Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.mft
File:                     36DF3C54C34BC0040ABBBE412EC6948C87D1622A.mft (raw, json)
Hash identifier:          6/y0XpwWAbAFs2zKD9wsIdopTdmKaHMVhxaW8ObqmBE=
Subject key identifier:   CD:B2:DE:96:2D:58:9C:C2:72:59:17:CD:27:97:CF:6A:D5:D5:42:2B
Authority key identifier: 36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A
Certificate issuer:       /CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
Certificate serial:       6709862D9EBF5CC8BE9A2C3682F726B64E71342B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.mft
Manifest number:          6E
Signing time:             Tue 09 Jan 2024 01:48:59 +0000
Manifest this update:     Tue 09 Jan 2024 01:43:59 +0000
Manifest next update:     Wed 10 Jan 2024 03:53:59 +0000
Files and hashes:         1: 323830343a3239303a3a2f33322d3438203d3e203238363639.roa (hash: ulPVoB7qJMFAW1SeaCdGT6Uxcd4Sx4SbMn667G00P+k=)
                          2: 3138392e32382e3134342e302f32302d3234203d3e203238363639.roa (hash: Qx/441LfiQtjOq71JsZRnv8itJviDZMzA3mwtLxoZtA=)
                          3: 36DF3C54C34BC0040ABBBE412EC6948C87D1622A.crl (hash: C+iyLpz2nQ02a7hK/b06vW+krUQ/7WkuT5rywC9Ne2g=)
                          4: 34352e3233342e34302e302f32322d3234203d3e203238363639.roa (hash: IR75jgv1Iqa+kdIaXTKqmEgJauEzQTSroQ0klf4j5qk=)
                          5: 3136382e3232372e31322e302f32322d3234203d3e203238363639.roa (hash: VCYLy5ibDLmRlvD3PUlCUTGkCQ3GdxELFJTh6y69lKE=)
                          6: 323830343a3763633a3a2f33322d3438203d3e203238363639.roa (hash: 5ORbLgyZEzee2xMz40KfdL7yy7xxIfsJwo+FNczniBA=)
                          7: 3138372e3131312e3136302e302f32302d3234203d3e203238363639.roa (hash: cDmaPFP26oM/68LGT74u24DFMPiiwIt7RKRoz+r9+FE=)
                          8: 3138392e382e38302e302f32302d3234203d3e203238363639.roa (hash: V6nyYfccVLpmXizlqMqpVsBOfDifN6W5krB8RIRH20w=)
                          9: 3137372e33362e3136302e302f32302d3234203d3e203238363639.roa (hash: 9LoFNaBEvnnUd8Eh6/oLjufxFeoT4eOuS6WYa+8E/Us=)
                          10: 3137372e3133372e36342e302f32302d3234203d3e203238363639.roa (hash: rcIYjKvL3HCVEPuKGr3YoECyUu28OctbL59AWq855O0=)
                          11: 3137392e3138392e3232342e302f32302d3234203d3e203238363639.roa (hash: V2kIgDq0zf5vCGCrcLE975/zetk8d9OnxT+Gqzk9Gx8=)
                          12: 3138362e3232352e3131322e302f32302d3234203d3e203238363639.roa (hash: KLIvWRfFf7r90ry7xRNOxnFZNcA+GAKMHsCb5hkINWo=)
                          13: 3137302e3233382e3131362e302f32322d3234203d3e203238363639.roa (hash: 8vt4zTKO4mfUQOz7qPU4RIons0OnXE62nV+5Z6S8gZg=)
                          14: 3139312e3234312e3232342e302f31392d3234203d3e203238363639.roa (hash: Mh/ugyEPRzPZDbqRQRpmGbxtHRO8KQHr8GdD2H7PnlA=)
                          15: 3138372e3130382e33322e302f32302d3234203d3e203238363639.roa (hash: AHaQPJ/PWY7MBpkxOXvoHvKWkPVsO8OSarRQyDoQfKo=)
                          16: 3230312e34362e31362e302f32302d3234203d3e203238363639.roa (hash: C5TgOit1XzMkPfIW7K7X+Hb3CCv/yu4ZCz9k+DinXDI=)
                          17: 3137372e3130372e38302e302f32302d3234203d3e203238363639.roa (hash: m2RKlt8mCTi//wVVFLZxdElYxObRkMRNxIBvw4DmFqM=)
                          18: 323830343a346265633a3a2f33322d3438203d3e203238363639.roa (hash: viiDjGpqc4DUFTHrE8VcEgSBzFrr7xxwew8ISiREMRc=)
                          19: 3138362e3232352e39362e302f32302d3234203d3e203238363639.roa (hash: U9rOFRyOBlwF+TwDD7vddPbfNOuBMqffSu79AjsMHPM=)
                          20: 3138362e3139352e3134342e302f32302d3234203d3e203238363639.roa (hash: gc6Xm6/L1dXYBZ1rg7nVcaGpIhYFQ9HUP+XV+erRVro=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 03:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:09:86:2d:9e:bf:5c:c8:be:9a:2c:36:82:f7:26:b6:4e:71:34:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
        Validity
            Not Before: Jan  9 01:43:59 2024 GMT
            Not After : Jan 10 03:53:59 2024 GMT
        Subject: CN=CDB2DE962D589CC2725917CD2797CF6AD5D5422B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5e:67:37:df:19:5e:f3:4b:f9:12:74:cf:27:
                    20:61:9a:64:e7:d9:b6:48:f4:91:cd:d4:be:9f:af:
                    d6:62:49:61:02:b2:55:1f:ee:7d:5e:51:d8:1f:5b:
                    3f:a8:1a:77:fb:9e:d3:a0:a7:e9:99:06:64:47:1f:
                    9f:e5:0d:5e:b4:d6:c0:b1:09:5f:1f:8b:db:c8:7c:
                    b7:c4:33:e3:25:e3:14:76:a4:d3:61:48:7e:27:bf:
                    e3:4a:e6:73:92:70:cb:09:51:e0:b2:0e:f4:25:f9:
                    c0:d8:7d:3b:36:b4:49:a7:03:c9:e9:06:be:a0:30:
                    9c:e0:1a:be:c2:d6:9d:1b:2b:a7:47:4c:cf:cd:d7:
                    78:91:a6:02:3c:a4:9d:49:d3:21:8d:9e:68:24:56:
                    92:ec:f9:aa:aa:0d:41:a2:e4:2d:90:0a:ed:e7:d2:
                    9e:eb:89:06:a5:73:bb:47:0e:14:44:f8:ea:ad:6b:
                    ad:2f:4c:55:de:41:dc:fd:9c:b0:5b:33:f0:91:55:
                    81:82:47:99:48:2a:25:fe:a2:8a:6c:37:44:43:1b:
                    93:66:eb:2f:72:de:f3:b1:a9:fa:34:4d:f9:d2:64:
                    3e:9a:11:83:f3:51:af:18:38:35:cc:db:8f:6e:86:
                    9b:9b:e0:ea:29:d8:d6:88:f6:c7:1a:59:62:d6:ed:
                    4d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B2:DE:96:2D:58:9C:C2:72:59:17:CD:27:97:CF:6A:D5:D5:42:2B
            X509v3 Authority Key Identifier:
                keyid:36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:4d:7a:7a:bd:eb:49:8d:f8:ec:cc:c9:41:78:cc:55:9c:0c:
         d8:b6:4a:10:54:bc:39:75:f1:45:35:0f:a4:9b:25:c2:9b:88:
         6b:32:65:cf:2f:8b:64:cb:03:51:99:af:9e:69:6f:da:2f:07:
         c8:2e:13:ba:a9:86:83:83:96:a4:16:cf:63:13:45:2d:38:17:
         6d:03:fa:11:98:3e:4c:db:c3:3f:76:59:a8:af:c9:ae:14:99:
         63:36:25:8b:bc:be:54:99:d5:1e:8e:d5:50:8d:2c:09:35:4e:
         66:4b:d2:a3:e3:0d:ef:00:a1:48:85:67:75:02:78:2e:7f:55:
         fa:de:b7:70:1a:79:d2:7f:99:80:ed:7f:2a:56:02:7b:7a:60:
         94:1e:79:a9:26:6a:0f:e5:91:83:75:0d:a4:78:ee:c6:8e:51:
         53:ff:dd:f1:4a:78:1d:5f:90:fd:56:2a:c9:c2:d3:c7:f2:99:
         50:d0:40:fd:e4:20:56:c1:8c:4a:68:04:0a:16:16:c6:2e:5a:
         a1:db:2c:7f:5c:c1:f9:84:20:cd:58:64:5b:ed:d3:55:b6:df:
         dc:33:e8:0f:4e:6c:02:ae:39:d1:49:60:e2:1d:44:de:13:56:
         98:65:bb:b3:3f:e9:31:7e:9d:8a:f7:ac:f8:b4:0b:03:68:d8:
         16:c1:4e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 03:49:02 2024 by rpki-client on console.sobornost.net