Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.mft
File:                     C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.mft (raw, json)
Hash identifier:          Ad9AX+zRzvEqqX90o7J1SDMn862lRkS8N23iGqyO87Q=
Subject key identifier:   08:B4:9B:7C:7A:85:5F:2B:DF:84:66:92:13:FA:C7:FC:39:AA:2C:63
Authority key identifier: C5:22:49:F9:D4:3C:52:D0:B5:EC:A6:B4:1B:52:90:8B:B9:4A:C9:D4
Certificate issuer:       /CN=C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4
Certificate serial:       7C28A1067349F58A17F00DEEAA6EA8BE20C3C5E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.mft
Manifest number:          01F4
Signing time:             Mon 08 Jan 2024 23:32:03 +0000
Manifest this update:     Mon 08 Jan 2024 23:27:03 +0000
Manifest next update:     Wed 10 Jan 2024 01:43:03 +0000
Files and hashes:         1: C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.crl (hash: fXXkTEXo6oH7dB+1d06o9X1tdMkyAOF2l92n+mEOEjs=)
                          2: 34352e3233392e302e302f32322d3234203d3e20323638333438.roa (hash: 83fdiTLInIBqUT62ArkK2IXJqqaQpUXANR4vUQCAgZE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.crl
                          rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 01:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:28:a1:06:73:49:f5:8a:17:f0:0d:ee:aa:6e:a8:be:20:c3:c5:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4
        Validity
            Not Before: Jan  8 23:27:03 2024 GMT
            Not After : Jan 10 01:43:03 2024 GMT
        Subject: CN=08B49B7C7A855F2BDF84669213FAC7FC39AA2C63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:13:1e:a4:1e:67:28:ff:63:45:65:6b:6c:f3:
                    16:08:95:9c:de:ac:14:64:d2:cb:6d:c7:64:83:1e:
                    89:1f:95:87:92:c0:da:bf:95:c0:77:5e:ec:96:fb:
                    dd:ac:31:0a:f8:ff:70:28:6d:7b:1b:5e:97:34:e6:
                    19:5c:87:5d:dd:28:16:aa:5c:95:11:1a:6f:c4:d4:
                    47:61:65:65:42:ed:bc:01:c8:84:da:c2:cb:8e:75:
                    d5:7d:ce:2c:ef:c1:c4:55:ea:0b:37:1b:35:2d:ab:
                    cf:ba:83:50:b0:70:3f:e9:5b:b7:47:81:2a:47:37:
                    f0:6c:d8:eb:2c:e1:3e:af:32:02:3f:ac:3a:82:3c:
                    17:54:c0:27:d4:2b:e8:83:21:bb:88:af:5c:d9:f7:
                    8e:f3:67:53:0f:03:3e:28:c1:ad:5f:5f:27:4d:bf:
                    de:c4:bc:fc:d0:f6:83:38:ef:bd:ad:3c:3c:97:e3:
                    98:71:d6:b2:dd:5e:76:11:88:41:6a:12:07:42:22:
                    20:7b:46:6c:61:c4:51:90:5b:b8:59:ef:7c:60:3c:
                    6a:02:b2:07:67:95:e7:23:5a:3d:20:ff:e6:b0:df:
                    63:1f:a1:c8:54:bb:ad:83:74:2a:64:f2:28:73:72:
                    2f:d1:1b:98:f6:4b:6f:ca:7d:89:ff:ed:0d:0c:12:
                    e7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B4:9B:7C:7A:85:5F:2B:DF:84:66:92:13:FA:C7:FC:39:AA:2C:63
            X509v3 Authority Key Identifier:
                keyid:C5:22:49:F9:D4:3C:52:D0:B5:EC:A6:B4:1B:52:90:8B:B9:4A:C9:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:41:28:41:d4:da:ef:09:fb:de:76:a4:8b:68:44:ef:8c:38:
         9b:1b:62:e2:a3:08:77:3d:e3:e3:b4:d0:00:76:ec:2c:4b:95:
         68:46:d1:e4:7b:0c:1a:6c:f8:d0:bd:56:2c:15:92:cc:d4:ad:
         e5:ec:a1:b4:c9:24:29:86:d4:20:ac:5e:ec:f7:fc:4c:4c:8b:
         1a:77:d9:af:f9:66:cd:4b:f7:97:29:3e:73:ab:59:2f:79:a2:
         20:6b:aa:92:28:c0:3a:ed:97:5f:ba:15:d0:2f:0f:33:c1:3e:
         3c:a3:e2:bd:e5:3c:17:19:f5:b8:51:b0:f4:31:d5:a3:04:fa:
         8e:55:4a:3a:e6:66:6f:b1:ad:e8:d4:0f:45:cb:ca:60:a7:dd:
         78:51:70:0c:7a:e7:e9:26:80:12:00:ab:15:f9:b8:fc:59:d5:
         70:2c:04:77:1c:75:ba:3d:fb:a7:1c:ce:55:73:63:32:95:a1:
         b6:ab:90:0f:a0:26:a6:0d:59:21:a7:02:f6:90:aa:0d:0e:88:
         1b:b9:50:44:50:3b:7c:d6:dc:06:40:bc:26:05:07:fd:96:03:
         e5:27:a0:bd:c2:ba:0a:e8:f8:75:96:2f:6a:0e:3e:d0:ca:81:
         5d:ad:83:29:35:e4:63:e4:fc:1b:84:8e:b5:b4:5c:28:a0:58:
         6e:b2:0c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 02:15:49 2024 by rpki-client on console.sobornost.net