Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/EBD21F4D50C1984CFB56A3869C6D0FE9B3B8FC45.mft
File:                     EBD21F4D50C1984CFB56A3869C6D0FE9B3B8FC45.mft (raw, json)
Hash identifier:          MUDPgOSdpP+B2+eL/H418UeiLyVOJiAwRQK0vtHdnm4=
Subject key identifier:   B8:97:1F:1E:D7:06:4E:E7:11:A7:61:64:72:A2:EC:E0:E7:BA:78:1A
Authority key identifier: EB:D2:1F:4D:50:C1:98:4C:FB:56:A3:86:9C:6D:0F:E9:B3:B8:FC:45
Certificate issuer:       /CN=EBD21F4D50C1984CFB56A3869C6D0FE9B3B8FC45
Certificate serial:       571A167F7550233D14E157444991983DFC8A225F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBD21F4D50C1984CFB56A3869C6D0FE9B3B8FC45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/EBD21F4D50C1984CFB56A3869C6D0FE9B3B8FC45.mft
Manifest number:          28
Signing time:             Tue 09 Jan 2024 14:03:54 +0000
Manifest this update:     Tue 09 Jan 2024 13:58:54 +0000
Manifest next update:     Wed 10 Jan 2024 15:20:54 +0000
Files and hashes:         1: 3136302e32302e3136382e302f32322d3234203d3e20323636313938.roa (hash: oCBjhF1W4JN0DNFFY/z/mjGDmIKdlan1LvF1jPb3aig=)
                          2: EBD21F4D50C1984CFB56A3869C6D0FE9B3B8FC45.crl (hash: TWnMrsIm/Ewq/4vQIQAE5zN13KCFmxk2uSuPJ6nHpgc=)
                          3: 323830343a336333633a3a2f33322d3336203d3e20323636313938.roa (hash: cCGA6hCK1QLtsET4UIuqLJ8yESPPQg2LgdMk7I81bU0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/EBD21F4D50C1984CFB56A3869C6D0FE9B3B8FC45.crl
                          rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/EBD21F4D50C1984CFB56A3869C6D0FE9B3B8FC45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBD21F4D50C1984CFB56A3869C6D0FE9B3B8FC45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 15:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:1a:16:7f:75:50:23:3d:14:e1:57:44:49:91:98:3d:fc:8a:22:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBD21F4D50C1984CFB56A3869C6D0FE9B3B8FC45
        Validity
            Not Before: Jan  9 13:58:54 2024 GMT
            Not After : Jan 10 15:20:54 2024 GMT
        Subject: CN=B8971F1ED7064EE711A7616472A2ECE0E7BA781A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c9:e8:2b:51:7b:a0:a8:b8:8c:c7:01:7e:6d:
                    9a:f5:67:10:50:7e:ec:88:a6:ba:1c:40:a7:23:d0:
                    f8:47:66:1c:3a:dd:69:03:f7:df:28:fd:a0:c3:64:
                    50:1b:00:6b:84:e9:05:f8:db:18:0e:2b:2e:54:7e:
                    03:21:8c:a6:1e:52:60:8a:c7:48:23:22:a3:4e:62:
                    15:24:be:06:95:0d:7a:cc:d5:d6:f0:69:74:34:58:
                    31:d4:f5:63:f5:b5:ee:10:34:c5:8f:d1:8b:38:d8:
                    ba:1e:27:15:9d:77:8f:ed:bc:82:1a:d3:6b:10:19:
                    73:d4:ba:81:44:08:c3:d1:ba:8e:b5:59:24:b4:55:
                    12:fd:93:19:64:5b:59:3b:9d:0d:dc:9e:b8:9a:b3:
                    d9:bb:af:64:02:b8:94:44:ec:95:8e:70:b4:f9:0e:
                    d9:a9:a3:ca:90:ce:2c:98:0f:f3:6a:d0:93:5c:2a:
                    3b:db:ef:ff:40:cc:7d:01:7b:9c:3c:b3:2c:ae:60:
                    6d:76:79:34:83:7d:97:ea:68:6e:a5:03:87:6b:df:
                    9d:fe:15:cf:8c:79:89:cf:93:02:ea:e2:e7:11:05:
                    e8:d1:7f:93:ed:07:e6:27:58:11:70:39:46:f2:5d:
                    d4:61:24:ee:3c:de:d9:7d:6a:10:80:0b:30:e2:62:
                    2f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:97:1F:1E:D7:06:4E:E7:11:A7:61:64:72:A2:EC:E0:E7:BA:78:1A
            X509v3 Authority Key Identifier:
                keyid:EB:D2:1F:4D:50:C1:98:4C:FB:56:A3:86:9C:6D:0F:E9:B3:B8:FC:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/EBD21F4D50C1984CFB56A3869C6D0FE9B3B8FC45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBD21F4D50C1984CFB56A3869C6D0FE9B3B8FC45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/EBD21F4D50C1984CFB56A3869C6D0FE9B3B8FC45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:24:58:77:7d:dc:02:de:59:d7:0b:b7:92:ce:31:fe:e7:61:
         d7:c8:aa:5d:49:0e:36:10:3a:c4:c4:41:bf:fb:36:fc:ad:7f:
         8d:22:91:08:85:db:73:4d:7d:42:98:8a:4d:55:6b:34:61:3b:
         67:b2:8d:5b:46:6a:00:79:6c:c7:f4:82:b7:9b:d0:85:16:58:
         2b:ac:42:83:e6:de:36:9c:a0:2a:dc:5b:8c:af:61:84:e2:ef:
         24:de:7d:c4:f0:40:e2:00:05:d1:38:69:39:dd:52:61:da:eb:
         00:27:66:19:77:33:62:b4:53:6e:99:da:93:34:cf:b6:2f:cc:
         16:00:f1:f1:92:50:ec:e1:c4:fb:14:ff:41:50:38:0d:42:83:
         97:c4:c2:74:c0:6e:83:4a:2f:d3:9e:45:92:ca:b3:2e:bf:97:
         5d:80:9a:8f:9d:78:fa:84:6d:fd:e4:95:e0:c4:bf:9b:b8:c5:
         4b:ec:86:d2:24:8b:b5:9f:c0:d3:f1:66:d1:3e:d2:c2:c2:36:
         67:0c:8c:21:31:1e:33:39:b0:4b:55:06:a2:3c:79:46:fa:e9:
         4b:d7:1c:1e:d5:19:28:46:b9:ab:1e:68:0e:0a:ed:c0:81:3e:
         d0:76:92:ec:9e:69:7b:c1:3f:4e:b0:0c:50:cb:77:91:ae:a4:
         24:5d:76:cb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVxoWf3VQIz0U4VdESZGYPfyKIl8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJEMjFGNEQ1MEMxOTg0Q0ZCNTZBMzg2OUM2RDBGRTlC
M0I4RkM0NTAeFw0yNDAxMDkxMzU4NTRaFw0yNDAxMTAxNTIwNTRaMDMxMTAvBgNV
BAMTKEI4OTcxRjFFRDcwNjRFRTcxMUE3NjE2NDcyQTJFQ0UwRTdCQTc4MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClyegrUXugqLiMxwF+bZr1ZxBQ
fuyIprocQKcj0PhHZhw63WkD998o/aDDZFAbAGuE6QX42xgOKy5UfgMhjKYeUmCK
x0gjIqNOYhUkvgaVDXrM1dbwaXQ0WDHU9WP1te4QNMWP0Ys42LoeJxWdd4/tvIIa
02sQGXPUuoFECMPRuo61WSS0VRL9kxlkW1k7nQ3cnrias9m7r2QCuJRE7JWOcLT5
Dtmpo8qQziyYD/Nq0JNcKjvb7/9AzH0Be5w8syyuYG12eTSDfZfqaG6lA4dr353+
Fc+MeYnPkwLq4ucRBejRf5PtB+YnWBFwOUbyXdRhJO483tl9ahCACzDiYi/NAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUuJcfHtcGTucRp2FkcqLs4Oe6eBowHwYDVR0j
BBgwFoAU69IfTVDBmEz7VqOGnG0P6bO4/EUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHRpNHYyWjhIZzFueXR5YjRBbm1SaERxVDFQNWN6Vjg4SnZCYXhHYW1N
alIvMC9FQkQyMUY0RDUwQzE5ODRDRkI1NkEzODY5QzZEMEZFOUIzQjhGQzQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VCRDIxRjRENTBDMTk4NENG
QjU2QTM4NjlDNkQwRkU5QjNCOEZDNDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OHRpNHYyWjhIZzFueXR5YjRBbm1SaERxVDFQNWN6Vjg4SnZCYXhHYW1NalIvMC9F
QkQyMUY0RDUwQzE5ODRDRkI1NkEzODY5QzZEMEZFOUIzQjhGQzQ1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbCRYd33cAt5Z1wu3ks4x/udh18iqXUkONhA6xMRBv/s2/K1/jSKRCIXbc019
QpiKTVVrNGE7Z7KNW0ZqAHlsx/SCt5vQhRZYK6xCg+beNpygKtxbjK9hhOLvJN59
xPBA4gAF0ThpOd1SYdrrACdmGXczYrRTbpnakzTPti/MFgDx8ZJQ7OHE+xT/QVA4
DUKDl8TCdMBug0ov055FksqzLr+XXYCaj514+oRt/eSV4MS/m7jFS+yG0iSLtZ/A
0/Fm0T7SwsI2ZwyMITEeMzmwS1UGojx5RvrpS9ccHtUZKEa5qx5oDgrtwIE+0HaS
7J5pe8E/TrAMUMt3ka6kJF12yw==
-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:21 2024 by rpki-client on console.sobornost.net