Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/FCB533D9722570DBB46E5D9BD9255DEA875182FA.mft
File:                     FCB533D9722570DBB46E5D9BD9255DEA875182FA.mft (raw, json)
Hash identifier:          ccvzsjO8OMu8icgP3/bO8qiDnQ58CrtOBXF80dRrK8Y=
Subject key identifier:   1F:51:4E:B9:56:4F:3C:11:C9:2E:54:80:85:9F:5D:66:AA:90:83:3E
Authority key identifier: FC:B5:33:D9:72:25:70:DB:B4:6E:5D:9B:D9:25:5D:EA:87:51:82:FA
Certificate issuer:       /CN=FCB533D9722570DBB46E5D9BD9255DEA875182FA
Certificate serial:       12201884152913830D49815B41E28B1AED338AF2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCB533D9722570DBB46E5D9BD9255DEA875182FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/FCB533D9722570DBB46E5D9BD9255DEA875182FA.mft
Manifest number:          1B
Signing time:             Tue 09 Jan 2024 04:23:41 +0000
Manifest this update:     Tue 09 Jan 2024 04:18:41 +0000
Manifest next update:     Wed 10 Jan 2024 05:27:41 +0000
Files and hashes:         1: 323830343a353964343a3a2f33322d3332203d3e20323638373238.roa (hash: WrAG2QhuEAXjx/GEHVcjLJ3/np/GRnqMj3VLAc7Zfz4=)
                          2: 34352e3137312e3139342e302f32342d3234203d3e20323638373238.roa (hash: CjRhfcLGZPr0eeQHPiRJvONpS7Giur/Sqjn55cPwjjQ=)
                          3: FCB533D9722570DBB46E5D9BD9255DEA875182FA.crl (hash: 35biPzzNuPU2vpfDUCwzTkhn02TvP72bJol4RZtCOBk=)
                          4: 34352e3137312e3139322e302f32342d3234203d3e20323638373238.roa (hash: 7iBqh8HHEhiTCCTUMwqfUuu5nEOfoZlYdWSeJVtWy18=)
                          5: 34352e3137312e3139322e302f32322d3232203d3e20323638373238.roa (hash: 04W4+NOOKGL8K9e8M9g5apT/pbxgTmubUTcVwNZQA0o=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/FCB533D9722570DBB46E5D9BD9255DEA875182FA.crl
                          rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/FCB533D9722570DBB46E5D9BD9255DEA875182FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCB533D9722570DBB46E5D9BD9255DEA875182FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 05:27:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:20:18:84:15:29:13:83:0d:49:81:5b:41:e2:8b:1a:ed:33:8a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB533D9722570DBB46E5D9BD9255DEA875182FA
        Validity
            Not Before: Jan  9 04:18:41 2024 GMT
            Not After : Jan 10 05:27:41 2024 GMT
        Subject: CN=1F514EB9564F3C11C92E5480859F5D66AA90833E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b9:23:81:e4:fb:8d:2c:88:37:13:b3:18:5f:
                    93:ac:c4:3f:b1:2f:9a:08:21:4b:e3:1d:b9:21:92:
                    76:ab:af:51:76:db:67:d4:9c:2f:65:8b:65:c8:ba:
                    0e:4c:7c:99:ee:d8:55:85:60:3e:91:5d:16:5d:e3:
                    52:3b:e6:5c:6d:6a:a1:5f:92:60:7c:f1:42:00:3f:
                    21:a3:13:6f:fe:d1:3c:91:36:0a:34:85:e1:6d:db:
                    ac:11:69:75:97:73:43:32:60:60:1a:ba:1f:80:84:
                    af:74:7c:f0:e0:a7:14:08:6d:90:90:b1:d3:f4:1a:
                    8f:32:ec:c7:a1:7a:35:58:fe:83:1d:9e:3f:64:62:
                    32:b0:2c:7b:be:a1:d6:fe:1b:61:41:d5:c2:79:89:
                    24:18:14:6e:f8:6c:dd:2a:3b:5e:7f:04:22:3d:b2:
                    59:45:de:ee:35:ab:ab:d5:85:db:ba:50:28:64:93:
                    cf:10:33:1e:27:d6:5e:54:cc:6e:c0:db:52:15:ba:
                    d3:11:a0:7e:78:1e:df:9e:b2:52:76:e4:2a:55:b4:
                    43:1a:2b:d3:42:ee:b3:de:76:30:d7:53:4b:1f:23:
                    4e:2a:94:c4:5f:b5:a8:24:f9:00:72:34:16:64:66:
                    f3:e4:c5:d1:54:32:68:d6:f6:38:5c:a6:ec:27:9c:
                    60:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:51:4E:B9:56:4F:3C:11:C9:2E:54:80:85:9F:5D:66:AA:90:83:3E
            X509v3 Authority Key Identifier:
                keyid:FC:B5:33:D9:72:25:70:DB:B4:6E:5D:9B:D9:25:5D:EA:87:51:82:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/FCB533D9722570DBB46E5D9BD9255DEA875182FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCB533D9722570DBB46E5D9BD9255DEA875182FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/FCB533D9722570DBB46E5D9BD9255DEA875182FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:e1:e8:8d:2a:b9:d8:c3:fd:4f:e9:55:29:9a:2b:75:6a:82:
         10:d0:2f:75:45:f5:dc:e7:3b:99:3c:d8:00:22:38:1c:22:cd:
         7e:a1:3e:3c:86:7d:89:60:c4:51:e1:42:de:46:7c:40:8b:e2:
         a1:67:9b:48:1d:70:8c:a2:8c:2c:c3:5b:70:29:3a:4d:51:83:
         7f:5b:e1:bd:e6:65:b6:c2:97:05:f3:85:c7:a8:f5:ef:33:17:
         cf:a6:0e:d0:ca:de:72:cb:5a:8e:df:07:91:7e:31:0c:73:e9:
         e1:a7:2e:9b:33:41:52:7f:25:b8:b5:cb:08:73:a6:74:ee:62:
         17:c2:04:4f:4e:d8:aa:0a:66:a3:90:53:aa:e0:39:aa:a4:89:
         2d:87:6f:14:18:54:48:ac:11:ee:e3:70:9f:8a:99:46:7e:7c:
         83:6b:3e:be:e2:44:82:16:6f:20:62:e9:a1:5a:d1:80:7d:32:
         d6:c4:77:f2:44:ba:ff:ee:d1:e6:8c:ff:9c:e9:b2:e2:97:0f:
         73:c0:48:69:f8:20:47:13:c7:d1:59:9a:21:58:c2:93:ec:b5:
         09:9d:a3:56:d2:6a:bb:78:fc:4f:a8:5e:25:07:cd:71:34:13:
         6c:ae:2c:00:27:77:eb:9b:27:09:e8:e0:f0:5f:ec:b6:e2:bc:
         b9:c2:4b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 05:55:29 2024 by rpki-client on console.sobornost.net