Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB.mft
File:                     06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB.mft (raw, json)
Hash identifier:          aOFJmVEXCAGpwPR21cYYol18L+o5HbcOuJRkNPXlpoE=
Subject key identifier:   29:40:49:96:3E:CF:5E:06:47:EA:4A:91:6D:D7:60:B0:10:56:77:83
Authority key identifier: 06:C5:81:6B:AB:9F:3F:3A:B1:4C:DB:0A:4F:09:F6:FD:D0:56:D4:FB
Certificate issuer:       /CN=06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB
Certificate serial:       388550EBC57AA185890ACD70EB8ACF7FF3D70D2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB.mft
Manifest number:          15
Signing time:             Tue 09 Jan 2024 09:15:16 +0000
Manifest this update:     Tue 09 Jan 2024 09:10:16 +0000
Manifest next update:     Wed 10 Jan 2024 10:15:16 +0000
Files and hashes:         1: 34352e3232382e3130342e302f32322d3234203d3e20323637303737.roa (hash: rPcuukheHEknH3LA+viNE7n27cB0i0ZxXxOjwokVx3c=)
                          2: 06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB.crl (hash: 6+4OFR8wH8tPJev/fLhIjepBJR6a8TPmyni0ke89L6k=)
                          3: 323830343a343763633a3a2f33322d3332203d3e20323637303737.roa (hash: s6kViMrCDI/cCIs3Lae/cjaTITHsJE2Xma6DSpDn97E=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB.crl
                          rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 10:15:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:85:50:eb:c5:7a:a1:85:89:0a:cd:70:eb:8a:cf:7f:f3:d7:0d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB
        Validity
            Not Before: Jan  9 09:10:16 2024 GMT
            Not After : Jan 10 10:15:16 2024 GMT
        Subject: CN=294049963ECF5E0647EA4A916DD760B010567783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:31:fc:12:e7:27:35:77:65:f4:07:59:7f:48:
                    87:c9:c4:03:f7:08:c4:43:58:8c:6c:53:fe:43:d9:
                    4f:d1:00:0a:2e:e0:70:44:59:f9:5f:59:98:d5:52:
                    ab:b9:39:c0:be:89:25:33:fb:18:de:f9:d1:c8:ae:
                    f7:b5:ba:c4:f9:5e:39:d1:71:39:7d:77:a3:04:96:
                    e1:b5:9a:7b:22:d8:48:24:e0:1d:e1:86:36:6c:aa:
                    d6:fe:06:2d:64:0a:9b:d1:78:62:b8:86:c9:48:89:
                    88:02:c4:43:a2:1d:64:e0:43:37:35:9d:64:cf:46:
                    4f:50:36:5c:55:cd:74:25:19:fd:a6:2d:68:b0:ed:
                    f1:c3:cd:79:f1:aa:d1:d7:37:d8:16:5a:2e:d7:09:
                    6e:e9:03:a6:c4:0c:c1:cb:ce:78:82:c9:93:52:52:
                    a9:94:cf:54:10:d5:f4:be:4f:f6:d0:67:79:6d:68:
                    37:fd:10:d8:ee:2c:73:a8:18:72:1f:80:37:87:a6:
                    a9:78:f1:99:5b:7b:7f:cb:6a:b7:cb:9a:97:11:29:
                    76:7d:cb:ec:e9:36:dd:e4:f8:fe:0a:63:0b:c4:bb:
                    44:d5:43:b9:b7:1b:6f:b9:18:c2:2b:23:c4:0a:22:
                    4e:70:ac:74:6d:b6:54:d7:0b:a8:22:f1:f8:71:13:
                    2c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:40:49:96:3E:CF:5E:06:47:EA:4A:91:6D:D7:60:B0:10:56:77:83
            X509v3 Authority Key Identifier:
                keyid:06:C5:81:6B:AB:9F:3F:3A:B1:4C:DB:0A:4F:09:F6:FD:D0:56:D4:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d7:60:1f:cd:d3:d7:fe:d1:8a:70:72:7e:ea:b3:1d:f5:75:
         2a:09:82:b1:a6:53:d3:d4:90:21:b4:ff:ec:91:ce:18:bc:1b:
         2f:a7:e5:6a:ba:63:03:4e:27:b3:aa:fc:23:00:4f:23:8f:e5:
         33:79:3e:1f:d8:db:82:15:45:d4:d2:69:a1:b8:ab:ce:5a:3f:
         26:38:8c:b9:3b:5b:69:e6:1a:89:7f:2e:71:61:ea:63:a8:48:
         ae:77:08:ff:74:50:de:64:9f:49:2c:99:98:2c:79:a9:39:07:
         32:9b:e9:fa:76:9c:96:e1:aa:97:7f:78:ba:f5:76:69:7d:33:
         25:19:f1:ee:80:ee:b2:50:7b:06:52:99:3f:8f:ec:05:d2:45:
         e1:10:64:95:61:57:ae:f1:2f:79:db:0a:3a:3a:56:74:d7:f2:
         df:4f:1a:2b:df:b7:60:66:57:05:98:6e:1c:d5:22:92:19:52:
         97:05:21:51:74:a7:8b:58:20:0c:db:b4:93:4f:28:c9:80:f5:
         6e:46:a8:50:45:f3:a7:cb:18:39:3c:11:6c:60:14:a7:c2:52:
         33:75:5f:7d:c8:f1:22:c9:42:28:c8:05:f3:9c:17:07:08:fb:
         8e:4d:54:e3:b6:fc:d0:4c:5d:c1:f2:c4:93:37:a4:f3:58:d6:
         75:92:cd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:32 2024 by rpki-client on console.sobornost.net