Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/EAD7D3538ED3012268FACB5EA4CAC9AB92EC52B8.mft
File:                     EAD7D3538ED3012268FACB5EA4CAC9AB92EC52B8.mft (raw, json)
Hash identifier:          MfJrrAhGJ2JjdL1oKov3r+1PAAeIBCIjBY+PYUeY4kY=
Subject key identifier:   03:16:81:97:E7:43:5D:35:33:0B:54:F7:2A:53:E8:AB:CE:89:A0:59
Authority key identifier: EA:D7:D3:53:8E:D3:01:22:68:FA:CB:5E:A4:CA:C9:AB:92:EC:52:B8
Certificate issuer:       /CN=EAD7D3538ED3012268FACB5EA4CAC9AB92EC52B8
Certificate serial:       21D7CF63E586107E186532C04C7E1E0685B5BAF3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAD7D3538ED3012268FACB5EA4CAC9AB92EC52B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/EAD7D3538ED3012268FACB5EA4CAC9AB92EC52B8.mft
Manifest number:          0297
Signing time:             Tue 09 Jan 2024 09:35:09 +0000
Manifest this update:     Tue 09 Jan 2024 09:30:09 +0000
Manifest next update:     Wed 10 Jan 2024 09:44:09 +0000
Files and hashes:         1: 3136382e3232372e32382e302f32322d3234203d3e20323632383830.roa (hash: liAqQkdwbaCf57TF9T+P7yD2yAJ1CypXIz82GUHI67E=)
                          2: 323830343a326565383a3a2f33322d3334203d3e20323632383830.roa (hash: /1hQvkoqtJXptfebHhAKtBYsqObSaNLSEUyXGRn9vf4=)
                          3: 3137372e31302e3233322e302f32312d3332203d3e20323632383830.roa (hash: RbCls1Rs8+ckevP2K0U04TtTO81vm2pdqPLn2fIeN9E=)
                          4: EAD7D3538ED3012268FACB5EA4CAC9AB92EC52B8.crl (hash: rS8qlPDqaWl599d6x5v1/XO6fMfQMawICtVlPsKdCYY=)
                          5: 3136382e3139372e35322e302f32322d3234203d3e20323632383830.roa (hash: hEfVmex9pXyYaHLBUXlxJVHRuXW6X5arVh5EB168MKY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/EAD7D3538ED3012268FACB5EA4CAC9AB92EC52B8.crl
                          rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/EAD7D3538ED3012268FACB5EA4CAC9AB92EC52B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAD7D3538ED3012268FACB5EA4CAC9AB92EC52B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 09:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d7:cf:63:e5:86:10:7e:18:65:32:c0:4c:7e:1e:06:85:b5:ba:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAD7D3538ED3012268FACB5EA4CAC9AB92EC52B8
        Validity
            Not Before: Jan  9 09:30:09 2024 GMT
            Not After : Jan 10 09:44:09 2024 GMT
        Subject: CN=03168197E7435D35330B54F72A53E8ABCE89A059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:38:4b:08:e2:b8:f2:22:ba:0f:78:06:60:d2:
                    89:c3:56:a5:0d:7e:c8:af:8d:e5:24:78:4d:3a:26:
                    83:67:48:da:55:2d:fc:e4:fc:e8:f9:bc:e1:82:fe:
                    00:d9:56:ed:48:40:96:5e:34:c0:3d:d0:67:01:7d:
                    1d:5b:b2:d5:20:a6:90:8e:35:95:8a:c1:a7:40:ab:
                    85:ed:d8:ae:54:38:bb:4d:f8:7d:8a:9f:97:e9:15:
                    ab:3c:15:0f:82:5b:e3:e6:da:32:38:89:81:ea:e3:
                    fe:59:c4:cb:df:20:29:21:b9:46:8b:42:dc:fb:d4:
                    81:29:29:fa:24:4e:62:88:e6:e9:ba:53:0a:52:4e:
                    d7:ed:f7:e5:93:1c:f1:b7:44:42:2f:f9:25:9f:3c:
                    67:04:47:f7:17:a8:fc:aa:4d:41:d2:e1:04:4d:c2:
                    92:e3:38:72:57:fc:c9:12:d2:47:2d:9d:a8:f2:d5:
                    20:d4:eb:ec:ae:40:8f:93:a5:84:35:f5:eb:90:f7:
                    42:b2:de:ea:4c:9c:15:86:fe:6a:d9:5a:bf:c5:b2:
                    a4:c2:ef:9f:6f:ca:31:4d:45:c6:83:09:d9:19:e4:
                    64:c5:85:ef:91:a4:61:d0:be:51:d2:e6:4f:9f:e6:
                    cd:da:d1:2a:78:49:53:d2:eb:eb:58:f3:f3:4e:ba:
                    d2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:16:81:97:E7:43:5D:35:33:0B:54:F7:2A:53:E8:AB:CE:89:A0:59
            X509v3 Authority Key Identifier:
                keyid:EA:D7:D3:53:8E:D3:01:22:68:FA:CB:5E:A4:CA:C9:AB:92:EC:52:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/EAD7D3538ED3012268FACB5EA4CAC9AB92EC52B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAD7D3538ED3012268FACB5EA4CAC9AB92EC52B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/EAD7D3538ED3012268FACB5EA4CAC9AB92EC52B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:11:47:2f:ff:f7:7e:9c:b8:a5:77:ca:68:76:65:c5:57:b1:
         f5:63:ca:e2:ba:dc:39:02:dc:42:3c:c9:5d:e6:22:fd:89:fb:
         d2:72:0a:d9:60:16:31:5f:a7:1a:57:1c:e3:8f:46:0a:ae:56:
         f5:e9:94:0c:81:97:49:d3:e9:f4:35:67:24:26:85:a8:44:ab:
         80:bd:7b:5e:bb:57:bb:9e:87:1c:83:4b:48:27:63:8f:01:70:
         e6:b0:86:0d:b7:39:63:42:dc:a6:7f:f8:ed:f0:e7:da:63:9b:
         10:32:8e:88:ca:24:51:ed:52:18:ec:c5:df:27:ad:15:7d:c1:
         09:ce:4a:9b:27:e5:c2:7e:9c:1b:76:b9:fa:c3:90:4b:65:28:
         95:bd:3f:61:0e:ab:f4:63:fc:4c:12:51:43:62:5d:58:5b:c9:
         b4:e0:a5:08:71:5b:ce:f3:59:ce:de:c1:9a:a9:b9:ba:f0:75:
         4f:76:7d:12:42:10:f5:35:20:9e:4d:b5:7e:54:27:a9:27:f9:
         dc:80:85:23:d9:87:6b:03:1e:82:98:4d:61:a3:24:53:68:a2:
         12:d8:d6:36:8f:4b:fb:c2:f6:36:2e:ad:9c:60:07:9a:5c:56:
         84:43:ac:c9:cf:50:f5:9e:43:0f:a6:b8:f2:a3:c0:df:a9:0a:
         e0:fa:18:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:32 2024 by rpki-client on console.sobornost.net