Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/17AAC2C76811E8BF20B2E355DAEC5DCB3401F780.mft
File:                     17AAC2C76811E8BF20B2E355DAEC5DCB3401F780.mft (raw, json)
Hash identifier:          G1JOZR5O9zYpMJURVMnSP5gefjQ0DGHqtYkhTi7l5Xg=
Subject key identifier:   34:7C:36:E2:FF:00:81:77:B6:C1:1C:9D:A6:2C:F3:BE:C7:89:D7:95
Authority key identifier: 17:AA:C2:C7:68:11:E8:BF:20:B2:E3:55:DA:EC:5D:CB:34:01:F7:80
Certificate issuer:       /CN=17AAC2C76811E8BF20B2E355DAEC5DCB3401F780
Certificate serial:       197900D0F414A9ADE97A28B038DA3E97AD56EEB6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17AAC2C76811E8BF20B2E355DAEC5DCB3401F780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/17AAC2C76811E8BF20B2E355DAEC5DCB3401F780.mft
Manifest number:          11
Signing time:             Tue 09 Jan 2024 08:47:38 +0000
Manifest this update:     Tue 09 Jan 2024 08:42:38 +0000
Manifest next update:     Wed 10 Jan 2024 11:45:38 +0000
Files and hashes:         1: 323830343a363935343a3a2f33322d313238203d3e20323730323633.roa (hash: ipgyLAIKeYfhLIkvmh08v6G9T59IZRosXdxdl/3gJvs=)
                          2: 3230302e35332e342e302f32322d3332203d3e20323730323633.roa (hash: uySSbpIMpHbQj7A9DrwV644TFkvh5BosFX9uyXWrfso=)
                          3: 17AAC2C76811E8BF20B2E355DAEC5DCB3401F780.crl (hash: 2YRnAtwm+GYRD3VlUFO8iqAM1uUXrWZ7XbF3PIZAink=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/17AAC2C76811E8BF20B2E355DAEC5DCB3401F780.crl
                          rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/17AAC2C76811E8BF20B2E355DAEC5DCB3401F780.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17AAC2C76811E8BF20B2E355DAEC5DCB3401F780.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 11:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:79:00:d0:f4:14:a9:ad:e9:7a:28:b0:38:da:3e:97:ad:56:ee:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17AAC2C76811E8BF20B2E355DAEC5DCB3401F780
        Validity
            Not Before: Jan  9 08:42:38 2024 GMT
            Not After : Jan 10 11:45:38 2024 GMT
        Subject: CN=347C36E2FF008177B6C11C9DA62CF3BEC789D795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fd:ad:ce:af:fb:75:34:76:ad:29:af:86:69:
                    58:b2:11:28:f9:cb:2c:c0:6e:d8:11:a4:7a:59:5b:
                    be:cc:98:86:ae:35:a9:05:4a:99:7e:1f:04:1f:cc:
                    5d:5e:81:44:6e:83:e3:7b:2b:3f:35:e8:6c:a5:ae:
                    a4:77:4c:07:75:36:57:20:67:32:a4:55:19:c0:73:
                    e2:c2:a0:de:b6:89:7d:c6:66:23:c9:19:ed:30:93:
                    96:9c:9d:73:55:46:7a:11:19:52:1c:2d:a7:28:0e:
                    47:65:d0:f0:d5:38:b0:0d:6c:95:66:3c:bf:67:d4:
                    3a:4d:6a:ab:c2:b4:17:cd:83:11:da:65:be:75:a4:
                    14:f1:0b:0e:93:56:ad:78:2c:83:a6:a2:63:79:0b:
                    f7:35:b4:62:b7:d4:93:a9:48:ae:51:91:66:b0:7a:
                    44:a0:c2:5e:27:2d:46:a3:b9:8d:11:77:4a:23:e6:
                    f9:de:82:47:b6:10:e9:43:1a:47:d2:66:02:32:8b:
                    97:91:10:36:34:79:c4:75:2b:27:7f:f0:31:9a:ae:
                    d5:22:84:e8:eb:98:92:90:9b:39:41:51:36:49:36:
                    62:d8:e8:f2:32:12:a2:56:c9:a3:2d:72:3f:fc:88:
                    9f:93:e4:31:9f:65:15:48:92:ad:0b:04:66:52:5c:
                    44:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7C:36:E2:FF:00:81:77:B6:C1:1C:9D:A6:2C:F3:BE:C7:89:D7:95
            X509v3 Authority Key Identifier:
                keyid:17:AA:C2:C7:68:11:E8:BF:20:B2:E3:55:DA:EC:5D:CB:34:01:F7:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/17AAC2C76811E8BF20B2E355DAEC5DCB3401F780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17AAC2C76811E8BF20B2E355DAEC5DCB3401F780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/17AAC2C76811E8BF20B2E355DAEC5DCB3401F780.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f5:eb:50:d8:f4:5f:fd:ba:64:1b:a1:dc:64:cb:fe:b7:ed:
         eb:d0:9e:2a:e2:65:86:98:d9:06:03:b9:c3:a7:45:bc:f5:f1:
         d9:e0:a5:e6:3b:43:0a:ed:67:e3:32:61:e9:27:db:0a:b2:7b:
         85:87:8f:e0:87:50:f8:40:02:ed:ed:f7:cc:5f:27:65:b8:64:
         6c:d2:2b:68:78:f9:99:07:75:c8:f0:01:4f:63:55:4e:ec:be:
         61:a4:3f:49:5a:cf:56:36:de:4e:31:8e:5c:32:ba:e1:a4:86:
         b8:6d:57:e0:9a:82:39:e2:19:3e:a1:2f:49:a6:0b:c8:4b:cf:
         3d:1a:2f:26:87:21:35:3f:59:7e:f0:30:7f:d0:ff:13:e0:fd:
         1b:81:c1:84:e8:ca:fb:86:6e:c0:25:b8:06:aa:e3:28:cf:de:
         08:94:2c:fa:78:14:41:ac:b0:30:84:4d:75:23:fb:c8:86:44:
         cd:b8:d0:34:b9:ce:25:fa:af:ae:4d:75:ae:8b:58:f6:3b:3a:
         c2:a4:fa:a1:0e:5b:33:60:75:19:6a:8f:cc:8a:49:2b:47:f4:
         06:40:5f:ca:15:ec:32:59:45:6a:a3:85:10:50:ef:79:f5:ba:
         6e:7f:7c:74:77:7e:92:8d:d2:54:a6:92:54:3d:fe:75:08:db:
         97:76:fd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:29 2024 by rpki-client on console.sobornost.net