Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/23637A3ACBE3FC644CF6846D1612352C519DDA0A.mft
File:                     23637A3ACBE3FC644CF6846D1612352C519DDA0A.mft (raw, json)
Hash identifier:          Y68Jox9IcwweuOtBwyB3Zve32hc/FPmfBpGdqRt/LuU=
Subject key identifier:   51:8F:94:D2:D7:E1:7B:50:FD:0C:B4:28:9F:F1:14:3A:54:80:00:93
Authority key identifier: 23:63:7A:3A:CB:E3:FC:64:4C:F6:84:6D:16:12:35:2C:51:9D:DA:0A
Certificate issuer:       /CN=23637A3ACBE3FC644CF6846D1612352C519DDA0A
Certificate serial:       1816D4471AE83123822ADAE9F55235530C0FE754
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23637A3ACBE3FC644CF6846D1612352C519DDA0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/23637A3ACBE3FC644CF6846D1612352C519DDA0A.mft
Manifest number:          5D
Signing time:             Mon 08 Jan 2024 22:08:25 +0000
Manifest this update:     Mon 08 Jan 2024 22:03:25 +0000
Manifest next update:     Wed 10 Jan 2024 01:58:25 +0000
Files and hashes:         1: 34352e3138352e3231362e302f32332d3233203d3e20323639333934.roa (hash: 3rz3yVMV3Up8jKXP7HtpE2bQRQ4bEZRnZcXq45kx0+A=)
                          2: 323830343a363366343a3a2f33332d3333203d3e20323639333934.roa (hash: +8TTAUx5VCUIfBFyN96e4fbtcaIsjE8sqjYH+q3wJds=)
                          3: 34352e3138352e3231392e302f32342d3234203d3e20323639333934.roa (hash: AQ57UOq2WSChvh9qCGir1qdIjTwhdCzLXK1lhBIpjxM=)
                          4: 323830343a363366343a3a2f33322d3332203d3e20323639333934.roa (hash: NISDipB41aC++febNUWuq1Ce/9ToFTjh9me2Qq6dGhg=)
                          5: 23637A3ACBE3FC644CF6846D1612352C519DDA0A.crl (hash: /NRmw4g2yQgiVBwuOV+KIjPo30pOvyHo9BJ5Htaaugc=)
                          6: 34352e3138352e3231382e302f32332d3233203d3e20323639333934.roa (hash: EF/SQCbQJXrlmKYJ82WMq8mcRTp81Nm6JUpQNw1jdbE=)
                          7: 34352e3138352e3231362e302f32342d3234203d3e20323639333934.roa (hash: tTnrKuK3EN+T4IFbptSab8VNw3iiTy0kFZWMzXvtVVI=)
                          8: 34352e3138352e3231362e302f32322d3232203d3e20323639333934.roa (hash: 7tKdVKeBwBDRUGPVIemoTeeqIENMcjEWb3RDrBv8DhQ=)
                          9: 3133382e33362e382e302f32322d3232203d3e20323639333934.roa (hash: tKJSZEGnoJe4zrqzjYi2xDCCWvfwL9yqjy1TvS9VVvA=)
                          10: 323830343a363366343a383030303a3a2f33332d3333203d3e20323639333934.roa (hash: pjITJRWV1s2Q4F2SGWz0Ev+43vxAEB3tAz7FcnOqSq0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/23637A3ACBE3FC644CF6846D1612352C519DDA0A.crl
                          rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/23637A3ACBE3FC644CF6846D1612352C519DDA0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23637A3ACBE3FC644CF6846D1612352C519DDA0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Jan 2024 23:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:16:d4:47:1a:e8:31:23:82:2a:da:e9:f5:52:35:53:0c:0f:e7:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23637A3ACBE3FC644CF6846D1612352C519DDA0A
        Validity
            Not Before: Jan  8 22:03:25 2024 GMT
            Not After : Jan 10 01:58:25 2024 GMT
        Subject: CN=518F94D2D7E17B50FD0CB4289FF1143A54800093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8e:e8:02:9a:bd:e0:29:89:57:a6:c2:8f:10:
                    c7:52:e9:30:69:f1:aa:93:a4:f5:88:a2:45:de:d2:
                    65:bc:76:c6:20:de:33:72:b9:17:3d:21:b3:01:b1:
                    0f:ae:06:05:3f:68:0f:c8:df:d7:4a:14:80:bc:ac:
                    56:c9:4e:37:45:bc:ab:6a:97:f4:77:a1:c9:ad:26:
                    40:d9:bb:f6:ce:c2:ed:9d:21:30:45:19:03:70:56:
                    56:17:d5:e6:45:c1:96:66:1c:24:17:57:11:df:a9:
                    ed:47:5b:27:ad:20:c3:ba:49:60:3a:58:17:d9:30:
                    31:d5:a9:f9:cd:83:a2:58:62:bb:a7:bc:de:4c:a7:
                    b0:0a:cc:a7:db:b1:20:09:28:db:66:d7:47:27:f8:
                    45:a0:85:da:66:6b:c3:a8:ef:7c:35:36:3d:56:b8:
                    1f:d5:59:c6:a1:e4:ca:4a:1c:a9:f0:77:fe:4a:e6:
                    80:19:0c:3c:44:a5:bb:01:06:b7:ba:09:6b:c4:0d:
                    29:89:1f:e3:13:bb:1a:b9:7f:06:c8:ff:24:0d:2a:
                    59:ef:bc:b0:d0:0d:a0:6b:c4:27:d8:9f:a1:27:82:
                    5b:f5:00:82:2a:8f:e9:97:40:a4:5a:54:5e:98:3f:
                    7a:5b:32:f5:7f:54:53:ca:e1:9f:db:c8:ad:93:fb:
                    4d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8F:94:D2:D7:E1:7B:50:FD:0C:B4:28:9F:F1:14:3A:54:80:00:93
            X509v3 Authority Key Identifier:
                keyid:23:63:7A:3A:CB:E3:FC:64:4C:F6:84:6D:16:12:35:2C:51:9D:DA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/23637A3ACBE3FC644CF6846D1612352C519DDA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23637A3ACBE3FC644CF6846D1612352C519DDA0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/23637A3ACBE3FC644CF6846D1612352C519DDA0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:0e:03:dd:5b:f9:72:31:54:7a:c0:af:e9:18:2e:6c:6e:1c:
         f3:65:e4:7d:af:03:a7:6e:07:42:c2:fe:3e:c6:6c:a9:ab:69:
         6a:9e:51:e0:ad:1b:43:a3:a7:78:93:4d:2e:f1:6c:57:7e:c7:
         c0:36:69:65:52:99:cc:3c:da:c0:c7:6a:a4:06:d1:67:65:21:
         9e:6e:c6:6b:51:95:3f:ab:cc:8c:28:29:76:15:e0:cd:55:92:
         a6:f5:6d:9e:bf:cc:e4:78:d7:16:d2:2b:31:73:e6:da:e2:e5:
         c0:ed:28:07:46:21:d1:84:a9:13:ee:c2:f3:2f:fa:28:c7:fe:
         6d:ef:97:e2:a7:84:63:a4:28:02:2c:34:e2:5e:44:91:ac:d6:
         60:6f:f4:ea:aa:fe:c7:10:d5:f5:8b:39:73:43:f6:84:bf:fc:
         b0:b3:02:5e:fd:50:17:6f:c7:18:fb:dd:e2:99:14:95:38:8f:
         0d:59:5a:85:fa:b7:8f:00:f3:89:49:1d:a0:04:4b:0e:f6:ce:
         97:07:f7:19:95:fa:85:89:e8:58:f4:21:18:dd:cf:74:02:ae:
         4e:f9:b4:15:ec:15:a6:e3:af:04:87:0e:99:15:6c:4a:14:13:
         dc:67:b5:61:9b:fa:1c:ba:fc:81:30:c7:cf:6f:8b:74:93:d2:
         a9:d5:35:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 00:20:57 2024 by rpki-client on console.sobornost.net