWr2c/F1xqSz6Wz8oDCI=)
                          2: 3133312e3136312e3138382e302f32322d3234203d3e20323634333932.roa (hash: 11QW2CPzt6twFUXHPTslykjxYhPRdjk5bn0iIv6BYmo=)
                          3: 130B968B1EDC329E460C55006CCB5A9D396FEF29.crl (hash: ZkoSBNu43p9Uld3+EylHZLV1L4ctMCR2m8Q1ucpL6jM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/130B968B1EDC329E460C55006CCB5A9D396FEF29.crl
                          rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/130B968B1EDC329E460C55006CCB5A9D396FEF29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/130B968B1EDC329E460C55006CCB5A9D396FEF29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 12:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:23:68:78:e2:39:70:17:91:9f:98:d7:93:26:ed:98:00:a4:d1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130B968B1EDC329E460C55006CCB5A9D396FEF29
        Validity
            Not Before: Jan  9 11:55:15 2024 GMT
            Not After : Jan 10 13:48:15 2024 GMT
        Subject: CN=931F707E312950EDF9449D308EB03899E202D549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:59:87:9d:5b:35:b5:77:9d:bb:b2:d8:bb:05:
                    03:56:37:37:a8:f4:6b:c5:3c:69:15:83:0c:b9:8f:
                    18:4e:b2:c1:1f:82:ca:fb:a2:7c:bc:cf:41:1d:01:
                    38:1b:e3:83:f0:e1:05:74:e2:c0:d3:77:08:58:53:
                    ea:f1:43:ba:8c:07:e2:0c:15:13:14:c8:b7:76:4b:
                    fd:c1:37:95:63:8e:db:bd:90:63:f1:49:d2:31:20:
                    76:57:42:46:4a:5f:c8:c4:bf:b0:d9:19:ea:ff:22:
                    49:3e:96:db:bc:19:e7:33:81:a6:fb:2c:28:5a:91:
                    1a:cd:82:05:d2:5d:f5:75:15:00:0f:43:c4:eb:4d:
                    77:dc:e2:a2:38:f5:6f:0c:43:66:ce:c7:e8:76:92:
                    32:51:d4:62:38:cc:a3:88:f5:a9:ff:44:02:35:d2:
                    da:2e:11:1e:4d:0a:27:8d:6f:48:29:4f:42:5b:8d:
                    e9:06:07:34:4b:9a:51:19:64:ab:8f:4a:33:7d:fe:
                    2c:10:f6:ac:3d:c9:31:9a:84:00:bd:71:d1:eb:e0:
                    e4:66:ad:8c:48:97:d9:19:cc:5c:8e:9c:a0:87:2c:
                    50:84:53:90:8f:d0:a7:b9:09:9c:43:c9:27:8f:61:
                    ab:70:7a:60:9d:ce:1e:62:70:45:b9:8a:8b:e9:9b:
                    6b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1F:70:7E:31:29:50:ED:F9:44:9D:30:8E:B0:38:99:E2:02:D5:49
            X509v3 Authority Key Identifier:
                keyid:13:0B:96:8B:1E:DC:32:9E:46:0C:55:00:6C:CB:5A:9D:39:6F:EF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/130B968B1EDC329E460C55006CCB5A9D396FEF29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/130B968B1EDC329E460C55006CCB5A9D396FEF29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/130B968B1EDC329E460C55006CCB5A9D396FEF29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:8d:51:49:9f:63:74:3d:df:77:17:41:85:cd:20:e7:4d:22:
         30:14:b5:b0:76:27:a0:20:c5:85:f5:19:4e:5c:02:f7:91:83:
         56:7f:eb:da:61:dd:dd:c8:a6:2e:90:e0:bd:32:bd:20:8e:08:
         f5:b1:e2:8b:61:ee:91:73:a2:29:d4:ea:ca:57:78:ea:39:3b:
         6c:58:b6:42:5a:f7:f1:5f:99:6e:08:3a:ca:f0:7d:81:3d:27:
         65:59:c8:1f:cb:65:82:94:42:bd:4c:33:b6:fd:7d:6f:88:c7:
         72:af:74:0e:c0:50:fd:42:da:d4:0c:6d:3d:26:2c:70:a6:17:
         fa:b3:97:27:5b:8c:69:95:36:50:ff:8e:49:52:27:35:8d:5c:
         e5:21:5c:52:a1:00:c7:95:e5:a4:6f:a7:45:b1:23:20:af:d2:
         1b:db:54:a2:61:af:ec:84:a2:58:bc:41:da:d9:2c:a3:de:0d:
         bc:94:ed:9c:1c:5e:7e:83:82:04:bf:46:e3:a4:44:af:07:6f:
         08:e9:b3:77:d1:c4:28:1e:a7:94:9c:02:f9:06:13:66:2e:b0:
         54:16:0c:94:07:af:04:46:7a:12:ca:5c:f1:8a:ba:29:2f:28:
         57:f0:2d:fc:5f:af:be:82:6c:3a:78:e9:c4:3a:70:e0:7b:ae:
         ef:75:8e:ca
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFCNoeOI5cBeRn5jXkybtmACk0WcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwQjk2OEIxRURDMzI5RTQ2MEM1NTAwNkNDQjVBOUQz
OTZGRUYyOTAeFw0yNDAxMDkxMTU1MTVaFw0yNDAxMTAxMzQ4MTVaMDMxMTAvBgNV
BAMTKDkzMUY3MDdFMzEyOTUwRURGOTQ0OUQzMDhFQjAzODk5RTIwMkQ1NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqWYedWzW1d527sti7BQNWNzeo
9GvFPGkVgwy5jxhOssEfgsr7ony8z0EdATgb44Pw4QV04sDTdwhYU+rxQ7qMB+IM
FRMUyLd2S/3BN5Vjjtu9kGPxSdIxIHZXQkZKX8jEv7DZGer/Ikk+ltu8Geczgab7
LChakRrNggXSXfV1FQAPQ8TrTXfc4qI49W8MQ2bOx+h2kjJR1GI4zKOI9an/RAI1
0touER5NCieNb0gpT0JbjekGBzRLmlEZZKuPSjN9/iwQ9qw9yTGahAC9cdHr4ORm
rYxIl9kZzFyOnKCHLFCEU5CP0Ke5CZxDySePYatwemCdzh5icEW5iovpm2ubAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUkx9wfjEpUO35RJ0wjrA4meIC1UkwHwYDVR0j
BBgwFoAUEwuWix7cMp5GDFUAbMtanTlv7ykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3VuVFZCem5tMkh1SE1wV2c4aFNFUmdxaWRmTGplODNOWEd2WndkNjZ6
REYvMC8xMzBCOTY4QjFFREMzMjlFNDYwQzU1MDA2Q0NCNUE5RDM5NkZFRjI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEzMEI5NjhCMUVEQzMyOUU0
NjBDNTUwMDZDQ0I1QTlEMzk2RkVGMjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N3VuVFZCem5tMkh1SE1wV2c4aFNFUmdxaWRmTGplODNOWEd2WndkNjZ6REYvMC8x
MzBCOTY4QjFFREMzMjlFNDYwQzU1MDA2Q0NCNUE5RDM5NkZFRjI5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC41RSZ9jdD3fdxdBhc0g500iMBS1sHYnoCDFhfUZTlwC95GDVn/r2mHd3cim
LpDgvTK9II4I9bHii2HukXOiKdTqyld46jk7bFi2Qlr38V+Zbgg6yvB9gT0nZVnI
H8tlgpRCvUwztv19b4jHcq90DsBQ/ULa1AxtPSYscKYX+rOXJ1uMaZU2UP+OSVIn
NY1c5SFcUqEAx5XlpG+nRbEjIK/SG9tUomGv7ISiWLxB2tkso94NvJTtnBxefoOC
BL9G46RErwdvCOmzd9HEKB6nlJwC+QYTZi6wVBYMlAevBEZ6Espc8Yq6KS8oV/At
/F+vvoJsOnjpxDpw4Huu73WOyg==
-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:28 2024 by rpki-client on console.sobornost.net