Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/0/88DD17994D538880AB9D8FFE69338F7AFDF2B5B3.mft
File:                     88DD17994D538880AB9D8FFE69338F7AFDF2B5B3.mft (raw, json)
Hash identifier:          FCPG6Xe/QqK0DjWYeMn+dgLEDnKx8OUJ84wfu1YwHkU=
Subject key identifier:   0D:6E:07:51:02:98:90:B8:E3:10:42:4C:DF:90:AB:CC:14:F9:68:FE
Authority key identifier: 88:DD:17:99:4D:53:88:80:AB:9D:8F:FE:69:33:8F:7A:FD:F2:B5:B3
Certificate issuer:       /CN=88DD17994D538880AB9D8FFE69338F7AFDF2B5B3
Certificate serial:       3EC63CB491654DEBFEE5FB0998C2A8E09FBF563C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88DD17994D538880AB9D8FFE69338F7AFDF2B5B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/0/88DD17994D538880AB9D8FFE69338F7AFDF2B5B3.mft
Manifest number:          94
Signing time:             Tue 09 Jan 2024 05:23:39 +0000
Manifest this update:     Tue 09 Jan 2024 05:18:39 +0000
Manifest next update:     Wed 10 Jan 2024 06:10:39 +0000
Files and hashes:         1: 88DD17994D538880AB9D8FFE69338F7AFDF2B5B3.crl (hash: 1kBepnpJr3RYaOlVnee9iEXfUOSRDo+HTjsiBBoekzQ=)
                          2: 3132382e3230312e3136342e302f32322d3234203d3e20323636363437.roa (hash: N4hJ4o1ZoHFKfUn98RnNzcbbLCueI33FM0wXnKbWbbw=)
                          3: 323830343a336633633a3a2f33322d3438203d3e20323636363437.roa (hash: 0fIsMxIy+j08AwroOaRtfOh6O5s05czaau6fu1Encok=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/0/88DD17994D538880AB9D8FFE69338F7AFDF2B5B3.crl
                          rsync://rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/0/88DD17994D538880AB9D8FFE69338F7AFDF2B5B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88DD17994D538880AB9D8FFE69338F7AFDF2B5B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 06:10:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c6:3c:b4:91:65:4d:eb:fe:e5:fb:09:98:c2:a8:e0:9f:bf:56:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88DD17994D538880AB9D8FFE69338F7AFDF2B5B3
        Validity
            Not Before: Jan  9 05:18:39 2024 GMT
            Not After : Jan 10 06:10:39 2024 GMT
        Subject: CN=0D6E0751029890B8E310424CDF90ABCC14F968FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a4:55:b3:e4:07:d2:d7:46:76:0e:36:b8:bc:
                    24:4b:ef:97:5b:8f:6b:ae:8a:1c:aa:46:92:c2:36:
                    bf:8d:46:79:9c:5d:75:a5:c3:5b:ce:08:c4:e2:58:
                    46:46:f9:14:fb:42:29:90:c5:fb:1a:0b:7f:62:e2:
                    d7:e2:cd:31:e7:7a:f7:f0:78:7b:8c:3b:a6:7a:2e:
                    4a:cb:f0:97:46:39:20:61:c8:8e:7e:a6:a7:32:17:
                    3c:5a:15:ed:b9:88:b5:fd:d7:7d:05:6f:92:5b:fd:
                    19:3c:e6:64:b7:db:b2:6c:e6:52:51:fc:b4:b9:fa:
                    39:5e:e1:c6:a8:be:d3:47:41:4d:f3:81:0c:16:ad:
                    c5:eb:ed:47:9b:2e:4b:75:59:37:e6:1e:54:50:af:
                    f9:a7:b2:20:6a:a3:eb:cb:4b:80:fe:10:54:d3:76:
                    26:eb:ee:9d:77:84:73:69:5b:68:58:5d:c0:2a:b5:
                    6b:d0:d0:b9:26:93:b4:a8:93:b4:c0:84:ae:3b:87:
                    1c:62:c6:1a:70:ab:34:8e:23:7e:65:6e:94:fd:ee:
                    9f:4a:b7:34:2d:98:e4:6c:95:be:2d:f5:ad:68:f2:
                    fc:4c:a0:7f:c2:4e:83:aa:40:5e:ae:b1:09:6f:30:
                    94:8d:19:5f:ff:1b:39:a5:80:d0:c6:6a:86:d1:35:
                    c1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6E:07:51:02:98:90:B8:E3:10:42:4C:DF:90:AB:CC:14:F9:68:FE
            X509v3 Authority Key Identifier:
                keyid:88:DD:17:99:4D:53:88:80:AB:9D:8F:FE:69:33:8F:7A:FD:F2:B5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/0/88DD17994D538880AB9D8FFE69338F7AFDF2B5B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88DD17994D538880AB9D8FFE69338F7AFDF2B5B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/0/88DD17994D538880AB9D8FFE69338F7AFDF2B5B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:dd:09:f2:a3:12:51:ca:1c:43:ec:03:bb:77:c3:4c:b7:9c:
         90:b0:c7:73:44:18:0c:b0:f3:b1:5f:a3:cc:78:1f:af:c4:9c:
         48:44:fe:53:87:cb:81:dc:e2:5c:03:f3:34:8d:f6:77:96:e8:
         7e:ad:8f:2c:bc:db:59:16:a7:45:4e:ab:ff:65:bf:0c:cd:9b:
         1c:ad:4e:93:dc:5f:ac:fa:0b:f8:84:e7:90:c0:92:e3:71:c6:
         57:a7:3c:44:7d:f2:45:6e:a4:4a:e6:4a:72:12:fc:59:db:fc:
         ab:0e:26:59:b2:83:de:d8:23:fb:17:93:78:a8:de:49:42:7d:
         bc:74:4e:b9:21:f8:9b:34:ce:f9:c9:30:2b:4c:a1:5f:fe:14:
         74:b0:eb:1f:c6:5a:96:76:5a:7f:e4:fa:c3:0b:d5:f3:04:5a:
         f0:2c:bf:11:1b:e6:55:0b:3a:5c:1a:54:fd:35:cc:9a:26:ab:
         89:48:e7:bf:4d:a9:36:fe:03:d1:08:5a:f8:95:33:70:0e:5d:
         80:f2:a5:92:1f:04:6b:b4:8e:12:99:e6:5c:26:f5:a7:07:33:
         16:db:5f:c2:8d:99:14:0f:61:6c:8b:1f:1b:5f:02:d4:59:6c:
         1e:35:24:27:9c:23:b2:86:4d:2a:60:d6:d6:2f:29:ae:0b:de:
         c4:ff:f3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 07:51:34 2024 by rpki-client on console.sobornost.net