Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.mft
File:                     5A818535C81DE2F3D1470551E35BAA5F089D9720.mft (raw, json)
Hash identifier:          10qm9rkUtARmos1349RScvc+hcv3Y+ZXOtcXC6lkezY=
Subject key identifier:   E2:09:E5:D6:4B:73:03:FC:4F:FD:9D:BF:79:7E:47:AF:5E:13:D7:E0
Authority key identifier: 5A:81:85:35:C8:1D:E2:F3:D1:47:05:51:E3:5B:AA:5F:08:9D:97:20
Certificate issuer:       /CN=5A818535C81DE2F3D1470551E35BAA5F089D9720
Certificate serial:       686600749B20F1871FDFDAA1E34A15E076CE2D66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.mft
Manifest number:          010A
Signing time:             Tue 09 Jan 2024 11:32:08 +0000
Manifest this update:     Tue 09 Jan 2024 11:27:08 +0000
Manifest next update:     Wed 10 Jan 2024 15:19:08 +0000
Files and hashes:         1: 3137372e38352e35362e302f32342d3234203d3e203532373337.roa (hash: ZyHEYzBMbngl5octuzxUXR8fx4GBK1UgBOv+rX6BP4Q=)
                          2: 5A818535C81DE2F3D1470551E35BAA5F089D9720.crl (hash: lvL55IIeLytHoW24e5u63jpF9oYavbs/2U5SFrxO62k=)
                          3: 3137372e38352e36302e302f32342d3234203d3e203532373337.roa (hash: 5AeEV0+RBuWnMX/Xv4PxaI6S90SNzpjRJMoUxgJCCkE=)
                          4: 3137372e38352e35382e302f32332d3233203d3e203532373337.roa (hash: 55vnIzfLUPFEib8VH8adEVwCxrYgIMWOeeR6jp2i7tY=)
                          5: 3137372e38352e35372e302f32342d3234203d3e203532373337.roa (hash: j93QzZxVa4RrXTV6AASTPcQTs9CQQQ92M6vHFjvPAEw=)
                          6: 3137372e38352e36322e302f32342d3234203d3e203532373337.roa (hash: b6NTrMTVYRNMKMJypFN3pr68jyrFGZJfqXktcZzTnwE=)
                          7: 323830343a373936343a3a2f33322d3332203d3e203532373337.roa (hash: E9PMY+/zlGjXzI4dNCbDzgEi5VtYoAWGnUcBCTvNFRA=)
                          8: 3137372e38352e36332e302f32342d3234203d3e203532373337.roa (hash: 1n3NscU8QaY8E9HoHlt/p65ukQaGdnO8fMAfUxYUEjw=)
                          9: 3137372e38352e36312e302f32342d3234203d3e203532373337.roa (hash: LQJVhKuUYDmOQXouM5cUloBYSy6nstSyCPqtIu7ZT68=)
                          10: 3137372e38352e35392e302f32342d3234203d3e203532373337.roa (hash: r7JzxuDozBrnGQNzE9NSVGCFDmdwPfG3xS9tMbJMvR4=)
                          11: 3137372e38352e36302e302f32322d3232203d3e203532373337.roa (hash: MlSV89uvrDhtDCphyXORDEWYzciYoF1P3Cj2bD9Crpo=)
                          12: 3137372e38352e35382e302f32342d3234203d3e203532373337.roa (hash: wPAR/40tI+rwxwUH13BaXcKnjgXhd5M+ygUtwY8E1rQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.crl
                          rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 12:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:66:00:74:9b:20:f1:87:1f:df:da:a1:e3:4a:15:e0:76:ce:2d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A818535C81DE2F3D1470551E35BAA5F089D9720
        Validity
            Not Before: Jan  9 11:27:08 2024 GMT
            Not After : Jan 10 15:19:08 2024 GMT
        Subject: CN=E209E5D64B7303FC4FFD9DBF797E47AF5E13D7E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:78:1f:87:14:87:9f:7d:10:d1:10:aa:e7:e1:
                    1e:a9:65:c0:c4:02:2d:62:29:37:ba:11:7c:47:d9:
                    9c:da:fd:d6:5b:dd:29:02:9b:65:de:6c:75:3a:c1:
                    4f:95:fb:e4:8e:89:9d:85:84:87:e0:f2:d2:81:6e:
                    af:77:fc:1b:32:5b:e9:4d:35:6f:e6:f2:cb:5a:83:
                    e0:c2:49:c3:6f:6b:a9:b0:ea:ab:22:81:49:ce:91:
                    00:f4:38:5b:cf:a6:66:ec:d3:54:c6:f9:c0:34:f4:
                    e5:a0:5a:49:e5:92:e1:7c:a1:30:9d:75:b1:61:d5:
                    6c:bd:85:26:5b:8b:5d:a7:21:49:23:a6:6e:74:17:
                    ef:df:50:8b:db:b1:a6:7f:4c:00:55:04:8c:d9:de:
                    66:b3:94:6e:51:17:12:5b:21:0f:bc:49:d7:74:63:
                    07:f0:46:8c:d4:a7:b8:eb:b3:0f:c4:9c:2e:6c:28:
                    e1:60:1d:b5:fe:b7:b4:df:1f:b7:99:93:fc:6e:6b:
                    a3:7b:50:3a:77:ef:ed:18:25:3e:af:3c:78:44:63:
                    94:62:4a:ee:ed:59:a9:78:51:80:cc:f8:37:d0:a9:
                    86:73:8e:0a:f1:c2:42:24:7a:18:3b:6d:87:78:10:
                    eb:f0:b9:c0:b1:25:78:5b:1d:c6:9e:37:59:7c:26:
                    44:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:09:E5:D6:4B:73:03:FC:4F:FD:9D:BF:79:7E:47:AF:5E:13:D7:E0
            X509v3 Authority Key Identifier:
                keyid:5A:81:85:35:C8:1D:E2:F3:D1:47:05:51:E3:5B:AA:5F:08:9D:97:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:d6:8b:a3:0b:6d:de:b3:f3:11:22:61:de:94:d9:75:a1:f5:
         7d:30:19:f6:ef:4d:ba:d4:e9:68:fa:9f:d9:12:c1:17:35:87:
         c9:e8:f0:b3:6e:9f:94:ed:7c:b3:7b:e9:3c:eb:a1:40:1f:2f:
         3d:11:66:35:25:16:4f:23:d1:da:9d:c6:10:ab:1c:db:d4:98:
         a7:44:73:1d:99:89:f3:c4:fa:7e:a8:ea:25:8b:6e:bc:59:4a:
         59:bc:b4:60:ff:54:ef:ea:17:f6:ba:cd:3d:93:cf:d8:71:07:
         b2:cd:6d:fb:c6:15:fb:5c:ed:6d:22:e0:f6:79:44:f9:2a:5c:
         2b:d3:c8:4d:6f:c4:7f:69:94:17:5e:4e:74:26:ec:de:bc:3e:
         e5:2f:51:5b:b1:a7:44:ff:f0:ed:e2:7f:aa:df:b4:a6:e4:49:
         04:96:49:8f:bf:e9:e4:30:3d:05:7b:cb:16:74:58:53:e0:62:
         f9:a8:72:22:5b:04:32:5d:b1:a7:27:11:68:15:93:62:47:2c:
         51:fe:50:a3:c0:b6:1e:c0:fb:63:45:53:c9:4f:8c:86:bc:60:
         c5:7f:4e:2a:ee:59:5a:0d:92:80:02:74:06:14:d9:05:ff:bf:
         d2:e8:53:fe:c8:be:35:28:f3:de:c9:e0:d6:3f:38:d9:a5:7b:
         7a:d9:45:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:29 2024 by rpki-client on console.sobornost.net