Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.mft
File:                     DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.mft (raw, json)
Hash identifier:          9voOdWE/5gGslx0bsZoC3PS6JSIVHYq4iAJXN45MVio=
Subject key identifier:   57:EE:F7:37:4A:41:AB:68:B7:A6:64:EB:6A:FC:13:10:8E:81:98:24
Authority key identifier: DC:33:80:34:AC:CA:06:D2:BA:9F:C6:BE:39:61:60:6E:E3:DE:1F:EA
Certificate issuer:       /CN=DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA
Certificate serial:       7ADA6C31120312B9BEE4E1AA6EC8DF54968D40FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.mft
Manifest number:          40
Signing time:             Tue 09 Jan 2024 11:41:29 +0000
Manifest this update:     Tue 09 Jan 2024 11:36:29 +0000
Manifest next update:     Wed 10 Jan 2024 15:07:29 +0000
Files and hashes:         1: 34352e372e3230302e302f32322d3234203d3e20323636363134.roa (hash: N5375BBGruYe0yNGataB6svGdD1eytxScM6Fr6gD5rk=)
                          2: DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.crl (hash: ILN/354MubXxiWUQhf1VUo7ruoXDpz7Bjnp/61xo/IE=)
                          3: 323830343a336561633a3a2f33322d3438203d3e20323636363134.roa (hash: uEW08ygPlyVJ73eVn53sRlISxCIQcGx6V0O2w17b1sI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.crl
                          rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 12:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:da:6c:31:12:03:12:b9:be:e4:e1:aa:6e:c8:df:54:96:8d:40:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA
        Validity
            Not Before: Jan  9 11:36:29 2024 GMT
            Not After : Jan 10 15:07:29 2024 GMT
        Subject: CN=57EEF7374A41AB68B7A664EB6AFC13108E819824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:20:9a:36:67:56:3e:f2:9f:8f:72:34:2f:99:
                    a0:90:5e:a7:e6:7e:b3:03:9b:2f:ed:e3:6a:ab:07:
                    6a:9e:67:4c:13:1f:e1:24:a3:d8:48:80:bc:8f:f4:
                    3c:40:61:ec:9c:da:e0:f7:45:ee:5d:5e:72:35:12:
                    de:59:f5:d2:16:55:87:43:2b:69:a1:64:6a:91:db:
                    dc:90:0c:5f:45:19:e3:3e:e4:d3:4c:69:6a:da:77:
                    f6:00:a7:95:bc:2b:4e:aa:8f:aa:3c:0d:07:06:a7:
                    58:fc:5e:c2:0b:4d:d7:79:23:4a:60:93:e6:24:49:
                    cf:92:da:e7:c8:ce:4c:5f:f1:c3:7b:69:c0:64:d5:
                    a2:b8:29:12:1f:b4:c0:c5:25:8f:24:2a:3a:58:94:
                    f5:2a:65:44:3d:5b:71:6c:c8:b8:76:8c:8f:96:dd:
                    d5:5b:9d:47:d1:d9:ac:f9:c6:42:7a:63:bb:09:b2:
                    d9:c1:22:66:a9:81:c7:f8:d9:b7:b3:c3:6f:c9:f6:
                    e9:e9:66:cb:47:68:bc:c5:84:fc:32:fb:af:13:34:
                    ad:8e:ab:34:f5:36:2b:bf:69:9e:97:e8:a9:05:e8:
                    1a:ee:76:5f:03:99:89:d6:6b:cd:cd:1d:ae:9f:2f:
                    1a:e6:71:4c:6e:1c:86:a7:44:2a:86:b7:7d:d0:00:
                    c3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EE:F7:37:4A:41:AB:68:B7:A6:64:EB:6A:FC:13:10:8E:81:98:24
            X509v3 Authority Key Identifier:
                keyid:DC:33:80:34:AC:CA:06:D2:BA:9F:C6:BE:39:61:60:6E:E3:DE:1F:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:2f:bc:0a:e3:bb:53:69:13:4d:12:bb:75:01:83:ed:ab:3a:
         94:e2:52:a7:60:10:23:d6:31:b5:fd:ed:4c:95:0b:dd:d6:96:
         87:74:2a:0a:e7:bc:f1:32:d9:01:f7:d5:d5:ab:fc:58:a7:97:
         bb:cb:dc:40:97:0e:0f:db:84:bc:12:a9:85:8a:57:34:2b:82:
         07:eb:a1:8a:8c:f6:fa:7b:40:81:58:00:91:b1:7b:79:c2:b0:
         e7:55:e1:d5:42:2f:2a:78:be:09:29:03:f9:84:ac:2f:bf:69:
         39:76:7d:6d:41:ee:9d:73:03:b5:bf:00:8b:23:74:ac:1c:46:
         e9:41:ce:d8:63:fd:64:a3:07:7c:36:69:85:50:dc:28:4e:bb:
         3c:89:bd:02:7e:50:c7:b5:d5:ce:c8:ee:c8:e1:d0:93:0c:7c:
         32:04:e8:84:d1:66:20:6a:cc:69:d1:34:17:32:d1:86:22:d0:
         90:46:5f:e8:23:67:a7:6e:0d:72:61:c4:d3:df:73:b6:55:bc:
         8b:0c:27:d5:5e:a9:eb:88:8b:91:7b:2c:8f:82:3c:73:a9:10:
         e4:52:9f:a2:df:1e:88:bf:ab:81:71:13:69:eb:76:cd:e4:27:
         fb:c6:f6:6d:93:71:32:8f:29:1b:27:70:e9:58:aa:19:43:f2:
         ef:12:6b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:33 2024 by rpki-client on console.sobornost.net