Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/FFB40753F2C4F6B4F9FB83752F51E52CDC92A5E6.mft
File:                     FFB40753F2C4F6B4F9FB83752F51E52CDC92A5E6.mft (raw, json)
Hash identifier:          qSgK59MFpMR6EsXop0QfxlmrL9zQ+yQbDJdgTHlMn/c=
Subject key identifier:   FC:83:B1:B3:3B:17:FD:6A:FC:B9:EC:08:98:C0:78:4D:23:8A:A8:C3
Authority key identifier: FF:B4:07:53:F2:C4:F6:B4:F9:FB:83:75:2F:51:E5:2C:DC:92:A5:E6
Certificate issuer:       /CN=FFB40753F2C4F6B4F9FB83752F51E52CDC92A5E6
Certificate serial:       563DE737A5C48A20B2D53181DFF23E2357391AD4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFB40753F2C4F6B4F9FB83752F51E52CDC92A5E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/FFB40753F2C4F6B4F9FB83752F51E52CDC92A5E6.mft
Manifest number:          02
Signing time:             Tue 09 Jan 2024 02:41:50 +0000
Manifest this update:     Tue 09 Jan 2024 02:36:50 +0000
Manifest next update:     Wed 10 Jan 2024 05:40:50 +0000
Files and hashes:         1: 323830343a386232343a3a2f33322d313238203d3e20323733373134.roa (hash: Jhjng9dBn8FnWGSpil01TrfQno9p8SK4UA3e/+le7xc=)
                          2: FFB40753F2C4F6B4F9FB83752F51E52CDC92A5E6.crl (hash: 1ZUuWIqhz25MNY8kvhOdNJTFBPyTbLEhBuseakpB22Y=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/FFB40753F2C4F6B4F9FB83752F51E52CDC92A5E6.crl
                          rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/FFB40753F2C4F6B4F9FB83752F51E52CDC92A5E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFB40753F2C4F6B4F9FB83752F51E52CDC92A5E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 05:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3d:e7:37:a5:c4:8a:20:b2:d5:31:81:df:f2:3e:23:57:39:1a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFB40753F2C4F6B4F9FB83752F51E52CDC92A5E6
        Validity
            Not Before: Jan  9 02:36:50 2024 GMT
            Not After : Jan 10 05:40:50 2024 GMT
        Subject: CN=FC83B1B33B17FD6AFCB9EC0898C0784D238AA8C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ae:2d:a1:53:52:19:8e:a3:a2:b2:c1:e3:61:
                    0e:78:9c:cf:da:3d:8d:6b:57:08:52:87:4c:26:aa:
                    84:20:10:c0:bf:63:ee:96:e3:28:0f:e2:aa:71:96:
                    0b:60:82:06:da:82:08:00:c6:d8:36:58:5b:06:36:
                    16:d4:e4:a2:15:20:65:97:a5:de:06:b3:5b:60:39:
                    97:d3:65:57:e3:6b:a8:6d:07:2d:8a:21:ac:eb:4a:
                    1c:03:ac:c3:19:c2:d0:41:1f:23:a9:d6:59:d1:96:
                    b9:a0:68:36:13:30:06:b4:31:54:8b:43:9f:72:42:
                    f3:e3:ff:5e:fc:6b:0b:95:90:fe:d9:00:45:97:fb:
                    76:02:fe:34:5c:1f:b1:77:df:8e:66:ee:48:a8:95:
                    f6:11:b7:ed:87:11:31:5c:8f:f7:55:be:1d:2a:3c:
                    20:dc:0b:5e:8e:2b:6a:af:c1:5b:10:47:8f:23:d7:
                    d6:88:b2:84:43:cc:29:f9:b7:ef:ec:01:18:cc:30:
                    e4:96:33:90:38:fd:e5:f6:c3:56:ef:6e:3d:ba:03:
                    92:86:6b:fe:fe:5c:05:c5:44:ba:3a:78:bd:89:42:
                    d4:9a:1d:52:aa:2e:89:cd:f3:86:f5:01:6a:95:ac:
                    5d:18:05:d8:7f:93:f3:9f:1e:7f:5a:57:c2:d2:1c:
                    50:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:83:B1:B3:3B:17:FD:6A:FC:B9:EC:08:98:C0:78:4D:23:8A:A8:C3
            X509v3 Authority Key Identifier:
                keyid:FF:B4:07:53:F2:C4:F6:B4:F9:FB:83:75:2F:51:E5:2C:DC:92:A5:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/FFB40753F2C4F6B4F9FB83752F51E52CDC92A5E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFB40753F2C4F6B4F9FB83752F51E52CDC92A5E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/FFB40753F2C4F6B4F9FB83752F51E52CDC92A5E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f5:0d:10:fc:4c:81:d8:ad:7c:51:e0:11:64:b3:68:d1:6b:
         08:fd:08:ee:5d:86:3a:af:4b:00:6a:24:89:b5:0f:e0:4d:88:
         33:45:e1:2a:18:5a:13:44:c3:8e:be:6f:cf:ee:03:ef:06:8e:
         ca:8f:fe:ea:5b:49:21:68:26:0a:51:ec:23:76:95:26:60:b9:
         62:4c:83:68:9f:2b:bb:21:b6:3c:7c:5a:86:a9:b6:80:7d:e8:
         ec:df:36:78:45:73:1e:fc:ea:06:da:db:75:bc:6b:a3:9d:9d:
         5d:f0:c6:0b:f5:a1:fd:50:bd:46:12:8e:b1:b3:f9:c3:71:99:
         78:35:6d:54:66:43:10:ab:38:96:32:01:bf:73:8c:33:25:63:
         39:6e:5b:93:4b:9e:a9:96:4f:cf:88:3d:a4:ab:d5:0c:84:da:
         12:32:3f:7d:6a:73:5b:22:c2:22:6c:a4:de:dc:49:39:7f:2e:
         56:c7:c6:1d:72:44:90:66:1e:58:e7:3e:a7:ca:87:8e:9d:7a:
         c8:c7:42:c9:c8:2c:a3:5b:6d:60:9b:18:be:82:80:5e:f5:fa:
         b6:bd:c8:5c:85:a5:18:64:4e:99:78:dc:7b:82:3b:0c:f0:a9:
         a2:e6:4a:4d:bc:b9:35:66:34:eb:89:28:2d:b4:57:ad:c1:68:
         ab:ad:0e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 03:49:03 2024 by rpki-client on console.sobornost.net