Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/394570B4B603A64BAC893860032DEA7505AFD053.mft
File:                     394570B4B603A64BAC893860032DEA7505AFD053.mft (raw, json)
Hash identifier:          3zmvfg/hQrrZioYTW5+g8QnOjUvCDMlOCIG/3sCC3q4=
Subject key identifier:   4B:BB:A7:E8:56:1D:17:9A:DF:01:6A:BB:D1:5B:4C:40:5E:83:B0:CC
Authority key identifier: 39:45:70:B4:B6:03:A6:4B:AC:89:38:60:03:2D:EA:75:05:AF:D0:53
Certificate issuer:       /CN=394570B4B603A64BAC893860032DEA7505AFD053
Certificate serial:       4A80C38EDDC3468ACCB832541CBA68E3BF947A62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/394570B4B603A64BAC893860032DEA7505AFD053.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/394570B4B603A64BAC893860032DEA7505AFD053.mft
Manifest number:          9D
Signing time:             Tue 09 Jan 2024 11:01:06 +0000
Manifest this update:     Tue 09 Jan 2024 10:56:06 +0000
Manifest next update:     Wed 10 Jan 2024 14:50:06 +0000
Files and hashes:         1: 394570B4B603A64BAC893860032DEA7505AFD053.crl (hash: Lz9otoj8L5/wLjZw6ffgSuTgKY0Ssma/n8kQxHePSf8=)
                          2: 323830343a376661303a3a2f33342d3334203d3e20323731363939.roa (hash: EM9avuOUVLPsJmu9HeikGG2hUpSwNskblplVP1+eWaw=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/394570B4B603A64BAC893860032DEA7505AFD053.crl
                          rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/394570B4B603A64BAC893860032DEA7505AFD053.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/394570B4B603A64BAC893860032DEA7505AFD053.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 12:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:80:c3:8e:dd:c3:46:8a:cc:b8:32:54:1c:ba:68:e3:bf:94:7a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=394570B4B603A64BAC893860032DEA7505AFD053
        Validity
            Not Before: Jan  9 10:56:06 2024 GMT
            Not After : Jan 10 14:50:06 2024 GMT
        Subject: CN=4BBBA7E8561D179ADF016ABBD15B4C405E83B0CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:33:5e:17:13:62:74:a6:ea:37:7b:fa:b7:a5:
                    e1:12:68:da:55:26:23:fa:44:68:24:a4:f2:9d:50:
                    0f:df:41:8c:95:97:a7:76:4b:33:51:39:2e:57:d3:
                    15:bd:23:00:3a:7c:03:a2:28:99:05:83:fa:d2:a0:
                    7d:c4:f5:95:cc:fe:51:b6:64:59:fc:6b:34:bb:ed:
                    d9:f9:9d:19:7b:dd:dc:bc:f1:f0:0e:36:90:5d:40:
                    54:9b:ad:d9:ec:87:37:b4:e0:5c:80:45:10:bd:fa:
                    ce:16:45:e0:6c:6a:e4:2b:75:cc:2b:6a:a4:04:47:
                    e8:22:44:69:95:48:af:18:92:ef:6f:e9:ed:e5:cf:
                    1f:5c:8d:43:96:63:06:8b:49:06:50:db:35:77:39:
                    27:87:29:b1:83:28:e8:26:e8:ca:c9:8f:fd:e4:6d:
                    06:0e:9c:1d:b0:9e:72:f7:b5:95:de:e2:c1:7e:b5:
                    4e:f5:19:0f:a3:6e:4a:a9:78:15:16:dc:2d:a9:74:
                    4f:c8:e1:8f:8a:48:4a:0c:ea:51:b4:3b:9b:ad:0b:
                    ce:bf:45:21:ae:b1:4a:89:e8:a2:90:6d:de:bc:a9:
                    b4:07:9b:fc:25:6c:17:0b:f6:3e:6a:01:c2:df:ae:
                    6d:88:90:b2:38:d9:6c:ff:96:77:d0:1b:fd:a2:b2:
                    60:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BB:A7:E8:56:1D:17:9A:DF:01:6A:BB:D1:5B:4C:40:5E:83:B0:CC
            X509v3 Authority Key Identifier:
                keyid:39:45:70:B4:B6:03:A6:4B:AC:89:38:60:03:2D:EA:75:05:AF:D0:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/394570B4B603A64BAC893860032DEA7505AFD053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/394570B4B603A64BAC893860032DEA7505AFD053.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/394570B4B603A64BAC893860032DEA7505AFD053.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:95:91:31:8e:52:89:70:06:12:ed:fb:2f:d4:ad:36:9c:c2:
         b5:3f:6b:de:b2:a6:0c:ef:be:90:86:7d:a1:af:3f:fb:09:1a:
         15:e6:88:4d:bc:a3:e6:be:b8:4b:09:ad:78:57:d5:1a:7c:9f:
         b4:35:d5:e7:87:b9:bf:79:e5:50:b5:24:59:68:07:bf:ea:90:
         f0:e4:5d:a1:c7:79:3f:62:2e:8b:29:bf:03:b1:0e:e1:21:42:
         b3:38:e1:1f:c5:93:4f:a9:26:b5:76:04:b9:3a:da:62:2c:10:
         80:c1:fc:4a:ee:49:99:33:98:f3:aa:a9:64:24:d4:b3:94:d9:
         1e:45:fe:26:d0:20:c1:19:ff:62:58:f3:8b:9f:f2:84:da:50:
         cc:60:94:38:86:36:ec:04:83:ac:f3:d4:f0:ed:6a:ab:f7:a2:
         03:a8:b7:2f:4b:8c:8e:15:93:ed:8c:4d:b2:31:26:2b:aa:cd:
         09:51:3d:27:a3:d1:b1:4b:29:66:a5:02:d3:7c:20:95:35:92:
         a8:85:87:bb:9a:a9:f9:67:fa:83:a2:37:45:2d:9f:4b:4f:93:
         c3:68:d5:fb:96:2f:c7:72:30:df:87:6c:c5:00:d5:bb:ec:ca:
         27:31:41:98:13:c7:26:ec:b1:fd:8f:0f:d7:e3:cd:db:1c:b9:
         cd:a3:01:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:40 2024 by rpki-client on console.sobornost.net